[root@zqf ~]# cat /etc/ansible/roles/nfs/files/exports   /data 192.168.1.0/24(rw,sync)  [root@zqf ~]# cat /etc/ansible/roles/nfs/handlers/main.yaml   - name: reload nfs    service: name=nfs state=reloaded  [root@zqf ~]# cat /etc/ansible/roles/nfs/tasks/main.yaml   - name: yum install nfs services    yum: name=nfs-utils state=installed  - name: yum install rpcbind     yum: name=rpcbind state=installed  - name: create share directory    file: path={{ share_path }} owner=nfsnobody group=nfsnobody state=directory recurse=yes    notify: reload nfs  - name: nfs configure    copy: src=exports dest=/etc/    notify: reload nfs  - name: start nfs service    service: name=nfs state=started enabled=yes  - name: start rpcbind    service: name=rpcbind state=started enabled=yes  [root@zqf ~]# cat /etc/ansible/roles/nfs/vars/main.yaml   share_path: /data

[root@zqf ~]# cat /etc/ansible/roles/web/files/ifcfg-lo:0   DEVICE=lo:0  IPADDR=192.168.1.200  NETMASK=255.255.255.255  NETWORK=127.0.0.0  # If you're having problems with gated making 127.0.0.0/8 a martian,  # you can change this to something else (255.255.255.255, for example)  BROADCAST=127.255.255.255  ONBOOT=yes  NAME=loopback  [root@zqf ~]# cat /etc/ansible/roles/web/files/index.html   this is web1  [root@zqf ~]# cat /etc/ansible/roles/web/files/sysctl.conf   # sysctl settings are defined through files in  # /usr/lib/sysctl.d/, /run/sysctl.d/, and /etc/sysctl.d/.  #  # Vendors settings live in /usr/lib/sysctl.d/.  # To override a whole file, create a new file with the same in  # /etc/sysctl.d/ and put new settings there. To override  # only specific settings, add a file with a lexically later  # name in /etc/sysctl.d/ and put new settings there.  #  # For more information, see sysctl.conf(5) and sysctl.d(5).  net.ipv4.conf.all.arp_ignore = 1  net.ipv4.conf.all.arp_announce = 2  net.ipv4.conf.default.arp_ignore = 1  net.ipv4.conf.default.arp_announce = 2  net.ipv4.conf.lo.arp_ignore = 1  net.ipv4.conf.lo.arp_announce = 2    [root@zqf ~]# cat /etc/ansible/roles/web/handlers/main.yaml   - name: reload httpd    service: name=httpd state=reloaded  - name: restart network    service: name=network state=reloaded  [root@zqf ~]# cat /etc/ansible/roles/web/tasks/main.yaml   - name: install httpd    yum: name=httpd state=installed  - name: write the index    copy: src=index.html dest=/var/www/html    notify: reload httpd  - name: start httpd    service: name=httpd state=started enabled=yes  - name: yum install nfs services    yum: name=nfs-utils state=installed  - name: yum install rpcbind     yum: name=rpcbind state=installed  - name: start nfs service    service: name=nfs state=started enabled=yes  - name: start rpcbind    service: name=rpcbind state=started enabled=yes  - name: create mount directory    file: path=/var/www/html/nfs state=directory  - name: mount nfs    mount: src=192.168.1.135:{{ share_path }} path=/var/www/html/nfs fstype=nfs state=mounted    notify: reload httpd  - name: stop NetworkManager    service: name=NetworkManager state=stopped   - name: bind loopback    copy: src=ifcfg-lo:0 dest=/etc/sysconfig/network-scripts/  - name: start network    shell: systemctl restart network  - name: trun off arp    copy: src=sysctl.conf dest=/etc/sysctl.conf  - name: load sysctl configuration    shell: sysctl -p  - name: install network-tools    yum: name=net-tools state=installed  - name: add route record    shell: route add -host 192.168.1.200 dev lo:0  - name: route add local    shell: echo "route add -host 192.168.1.200 dev lo:0" >> /etc/rc.local    [root@zqf ~]# cat /etc/ansible/roles/web/vars/main.yaml   share_path: /data

