yum install -y epel-release		#Centos需要安装EPEL仓库
yum install -y ansible		#yum包管理安装Ansible
ansible --version		#查看Ansible安装版本

[root@server ~]# vim /etc/hosts
192.168.112.10 server
192.168.112.20 host1
192.168.112.30 host2
192.168.112.40 host3

[root@server ~]# ssh-keygen -P "" -t rsa
Generating public/private rsa key pair.
Enter file in which to save the key (/root/.ssh/id_rsa):
Created directory '/root/.ssh'.
Your identification has been saved in /root/.ssh/id_rsa.
Your public key has been saved in /root/.ssh/id_rsa.pub.
The key fingerprint is:
SHA256:eSgh2wm7WxXS8n61UI4wKK0yEl3mLlzwIFBdOQSAgag root@server
The key's randomart image is:
+---[RSA 2048]----+
|B+=o++o.         |
|+o B..oo         |
|o . B *.=   .    |
|Eo o O * * +     |
|. = = + S + o    |
| . + . + . o .   |
|    . . . . .    |
|     o   .       |
|    .            |
+----[SHA256]-----+

ssh-copy-id -i /root/.ssh/id_rsa.pub root@host1
ssh-copy-id -i /root/.ssh/id_rsa.pub root@host2
ssh-copy-id -i /root/.ssh/id_rsa.pub root@host3

ssh root@host1
ssh root@host2
ssh root@host3

cp -f hosts hosts.bak

vim /etc/ansible/hosts
[all-servers]
server
host1
host2
host3
[node1]
host1
[node2]
host2
[node3]
host3
[mysql_test]
host1
host2
[web_test]
host2
host3
[manager]
server

#一个一个测试
ansible -m ping node1
ansible -m ping node2
ansible -m ping node3
ansible -m ping manager

#以组为单位测试
ansible -m ping all-servers

ansible-doc -s command

#node1 组先切换到 root 目录下 aliyun.sh 文件存在不执行 ls
ansible node1 -m command -a 'chdir=/root/ creates=aliyun.sh ls'

#node1 组先切换到 root 目录下 aliyun.sh 文件存在就执行 ls
ansible node1 -m command -a 'chdir=/root/ removes=aliyun.sh ls'

#查看 mysql_test 组中所有主机的磁盘空间
ansible mysql_test -m command -a 'df -h'

#查看 web_test 组中所有主机的磁盘空间
ansible web_test -m command -a 'df -h'

ansible-doc -s command

#查看 mysql_test 组远程主机的系统版本
ansible mysql_test -m shell -a 'cat /etc/os-release | grep PRETTY_NAME | cut -d "=" -f2'

#查看 web_test 组远程主机的系统版本
ansible web_test -m shell -a 'cat /etc/os-release | grep PRETTY_NAME | cut -d "=" -f2'

#查看 mysql_test 组中所有的主机防火墙 firewalld 和 selinux 的状态
ansible mysql_test -m shell -a 'systemctl status firewalld ; getenforce'

#在 mysql_test 组下的主机循环创建/root/tmp_1/NOW+当前时间的目录
ansible mysql_test -m shell -a "mkdir -p /root/tmp_1/NOW-$(date +'%H:%M:%S')"

#find 查找是否正确创建
ansible mysql_test -m shell -a "find /root/tmp_1 -mmin -5"

ansible-doc -s user

#给 web_test 组中添加一个系统用户 zhangsan 家目录为/home/zhangsan，用户 id 为 111，注释信息为 hello zhangsan
ansible web_test -m user -a "system=yes name=zhangsan home=/home/zhangsan uid=111 comment='hello zhangsan'"

#id zhangsan 验证用户是否正确创建，使用 grep+awk 截取/etc/passwd 上关于 zhangsan 的注释信息
ansible web_test -m shell -a 'id zhangsan ; grep ^zhangsan: /etc/passwd | awk -F ":" '\''{print $5}'\'''

#删除用户 zhangsan
ansible web_test -m user -a "name=zhangsan state=absent remove=yes"

ansible-doc -s group

#在 web_test 组的所有主机上创建一个系统组 web_test，组 id 为 1010
ansible web_test -m group -a "name=web_test gid=1010 system=yes"

