diff --git a/ansible/roles/win_wsus/tasks/configure.yml b/ansible/roles/win_wsus/tasks/configure.yml new file mode 100644 index 0000000..db917e0 --- /dev/null +++ b/ansible/roles/win_wsus/tasks/configure.yml @@ -0,0 +1,91 @@ +--- +## vars: +## - wsus_content_dir: W:\WSUS +## # Client / Server: +## - wsus_client_targeting_mode: Client +## - wsus_products: +## #- Microsoft Server operating system-21H2 +## - Windows 10, version 1903 and later +## - wsus_category_names: +## CriticalUpdates: +## id: 'E6CF1350-C01B-414D-A61F-263D14D133B4' +## name: Critical Updates +## DefinitionUpdates: +## id: 'E0789628-CE08-4437-BE74-2495B842F43B' +## name: Definition Updates +## SecurityUpdates: +## id: '0FA1201D-4330-4FA8-8AE9-B877473B6441' +## name: Security Updates +## ServicePacks: +## id: '68C5B0A3-D1A6-4553-AE49-01D3A7827828' +## name: Service Packs +## UpdateRollups: +## id: '28BC880E-0592-4CBF-8F95-C79B17911D5F' +## name: Update Rollups Packs +## Updates: +## id: 'CD5FFD1E-E932-4E3A-BF74-18BF0B1BBD83' +## name: Updates + + + + + +##- name: Configure WSUS server +## block: +## - name: Ensure Content directory exists +## win_file: +## path: '{{ wsus_content_dir }}' +## state: directory +## - name: Ensure WSUS server is deployed (UpdateServicesDSC) - Errors here :( +## win_dsc: +## resource_name: UpdateServicesServer +## Ensure: Present +## ContentDir: '{{ wsus_content_dir }}' +## Languages: en +## Products: "{{ wsus_products }}" +## Classifications: +## - "{{ wsus_category_names['CriticalUpdates'].id }}" +## #- "{{ wsus_category_names['DefinitionUpdates'].id }}" +## #- "{{ wsus_category_names['SecurityUpdates'].id }}" +## #- "{{ wsus_category_names['ServicePacks'].id }}" +## #- "{{ wsus_category_names['UpdateRollups'].id }}" +## #- "{{ wsus_category_names['Updates'].id }}" +## # Ignore upstream as we don't have one yet... +## #UpstreamServerName: "{{ wsus_upstream_server_name | default(omit) }}" +## #UpstreamServerPort: "{{ wsus_upstream_server_port | default(omit) }}" +## #UpstreamServerSSL: "{{ wsus_upstream_server_ssl | default(omit) }}" +## Synchronize: True +## SynchronizeAutomatically: True +## SynchronizeAutomaticallyTimeOfDay: '01:30:00' +## ClientTargetingMode: "{{ wsus_client_targeting_mode }}" +## ignore_errors: true +## retries: 2 +## - name: Apply approval rules (UpdateServicesDSC) +## win_dsc: +## resource_name: UpdateServicesApprovalRule +## Name: "{{ wsus_category_names[item].name }}" +## Classifications: "{{ wsus_category_names[item].id }}" +## Enabled: True +## RunRuleNow: True +## loop: +## - CriticalUpdates +## #- DefinitionUpdates +## #- SecurityUpdates +## #- ServicePacks +## #- UpdateRollups +## #- Updates +## - name: Clean up updates (UpdateServicesDSC) +## win_dsc: +## resource_name: UpdateServicesCleanup +## Ensure: Present +## DeclineExpiredUpdates: True +## DeclineSupersededUpdates: True +## CleanupObsoleteUpdates: True +## CleanupUnneededContentFiles: True +## # Might be handy: https://github.com/slopez888/vsphere-ansible/blob/master/roles/wsus-server-configure/tasks/max_xml_per_request.yml +## - name: obtain WSUS DB name +## win_reg_stat: +## path: HKLM:\SOFTWARE\Microsoft\Update Services\Server\Setup +## name: SqlDatabaseName +## register: wsus_db_name +## when: inventory_hostname in groups['meta-Tags_wsus'] \ No newline at end of file diff --git a/ansible/roles/win_wsus/tasks/main.yml b/ansible/roles/win_wsus/tasks/main.yml index a64aa15..ceb4bf7 100644 --- a/ansible/roles/win_wsus/tasks/main.yml +++ b/ansible/roles/win_wsus/tasks/main.yml @@ -1,3 +1,4 @@ --- - import_tasks: disk.yml -- import_tasks: features.yml \ No newline at end of file +- import_tasks: features.yml +- import_tasks: configure.yml \ No newline at end of file