Claude Sonnet 5
8ff6d59ba6
Git history was lost when the previous Gitea instance was wiped and reinstalled due to an unresolved corruption bug — this commit is the last known-good file content, exported before the reinstall. Prior commit history is not recoverable through this path.
93 lines
3.0 KiB
YAML
93 lines
3.0 KiB
YAML
---
|
|
- name: Prepare Dynamic Inventory
|
|
hosts: localhost
|
|
gather_facts: no
|
|
tasks:
|
|
- name: Add target VM from Semaphore Survey to inventory
|
|
add_host:
|
|
name: "{{ target_ip }}"
|
|
groups: windows_vms
|
|
ansible_user: "o.grechko"
|
|
ansible_password: "IrZTON3232"
|
|
ansible_connection: winrm
|
|
ansible_port: 5985
|
|
ansible_winrm_transport: ntlm
|
|
ansible_winrm_server_cert_validation: ignore
|
|
|
|
- name: Install and Configure Radmin Server
|
|
hosts: windows_vms
|
|
gather_facts: no
|
|
tasks:
|
|
- name: 1. Remove existing file if it exists
|
|
ansible.windows.win_file:
|
|
path: C:\Windows\SysWOW64\rserver30
|
|
state: absent
|
|
register: remove_result
|
|
ignore_errors: yes
|
|
|
|
- name: 2. Create directories for Antivirus exclusions
|
|
ansible.windows.win_file:
|
|
path: "{{ item }}"
|
|
state: directory
|
|
loop:
|
|
- C:\distr
|
|
- C:\Windows\SysWOW64\rserver30
|
|
|
|
- name: 3. Add Windows Defender exclusions
|
|
ansible.windows.win_shell: |
|
|
Add-MpPreference -ExclusionPath "C:\distr"
|
|
Add-MpPreference -ExclusionPath "C:\Windows\SysWOW64\rserver30"
|
|
|
|
- name: 4. Copy Radmin MSI directly from network share
|
|
ansible.windows.win_copy:
|
|
src: \\fs\alls\rs352.msi
|
|
dest: C:\distr\rs352.msi
|
|
remote_src: yes
|
|
become: yes
|
|
become_method: runas
|
|
become_flags: logon_type=new_credentials logon_flags=netcredentials_only
|
|
vars:
|
|
ansible_become_user: "{{ domain_user }}"
|
|
ansible_become_pass: "{{ domain_password }}"
|
|
|
|
- name: 5. Install Radmin silently (this will auto-start the service)
|
|
ansible.windows.win_package:
|
|
path: C:\distr\rs352.msi
|
|
state: present
|
|
arguments: /qn
|
|
|
|
- name: 6. STOP Radmin Server service to unlock files
|
|
ansible.windows.win_service:
|
|
name: rserver3
|
|
state: stopped
|
|
|
|
- name: 7. Extract wsock32.zip from network share directly to rserver30
|
|
community.windows.win_unzip:
|
|
src: \\fs\alls\wsock32.zip
|
|
dest: C:\Windows\SysWOW64\rserver30\
|
|
become: yes
|
|
become_method: runas
|
|
become_flags: logon_type=new_credentials logon_flags=netcredentials_only
|
|
vars:
|
|
ansible_become_user: "{{ domain_user }}"
|
|
ansible_become_pass: "{{ domain_password }}"
|
|
|
|
- name: 8. Copy radmin_settings.reg from network share
|
|
ansible.windows.win_copy:
|
|
src: \\fs\alls\radmin_settings.reg
|
|
dest: C:\distr\radmin_settings.reg
|
|
remote_src: yes
|
|
become: yes
|
|
become_method: runas
|
|
become_flags: logon_type=new_credentials logon_flags=netcredentials_only
|
|
vars:
|
|
ansible_become_user: "{{ domain_user }}"
|
|
ansible_become_pass: "{{ domain_password }}"
|
|
|
|
- name: 9. Apply Radmin registry settings (AD permissions)
|
|
ansible.windows.win_command: regedit.exe /s C:\distr\radmin_settings.reg
|
|
|
|
- name: 10. START Radmin Server service to apply patch and settings
|
|
ansible.windows.win_service:
|
|
name: rserver3
|
|
state: started |