#通过/etc/group 查看系统组 web_test 信息

#删除 web_test 组所有主机上的系统组 web_test
ansible web_test -m group -a "name=web_test gid=1010 state=absent"

ansible-doc -s copy

#将 copy 内容为 copy test 复制到 node3 主机的/root/copy.txt 并设置权限 666
ansible node3 -m copy -a 'content="copy test" dest=/root/copy.txt mode=666'

#修改 node3 主机上 copy.txt 文件内容，并选择备份
ansible node3 -m copy -a 'content="copy test_1\n" backup=yes dest=/root/copy.txt mode=666'

ansible-doc -s fetch

#从 mysql_test 组的主机中抓取 aliyun.sh 文件到本机的/tmp/data 目录下
ansible mysql_test -m fetch -a "src=/root/aliyun.sh dest=/tmp/data"

#通过检查/tmp/data 下的目录结构可知文件已完整获取
ansible manager -m shell -a "tree -L 5 /tmp/data"

#从 mysql_test 组的主机中抓取 install.sh 文件，限制最大抓取大小 20kb，传输中校验文件完整性，添加文件存在检测（不存在任务失败）
ansible mysql_test -m fetch -a "src=/root/install.sh dest=/tmp/data/ verify_checksum=yes fail_on_missing=yes size=20k"

ansible-doc -s file

#在 mysql_test 组所有主机在/tmp/路径下创建权限都是只读、属主属组都是 root 的 file1 目录
ansible mysql_test -m file -a "path=/tmp/file1 mode=444 owner=root group=root state=directory"

#查看创建好的目录
ansible mysql_test -m shell -a "ls -l /tmp/ | grep file1"

#给 mysql_test 组的所有主机创建软链接文件 test1 指向/root/aliyun.sh
ansible mysql_test -m file -a "path=/tmp/test1 src=/root/aliyun.sh state=link"

#给 mysql_test 组的所有主机创建硬链接文件 test1 指向/root/aliyun.sh
ansible mysql_test -m file -a "path=/tmp/test2 src=/root/aliyun.sh state=hard"

#删除 mysql_test 组中所有主机/tmp/目录下 test1
ansible mysql_test -m file -a "path=/tmp/test1 state=absent"

#给 web_test 组的所有主机安装 httpd 服务
ansible web_test -m yum -a "name=httpd state=present"

#远程启动 httpd 服务
ansible web_test -m shell -a "systemctl start httpd"

#远程查看 http 服务进程
ansible web_test -m shell -a "ps aux | grep httpd"

#远程停止 httpd 服务
ansible web_test -m shell -a "systemctl stop httpd"

#远程卸载 httpd 服务
ansible web_test -m yum -a "name=httpd state=absent"

#给所有主机更新所有的软件包
ansible all-servers -m yum -a "name=_ state=latest"

ansible-doc -s cron

#给 mysql_test 组中的所有主机添加一个以 root 用户每天三点执行/root/aliyun.sh 脚本的计划任务
ansible mysql_test -m cron -a "name='Daily Task' minute=0 hour=3 job='/root/aliyun.sh &> /dev/null' user=root"

#删除名为 Daily Task 的计划任务（没有明确的计划任务名称写完整的计划任务也可以删除）
ansible mysql_test -m cron -a "name='Daily Task' state=absent"

ansible-doc -s service

#给 web_test 组中的所有主机重启 firewalld 服务
ansible web_test -m service -a "name=firewalld state=restarted"

#查看 web_test 组中所有主机的 firewalld 服务运行状态
ansible web_test -m shell -a "systemctl status firewalld"

#给 web_test 组中的所有主机关闭 firewalld 服务
ansible web_test -m service -a "name=firewalld state=stopped"

ansible-doc -s script

vim /tmp/df.sh

#!/bin/bash
date >> /tmp/data/df.log
df -lh >> /tmp/data/df.log
[root@server ~]# chmod +x /tmp/df.sh

#给 web_test 组的所有主机执行控制节点上的 df.sh 脚本文件
ansible web_test -m script -a "/tmp/df.sh”

ansible-doc -s setup

#查看 mysql_test 组所有主机的内存信息
ansible mysql_test -m setup -a "filter='*mem*'"

#通过 free -m 命令查看 mysql_test 组主机的内存信息
ansible mysql_test -m shell -a "free -m"

