klausdieter/netz39-infra-ansible
1
0
Fork 0
forked from Netz39_Admin/netz39-infra-ansible
Code Pull requests Activity

Merge pull request '🚨 Fix linter warnings of type 'fqcn'' () from alex/netz39-infra-ansible:lint into master

Browse source 
Reviewed-on: 
Reviewed-by: Stefan Haun <tux@netz39.de>
This commit is contained in:
Alexander Dahl 2025-03-12 17:59:47 +01:00
commit e1b9349f19
23 changed files with 102 additions and 102 deletions
group-all.ymlhost-krypton.ymlhost-platon.ymlhost-pottwal.ymlhost-radon.ymlhost-tau.ymlhost-unicorn.ymlhost-wittgenstein.yml
roles
apache
handlers
main.yml
tasks
main.yml
apache_letsencrypt/handlers
main.yml
cleanuri/tasks
main.yml
dd24_dyndns_cron/tasks
main.yml
desec_dyndns_cron/tasks
main.yml
nfs_host/handlers
main.yml
nginx_https_ingress
handlers
main.yml
tasks
main.yml
setup_http_site_forward
handlers
main.yml
tasks
main.yml
setup_http_site_proxy
handlers
main.yml
tasks
main.yml
users
handlers
main.yml
tasks
main.yml

6
group-all.yml
View file

@ -14,19 +14,19 @@
tasks: tasks:
- name: Update and clean package cache - name: Update and clean package cache
apt: ansible.builtin.apt:
update_cache: true update_cache: true
cache_valid_time: 3600 cache_valid_time: 3600
autoclean: true autoclean: true
changed_when: false changed_when: false
- name: Ensure unattended-upgrades is installed and up to date - name: Ensure unattended-upgrades is installed and up to date
apt: ansible.builtin.apt:
name: unattended-upgrades name: unattended-upgrades
state: present state: present
- name: Setup unattended-upgrades - name: Setup unattended-upgrades
include_role: ansible.builtin.include_role:
name: hifis.unattended_upgrades name: hifis.unattended_upgrades
vars: vars:
unattended_origins_patterns: unattended_origins_patterns:

10
host-krypton.yml
View file

@ -33,13 +33,13 @@
tasks: tasks:
# - name: Setup dehydrated challenge endpoint for {{ openldap_domain }} # - name: Setup dehydrated challenge endpoint for {{ openldap_domain }}
# include_role: # ansible.builtin.include_role:
# name: setup-http-dehydrated # name: setup-http-dehydrated
# vars: # vars:
# site_name: "{{ openldap_domain }}" # site_name: "{{ openldap_domain }}"
- name: Ensure openLDAP directories are present. - name: Ensure openLDAP directories are present.
file: ansible.builtin.file:
path: "{{ item.path }}" path: "{{ item.path }}"
mode: "0755" mode: "0755"
state: directory state: directory
@ -50,7 +50,7 @@
- path: "{{ dehydrated_certs_dir }}/{{ openldap_domain }}" - path: "{{ dehydrated_certs_dir }}/{{ openldap_domain }}"
- name: Ensure container for openLDAP is running. - name: Ensure container for openLDAP is running.
docker_container: community.docker.docker_container:
name: openLDAP name: openLDAP
image: osixia/openldap:1.5.0 image: osixia/openldap:1.5.0
detach: yes detach: yes
@ -115,7 +115,7 @@
- name: Ensure container for entities validation service is running - name: Ensure container for entities validation service is running
docker_container: community.docker.docker_container:
name: entities_validation_svc name: entities_validation_svc
image: netz39/entities_validation_svc:v1.0.4 image: netz39/entities_validation_svc:v1.0.4
pull: true pull: true
@ -128,7 +128,7 @@
TZ: "{{ timezone }}" TZ: "{{ timezone }}"
- name: Setup proxy site entities-validation.svc.n39.eu - name: Setup proxy site entities-validation.svc.n39.eu
include_role: ansible.builtin.include_role:
name: setup_http_site_proxy name: setup_http_site_proxy
vars: vars:
site_name: entities-validation.svc.n39.eu site_name: entities-validation.svc.n39.eu

