stroopwafel

tasks/stroopwafel.yml

@@ -0,0 +1,41 @@
+# Pulling needs to have git access; root does not.
+- name: Include stroopwafel vault
+  include_vars:
+    dir: stroopwafel
+    files_matching: vault.yml
+- name: Create stroopwafel directory
+  file:
+    path: "{{ stroopwafel_dir }}"
+    state: directory
+    owner: root
+    group: "{{ service_group | default('aurbis') }}"
+    mode: "0775"
+- name: Check out stroopwafel source
+  ansible.builtin.git:
+    repo: "{{ stroopwafel_repo }}"
+    dest: "{{ stroopwafel_dir }}"
+    version: "{{ stroopwafel_version }}"
+    update: "{{ stroopwafel_update | default(false) }}"
+    accept_hostkey: true
+    force: false
+  become_user: "{{ stroopwafel_git_user | default(omit) }}"
+- name: Deploy stroopwafel .env
+  copy:
+    content: "{{ stroopwafel_env_b64 | b64decode }}"
+    dest: "{{ stroopwafel_dir }}/.env"
+    owner: root
+    group: "{{ service_group | default('aurbis') }}"
+    mode: "0640"
+  when: stroopwafel_env_b64 is defined
+  no_log: true
+- name: Copy docker-compose file
+  template:
+    src: stroopwafel/docker-compose.yml.j2
+    dest: "{{ stroopwafel_dir }}/docker-compose.yml"
+    owner: root
+    group: "{{ service_group | default('aurbis') }}"
+    mode: "0664"
+- name: Start stroopwafel
+  community.docker.docker_compose_v2:
+    project_src: "{{ stroopwafel_dir }}"
+    build: policy

tasks/stroopwafel/docker-compose.yml.j2

@@ -0,0 +1,7 @@
+services:
+  stroopwafel:
+    build: .
+    command: python Stroopwafel.py
+    restart: unless-stopped
+    volumes:
+      - .:/opt/stroopwafel