#将筛选的信息保存到控制节点的/tmp/data 目录下
ansible web -m setup -a 'filter="*mem*"' --tree /tmp/data

ansible-doc synchronize

#既然是基于 rsync 那么所有主机安装 rsync
ansible all-servers -m shell -a "yum install -y rsync"

#将本地的/tmp/目录同步到 node1 组的 host1 主机上
ansible node1 -m synchronize -a "src=/tmp/ dest=/tmp/"

#查看 node1 组的 host1 主机的/tmp/目录结构
ansible node1 -m shell -a "tree -L 5 /tmp/"

#删除目标路径中不存在于源路径的文件（在传输之后）
ansible node1 -m synchronize -a "src=/tmp/ dest=/tmp/ delete=yes"

---
- name: update web servers
hosts: node1
remote_user: root

tasks:
- name: ensure apache is at the latest version
yum:
name: httpd
state: latest
- name: write the apache config file
template:
src: /srv/httpd.j2
dest: /etc/httpd.conf
- name: ensure that htppd is started
service:
name: httpd
state: started
- name: update db servers
hosts: node1
remote_user: root

tasks:
- name: ensure mariadb is at the latest version
yum:
name: mariadb-server
state: latest
- name: ensure that mariadb is started
service:
name: mariadb
state: started

#执行 playbook
ansible-playbook playbook.yml

#语法检查
ansible-playbook --syntax-check playbook.yml

[root@server ~]# mkdir -p /root/ansible/{conf,bin}

[root@server ~]# cd ansible/bin/
[root@server bin]# cat nginx.yml

---
- name: Update web servers
hosts: node1
remote_user: root
tasks:
- name: Install epel
yum:
name: epel-release.noarch
state: latest
- name: Install nginx
yum:
name: nginx
state: present
- name: Copy nginx configure file
copy:
src: /root/ansible/conf/nginx.conf
dest: /etc/nginx/nginx.conf
backup: yes
- name: Start nginx
service:
name: nginx
state: restarted
- name: Create index.html
shell: echo "hello playbook_nginx" > /usr/share/nginx/html/index.html

[root@server conf]# cat site.conf

events {
worker_connections 1024;
}

http {
server {
listen 8080;
server_name 192.168.112.20:8080;

        location / {
            index index.html;
        }
    }

}

#语法检查
ansible-playbook nginx.yml --syntax-check

#执行 playbook
ansible-playbook nginx.yml

#ps aux|grep nginx 显示 nginx 的进程，curl -s 查看实际的响应体内容
ansible node2 -m shell -a "ps aux | grep nginx ; curl -s 192.168.112.30:8080"

---
- name: Update web servers
hosts: node2
remote_user: root
tasks:
- name: Install epel
yum:
name: epel-release.noarch
state: latest
- name: Install nginx
yum:
name: nginx
state: present
- name: Copy nginx configure file
copy:
src: /root/ansible/conf/nginx2.conf
dest: /etc/nginx/nginx2.conf
backup: yes
notify: reload #当 nginx.conf 发生改变时，通知给相应的 handlers
tags: reloadnginx #打标签
- name: Start nginx
service:
name: nginx
state: restarted
tags: startnginx #打标签
- name: Create index.html
shell: echo "hello playbook_nginx_2" > /usr/share/nginx/html/index.html
handlers: #注意，前面没有-，是两个空格
- name: reload
service:
name: nginx
state: restarted

[root@server conf]# cat nginx2.conf

events {
worker_connections 1024;
}

http {
server {
listen 8080;
server_name 192.168.112.30:8080;

        location / {
            index index.html;
        }
    }

}

#验证端口和响应内容
ansible node2 -m shell -a "ss -tunlp | grep nginx ; curl -s 192.168.112.30:8080"

#先关闭 node3 上的 nginx 服务以便测试
ansible node3 -m shell -a "systemctl stop nginx"

#再运行剧本并引用标签 startnginx
ansible-playbook nginx2.yml -t startnginx

#修改监听的端口号
[root@server conf]# cat nginx2.conf

events {
worker_connections 1024;
}

http {
server {
listen 8848;
server_name 192.168.112.30:8080;

        location / {
            index index.html;
        }
    }

}

#语法检查
ansible-playbook nginx2.yml --syntax-check

#再运行剧本并引用标签 reloadnginx
ansible-playbook nginx2.yml -t reloadnginx

ansible node2 -m shell -a "ss -tnulp | grep nginx"