6
host-platon.yml
View file

@ -306,19 +306,19 @@
handlers: handlers:
- name: Restart mosquitto service - name: Restart mosquitto service
service: ansible.builtin.service:
name: mosquitto name: mosquitto
state: restarted state: restarted
enabled: yes enabled: yes
- name: Restart rsyslog - name: Restart rsyslog
service: ansible.builtin.service:
name: rsyslog name: rsyslog
state: restarted state: restarted
enabled: yes enabled: yes
- name: Restart asterisk - name: Restart asterisk
service: ansible.builtin.service:
name: asterisk name: asterisk
state: restarted state: restarted
enabled: yes enabled: yes

68
host-pottwal.yml
View file

@ -55,7 +55,7 @@
# If port 2222 is changed here, it must also be adapted # If port 2222 is changed here, it must also be adapted
# in the forgejo config file (see application volume)!! # in the forgejo config file (see application volume)!!
- name: Setup the docker container for forgejo - name: Setup the docker container for forgejo
docker_container: community.docker.docker_container:
name: forgejo name: forgejo
image: "{{ forgejo_image }}" image: "{{ forgejo_image }}"
pull: true pull: true
@ -81,7 +81,7 @@
tags: ["forgejo"] tags: ["forgejo"]
- name: Setup proxy site "{{ forgejo_domain_name }}" - name: Setup proxy site "{{ forgejo_domain_name }}"
include_role: ansible.builtin.include_role:
name: setup_http_site_proxy name: setup_http_site_proxy
vars: vars:
site_name: "{{ forgejo_domain_name }}" site_name: "{{ forgejo_domain_name }}"
@ -89,7 +89,7 @@
tags: ["forgejo"] tags: ["forgejo"]
- name: Ensure apt-cacher container is running - name: Ensure apt-cacher container is running
docker_container: community.docker.docker_container:
name: apt_cacher_ng name: apt_cacher_ng
image: mrtux/apt-cacher-ng:latest image: mrtux/apt-cacher-ng:latest
pull: true pull: true
@ -102,7 +102,7 @@
TZ: "{{ timezone }}" TZ: "{{ timezone }}"
- name: Setup docker network - name: Setup docker network
docker_network: community.docker.docker_network:
name: shlinknet name: shlinknet
state: present state: present
internal: true internal: true
@ -118,7 +118,7 @@
- shlink - shlink
- name: Ensure shlink database container is running - name: Ensure shlink database container is running
docker_container: community.docker.docker_container:
name: shlinkdb name: shlinkdb
image: postgres:16.8-alpine image: postgres:16.8-alpine
pull: true pull: true
@ -138,7 +138,7 @@
- shlink - shlink
- name: Ensure container for shlink is running - name: Ensure container for shlink is running
docker_container: community.docker.docker_container:
name: shlink name: shlink
image: "{{ shlink_image }}" image: "{{ shlink_image }}"
pull: true pull: true
@ -167,7 +167,7 @@
- shlink - shlink
- name: Setup proxy site {{ shlink_domain_name }} - name: Setup proxy site {{ shlink_domain_name }}
include_role: ansible.builtin.include_role:
name: setup_http_site_proxy name: setup_http_site_proxy
vars: vars:
site_name: "{{ shlink_domain_name }}" site_name: "{{ shlink_domain_name }}"
@ -235,7 +235,7 @@
- Restart prosody - Restart prosody
- name: Ensure container for prosody XMPP server is running - name: Ensure container for prosody XMPP server is running
docker_container: community.docker.docker_container:
name: prosody name: prosody
image: "{{ prosody_image }}" image: "{{ prosody_image }}"
pull: true pull: true
@ -257,7 +257,7 @@
- name: Ensure container for static XMPP website is running - name: Ensure container for static XMPP website is running
docker_container: community.docker.docker_container:
name: jabber-static-website name: jabber-static-website
image: "{{ prosody_web_image }}" image: "{{ prosody_web_image }}"
pull: true pull: true
@ -277,7 +277,7 @@
- name: Setup proxy site {{ prosody_domain_name }} - name: Setup proxy site {{ prosody_domain_name }}
# point to static website for now # point to static website for now
include_role: ansible.builtin.include_role:
