42 lines
1.3 KiB
YAML
42 lines
1.3 KiB
YAML
# Pulling needs to have git access; root does not.
|
|
- name: Include stroopwafel vault
|
|
include_vars:
|
|
dir: stroopwafel
|
|
files_matching: vault.yml
|
|
- name: Create stroopwafel directory
|
|
file:
|
|
path: "{{ stroopwafel_dir }}"
|
|
state: directory
|
|
owner: root
|
|
group: "{{ service_group | default('aurbis') }}"
|
|
mode: "0775"
|
|
- name: Check out stroopwafel source
|
|
ansible.builtin.git:
|
|
repo: "{{ stroopwafel_repo }}"
|
|
dest: "{{ stroopwafel_dir }}"
|
|
version: "{{ stroopwafel_version }}"
|
|
update: "{{ stroopwafel_update | default(false) }}"
|
|
accept_hostkey: true
|
|
force: false
|
|
become_user: "{{ stroopwafel_git_user | default(omit) }}"
|
|
- name: Deploy stroopwafel .env
|
|
copy:
|
|
content: "{{ stroopwafel_env_b64 | b64decode }}"
|
|
dest: "{{ stroopwafel_dir }}/.env"
|
|
owner: root
|
|
group: "{{ service_group | default('aurbis') }}"
|
|
mode: "0640"
|
|
when: stroopwafel_env_b64 is defined
|
|
no_log: true
|
|
- name: Copy docker-compose file
|
|
template:
|
|
src: stroopwafel/docker-compose.yml.j2
|
|
dest: "{{ stroopwafel_dir }}/docker-compose.yml"
|
|
owner: root
|
|
group: "{{ service_group | default('aurbis') }}"
|
|
mode: "0664"
|
|
- name: Start stroopwafel
|
|
community.docker.docker_compose_v2:
|
|
project_src: "{{ stroopwafel_dir }}"
|
|
build: policy
|