#先复制一份
[root@server bin]# cp nginx2.yml keepalived.yml

#再通过 vim 的替换将 nginx 替换为变量并优化一下 src 地址
[root@server bin]# cat keepalived.yml

---

- name: Update web servers
  hosts: node2
  remote_user: root
  tasks:
  - name: Install epel
    yum:
    name: epel-release.noarch
    state: latest
  - name: Install {{ rpmname }}
    yum:
    name: "{{ rpmname }}"
    state: present
  - name: Copy {{ rpmname }} configure file
    copy:
    src: /root/ansible/conf/{{ rpmname }}.conf
    dest: /etc/{{ rpmname }}/{{ rpmname }}.conf
    backup: yes
    notify: reload
    tags: reload{{ rpmname }}
  - name: Start {{ rpmname }}
    service:
    name: "{{ rpmname }}"
    state: restarted
    tags: start{{ rpmname }}
    handlers: - name: reload
    service:
    name: "{{ rpmname }}"
    state: restarted
    

cp /etc/keepalived/keepalived.conf /root/ansible/conf/keepalived.conf
    

#语法检查
    ansible-playbook keepalived.yml --syntax-check

#执行剧本-e 接变量
ansible-playbook keepalived.yml -e rpmname=keepalived

[root@server bin]# vim keepalived.yml

---

- name: Update web servers
  hosts: node2
  remote_user: root
  vars: - rpmname: keepalived
  tasks:
  - name: Install epel
    yum:
    name: epel-release.noarch
    state: latest
  - name: Install {{ rpmname }}
    yum:
    name: "{{ rpmname }}"
    state: present
  - name: Copy {{ rpmname }} configure file
    copy:
    src: /root/ansible/conf/{{ rpmname }}.conf
    dest: /etc/{{ rpmname }}/{{ rpmname }}.conf
    backup: yes
    notify: reload
    tags: reload{{ rpmname }}
  - name: Start {{ rpmname }}
    service:
    name: "{{ rpmname }}"
    state: restarted
    tags: start{{ rpmname }}
    handlers: - name: reload
    service:
    name: "{{ rpmname }}"
    state: restarted
    

#语法检查
    ansible-playbook keepalived.yml --syntax-check

#执行剧本
ansible-playbook keepalived.yml

[root@server1 ~]# egrep -v "^$|^#" /etc/ansible/hosts
[all-servers]
server1
server2
server3
server4
[all_ip]
192.168.112.10
192.168.112.20
192.168.112.30
192.168.112.40

hostnamectl set-hostname server1
hostnamectl set-hostname server2
hostnamectl set-hostname server3
hostnamectl set-hostname server4

[root@server1 ~]# vim hosts.j2

127.0.0.1 localhost localhost.localdomain localhost4 localhost4.localdomain4
::1 localhost localhost.localdomain localhost6 localhost6.localdomain6

{% for host in groups.all_ip %}
{{hostvars[host].ansible_ens33.ipv4.address}} {{hostvars[host].ansible_hostname}}
{% endfor %}

[root@server1 ~]# vim hosts.yml

---

- name: Config hosts file
  hosts: all_ip
  remote_user: root

  tasks:

  - name: copy hosts.j2 to group servers
    template:
    src: hosts.j2
    dest: /etc/hosts
    

ansible-playbook hosts.yml --syntax-check
    ansible-playbook hosts.yml
    

ansible all-servers -m shell -a "tail -4 /etc/hosts"
    

tasks:

- name: install conf file to centos7
  template: src=files/nginx.conf.c7.j2
  when: ansible_distribution_major_version == "7"
- name: install conf file to centos6
  template: src=files/nginx.conf.c6.j2
  when: ansible_distribution_major_version == "6"
  

#基于字符串列表
  tasks:
  ‐ name: create rsyncd file
  copy: src={{ item }} dest=/tmp/{{ item }}
  with_items:
  ‐ a
  ‐ b
  ‐ c
  ‐ d
  _with_itmes 嵌套子变量_
  #基于字典列表
  ‐ hosts: eagleslab
  remote_user: root
  tasks:
  ‐ name: add several users
  user: name={{ item.name }} state=present groups={{ item.groups }}
  with_items:
  ‐ { name: 'testuser1' , groups: 'wheel'}
  ‐ { name: 'testuser2' , groups: 'root' }
  