name: setup_http_site_proxy name: setup_http_site_proxy
vars: vars:
site_name: "{{ prosody_domain_name }}" site_name: "{{ prosody_domain_name }}"
@ -299,7 +299,7 @@
- hedgedoc - hedgedoc
- name: Ensure the hedgedoc directories exist - name: Ensure the hedgedoc directories exist
file: ansible.builtin.file:
path: "{{ item.path }}" path: "{{ item.path }}"
mode: "{{ item.mode }}" mode: "{{ item.mode }}"
state: directory state: directory
@ -312,7 +312,7 @@
- hedgedoc - hedgedoc
- name: Setup docker network - name: Setup docker network
docker_network: community.docker.docker_network:
name: hedgedocnet name: hedgedocnet
state: present state: present
internal: true internal: true
@ -320,7 +320,7 @@
- hedgedoc - hedgedoc
- name: Install HedgeDoc database container - name: Install HedgeDoc database container
docker_container: community.docker.docker_container:
name: hedgedocdb name: hedgedocdb
image: "{{ hedgedoc_db_image }}" image: "{{ hedgedoc_db_image }}"
pull: true pull: true
@ -340,7 +340,7 @@
- hedgedoc - hedgedoc
- name: Ensure container for hedgedoc is running - name: Ensure container for hedgedoc is running
docker_container: community.docker.docker_container:
name: hedgedoc name: hedgedoc
image: "{{ hedgedoc_image }}" image: "{{ hedgedoc_image }}"
pull: true pull: true
@ -372,7 +372,7 @@
- hedgedoc - hedgedoc
- name: Setup proxy site "{{ hedgedoc_domain_name }}" - name: Setup proxy site "{{ hedgedoc_domain_name }}"
include_role: ansible.builtin.include_role:
name: setup_http_site_proxy name: setup_http_site_proxy
vars: vars:
site_name: "{{ hedgedoc_domain_name }}" site_name: "{{ hedgedoc_domain_name }}"
@ -381,7 +381,7 @@
- hedgedoc - hedgedoc
- name: Ensure the influxdb directories exist - name: Ensure the influxdb directories exist
file: ansible.builtin.file:
path: "{{ item }}" path: "{{ item }}"
mode: 0700 mode: 0700
state: directory state: directory
@ -391,7 +391,7 @@
- "{{ data_dir }}/influxdb/cfg" - "{{ data_dir }}/influxdb/cfg"
- name: Ensure container for influxdb is running - name: Ensure container for influxdb is running
docker_container: community.docker.docker_container:
name: influxdb name: influxdb
image: "{{ influxdb_image }}" image: "{{ influxdb_image }}"
pull: true pull: true
@ -411,7 +411,7 @@
- "{{ data_dir }}/influxdb/cfg:/etc/influxdb2" - "{{ data_dir }}/influxdb/cfg:/etc/influxdb2"
- name: Setup proxy site {{ influxdb_domain_name }} - name: Setup proxy site {{ influxdb_domain_name }}
include_role: ansible.builtin.include_role:
name: setup_http_site_proxy name: setup_http_site_proxy
vars: vars:
site_name: "{{ influxdb_domain_name }}" site_name: "{{ influxdb_domain_name }}"
@ -436,7 +436,7 @@
- redmine - redmine
- name: Setup Redmine docker network - name: Setup Redmine docker network
docker_network: community.docker.docker_network:
name: redminenet name: redminenet
state: present state: present
internal: true internal: true
@ -444,7 +444,7 @@
- redmine - redmine
- name: Setup Redmine MySQL container - name: Setup Redmine MySQL container
docker_container: community.docker.docker_container:
name: redminedb name: redminedb
image: "{{ redmine_mysql_image }}" image: "{{ redmine_mysql_image }}"
pull: true pull: true
@ -464,7 +464,7 @@
- redmine - redmine
- name: Setup Redmine container - name: Setup Redmine container
docker_container: community.docker.docker_container:
name: redmine name: redmine
image: "{{ redmine_image }}" image: "{{ redmine_image }}"
pull: true pull: true
@ -490,7 +490,7 @@
- redmine - redmine
- name: Setup proxy site "{{ redmine_domain_name }}" - name: Setup proxy site "{{ redmine_domain_name }}"
include_role: ansible.builtin.include_role:
name: setup_http_site_proxy name: setup_http_site_proxy
vars: vars:
site_name: "{{ redmine_domain_name }}" site_name: "{{ redmine_domain_name }}"
@ -499,7 +499,7 @@
