ansible-role-httpd

This is an Ansible role that installs Apache httpd, along with the mod_auth_gssapi and mod_authnz_pam modules. This lays the base for an Apache httpd server suitable for authentication against Kerberos via GSSAPI and authorization via PAM.

This is ideal for a web server in the COOL that wishes to authenticate users via Kerberos and authorize users via pam_sss against FreeIPA's HBAC (host-based access control) rules.

Requirements

None.

Role Variables

None.

Dependencies

None.

Installation

This role can be installed via the command:

ansible-galaxy install --role-file path/to/requirements.yml

where requirements.yml looks like:

---
- name: httpd
  src: https://github.com/cisagov/ansible-role-httpd

and may contain other roles as well.

For more information about installing Ansible roles via a YAML file, please see the ansible-galaxy documentation.

Example Playbook

Here's how to use it in a playbook:

- hosts: all
  become: true
  become_method: sudo
  tasks:
    - name: Install httpd
      ansible.builtin.include_role:
        name: httpd

Contributing

We welcome contributions! Please see CONTRIBUTING.md for details.

License

This project is in the worldwide public domain.

This project is in the public domain within the United States, and copyright and related rights in the work worldwide are waived through the CC0 1.0 Universal public domain dedication.

All contributions to this project will be released under the CC0 dedication. By submitting a pull request, you are agreeing to comply with this waiver of copyright interest.

Author Information

Shane Frasier - jeremy.frasier@gwe.cisa.dhs.gov