107 lines
3.2 KiB
YAML
107 lines
3.2 KiB
YAML
---
|
|
- hosts: tau.netz39.de
|
|
become: true
|
|
|
|
vars:
|
|
ansible_python_interpreter: /usr/bin/python3
|
|
|
|
docker_registry_port: 5000 # this is the reg standard port
|
|
docker_registry_domain: "docker.n39.eu"
|
|
|
|
roles:
|
|
- role: docker_setup
|
|
- role: apache
|
|
- role: penguineer.dehydrated_cron
|
|
|
|
tasks:
|
|
- name: Setup docker network
|
|
docker_network:
|
|
name: dockernet
|
|
driver: bridge
|
|
ipam_config:
|
|
- subnet: 192.168.0.0/24
|
|
gateway: 192.168.0.1
|
|
state: present
|
|
|
|
- name: Setup Dehydrated
|
|
include_role:
|
|
name: ansible-role-dehydrated
|
|
vars:
|
|
dehydrated_contact_email: "{{ server_admin }}"
|
|
dehydrated_domains:
|
|
- name: "testredmine.netz39.de"
|
|
deploy_challenge_hook: "/bin/systemctl restart apache2"
|
|
- name: "mysql.adm.netz39.de"
|
|
deploy_challenge_hook: "/bin/systemctl restart apache2"
|
|
- name: "{{ docker_registry_domain }}"
|
|
deploy_challenge_hook: "/bin/systemctl restart apache2"
|
|
|
|
- name: Setup proxy site testredmine.netz39.de
|
|
include_role:
|
|
name: setup-http-site-proxy
|
|
vars:
|
|
site_name: testredmine.netz39.de
|
|
proxy_port: 9004
|
|
|
|
- name: Setup phpmyadmin
|
|
docker_container:
|
|
name: phpmyadmin
|
|
state: started
|
|
image: phpmyadmin:5.0
|
|
networks_cli_compatible: true
|
|
networks:
|
|
- name: dockernet
|
|
restart_policy: always
|
|
env:
|
|
PMA_HOST: 192.168.0.1
|
|
MYSQL_ROOT_PASSWORD: "{{ mysql_root_pw }}"
|
|
PMA_ABSOLUTE_URI: "https://mysql.adm.netz39.de"
|
|
published_ports:
|
|
- 9001:80
|
|
|
|
- name: Setup proxy site mysql.adm.netz39.de
|
|
include_role:
|
|
name: setup-http-site-proxy
|
|
vars:
|
|
site_name: mysql.adm.netz39.de
|
|
proxy_port: 9001
|
|
|
|
|
|
- name: Check if Docker Registry auth dir exists
|
|
ansible.builtin.stat:
|
|
path: "/srv/docker/registry/auth"
|
|
register: docker_dir
|
|
- name: Fail if docker registry data dir does not exist
|
|
ansible.builtin.fail:
|
|
msg: "Docker Registry auth dir is missing, please restore from the backup!"
|
|
when: not docker_dir.stat.exists
|
|
- name: Ensure the Docker Registry data directory exists
|
|
# This may not be part of the backup
|
|
file:
|
|
path: "/srv/docker/registry/data"
|
|
state: directory
|
|
|
|
- name: Setup Docker Registry Container
|
|
docker_container:
|
|
name: registry
|
|
image: "registry:2"
|
|
pull: true
|
|
state: started
|
|
restart_policy: unless-stopped
|
|
detach: yes
|
|
ports:
|
|
- 127.0.0.1:{{ docker_registry_port }}:{{ docker_registry_port }}
|
|
env:
|
|
REGISTRY_HTTP_HOST: "https://{{ docker_registry_domain }}"
|
|
REGISTRY_AUTH_HTPASSWD_REALM: "Netz39 Docker Registry"
|
|
REGISTRY_AUTH_HTPASSWD_PATH: "/auth/htpasswd"
|
|
volumes:
|
|
- "/srv/docker/registry/data:/var/lib/registry:rw"
|
|
- "/srv/docker/registry/auth:/auth:rw"
|
|
|
|
- name: Setup proxy site for the Docker Registry
|
|
include_role:
|
|
name: setup-http-site-proxy
|
|
vars:
|
|
site_name: "{{ docker_registry_domain }}"
|
|
proxy_port: "{{ docker_registry_port }}"
|