- redmine - redmine
- name: Ensure the uptime-kuma directories exist - name: Ensure the uptime-kuma directories exist
file: ansible.builtin.file:
path: "{{ item }}" path: "{{ item }}"
mode: "0755" mode: "0755"
state: directory state: directory
@ -509,7 +509,7 @@
- uptimekuma - uptimekuma
- name: Ensure container for uptime-kuma is running - name: Ensure container for uptime-kuma is running
docker_container: community.docker.docker_container:
name: uptime-kuma name: uptime-kuma
image: "{{ uptimekuma_image }}" image: "{{ uptimekuma_image }}"
pull: true pull: true
@ -526,7 +526,7 @@
- uptimekuma - uptimekuma
- name: Setup proxy site "{{ uptimekuma_domain_name }}" - name: Setup proxy site "{{ uptimekuma_domain_name }}"
include_role: ansible.builtin.include_role:
name: setup_http_site_proxy name: setup_http_site_proxy
vars: vars:
site_name: "{{ uptimekuma_domain_name }}" site_name: "{{ uptimekuma_domain_name }}"
@ -535,7 +535,7 @@
- uptimekuma - uptimekuma
- name: Ensure the grafana directories exist - name: Ensure the grafana directories exist
file: ansible.builtin.file:
path: "{{ item.path }}" path: "{{ item.path }}"
owner: "{{ item.owner | default('root') }}" owner: "{{ item.owner | default('root') }}"
mode: "{{ item.mode }}" mode: "{{ item.mode }}"
@ -552,7 +552,7 @@
- grafana - grafana
- name: Ensure container for grafana is running - name: Ensure container for grafana is running
docker_container: community.docker.docker_container:
name: grafana name: grafana
image: "{{ grafana_image }}" image: "{{ grafana_image }}"
pull: true pull: true
@ -573,7 +573,7 @@
- grafana - grafana
- name: Setup proxy site "{{ grafana_domain_name }}" - name: Setup proxy site "{{ grafana_domain_name }}"
include_role: ansible.builtin.include_role:
name: setup_http_site_proxy name: setup_http_site_proxy
vars: vars:
site_name: "{{ grafana_domain_name }}" site_name: "{{ grafana_domain_name }}"
@ -583,7 +583,7 @@
- grafana - grafana
- name: Ensure the homebox directories exist - name: Ensure the homebox directories exist
file: ansible.builtin.file:
path: "{{ item.path }}" path: "{{ item.path }}"
owner: "{{ item.owner | default('root') }}" owner: "{{ item.owner | default('root') }}"
mode: "{{ item.mode }}" mode: "{{ item.mode }}"
@ -597,7 +597,7 @@
- homebox - homebox
- name: Ensure container for homebox is running - name: Ensure container for homebox is running
docker_container: community.docker.docker_container:
name: homebox name: homebox
image: "{{ homebox_image }}" image: "{{ homebox_image }}"
pull: true pull: true
@ -617,7 +617,7 @@
- homebox - homebox
- name: Setup proxy site {{ homebox_domain_name }} - name: Setup proxy site {{ homebox_domain_name }}
include_role: ansible.builtin.include_role:
name: setup_http_site_proxy name: setup_http_site_proxy
vars: vars:
site_name: "{{ homebox_domain_name }}" site_name: "{{ homebox_domain_name }}"
@ -627,7 +627,7 @@
- homebox - homebox
- name: Setup proxy site spaceapi.n39.eu - name: Setup proxy site spaceapi.n39.eu
template: ansible.builtin.template:
src: templates/pottwal/spaceapi-apache-site.j2 src: templates/pottwal/spaceapi-apache-site.j2
dest: /etc/apache2/sites-available/spaceapi.n39.eu.conf dest: /etc/apache2/sites-available/spaceapi.n39.eu.conf
mode: "0644" mode: "0644"
@ -656,7 +656,7 @@
restart: yes restart: yes
- name: Restart apache2 - name: Restart apache2
service: ansible.builtin.service:
name: apache2 name: apache2
state: restarted state: restarted
@ -664,6 +664,6 @@
ansible.builtin.shell: ansible.builtin.shell:
cmd: service cron reload cmd: service cron reload
# Use the shell call because the task sometimes has problems finding the service state # Use the shell call because the task sometimes has problems finding the service state
# service: # ansible.builtin.service:
# name: cron # name: cron
# state: restarted # state: restarted

