Compare commits
No commits in common. "f9bbcd6c71ea96a7a52b3c2e00956c875cd02448" and "bee1722cea78675df6b68e42331a8e9c6c0cb635" have entirely different histories.
f9bbcd6c71
...
bee1722cea
@ -5,12 +5,6 @@
|
||||
This ansible collection provides various roles for installing
|
||||
and configuring basic system utilities like gnupg, ssh etc
|
||||
|
||||
- [`git`](roles/git/README.md): configures git on the target system
|
||||
- [`gnupg`](roles/gnupg/README.md): configures gnupg on the target system
|
||||
- [`mariadb`](roles/mariadb/README.md): runs [MariaDB Server](https://mariadb.org/), one of the world's most popular open source relational database
|
||||
- [`nginx`](roles/nginx/README.md): [nginx](https://www.nginx.com/),
|
||||
an advanced load balancer, webserver and reverse proxy.
|
||||
|
||||
## License
|
||||
|
||||
[CNPLv7+](LICENSE.md): Cooperative Nonviolent Public License
|
||||
|
@ -3,9 +3,10 @@ name: base
|
||||
version: 0.0.1
|
||||
readme: README.md
|
||||
authors:
|
||||
- transcaffeine <transcaffeine@finally.coffee>
|
||||
description: Roles for base services which are common dependencies other services like databases
|
||||
license_file: LICENSE.md
|
||||
- Johanna Dorothea Reichmann <transcaffeine@finally.coffee>
|
||||
description: Roles for bootstrapping tools like gpg, ssh and git
|
||||
license:
|
||||
- CNPLv7+
|
||||
build_ignore:
|
||||
- '*.tar.gz'
|
||||
repository: https://git.finally.coffee/finallycoffee/base
|
||||
|
@ -1,3 +0,0 @@
|
||||
---
|
||||
|
||||
requires_ansible: ">=2.12"
|
@ -1,19 +0,0 @@
|
||||
# `finallycoffee.base.git` ansible role
|
||||
|
||||
This role configures git for the `ansible_user` and can be used
|
||||
to (pre)-configure git.
|
||||
|
||||
## Examples
|
||||
|
||||
```yaml
|
||||
|
||||
git_config_user_name: # user name to use for git
|
||||
git_config_user_email: # email to use for git
|
||||
|
||||
git_config_core_editor: vim # editor to use
|
||||
|
||||
git_config_credentials:
|
||||
- remote_url: https://github.com
|
||||
config:
|
||||
username: my_github_username
|
||||
```
|
@ -1,4 +0,0 @@
|
||||
# `finallycoffee.base.gnupg` ansible role
|
||||
|
||||
Configures GnuPG on the target system, including a Smart-Card (SC) daemon
|
||||
and can set up gpg-agent as an SSH-agent.
|
@ -1,19 +0,0 @@
|
||||
# `finallycoffee.base.mariadb` ansible role
|
||||
|
||||
This role deploys a MariaDB instance in a docker container.
|
||||
|
||||
## Usage
|
||||
|
||||
The role expects the following variables to be populated with values and/or secrets:
|
||||
|
||||
```yaml
|
||||
mariadb_root_password: #mariadb root password
|
||||
mariadb_database: # name of the database to create
|
||||
mariadb_username: # name of a user to auto-create and assign permission on the mariadb_database
|
||||
mariadb_password: # password of the user in mariadb_username
|
||||
```
|
||||
|
||||
## Requirements
|
||||
|
||||
- Docker installed
|
||||
- python-docker present on target system for ansible to be able to talk with the docker API.
|
@ -1,28 +0,0 @@
|
||||
# `finallycoffee.services.nginx` ansible role
|
||||
|
||||
## Description
|
||||
|
||||
Runs `nginx`, a HTTP reverse proxy, in a docker container.
|
||||
|
||||
## Usage
|
||||
|
||||
For the role to do anything, `nginx_config` needs to be populated with the configuration for nginx.
|
||||
An example would be:
|
||||
|
||||
```yaml
|
||||
nginx_config: |+
|
||||
server {
|
||||
listen 80 default_server;
|
||||
server_name my.server.fqdn;
|
||||
location / { return 200; }
|
||||
}
|
||||
```
|
||||
|
||||
The container is named `nginx` by default, this can be overridden in `nginx_container_name`.