[root@server1 ~]# vim user_manage.yml

---
- name: Manage user
hosts: all-servers
remote_user: root
tasks:
- name: ensure group xsb/jsb/cwb exists
group:
name={{ item.group }}
with_items:
- { group: 'xsb' }
- { group: 'cwb' }
- { group: 'jsb' }
- name: create users zhangsan/lisi/wangwu/maliu/zhaoqi
user:
name={{ item.name }}
group={{ item.group }}
shell={{ item.shell }}
comment={{ item.comment }}
home={{ item.home }}
with_items:
- { name: 'zhangsan', group: 'xsb',home: '/home/xsb/zhangsan',shell: '/bin/bash',comment: '销售'}
- { name: 'lisi', group: 'xsb',home: '/home/xsb/zhangsan',shell: '/bin/bash',comment: '销售'}
- { name: 'wangwu', group: 'jsb',home: '/home/jsb/wangwu',shell: '/bin/sh',comment: 'java 工程师'}
- { name: 'maliu', group: 'jsb',home: '/home/jsb/maliu',shell: '/bin/sh',comment: 'linux 工程师'}
- { name: 'zhaoqi', group: 'cwb',home: '/home/cwb/zhaoqi',shell: '/bin/sh',comment: '会计'}

#语法检查
ansible-playbook user_manage.yml --syntax-check

#执行剧本
ansible-playbook user_manage.yml

ansible all-servers -m shell -a "id zhangsan ; id lisi ; id wangwu ; id maliu ; id zhaoqi"

- name: install some packages
yum: name={{ item }} state=present
with_items: - nginx - memcached - php-fpm

- name: add some groups
  group: name={{ item }} state=present
  with_items:
  - group11
  - group12
  - group13
- name: add some users
  user: name={{ item.name }} group={{ item.group }} state=present
  with_items: - { name: 'user11', group: 'group11' } - { name: 'user12', group: 'group12' } - { name: 'user13', group: 'group13' }
  

[root@server1 ~]# cd /etc/ansible/roles/
  [root@server1 roles]# ls
  [root@server1 roles]# mkdir -pv ./{nginx,mysql,httpd}/{files,templates,vars,tasks,handlers,meta,default}
  

[root@server1 roles]# cat /etc/ansible/roles/nginx/tasks/main.yml

---

- name: cp
  copy: src=nginx-1.10.2-1.el7.ngx.x86_64.rpm dest=/tmp/nginx-1.10.2-1.el7.ngx.x86_64.rpm
- name: install
  yum: name=/tmp/nginx-1.10.2-1.el7.ngx.x86_64.rpm state=present
- name: conf
  template: src=nginx.conf.j2 dest=/etc/nginx/nginx.conf
  tags: nginxconf
  notify: new conf to reload
- name: start service
  service: name=nginx state=started enabled=true
  

#rpm 包放在 files 目录下
  cp /tmp/nginx-1.10.2-1.el7.ngx.x86_64.rpm /etc/ansible/roles/nginx/files/

#模板放在 templates 目录下
cp /tmp/nginx.conf.j2 /etc/ansible/roles/nginx/templates/

#查看目录结构
[root@server1 nginx]# tree

[root@server1 nginx]# cat /etc/ansible/roles/nginx/vars/main.yml
nginxport: 6666

[root@server1 nginx]# cat /etc/ansible/roles/nginx/handlers/main.yml

---

- name: new conf to reload
  service: name=nginx state=restarted
  

[root@server1 ansible]# cat /etc/ansible/roles.yml

---

- hosts: all-servers
  remote_user: root
  roles: - nginx
  

events {
  worker_connections 1024;
  }

http {
server {
listen {{ nginxport }};
}
}

#语法检查
ansible-playbook roles.yml --syntax-check

#执行剧本
ansible-playbook roles.yml

ansible all-servers -m shell -a "ss -tunlp | grep nginx"

[root@server1 ~]# cd /etc/ansible/roles/
[root@server1 roles]# ls
[root@server1 roles]# mkdir -pv ./{nginx,mysql,httpd}/{files,templates,vars,tasks,handlers,meta,default}
#创建一个名为 apache 的新角色
[root@server1 roles]# ansible-galaxy init apache