26
host-radon.yml
View file

@ -38,7 +38,7 @@
tasks: tasks:
- name: Ensure the mosquitto directories exist - name: Ensure the mosquitto directories exist
file: ansible.builtin.file:
path: "{{ item }}" path: "{{ item }}"
mode: 0755 mode: 0755
state: directory state: directory
@ -50,7 +50,7 @@
- mosquitto - mosquitto
- name: Make sure mosquitto config is there - name: Make sure mosquitto config is there
template: ansible.builtin.template:
src: "templates/mosquitto.conf.j2" src: "templates/mosquitto.conf.j2"
dest: "{{ mosquitto_data }}/config/mosquitto.conf" dest: "{{ mosquitto_data }}/config/mosquitto.conf"
mode: 0644 mode: 0644
@ -59,7 +59,7 @@
- mosquitto - mosquitto
- name: Ensure mosquitto is running - name: Ensure mosquitto is running
docker_container: community.docker.docker_container:
name: mosquitto name: mosquitto
image: "{{ mosquitto_image }}" image: "{{ mosquitto_image }}"
pull: true pull: true
@ -89,7 +89,7 @@
when: not nodered_dir.stat.exists when: not nodered_dir.stat.exists
- name: Ensure nodered is running - name: Ensure nodered is running
docker_container: community.docker.docker_container:
name: nodered name: nodered
image: "{{ nodered_image }}" image: "{{ nodered_image }}"
pull: true pull: true
@ -109,7 +109,7 @@
restart_policy: unless-stopped restart_policy: unless-stopped
- name: Setup proxy site nodered.n39.eu - name: Setup proxy site nodered.n39.eu
include_role: ansible.builtin.include_role:
name: setup_http_site_proxy name: setup_http_site_proxy
vars: vars:
site_name: "nodered.n39.eu" site_name: "nodered.n39.eu"
@ -130,7 +130,7 @@
- rabbitmq - rabbitmq
- name: Ensure rabbitmq docker container is running - name: Ensure rabbitmq docker container is running
docker_container: community.docker.docker_container:
name: rabbitmq name: rabbitmq
image: "{{ rabbitmq_image }}" image: "{{ rabbitmq_image }}"
ports: ports:
@ -151,7 +151,7 @@
- rabbitmq - rabbitmq
- name: Setup proxy site rabbitmq.n39.eu - name: Setup proxy site rabbitmq.n39.eu
include_role: ansible.builtin.include_role:
name: setup_http_site_proxy name: setup_http_site_proxy
vars: vars:
site_name: "rabbitmq.n39.eu" site_name: "rabbitmq.n39.eu"
@ -160,7 +160,7 @@
- rabbitmq - rabbitmq
- name: Ensure Power Meter Pulse Gateway for 19i room is running - name: Ensure Power Meter Pulse Gateway for 19i room is running
docker_container: community.docker.docker_container:
name: pwr-meter-pulse-gw-19i name: pwr-meter-pulse-gw-19i
image: "{{ pwr_meter_pulse_gw_image }}" image: "{{ pwr_meter_pulse_gw_image }}"
ports: ports:
@ -178,7 +178,7 @@
restart_policy: unless-stopped restart_policy: unless-stopped
- name: Setup proxy site pwr-meter-pulse-gw-19i.svc.n39.eu - name: Setup proxy site pwr-meter-pulse-gw-19i.svc.n39.eu
include_role: ansible.builtin.include_role:
name: setup_http_site_proxy name: setup_http_site_proxy
vars: vars:
site_name: "pwr-meter-pulse-gw-19i.svc.n39.eu" site_name: "pwr-meter-pulse-gw-19i.svc.n39.eu"
@ -186,7 +186,7 @@
- name: Setup docker container for BrotherQL Web UI printer - name: Setup docker container for BrotherQL Web UI printer
docker_container: community.docker.docker_container:
name: brotherql-web name: brotherql-web
image: dersimn/brother_ql_web:2.1.9-alpine image: dersimn/brother_ql_web:2.1.9-alpine
pull: true pull: true
@ -202,7 +202,7 @@
- labelprinter - labelprinter
- name: Setup proxy site labelprinter.n39.eu - name: Setup proxy site labelprinter.n39.eu
include_role: ansible.builtin.include_role:
name: setup_http_site_proxy name: setup_http_site_proxy
vars: vars:
site_name: labelprinter.n39.eu site_name: labelprinter.n39.eu
@ -211,7 +211,7 @@
- labelprinter - labelprinter
- name: Setup docker container for Grafana Screenshots - name: Setup docker container for Grafana Screenshots
docker_container: community.docker.docker_container:
name: grafana-screenshot name: grafana-screenshot
image: mrtux/grafana-screenshot:0.1.3 image: mrtux/grafana-screenshot:0.1.3
pull: true pull: true
@ -228,7 +228,7 @@
handlers: handlers:
- name: Restart mosquitto container - name: Restart mosquitto container
docker_container: community.docker.docker_container:
name: mosquitto name: mosquitto
state: started state: started
restart: yes restart: yes

