jumpserver/apps/terminal/automations/deploy_applet_host/playbook.yml

---

- hosts: windows
  vars:
    - DownloadHost: https://demo.jumpserver.org/download
    - RDS_Licensing: enabled
    - RDS_LicenseServer: 127.0.0.1
    - RDS_LicensingMode: 4
    - RDS_fSingleSessionPerUser: 1
    - RDS_MaxDisconnectionTime: 60000
    - RDS_RemoteAppLogoffTimeLimit: 0

  tasks:
  - name: Install RDS-Licensing (RDS)
    ansible.windows.win_feature:
      name: RDS-Licensing
      state: present
      include_management_tools: yes
    when: RDS_Licensing == "enabled"

  - name: Install RDS-RD-Server (RDS)
    ansible.windows.win_feature:
      name: RDS-RD-Server
      state: present
      include_management_tools: yes
    register: rds_install

  - name: Download Jmservisor (jumpserver)
    ansible.windows.win_get_url:
        url: "{{ DownloadHost }}/Jmservisor.msi"
        dest: "{{ ansible_env.TEMP }}\\Jmservisor.msi"

  - name: Install the Jmservisor (jumpserver)
    ansible.windows.win_package:
      path: "{{ ansible_env.TEMP }}\\Jmservisor.msi"
      state: present

  - name: Download python-3.10.8
    ansible.windows.win_get_url:
      url: "{{ DownloadHost }}/python-3.10.8-amd64.exe"
      dest: "{{ ansible_env.TEMP }}\\python-3.10.8-amd64.exe"

  - name: Install the python-3.10.8
    ansible.windows.win_package:
      path: "{{ ansible_env.TEMP }}\\python-3.10.8-amd64.exe"
      product_id: '{371d0d73-d418-4ffe-b280-58c3e7987525}'
      arguments:
      - /quiet
      - InstallAllUsers=1
      - PrependPath=1
      - Include_test=0
      - Include_launcher=0
      state: present
    register: win_install_python

  - name: Reboot if installing requires it
    ansible.windows.win_reboot:
      post_reboot_delay: 10
      test_command: whoami
    when: rds_install.reboot_required or win_install_python.reboot_required

  - name: Set RDS LicenseServer (regedit)
    ansible.windows.win_regedit:
      path: HKLM:\SOFTWARE\Policies\Microsoft\Windows NT\Terminal Services
      name: LicenseServers
      data: "{{ RDS_LicenseServer }}"
      type: string

  - name: Set RDS LicensingMode (regedit)
    ansible.windows.win_regedit:
      path: HKLM:\SOFTWARE\Policies\Microsoft\Windows NT\Terminal Services
      name: LicensingMode
      data: "{{ RDS_LicensingMode }}"
      type: dword

  - name: Set RDS fSingleSessionPerUser (regedit)
    ansible.windows.win_regedit:
      path: HKLM:\SOFTWARE\Policies\Microsoft\Windows NT\Terminal Services
      name: fSingleSessionPerUser
      data: "{{ RDS_fSingleSessionPerUser }}"
      type: dword

  - name: Set RDS MaxDisconnectionTime (regedit)
    ansible.windows.win_regedit:
      path: HKLM:\SOFTWARE\Policies\Microsoft\Windows NT\Terminal Services
      name: MaxDisconnectionTime
      data: "{{ RDS_MaxDisconnectionTime }}"
      type: dword
    when: RDS_MaxDisconnectionTime >= 60000

  - name: Set RDS RemoteAppLogoffTimeLimit (regedit)
    ansible.windows.win_regedit:
      path: HKLM:\SOFTWARE\Policies\Microsoft\Windows NT\Terminal Services
      name: RemoteAppLogoffTimeLimit
      data: "{{ RDS_RemoteAppLogoffTimeLimit }}"
      type: dword

  - name: Download pip packages
    ansible.windows.win_get_url:
      url: "{{ DownloadHost }}/pip_packages_v0.0.1.zip"
      dest: "{{ ansible_env.TEMP }}\\pip_packages_v0.0.1.zip"

  - name: Unzip pip_packages
    community.windows.win_unzip:
      src: "{{ ansible_env.TEMP }}\\pip_packages_v0.0.1.zip"
      dest: "{{ ansible_env.TEMP }}"

  - name: Install python requirements offline
    ansible.windows.win_shell: pip install -r "{{ ansible_env.TEMP }}\pip_packages_v0.0.1\requirements.txt" --no-index --find-links="{{ ansible_env.TEMP }}\pip_packages_v0.0.1"

  - name: Download chromedriver (chrome)
    ansible.windows.win_get_url:
      url: "{{ DownloadHost }}/chromedriver_win32.106.zip"
      dest: "{{ ansible_env.TEMP }}\\chromedriver_win32.106.zip"

  - name: Unzip chromedriver (chrome)
    community.windows.win_unzip:
      src: "{{ ansible_env.TEMP }}\\chromedriver_win32.106.zip"
      dest: C:\Program Files\JumpServer\drivers

  - name: Set chromedriver on the global system path (chrome)
    ansible.windows.win_path:
      elements:
      - 'C:\Program Files\JumpServer\drivers'

  - name: Download chrome msi package (chrome)
    ansible.windows.win_get_url:
      url: "{{ DownloadHost }}/googlechromestandaloneenterprise64.msi"
      dest: "{{ ansible_env.TEMP }}\\googlechromestandaloneenterprise64.msi"

  - name: Install chrome (chrome)
    ansible.windows.win_package:
      path: "{{ ansible_env.TEMP }}\\googlechromestandaloneenterprise64.msi"
      state: present
      arguments:
      - /quiet