WoWHoneypotの構築をAnsibleでIaCしてみた

はじめに

WoWHoneypotの構築を先ほど行っていたのですが
再現性を担保するためにIaCを行なったので記録していきます.

環境

server: ubuntu20.04 (AWS)
client: Macbook air 2020

出来上がったもの

実際のコード(要点)

files/wowhoneypot.service

[Unit]
Description=WoWHoneypot daemon
Documentation=https://github.com/morihisa/WOWHoneypot

[Service]
ExecStart = /home/ubuntu/wowhoneypot.sh
ExecRestart = /bin/kill -WINCH ${MAINPID} ; /home/ubuntu/wowhoneypot.sh
ExecStop = /bin/kill -WINCH ${MAINPID}
User = root

[Install]
WantedBy = multi-user.target

files/wowhoneypot.sh

#!/bin/bash
cd /home/ubuntu/wowhoneypot
/usr/bin/python3 /home/ubuntu/wowhoneypot/wowhoneypot.py

site.yml

---
- hosts: webserver
  tasks:
    - include: WoWHoneypot/tasks/main.yml

tasks/main.yml

---

#==========システム導入編==========#
- name: ubuntu git_install
  apt:
    name: git
    state: latest
  become: yes

  #ユーザー直下に落とす
- name: git_clone_wowhoneypot
  command: git clone https://github.com/morihisa/WOWHoneypot.git wowhoneypot
  become: yes

- name: service Wowhonepot
  become: yes
  copy:
    src: ../files/wowhoneypot.service
    dest: /etc/systemd/system/wowhoneypot.service

- name: Wowhonepot.sh
  copy:
    src: ../files/wowhoneypot.sh
    dest: /home/ubuntu/wowhoneypot.sh
  become: yes

- name: chmod +x wowhoneypot.sh
  command: chmod +x wowhoneypot.sh
  become: yes

#==========実行編==========#

- name: start wowhoneypot.service
  command: systemctl start wowhoneypot.service
  become: yesl

設定ファイルの追加(host/hosts)

[webserver]
Target01 ansible_ssh_host='global_IP'
[webserver:vars]
ansible_ssh_user='User_name'
ansible_ssh_private_key_file='key'

実行方法

$ ansible-playbook site.yml -i hosts/hosts

参考サイト