24
host-tau.yml
View file

@ -26,7 +26,7 @@
tasks: tasks:
- name: Setup docker network - name: Setup docker network
docker_network: community.docker.docker_network:
name: dockernet name: dockernet
driver: bridge driver: bridge
ipam_config: ipam_config:
@ -35,7 +35,7 @@
state: present state: present
- name: Setup Dehydrated - name: Setup Dehydrated
include_role: ansible.builtin.include_role:
name: 24367dfa.dehydrated name: 24367dfa.dehydrated
vars: vars:
dehydrated_contact_email: "{{ server_admin }}" dehydrated_contact_email: "{{ server_admin }}"
@ -52,14 +52,14 @@
deploy_challenge_hook: "/bin/systemctl restart apache2" deploy_challenge_hook: "/bin/systemctl restart apache2"
- name: Setup proxy site testredmine.netz39.de - name: Setup proxy site testredmine.netz39.de
include_role: ansible.builtin.include_role:
name: setup_http_site_proxy name: setup_http_site_proxy
vars: vars:
site_name: testredmine.netz39.de site_name: testredmine.netz39.de
proxy_port: 9004 proxy_port: 9004
- name: Setup phpmyadmin - name: Setup phpmyadmin
docker_container: community.docker.docker_container:
name: phpmyadmin name: phpmyadmin
state: started state: started
image: phpmyadmin:5.2 image: phpmyadmin:5.2
@ -76,7 +76,7 @@
- 9001:80 - 9001:80
- name: Setup proxy site mysql.adm.netz39.de - name: Setup proxy site mysql.adm.netz39.de
include_role: ansible.builtin.include_role:
name: setup_http_site_proxy name: setup_http_site_proxy
vars: vars:
site_name: mysql.adm.netz39.de site_name: mysql.adm.netz39.de
@ -93,13 +93,13 @@
when: not docker_dir.stat.exists when: not docker_dir.stat.exists
- name: Ensure the Docker Registry data directory exists - name: Ensure the Docker Registry data directory exists
# This may not be part of the backup # This may not be part of the backup
file: ansible.builtin.file:
path: "{{ data_dir }}/registry/data" path: "{{ data_dir }}/registry/data"
state: directory state: directory
mode: "0755" mode: "0755"
- name: Setup Docker Registry Container - name: Setup Docker Registry Container
docker_container: community.docker.docker_container:
name: registry name: registry
image: registry:2 image: registry:2
pull: true pull: true
@ -118,7 +118,7 @@
- "{{ data_dir }}/registry/auth:/auth:rw" - "{{ data_dir }}/registry/auth:/auth:rw"
- name: Setup proxy site for the Docker Registry - name: Setup proxy site for the Docker Registry
include_role: ansible.builtin.include_role:
name: setup_http_site_proxy name: setup_http_site_proxy
vars: vars:
site_name: "{{ docker_registry_domain }}" site_name: "{{ docker_registry_domain }}"
@ -147,7 +147,7 @@
- dokuwiki - dokuwiki
- name: Setup Dokuwiki Container - name: Setup Dokuwiki Container
docker_container: community.docker.docker_container:
name: dokuwiki name: dokuwiki
image: "{{ dokuwiki_image }}" image: "{{ dokuwiki_image }}"
pull: true pull: true
@ -166,7 +166,7 @@
- dokuwiki - dokuwiki
- name: Setup proxy site for Dokuwiki - name: Setup proxy site for Dokuwiki
include_role: ansible.builtin.include_role:
name: setup_http_site_proxy name: setup_http_site_proxy
vars: vars:
site_name: "{{ dokuwiki_domain }}" site_name: "{{ dokuwiki_domain }}"
@ -176,7 +176,7 @@
- name: Setup container for secondary FFMD DNS - name: Setup container for secondary FFMD DNS
docker_container: community.docker.docker_container:
name: bind9-md-freifunk-net name: bind9-md-freifunk-net
image: ffmd/bind9-md-freifunk-net:v2022122301 image: ffmd/bind9-md-freifunk-net:v2022122301
pull: true pull: true
@ -191,7 +191,7 @@
- ffmd-dns - ffmd-dns
- name: Setup forwarding for Discord invite - name: Setup forwarding for Discord invite
include_role: ansible.builtin.include_role:
name: setup_http_site_forward name: setup_http_site_forward
vars: vars:
site_name: "{{ discord_invite_domain }}" site_name: "{{ discord_invite_domain }}"

