85 lines
1.9 KiB
YAML
85 lines
1.9 KiB
YAML
---
|
|
- hosts: all
|
|
become: true
|
|
|
|
vars:
|
|
ansible_python_interpreter: /usr/bin/python3
|
|
|
|
roles:
|
|
- role: ansible.timezone
|
|
|
|
tasks:
|
|
- name: Update and clean package cache
|
|
apt:
|
|
update_cache: true
|
|
cache_valid_time: 3600
|
|
autoclean: true
|
|
|
|
- name: Ensure unattended-upgrades is installed and up to date
|
|
apt:
|
|
name: unattended-upgrades
|
|
state: latest
|
|
|
|
- name: Setup unattended-upgrades
|
|
include_role:
|
|
name: ansible-role-unattended-upgrades
|
|
vars:
|
|
unattended_origins_patterns:
|
|
- 'origin=Debian,archive=buster-security'
|
|
- 'o=Debian,a=buster-updates'
|
|
unattended_package_blacklist: [cowsay]
|
|
unattended_mail: 'root'
|
|
|
|
- name: Setup users
|
|
include_role:
|
|
name: users
|
|
|
|
|
|
|
|
- hosts: tau.netz39.de
|
|
become: true
|
|
|
|
vars:
|
|
ansible_python_interpreter: /usr/bin/python3
|
|
|
|
docker_compose_version: "1.25.4"
|
|
docker_compose_path: /usr/local/bin/docker-compose
|
|
|
|
roles:
|
|
- role: install-docker
|
|
|
|
tasks:
|
|
- name: Setup docker network
|
|
docker_network:
|
|
name: dockernet
|
|
driver: bridge
|
|
ipam_config:
|
|
- subnet: 192.168.0.0/24
|
|
gateway: 192.168.0.1
|
|
state: present
|
|
|
|
- name: Setup httpd
|
|
include_tasks: tasks/httpd.yml
|
|
|
|
- name: Setup phpmyadmin
|
|
docker_container:
|
|
name: phpmyadmin
|
|
state: started
|
|
image: phpmyadmin:5.0
|
|
networks_cli_compatible: true
|
|
networks:
|
|
- name: dockernet
|
|
restart_policy: always
|
|
env:
|
|
PMA_HOST: 192.168.0.1
|
|
MYSQL_ROOT_PASSWORD: "{{ mysql_root_pw }}"
|
|
PMA_ABSOLUTE_URI: "https://mysql.adm.netz39.de"
|
|
published_ports:
|
|
- 9001:80
|
|
|
|
- name: Setup proxy site mysql.adm.netz39.de
|
|
include_role:
|
|
name: setup-http-site-proxy
|
|
vars:
|
|
site_name: mysql.adm.netz39.de
|
|
proxy_port: 9001
|