--- - name: "Deployer - Certbot - Renew Certificates" command: "certbot renew" register: task changed_when: task.stdout.find("No renewals were attempted.") == -1 tags: - certbot - tls - name: "Deployer - Certbot - Copy Certificates" copy: src: "/etc/letsencrypt/live/mkj/" dest: "/root/certs/mkj/" follow: true register: task tags: - certbot - tls - name: "Deployer - MariaDB - Create Folder" file: path: "/root/mariadb" state: directory tags: - mariadb - name: "Deployer - MariaDB - Pull Image" containers.podman.podman_image: name: docker.io/library/mariadb tag: latest force: on register: deployerTask101 - name: "Deployer - MariaDB - Run Container" containers.podman.podman_container: name: mariadb image: docker.io/library/mariadb:latest state: started restart: on network: host volumes: - "/root/mariadb:/var/lib/mysql" env: MYSQL_ROOT_PASSWORD: "{{ secrets.mariadb.users.root.password }}" restart_policy: always register: deployerTask102 when: - (deployerTask101 is defined and deployerTask101.changed) or deployerTask101 is undefined tags: - mariadb - name: "Deployer - MariaDB - Wait" wait_for: host: "127.0.0.1" port: "3306" delay: 10 when: - (deployerTask102 is defined and deployerTask102.changed) or deployerTask102 is undefined tags: - mariadb - name: "Deployer - MariaDB - Upgrade" containers.podman.podman_container_exec: name: mariadb command: "mariadb-upgrade --host=127.0.0.1 --user=root --password={{ secrets.mariadb.users.root.password }}" register: task ignore_errors: yes changed_when: - task.stdout is defined - task.stdout.find("This installation of MariaDB is already upgraded") == -1 when: - (deployerTask102 is defined and deployerTask102.changed) or deployerTask102 is undefined tags: - mariadb - name: "Deployer - MariaDB - Create Users" mysql_user: login_host: "127.0.0.1" login_user: root login_password: "{{ secrets.mariadb.users.root.password }}" name: "mkj" host: "%" password: "{{ secrets.mariadb.users.mkj.password }}" priv: "mkj.*:ALL" vars: ansible_python_interpreter: "/opt/ansible/bin/python3" when: - (deployerTask102 is defined and deployerTask102.changed) or deployerTask102 is undefined tags: - mariadb - name: "Deployer - MariaDB - Create Database" mysql_db: login_host: "127.0.0.1" login_user: "mkj" login_password: "{{ secrets.mariadb.users.mkj.password }}" name: "mkj" vars: ansible_python_interpreter: "/opt/ansible/bin/python3" when: - (deployerTask102 is defined and deployerTask102.changed) or deployerTask102 is undefined tags: - mariadb - name: "Deployer - Nginx - Configure - Create Folder" file: path: "/root/nginx/" state: directory tags: - nginx - name: "Deployer - Nginx - Configure - Create Subfolders" file: dest: '/root/nginx/{{ item.path }}' state: directory with_filetree: './files/nginx/' loop_control: label: "{{ item.path }}" when: - item.state == 'directory' tags: - nginx - name: "Deployer - Nginx - Configure - Generating & Transferring Files" template: src: '{{ item.src }}' dest: '/root/nginx/{{ item.path }}' with_filetree: './files/nginx/' loop_control: label: "{{ item.path }}" when: - item.state == 'file' tags: - nginx - name: "Deployer - Nginx - Pull Image" containers.podman.podman_image: name: docker.io/library/nginx tag: latest force: on register: deployerTask3 - name: "Deployer - Nginx - Run Container" containers.podman.podman_container: name: nginx image: docker.io/library/nginx:latest state: started recreate: on network: host volumes: - "/root/nginx/html:/usr/share/nginx/html:ro" - "/root/nginx/config.conf:/etc/nginx/nginx.conf:ro" - "/root/nginx/conf/:/etc/nginx/conf.d/:ro" - "/root/certs/:/etc/nginx/certs/:ro" restart_policy: always when: - (deployerTask3 is defined and deployerTask3.changed) or deployerTask3 is undefined tags: - nginx - name: "Deployer - Wordpress - Create Folder" file: path: "{{ path }}" state: directory vars: paths: - /root/wordpress/data/wp-content/plugins - /root/wordpress/data/wp-content/uploads loop: "{{ paths }}" loop_control: label: "{{ path }}" loop_var: "path" tags: - wordpress - name: "Deployer - Wordpress - Configure - Create Subfolders" file: dest: '/root/wordpress/{{ item.path }}' state: directory with_filetree: './files/wordpress/' loop_control: label: "{{ item.path }}" when: - item.state == 'directory' tags: - wordpress - name: "Deployer - Wordpress - Configure - Generating & Transferring Files" template: src: '{{ item.src }}' dest: '/root/wordpress/{{ item.path }}' with_filetree: './files/wordpress/' loop_control: label: "{{ item.path }}" when: - item.state == 'file' tags: - wordpress - name: "Deployer - Wordpress - Configure - Theme - Git Operations" git: repo: https://github.com/MatteZ02/wp-smarter-inside.git dest: /root/wordpress/data/wp-content/themes/smarter-inside version: main tags: - wordpress - name: "Deployer - Wordpress - Pull Image" containers.podman.podman_image: name: docker.io/library/wordpress tag: latest force: on register: deployerTask4 - name: "Deployer - Wordpress - Run Container" containers.podman.podman_container: name: wordpress image: docker.io/library/wordpress:latest state: started recreate: on network: host volumes: - "/root/wordpress/data/wp-content/themes/smarter-inside:/var/www/html/wp-content/themes/smarter-inside" - "/root/wordpress/data/wp-content/plugins:/var/www/html/wp-content/plugins" - "/root/wordpress/data/wp-content/uploads:/var/www/html/wp-content/uploads" - "/root/wordpress/conf/000-default.conf:/etc/apache2/sites-enabled/000-default.conf" - "/root/wordpress/conf/ports.conf:/etc/apache2/ports.conf" env: WORDPRESS_DB_HOST: "127.0.0.1" WORDPRESS_DB_USER: "mkj" WORDPRESS_DB_PASSWORD: "{{ secrets.mariadb.users.mkj.password }}" WORDPRESS_DB_NAME: "mkj" WORDPRESS_AUTH_KEY: "{{ secrets.wordpress['keys'].auth }}" WORDPRESS_SECURE_AUTH_KEY: "{{ secrets.wordpress['keys'].secure_auth }}" WORDPRESS_LOGGED_IN_KEY: "{{ secrets.wordpress['keys'].logged_in }}" WORDPRESS_NONCE_KEY: "{{ secrets.wordpress['keys'].nonce }}" WORDPRESS_AUTH_SALT: "{{ secrets.wordpress.salt.auth }}" WORDPRESS_SECURE_AUTH_SALT: "{{ secrets.wordpress.salt.secure_auth }}" WORDPRESS_LOGGED_IN_SALT: "{{ secrets.wordpress.salt.logged_in }}" WORDPRESS_NONCE_SALT: "{{ secrets.wordpress.salt.nonce }}" restart_policy: always when: - (deployerTask4 is defined and deployerTask4.changed) or deployerTask4 is undefined tags: - wordpress