2
host-unicorn.yml
View file

@ -12,7 +12,7 @@
tasks: tasks:
- name: Setup the docker container for unifi-controller - name: Setup the docker container for unifi-controller
docker_container: community.docker.docker_container:
name: unifi-controller name: unifi-controller
image: jacobalberty/unifi:v9.0.114 image: jacobalberty/unifi:v9.0.114
state: started state: started

4
host-wittgenstein.yml
View file

@ -130,7 +130,7 @@
### Space API ### Space API
- name: Setup the SpaceAPI Docker container - name: Setup the SpaceAPI Docker container
docker_container: community.docker.docker_container:
name: spaceapi name: spaceapi
image: "{{ spaceapi_image }}" image: "{{ spaceapi_image }}"
pull: true pull: true
@ -149,7 +149,7 @@
- spaceapi - spaceapi
- name: Setup the Ampel Controller Docker container - name: Setup the Ampel Controller Docker container
docker_container: community.docker.docker_container:
name: ampelcontroller name: ampelcontroller
image: "{{ ampelcontroller_image }}" image: "{{ ampelcontroller_image }}"
pull: true pull: true

2
roles/apache/handlers/main.yml
View file

@ -1,6 +1,6 @@
# Handlers for role apache # Handlers for role apache
--- ---
- name: Restart apache2 - name: Restart apache2
service: ansible.builtin.service:
name: apache2 name: apache2
state: restarted state: restarted

4
roles/apache/tasks/main.yml
View file

@ -1,12 +1,12 @@
--- ---
- name: Ensure Apache2 and modules are installed and up to date - name: Ensure Apache2 and modules are installed and up to date
apt: ansible.builtin.apt:
name: name:
- apache2 - apache2
state: present state: present
- name: Ensure necessary modules are enabled - name: Ensure necessary modules are enabled
apache2_module: community.general.apache2_module:
name: "{{ item }}" name: "{{ item }}"
state: present state: present
with_items: with_items:

2
roles/apache_letsencrypt/handlers/main.yml
View file

@ -1,6 +1,6 @@
# Handlers for role apache_letsencrypt # Handlers for role apache_letsencrypt
--- ---
- name: Restart apache2 - name: Restart apache2
service: ansible.builtin.service:
name: apache2 name: apache2
state: restarted state: restarted

12
roles/cleanuri/tasks/main.yml
View file

@ -1,7 +1,7 @@
# Tasks for the cleanuri role # Tasks for the cleanuri role
--- ---
- name: Ensure CleanURI WebUI is running - name: Ensure CleanURI WebUI is running
docker_container: community.docker.docker_container:
name: cleanuri-webui name: cleanuri-webui
image: "{{ cleanuri_image_webui }}" image: "{{ cleanuri_image_webui }}"
pull: true pull: true
@ -15,7 +15,7 @@
REACT_APP_API_GATEWAY: "https://{{ cleanuri_api_domain }}" REACT_APP_API_GATEWAY: "https://{{ cleanuri_api_domain }}"
- name: Setup proxy site for the CleanURI WebUI - name: Setup proxy site for the CleanURI WebUI
include_role: ansible.builtin.include_role:
name: setup_http_site_proxy name: setup_http_site_proxy
vars: vars:
site_name: "{{ cleanuri_ui_domain }}" site_name: "{{ cleanuri_ui_domain }}"
@ -23,7 +23,7 @@
- name: Ensure CleanURI API Gateway is running - name: Ensure CleanURI API Gateway is running
docker_container: community.docker.docker_container:
name: cleanuri-apigateway name: cleanuri-apigateway
image: "{{ cleanuri_image_apigateway }}" image: "{{ cleanuri_image_apigateway }}"
pull: true pull: true
@ -42,7 +42,7 @@
GATEWAY_TASK_RK: "{{ cleanuri_amqp_canonizer }}" GATEWAY_TASK_RK: "{{ cleanuri_amqp_canonizer }}"
- name: Ensure CleanURI Canonizer is running - name: Ensure CleanURI Canonizer is running
docker_container: community.docker.docker_container:
name: cleanuri-canonizer name: cleanuri-canonizer
image: "{{ cleanuri_image_canonizer }}" image: "{{ cleanuri_image_canonizer }}"
pull: true pull: true
@ -59,7 +59,7 @@
EXTRACTOR_TASK_RK: "{{ cleanuri_amqp_retrieval }}" EXTRACTOR_TASK_RK: "{{ cleanuri_amqp_retrieval }}"
- name: Ensure CleanURI Extractor is running - name: Ensure CleanURI Extractor is running
docker_container: community.docker.docker_container:
name: cleanuri-extractor name: cleanuri-extractor
image: "{{ cleanuri_image_extractor }}" image: "{{ cleanuri_image_extractor }}"
pull: true pull: true
@ -76,7 +76,7 @@
- name: Setup proxy site the CleanURI API Gateway - name: Setup proxy site the CleanURI API Gateway
include_role: ansible.builtin.include_role:
name: setup_http_site_proxy name: setup_http_site_proxy
vars: vars:
site_name: "{{ cleanuri_api_domain }}" site_name: "{{ cleanuri_api_domain }}"

