feat(redis): add ansible role

roles/redis/README.md

@@ -8,3 +8,21 @@ their license to the "Serverside public license" (SSPL).
 Setting the `redis_version` to higher than `7.2.4` means you will deploy
 the SSPL-licensed version to redis.
 
+## Configuration
+
+All container-related options to the `docker_container` ansible module
+are available under the `redis_container_*` namespace, for example use
+`redis_container_ports: [ '127.0.0.1:6379:6370/tcp' ]` to map the
+containers port 6379 to the docker host.
+
+Redis-related config options are either available in the `redis_config_*`
+namespace or can be specified by setting them as a dictionary in
+`redis_config`
+
+### Authentication and authorization
+
+Redis ACL can be specified as an array in the `redis_config_user` variable
+ - see [the redis documentation](https://github.com/redis/redis/blob/unstable/redis.conf#L869)
+for the format. Per default, the `default` user is able to connect without
+any password. To require a password and use a different user, override
+the variable, for example `redis_config_user: [ 'username on +@all -DEBUG ~* >secret' ]`.

roles/redis/defaults/main/config.yml

@@ -5,7 +5,7 @@ redis_config_bind:
 redis_config_protected_mode: true
 redis_config_port: 6379
 redis_config_user:
-  - "default on -DEBUG +@all ~* nopass"
+  - "default on +@all -DEBUG ~* nopass"
 redis_config_databases: 16
 redis_config_dbfilename: dump.rdb