feat: Debian 12 compatibility

Signed-off-by: Julien Riou <julien@riou.xyz>

tasks/bacula.yml

@@ -1,6 +1,6 @@
 ---
 - name: Install bacula
-  ansible.builtin.apt:
+  ansible.builtin.package:
     name:
       - bacula-director
       - bacula-director-sqlite3
@@ -56,6 +56,14 @@
     owner: root
     group: bacula
 
+- name: Create configuration directory
+  ansible.builtin.file:
+    path: /etc/bacula/conf.d
+    state: directory
+    owner: root
+    group: root
+    mode: '0755'
+
 - name: Copy configuration files
   ansible.builtin.template:
     src: "bacula/conf.d/{{ item }}.conf.j2"

tasks/iptables.yml

@@ -1,4 +1,9 @@
 ---
+- name: Install iptables
+  ansible.builtin.package:
+    name: iptables
+    state: present
+
 - name: Allow related and established connections
   ansible.builtin.iptables:
     chain: INPUT

tasks/mosquitto.yml

@@ -1,22 +1,23 @@
 ---
 - name: Install packages
-  ansible.builtin.apt:
-    name:
-      - mosquitto
+  ansible.builtin.package:
+    name: mosquitto
 
-- name: Configure mosquitto
-  ansible.builtin.copy:
-    src: files/mosquitto/conf.d
-    dest: /etc/mosquitto
+- name: Deploy general configuration
+  ansible.builtin.template:
+    src: mosquitto/default.conf.j2
+    dest: /etc/mosquitto/conf.d/default.conf
     mode: "0644"
+    owner: root
+    group: root
 
 - name: Copy mosquitto password
   ansible.builtin.template:
     src: mosquitto/passwd.j2
     dest: /etc/mosquitto/passwd
-    mode: '0600'
+    mode: '0640'
     owner: root
-    group: root
+    group: mosquitto
 
 - name: Restart mosquitto
   ansible.builtin.service:

tasks/nagios.yml

@@ -8,7 +8,7 @@
       - python3-jinja2
       - python3-requests
       - python3-jsonschema
-      - python-pexpect
+      - python3-pexpect
 
 - name: Generate nagios configurations
   ansible.builtin.template:
@@ -100,6 +100,7 @@
   loop:
     - auth_digest
     - headers
+    - cgi
   changed_when: true
 
 - name: Restart apache

tasks/nrpe.yml

@@ -50,7 +50,7 @@
 - name: Install check_ovhcloud dependencies
   ansible.builtin.pip:
     requirements: /opt/check_ovhcloud/requirements.txt
-    extra_args: "--user"
+    extra_args: "--user --break-system-packages"
   become: true
   become_user: nagios
 

tasks/telegraf.yml

@@ -7,7 +7,7 @@
 
 - name: Download influxdata APT key
   ansible.builtin.apt_key:
-    url: https://repos.influxdata.com/influxdb.key
+    url: https://repos.influxdata.com/influxdata-archive_compat.key
     state: present
 
 - name: Install telegraf and dependencies