|
||||
When running this role multiple times, `nginx_base_path` should also be changed for each run,
|
||||
otherwise the configuration files collide in the filesystem.
|
||||
|
||||
For exposing this server to the host and/or internet, the `nginx_container_ports` (port forwarding host
|
||||
from host to container), `nginx_container_networks` (docker networking) or `nginx_container_labels`
|
||||
(for label-based routing discovery like traefik) can be used. The options correspond to the arguments
|
||||
of the `community.docker.docker_container` module.
|
@ -1,33 +0,0 @@
|
||||
---
|
||||
|
||||
nginx_version: "1.25.1"
|
||||
nginx_flavour: alpine
|
||||
nginx_base_path: /opt/nginx
|
||||
nginx_config_file: "{{ nginx_base_path }}/nginx.conf"
|
||||
|
||||
nginx_container_name: nginx
|
||||
nginx_container_image_reference: >-
|
||||
{{
|
||||
nginx_container_image_repository
|
||||
+ ':' + (nginx_container_image_tag
|
||||
| default(nginx_version
|
||||
+ (('-' + nginx_flavour) if nginx_flavour is defined else ''), true))
|
||||
}}
|
||||
nginx_container_image_repository: >-
|
||||
{{
|
||||
(
|
||||
container_registries[nginx_container_image_registry]
|
||||
| default(nginx_container_image_registry)
|
||||
)
|
||||
+ '/'
|
||||
+ nginx_container_image_namespace | default('')
|
||||
+ nginx_container_image_name
|
||||
}}
|
||||
nginx_container_image_registry: "docker.io"
|
||||
nginx_container_image_name: "nginx"
|
||||
nginx_container_image_tag: ~
|
||||
|
||||
nginx_container_restart_policy: "unless-stopped"
|
||||
nginx_container_volumes:
|
||||
- "{{ nginx_config_file }}:/etc/nginx/conf.d/nginx.conf:ro"
|
||||
|
@ -1,8 +0,0 @@
|
||||
---
|
||||
|
||||
- name: Ensure nginx container '{{ nginx_container_name }}' is restarted
|
||||
community.docker.docker_container:
|
||||
name: "{{ nginx_container_name }}"
|
||||
state: started
|
||||
restart: true
|
||||
listen: restart-nginx
|
@ -1,37 +0,0 @@
|
||||
---
|
||||
|
||||
- name: Ensure base path '{{ nginx_base_path }}' exists
|
||||
ansible.builtin.file:
|
||||
path: "{{ nginx_base_path }}"
|
||||
state: directory
|
||||
mode: 0755
|
||||
|
||||
- name: Ensure nginx config file is templated
|
||||
ansible.builtin.copy:
|
||||
dest: "{{ nginx_config_file }}"
|
||||
content: "{{ nginx_config }}"
|
||||
mode: 0640
|
||||
notify:
|
||||
- restart-nginx
|
||||
|
||||
- name: Ensure docker container image is present
|
||||
community.docker.docker_image:
|
||||
name: "{{ nginx_container_image_reference }}"
|
||||
state: present
|
||||
source: pull
|
||||
force_source: "{{ nginx_container_image_tag is defined and nginx_container_image_tag | string != '' }}"
|
||||
|
||||
- name: Ensure docker container '{{ nginx_container_name }}' is running
|
||||
community.docker.docker_container:
|
||||
name: "{{ nginx_container_name }}"
|
||||
image: "{{ nginx_container_image_reference }}"
|
||||
env: "{{ nginx_container_env | default(omit, true) }}"
|
||||
user: "{{ nginx_container_user | default(omit, true) }}"
|
||||
ports: "{{ nginx_container_ports | default(omit, true) }}"
|
||||
labels: "{{ nginx_container_labels | default(omit, true) }}"
|
||||
volumes: "{{ nginx_container_volumes | default(omit, true) }}"
|
||||
etc_hosts: "{{ nginx_container_etc_hosts | default(omit, true) }}"
|
||||
networks: "{{ nginx_container_networks | default(omit, true) }}"
|
||||
purge_networks: "{{ nginx_container_purge_networks | default(omit, true) }}"
|
||||
restart_policy: "{{ nginx_container_restart_policy }}"
|
||||
state: started
|
Loading…
Reference in New Issue
Block a user