--- - hosts: tau.netz39.de become: true vars: ansible_python_interpreter: /usr/bin/python3 docker_registry_port: 5000 # this is the reg standard port docker_registry_domain: "docker.n39.eu" roles: - role: docker_setup - role: apache tasks: - name: Setup docker network docker_network: name: dockernet driver: bridge ipam_config: - subnet: 192.168.0.0/24 gateway: 192.168.0.1 state: present - name: Setup Dehydrated include_role: name: ansible-role-dehydrated vars: dehydrated_contact_email: "{{ server_admin }}" dehydrated_domains: - name: "testredmine.netz39.de" deploy_challenge_hook: "/bin/systemctl restart apache2" - name: "mysql.adm.netz39.de" deploy_challenge_hook: "/bin/systemctl restart apache2" - name: "{{ docker_registry_domain }}" deploy_challenge_hook: "/bin/systemctl restart apache2" - name: Setup proxy site testredmine.netz39.de include_role: name: setup-http-site-proxy vars: site_name: testredmine.netz39.de proxy_port: 9004 - name: Setup phpmyadmin docker_container: name: phpmyadmin state: started image: phpmyadmin:5.0 networks_cli_compatible: true networks: - name: dockernet restart_policy: always env: PMA_HOST: 192.168.0.1 MYSQL_ROOT_PASSWORD: "{{ mysql_root_pw }}" PMA_ABSOLUTE_URI: "https://mysql.adm.netz39.de" published_ports: - 9001:80 - name: Setup proxy site mysql.adm.netz39.de include_role: name: setup-http-site-proxy vars: site_name: mysql.adm.netz39.de proxy_port: 9001 - name: Check if Docker Registry auth dir exists ansible.builtin.stat: path: "/srv/docker/registry/auth" register: docker_dir - name: Fail if docker registry data dir does not exist ansible.builtin.fail: msg: "Docker Registry auth dir is missing, please restore from the backup!" when: not docker_dir.stat.exists - name: Ensure the Docker Registry data directory exists # This may not be part of the backup file: path: "/srv/docker/registry/data" state: directory - name: Setup Docker Registry Container docker_container: name: registry image: "registry:2" pull: true state: started restart_policy: unless-stopped detach: yes ports: - 127.0.0.1:{{ docker_registry_port }}:{{ docker_registry_port }} env: REGISTRY_HTTP_HOST: "https://{{ docker_registry_domain }}" REGISTRY_AUTH_HTPASSWD_REALM: "Netz39 Docker Registry" REGISTRY_AUTH_HTPASSWD_PATH: "/auth/htpasswd" volumes: - "/srv/docker/registry/data:/var/lib/registry:rw" - "/srv/docker/registry/auth:/auth:rw" - name: Setup proxy site for the Docker Registry include_role: name: setup-http-site-proxy vars: site_name: "{{ docker_registry_domain }}" proxy_port: "{{ docker_registry_port }}"