netz39-infra-ansible/tau.yml

---
- hosts: tau.netz39.de
  become: true

  vars:
    ansible_python_interpreter: /usr/bin/python3

    docker_registry_port: 5000 # this is the reg standard port
    docker_registry_domain: "docker.n39.eu"

  roles:
    - role: docker_setup
    - role: apache

  tasks:
    - name: Setup docker network
      docker_network:
        name: dockernet
        driver: bridge
        ipam_config:
          - subnet: 192.168.0.0/24
            gateway: 192.168.0.1
        state: present

    - name: Setup Dehydrated
      include_role:
        name: ansible-role-dehydrated
      vars:
        dehydrated_contact_email: "{{ server_admin }}"
        dehydrated_domains:
          - name: "reservierung.netz39.de"
            deploy_challenge_hook: "/bin/systemctl restart apache2"
          - name: "testredmine.netz39.de"
            deploy_challenge_hook: "/bin/systemctl restart apache2"
          - name: "mysql.adm.netz39.de"
            deploy_challenge_hook: "/bin/systemctl restart apache2"
          - name: "{{ docker_registry_domain }}"
            deploy_challenge_hook: "/bin/systemctl restart apache2"

    - name: Setup forward site reservierung.netz39.de
      include_role:
        name: setup-http-site-forward
      vars:
        site_name: reservierung.netz39.de
        forward_to: https://codimd.pingtech.de/rQqQ5kv2Rhmxs8S6anVSjg

    - name: Setup proxy site testredmine.netz39.de
      include_role:
        name: setup-http-site-proxy
      vars:
        site_name: testredmine.netz39.de
        proxy_port: 9004

    - name: Setup phpmyadmin
      docker_container:
        name: phpmyadmin
        state: started
        image: phpmyadmin:5.0
        networks_cli_compatible: true
        networks:
          - name: dockernet
        restart_policy: always
        env:
          PMA_HOST: 192.168.0.1
          MYSQL_ROOT_PASSWORD: "{{ mysql_root_pw }}"
          PMA_ABSOLUTE_URI: "https://mysql.adm.netz39.de"
        published_ports:
          - 9001:80

    - name: Setup proxy site mysql.adm.netz39.de
      include_role:
        name: setup-http-site-proxy
      vars:
        site_name: mysql.adm.netz39.de
        proxy_port: 9001


    - name: Check if Docker Registry auth dir exists
      ansible.builtin.stat:
        path: "/srv/docker/registry/auth"
      register: docker_dir
    - name: Fail if docker registry data dir does not exist
      ansible.builtin.fail:
        msg: "Docker Registry auth dir is missing, please restore from the backup!"
      when: not docker_dir.stat.exists
    - name: Ensure the Docker Registry data directory exists
      # This may not be part of the backup
      file:
        path: "/srv/docker/registry/data"

    - name: Setup Docker Registry Container
      docker_container:
        name: registry
        image: "registry:2"
        pull: true
        state: started
        restart_policy: unless-stopped
        detach: yes
        ports:
        - 127.0.0.1:{{ docker_registry_port }}:{{ docker_registry_port }}
        env:
          REGISTRY_HTTP_HOST: "https://{{ docker_registry_domain }}"
          REGISTRY_AUTH_HTPASSWD_REALM: "Netz39 Docker Registry"
          REGISTRY_AUTH_HTPASSWD_PATH: "/auth/htpasswd"
        volumes:
        - "/srv/docker/registry/data:/var/lib/registry:rw"
        - "/srv/docker/registry/auth:/auth:rw"

    - name: Setup proxy site for the Docker Registry
      include_role:
        name: setup-http-site-proxy
      vars:
        site_name: "{{ docker_registry_domain }}"
        proxy_port: "{{ docker_registry_port }}"