From 7afda7b2b59feb4f5d20484faa4af2c3dc291eb9 Mon Sep 17 00:00:00 2001
From: Dmitry Ilvokhin <d@ilvokhin.com>
Date: Sun, 9 Jun 2024 19:39:02 +0100
Subject: Add tor role

---
 roles/tor/tasks/main.yml | 41 +++++++++++++++++++++++++++++++++++++++++
 1 file changed, 41 insertions(+)
 create mode 100644 roles/tor/tasks/main.yml

(limited to 'roles/tor/tasks')

diff --git a/roles/tor/tasks/main.yml b/roles/tor/tasks/main.yml
new file mode 100644
index 0000000..3600404
--- /dev/null
+++ b/roles/tor/tasks/main.yml
@@ -0,0 +1,41 @@
+- name: Install tor
+  ansible.builtin.package:
+    name:
+      - tor
+    state: present
+
+- name: Create /etc/torrc.d for drop-in tor configs
+  ansible.builtin.file:
+    path: /etc/torrc.d
+    state: directory
+    owner: root
+    group: root
+    mode: u+rw,g+r,o+r
+
+- name: Allow usage of drop-in configs from /etc/torrc.d
+  ansible.builtin.lineinfile:
+    dest: /etc/tor/torrc
+    state: present
+    regexp: '^(#)?%include /etc/torrc.d/\*.conf'
+    line: '%include /etc/torrc.d/*.conf'
+    owner: root
+    group: root
+    mode: u+rw,g+r,o+r
+  notify:
+    - Reload tor
+
+- name: Configure Tor middlebox
+  ansible.builtin.copy:
+    src: files/middlebox.conf
+    dest: /etc/torrc.d/middlebox.conf
+    owner: root
+    group: root
+    mode: u+rw,g+r,o+r
+  notify:
+    - Reload tor
+
+- name: Enable tor systemd service
+  ansible.builtin.service:
+    name: tor
+    enabled: yes
+    state: started
-- 
cgit v1.2.3-70-g09d2