Ansible Role - ZoneMinder

Ansible Role to deploy a ZoneMinder IP-CAM server.

Read into the official documentation on how to add ip-cams and so on.

Molecule Logs: Short, Full

Tested:

• Debian 11

Install

# latest
ansible-galaxy role install git+https://github.com/ansibleguy/sw_zoneminder

# from galaxy
ansible-galaxy install ansibleguy.sw_zoneminder

# or to custom role-path
ansible-galaxy install ansibleguy.sw_zoneminder --roles-path ./roles

# install dependencies
ansible-galaxy install -r requirements.yml

---

Usage

You want a simple Ansible GUI? Check-out my Ansible WebUI

Config

Define the zoneminder dictionary as needed.

Example for a zoneminder server:

zoneminder:
  timezone: 'Europe/Vienna'
  tools: true  # install useful admin-tools
  
  apache:
    domain: 'zoneminder.template.ansibleguy.net'
    aliases: ['zm.template.ansibleguy.net']

    ssl:
      mode: 'letsencrypt'  # or selfsigned/ca
      #  if you use 'selfsigned' or 'ca':
      #    cert:
      #      cn: 'ZoneMinder Server'
      #      org: 'AnsibleGuy'
      #      email: 'zoneminder@template.ansibleguy.net'
    letsencrypt:
      email: 'zoneminder@template.ansibleguy.net'
  
  

Bare minimum example:

zoneminder:
  apache:
    domain: 'zoneminder.template.ansibleguy.net' 

You might want to use 'ansible-vault' to encrypt your passwords:

ansible-vault encrypt_string

Execution

Run the playbook:

ansible-playbook -K -D -i inventory/hosts.yml playbook.yml --ask-vault-pass

There are also some useful tags available:

• config

---

Functionality

• Package installation

  • ZoneMinder Server
    • Base package and dependencies
    • Apache2 => using THIS Role
    • MariaDB => using THIS Role

• Configuration

  • Default opt-ins:

    • Database setup
    • Webserver setup

  • Default opt-outs:

    • Admin-tools

  • Default config:

    • Logging to syslog
    • Self-Signed certificate

---

Info

• Note: this role currently only supports debian-based systems

• Note: Most of the role's functionality can be opted in or out.

  For all available options - see the default-config located in the main defaults-file!

• Warning: You should AT LEAST set a login password after the installation finished.