[root@zqf ~]# cat /etc/ansible/roles/lvs/files/epel.repo   [epel]  name=Extra Packages for Enterprise Linux 7 - $basearch  baseurl=http://mirrors.aliyun.com/epel/7/$basearch  failovermethod=priority  enabled=1  gpgcheck=0  gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-EPEL-7    [epel-debuginfo]  name=Extra Packages for Enterprise Linux 7 - $basearch - Debug  baseurl=http://mirrors.aliyun.com/epel/7/$basearch/debug  failovermethod=priority  enabled=0  gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-EPEL-7  gpgcheck=0    [epel-source]  name=Extra Packages for Enterprise Linux 7 - $basearch - Source  baseurl=http://mirrors.aliyun.com/epel/7/SRPMS  failovermethod=priority  enabled=0  gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-EPEL-7  gpgcheck=0  [root@zqf ~]# cat /etc/ansible/roles/lvs/files/ifcfg-ens33:0   TYPE="Ethernet"  DEVICE="ens33:0"  ONBOOT="yes"  IPADDR=192.168.1.200  NETMASK=255.255.255.0  [root@zqf ~]# cat /etc/ansible/roles/lvs/files/sysctl.conf1   net.ipv4.conf.all.send_redirects = 0  net.ipv4.conf.default.send_redirects = 0  net.ipv4.conf.ens33.send_redirects = 0  [root@zqf ~]# cat /etc/ansible/roles/lvs/handlers/main.yaml   - name: reload keepalived    shell: systemctl restart keepalived  [root@zqf ~]# cat /etc/ansible/roles/lvs/tasks/main.yaml   - name: stop NetwormManager    service: name=NetworkManager state=stopped  - name: bind vip    copy: src=ifcfg-ens33:0 dest=/etc/sysconfig/network-scripts/  - name: sysctl    copy: src=sysctl.conf1 dest=/etc/sysctl.conf  - name: sysctl -p    shell: sysctl -p  - name: epel     copy: src=epel.repo dest=/etc/yum.repos.d/  - name: install ipvsadm    yum: name=ipvsadm state=installed  - name: load to kernel    shell: modprobe ip_vs  - name: ipvsadm configure    shell: ipvsadm -A -t {{ vip }}:80 -s rr  - name: ipvsadm list2     shell: ipvsadm -a -t {{ vip }}:80 -r {{ rs1 }}:80 -g;  - name: ipvsadm list3           shell: ipvsadm -a -t {{ vip }}:80 -r {{ rs2 }}:80 -g;  - name: restart this net    shell: systemctl restart network  - name: install keepalived    yum: name=keepalived state=installed  - name: configure keepalived    template: src=keepalived.conf.j2 dest=/etc/keepalived/keepalived.conf    notify: reload keepalived   - name: start keepalived    service: name=keepalived state=started enabled=yes  [root@zqf ~]# cat /etc/ansible/roles/lvs/templates/keepalived.conf.j2   ! Configuration File for keepalived    global_defs {     router_id R1   #命名主机名（同一个组里机器名称不能一致）  }    vrrp_instance VI_1 {          {% if ds_master == ansible_hostname%}      state MASTER          priority 80          {% elif ds_slave == ansible_hostname%}          state BACKUP        priority 47          {% endif %}   #设置主/从并配置优先级      interface ens33      virtual_router_id 66  #组号，如果是一组就是相同的ID号，一个主里面只能由一个主服务器和多个从服务器      advert_int 1   #心跳检测时间，检测对方存货      authentication {     #存活验证密码          auth_type PASS          auth_pass 1111      }      virtual_ipaddress {          192.168.1.200    #集群VIP地址      }  }    virtual_server 192.168.1.200 80 {   #设置集群地址以及端口号      delay_loop 2   #健康检查间隔      lb_algo rr #当前使用轮询调度算法      lb_kind DR   #LVS工作方式      protocol TCP   #使用的协议       real_server 192.168.1.131 80 {  #真实服务器Ip信息以及使用端口          weight 1    #权重          TCP_CHECK {     #状态检查方式              connect_port 80                 connect_timeout 3 #连接超时（秒）              nb_get_retry 3    #重试次数              dealy_before_retry 4 #重试间隔(秒)              }     }     real_server 192.168.1.132 80 {          weight 1               TCP_CHECK {                 connect_port 80               connect_timeout 3              nb_get_retry 3                  dealy_before_retry 4          }     }  }  [root@zqf ~]# cat /etc/ansible/roles/lvs/vars/main.yaml   vip: 192.168.1.200  rs1: 192.168.1.131  rs2: 192.168.1.132   ds_master: ds1  ds_slave: ds2