mattez02-infra/tasks/deployer.yml

195 lines
5.4 KiB
YAML
Raw Normal View History

2024-05-05 15:10:54 +00:00
---
- name: "Deployer - Certbot - Renew Certificates"
command: "certbot renew"
register: task
changed_when: task.stdout.find("No renewals were attempted.") == -1
tags:
- certbot
- tls
- name: "Deployer - Certbot - Copy Certificates"
copy:
src: "/etc/letsencrypt/live/mkj/"
dest: "/root/certs/mkj/"
follow: true
register: task
tags:
- certbot
- tls
2024-05-05 16:22:58 +00:00
- name: "Deployer - MariaDB - Create Folder"
file:
path: "/root/mariadb"
state: directory
tags:
- mariadb
2024-05-05 15:10:54 +00:00
- name: "Deployer - MariaDB - Pull Image"
containers.podman.podman_image:
2024-05-07 11:10:38 +00:00
name: docker.io/library/mariadb
2024-05-05 15:10:54 +00:00
tag: latest
force: on
register: deployerTask101
- name: "Deployer - MariaDB - Run Container"
containers.podman.podman_container:
name: mariadb
2024-05-07 11:10:38 +00:00
image: docker.io/library/mariadb:latest
2024-05-05 15:10:54 +00:00
state: started
restart: on
network: host
volumes:
- "/root/mariadb:/var/lib/mysql"
env:
2024-05-05 15:38:57 +00:00
MYSQL_ROOT_PASSWORD: "{{ secrets.mariadb.users.root.password }}"
2024-05-07 11:10:38 +00:00
restart_policy: always
2024-05-05 15:10:54 +00:00
register: deployerTask102
when:
- (deployerTask101 is defined and deployerTask101.changed) or deployerTask101 is undefined
tags:
- mariadb
- name: "Deployer - MariaDB - Wait"
wait_for:
host: "127.0.0.1"
port: "3306"
delay: 10
when:
- (deployerTask102 is defined and deployerTask102.changed) or deployerTask102 is undefined
tags:
- mariadb
- name: "Deployer - MariaDB - Upgrade"
containers.podman.podman_container_exec:
name: mariadb
2024-05-05 15:38:57 +00:00
command: "mariadb-upgrade --host=127.0.0.1 --user=root --password={{ secrets.mariadb.users.root.password }}"
2024-05-05 15:10:54 +00:00
register: task
ignore_errors: yes
changed_when:
- task.stdout is defined
- task.stdout.find("This installation of MariaDB is already upgraded") == -1
when:
- (deployerTask102 is defined and deployerTask102.changed) or deployerTask102 is undefined
tags:
- mariadb
- name: "Deployer - MariaDB - Create Users"
mysql_user:
login_host: "127.0.0.1"
login_user: root
2024-05-05 15:38:57 +00:00
login_password: "{{ secrets.mariadb.users.root.password }}"
2024-05-05 15:10:54 +00:00
name: "mkj"
host: "%"
2024-05-05 15:38:57 +00:00
password: "{{ secrets.mariadb.users.mkj.password }}"
2024-05-05 15:10:54 +00:00
priv: "mkj.*:ALL"
vars:
ansible_python_interpreter: "/opt/ansible/bin/python3"
when:
- (deployerTask102 is defined and deployerTask102.changed) or deployerTask102 is undefined
tags:
- mariadb
- name: "Deployer - MariaDB - Create Database"
mysql_db:
login_host: "127.0.0.1"
login_user: "mkj"
2024-05-05 15:38:57 +00:00
login_password: "{{ secrets.mariadb.users.mkj.password }}"
2024-05-05 15:10:54 +00:00
name: "mkj"
vars:
ansible_python_interpreter: "/opt/ansible/bin/python3"
when:
- (deployerTask102 is defined and deployerTask102.changed) or deployerTask102 is undefined
tags:
- mariadb
- name: "Deployer - Nginx - Configure - Create Folder"
file:
path: "/root/nginx/"
state: directory
tags:
- nginx
- name: "Deployer - Nginx - Configure - Create Subfolders"
file:
dest: '/root/nginx/{{ item.path }}'
state: directory
with_filetree: './files/nginx/'
loop_control:
label: "{{ item.path }}"
when:
- item.state == 'directory'
tags:
- nginx
- name: "Deployer - Nginx - Configure - Generating & Transferring Files"
template:
src: '{{ item.src }}'
dest: '/root/nginx/{{ item.path }}'
with_filetree: './files/nginx/'
loop_control:
label: "{{ item.path }}"
when:
- item.state == 'file'
tags:
- nginx
- name: "Deployer - Nginx - Pull Image"
containers.podman.podman_image:
2024-05-07 11:10:38 +00:00
name: docker.io/library/nginx
2024-05-05 15:10:54 +00:00
tag: latest
force: on
register: deployerTask3
- name: "Deployer - Nginx - Run Container"
containers.podman.podman_container:
name: nginx
2024-05-07 11:10:38 +00:00
image: docker.io/library/nginx:latest
2024-05-05 15:10:54 +00:00
state: started
recreate: on
network: host
volumes:
- "/root/nginx/html:/usr/share/nginx/html:ro"
- "/root/nginx/config.conf:/etc/nginx/nginx.conf:ro"
- "/root/nginx/conf/:/etc/nginx/conf.d/:ro"
- "/root/certs/:/etc/nginx/certs/:ro"
restart_policy: always
when:
- (deployerTask3 is defined and deployerTask3.changed) or deployerTask3 is undefined
tags:
- nginx
2024-05-07 11:10:38 +00:00
- name: "Deployer - Wordpress - Pull Image"
containers.podman.podman_image:
name: docker.io/library/wordpress
tag: latest
force: on
register: deployerTask4
- name: "Deployer - Workpress - Run Container"
containers.podman.podman_container:
name: wordpress
image: docker.io/library/wordpress:latest
state: started
recreate: on
network: host
volumes:
- "/var/www/html/wp-content/:/var/www/html/wp-content/"
env:
WORDPRESS_DB_HOST: "127.0.0.1"
WORDPRESS_DB_USER: "mkj"
WORDPRESS_DB_PASSWORD: "{{ secrets.mariadb.users.mkj.password }}"
WORDPRESS_DB_NAME: "mkj"
WORDPRESS_AUTH_KEY: "{{ secrets.wordpress.keys.auth }}"
WORDPRESS_SECURE_AUTH_KEY: "{{ secrets.wordpress.keys.secure_auth }}"
WORDPRESS_LOGGED_IN_KEY: "{{ secrets.wordpress.keys.logged_in }}"
WORDPRESS_NONCE_KEY: "{{ secrets.wordpress.keys.nonce }}"
WORDPRESS_AUTH_SALT: "{{ secrets.wordpress.salt.auth }}"
WORDPRESS_SECURE_AUTH_SALT: "{{ secrets.wordpress.salt.secure_auth }}"
WORDPRESS_LOGGED_IN_SALT: "{{ secrets.wordpress.salt.logged_in }}"
WORDPRESS_NONCE_SALT: "{{ secrets.wordpress.salt.nonce }}"
restart_policy: always
when:
- (deployerTask4 is defined and deployerTask4.changed) or deployerTask4 is undefined
tags:
- wordpress