- Role apache was created successfully
  

[root@server1 roles]# cat /etc/ansible/roles/site.yml

---

- hosts: all-servers
  remote_user: root
  roles:
  - apache
    

[root@server1 roles]# cat /etc/ansible/roles/apache/tasks/main.yml

---

- name: Install httpd
  yum:
  name: httpd
  state: present
- name: Start httpd
  service:
  name: httpd
  state: restarted
- name: Write index file
  shell: echo "http" > /var/www/html/index.html
  

#语法验证
  ansible-playbook site.yml --syntax-check

#执行剧本
ansible-playbook site.yml

ansible all-servers -m shell -a "curl -s server1 ; curl -s server2 ; curl -s server3 ; curl -s server4"

[root@server1 roles]# ansible-galaxy init halo

- Role halo was created successfully
  [root@server1 roles]# ansible-galaxy init java
- Role java was created successfully
  [root@server1 roles]# ansible-galaxy init nginx
- Role nginx was created successfully
  

[root@server1 roles]# cat site.yml

---

- hosts: node1
  remote_user: root
  strategy: free
  pre_tasks: - name: config nginx repo for centos 7
  yum_repository:
  name: nginx
  description: nginx
  baseurl: http://nginx.org/packages/centos/$releasever/$basearch/
  gpgcheck: no
  when: ansible_distribution_major_version == "7" - name: Disable SELinux
  selinux: state=disabled

  roles: - nginx

  post_tasks: - shell: echo 'Deplay halo finished.'
  register: ret - debug: var=ret.stdout
  

[root@server1 roles]# cat nginx/tasks/main.yml

---

# tasks file for nginx

- name: make sure nginx state is installed
  yum: name=nginx state=installed
- name: copy halo to nginx config file
  template: src=halo.conf dest="/etc/nginx/conf.d/halo.conf"
- name: make sure nginx service is running
  service: name=nginx state=started
- name: make sure port is open
  wait_for: port="{{ nginx_port }}"
  

[root@server1 roles]# cat nginx/meta/main.yml #要修改的是 dependencies 部分

dependencies:

- role: java
- role: halo
  

[root@server1 roles]# cat nginx/templates/halo.conf
  upstream halo {
  server 127.0.0.1:8090;
  }
  server {
  listen 80;
  listen [::]:80;
  server_name {{ halo_domain }};
  client_max_body_size 1024m;
  location / {
  proxy_pass http://halo;
  proxy_set_header HOST $host;
    proxy_set_header X-Forwarded-Proto $scheme;
  proxy_set_header X-Real-IP $remote_addr;
    proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
  }
  }
  

[root@server1 roles]# cat java/tasks/main.yml

---

# tasks file for java

- name: install java
  yum: name=java-11-openjdk state=installed
  

[root@server1 roles]# cat halo/tasks/main.yml

---

# tasks file for halo

- name: get halo
  get_url: url=https://dl.halo.run/release/halo-1.4.11.jar dest={{ halopath }}

- name: add halo service file
  template: src=halo.service dest=/etc/systemd/system/halo.service

- name: touch ~/.halo directory
  file: path=~/.halo state=directory

- name: copy halo config file
  template: src=application.yaml dest="~/.halo/application.yaml"

- name: restart halo
  systemd:
  daemon_reload: yes
  name: halo
  state: started
  enabled: yes

- name: wait to start halo
  wait_for: port={{ halo_port }}
  

[root@server1 roles]# cat halo/vars/main.yml

---

# vars file for halo
memory: 512m
halo_port: 8090
halopath: /root/halo.jar
halo_domain: 192.168.112.10
nginx_port: 80

[root@server1 roles]# wget https://dl.halo.run/config/halo.service -O halo/templates/halo.service

[root@server1 roles]# cat halo/templates/halo.service
[Unit]
Description=Halo Service
Documentation=https://docs.halo.run
After=network-online.target
Wants=network-online.target

[Service]
Type=simple
User=root #修改
ExecStart=/usr/bin/java -server -Xms256m -Xmx256m -jar /root/halo.jar #修改
ExecStop=/bin/kill -s QUIT $MAINPID
Restart=always
StandOutput=syslog

StandError=inherit

[Install]
WantedBy=multi-user.target

[root@server1 roles]# wget https://dl.halo.run/config/application-template.yaml -O halo/templates/application.yaml

#语法检查
ansible-playbook site.yml --syntax-check

#执行剧本
ansible-playbook site.yml