wsus configure.yml (unfinished)

ansible/roles/win_wsus/tasks/configure.yml

@@ -0,0 +1,91 @@
+---
+##  vars:
+##    - wsus_content_dir: W:\WSUS
+##    # Client / Server:
+##    - wsus_client_targeting_mode: Client
+##    - wsus_products:
+##      #- Microsoft Server operating system-21H2
+##      - Windows 10, version 1903 and later
+##    - wsus_category_names:
+##        CriticalUpdates:
+##          id: 'E6CF1350-C01B-414D-A61F-263D14D133B4'
+##          name: Critical Updates
+##        DefinitionUpdates:
+##          id: 'E0789628-CE08-4437-BE74-2495B842F43B'
+##          name: Definition Updates
+##        SecurityUpdates:
+##          id: '0FA1201D-4330-4FA8-8AE9-B877473B6441'
+##          name: Security Updates
+##        ServicePacks:
+##          id: '68C5B0A3-D1A6-4553-AE49-01D3A7827828'
+##          name: Service Packs
+##        UpdateRollups:
+##          id: '28BC880E-0592-4CBF-8F95-C79B17911D5F'
+##          name: Update Rollups Packs
+##        Updates:
+##          id: 'CD5FFD1E-E932-4E3A-BF74-18BF0B1BBD83'
+##          name: Updates
+
+
+
+
+
+##- name: Configure WSUS server
+##  block:
+##  - name: Ensure Content directory exists
+##    win_file:
+##      path: '{{ wsus_content_dir }}'
+##      state: directory
+##  - name: Ensure WSUS server is deployed (UpdateServicesDSC) - Errors here :(
+##    win_dsc:
+##      resource_name: UpdateServicesServer
+##      Ensure: Present
+##      ContentDir: '{{ wsus_content_dir }}'
+##      Languages: en
+##      Products: "{{ wsus_products }}"
+##      Classifications:
+##        - "{{ wsus_category_names['CriticalUpdates'].id }}"
+##        #- "{{ wsus_category_names['DefinitionUpdates'].id }}"
+##        #- "{{ wsus_category_names['SecurityUpdates'].id }}"
+##        #- "{{ wsus_category_names['ServicePacks'].id }}"
+##        #- "{{ wsus_category_names['UpdateRollups'].id }}"
+##        #- "{{ wsus_category_names['Updates'].id }}"
+##      # Ignore upstream as we don't have one yet...
+##      #UpstreamServerName: "{{ wsus_upstream_server_name | default(omit) }}"
+##      #UpstreamServerPort: "{{ wsus_upstream_server_port | default(omit) }}"
+##      #UpstreamServerSSL: "{{ wsus_upstream_server_ssl | default(omit) }}"
+##      Synchronize: True
+##      SynchronizeAutomatically: True
+##      SynchronizeAutomaticallyTimeOfDay: '01:30:00'
+##      ClientTargetingMode: "{{ wsus_client_targeting_mode }}"
+##    ignore_errors: true
+##    retries: 2
+##  - name: Apply approval rules (UpdateServicesDSC)
+##    win_dsc:
+##      resource_name: UpdateServicesApprovalRule
+##      Name: "{{ wsus_category_names[item].name }}"
+##      Classifications: "{{ wsus_category_names[item].id }}"
+##      Enabled: True
+##      RunRuleNow: True
+##    loop:
+##      - CriticalUpdates
+##      #- DefinitionUpdates
+##      #- SecurityUpdates
+##      #- ServicePacks
+##      #- UpdateRollups
+##      #- Updates
+##  - name: Clean up updates (UpdateServicesDSC)
+##    win_dsc:
+##      resource_name: UpdateServicesCleanup
+##      Ensure: Present
+##      DeclineExpiredUpdates: True
+##      DeclineSupersededUpdates: True
+##      CleanupObsoleteUpdates: True
+##      CleanupUnneededContentFiles: True
+##  # Might be handy: https://github.com/slopez888/vsphere-ansible/blob/master/roles/wsus-server-configure/tasks/max_xml_per_request.yml
+##  - name: obtain WSUS DB name
+##    win_reg_stat:
+##      path: HKLM:\SOFTWARE\Microsoft\Update Services\Server\Setup
+##      name: SqlDatabaseName
+##    register: wsus_db_name
+##  when: inventory_hostname in groups['meta-Tags_wsus']

ansible/roles/win_wsus/tasks/main.yml

@@ -1,3 +1,4 @@
 ---
 - import_tasks: disk.yml
 - import_tasks: features.yml
+- import_tasks: configure.yml