2
roles/dd24_dyndns_cron/tasks/main.yml
View file

@ -1,6 +1,6 @@
--- ---
- name: Make sure cron and curl are installed - name: Make sure cron and curl are installed
apt: ansible.builtin.apt:
name: name:
- cron - cron
- curl - curl

2
roles/desec_dyndns_cron/tasks/main.yml
View file

@ -1,6 +1,6 @@
--- ---
- name: Make sure cron and curl are installed - name: Make sure cron and curl are installed
apt: ansible.builtin.apt:
name: name:
- cron - cron
- curl - curl

2
roles/nfs_host/handlers/main.yml
View file

@ -1,3 +1,3 @@
--- ---
- name: Reload nfs - name: Reload nfs
command: 'exportfs -ra' ansible.builtin.command: 'exportfs -ra'

2
roles/nginx_https_ingress/handlers/main.yml
View file

@ -1,7 +1,7 @@
# Handlers für nginx-https-proxy # Handlers für nginx-https-proxy
--- ---
- name: Restart nginx - name: Restart nginx
service: ansible.builtin.service:
name: nginx name: nginx
state: restarted state: restarted
enabled: yes enabled: yes

2
roles/nginx_https_ingress/tasks/main.yml
View file

@ -18,7 +18,7 @@
# for SSL passthrough. # for SSL passthrough.
- name: Add nginx apt-key - name: Add nginx apt-key
apt_key: ansible.builtin.apt_key:
url: https://nginx.org/keys/nginx_signing.key url: https://nginx.org/keys/nginx_signing.key
state: present state: present

2
roles/setup_http_site_forward/handlers/main.yml
View file

@ -1,5 +1,5 @@
--- ---
- name: Restart apache2 - name: Restart apache2
service: ansible.builtin.service:
name: apache2 name: apache2
state: restarted state: restarted

4
roles/setup_http_site_forward/tasks/main.yml
View file

@ -1,12 +1,12 @@
--- ---
- name: Add or update Apache2 site - name: Add or update Apache2 site
template: ansible.builtin.template:
src: templates/apache-docker-forward-site.j2 src: templates/apache-docker-forward-site.j2
dest: /etc/apache2/sites-available/{{ site_name }}.conf dest: /etc/apache2/sites-available/{{ site_name }}.conf
notify: Restart apache2 notify: Restart apache2
- name: Activate Apache2 site - name: Activate Apache2 site
command: a2ensite {{ site_name }} ansible.builtin.command: a2ensite {{ site_name }}
args: args:
creates: /etc/apache2/sites-enabled/{{ site_name }}.conf creates: /etc/apache2/sites-enabled/{{ site_name }}.conf
notify: Restart apache2 notify: Restart apache2

2
roles/setup_http_site_proxy/handlers/main.yml
View file

@ -1,5 +1,5 @@
--- ---
- name: Restart apache2 - name: Restart apache2
service: ansible.builtin.service:
name: apache2 name: apache2
state: restarted state: restarted

4
roles/setup_http_site_proxy/tasks/main.yml
View file

@ -1,13 +1,13 @@
--- ---
- name: Add or update Apache2 site - name: Add or update Apache2 site
template: ansible.builtin.template:
src: templates/apache-docker-proxy-site.j2 src: templates/apache-docker-proxy-site.j2
dest: /etc/apache2/sites-available/{{ site_name }}.conf dest: /etc/apache2/sites-available/{{ site_name }}.conf
mode: "0644" mode: "0644"
notify: Restart apache2 notify: Restart apache2
- name: Activate Apache2 site - name: Activate Apache2 site
command: a2ensite {{ site_name }} ansible.builtin.command: a2ensite {{ site_name }}
args: args:
creates: /etc/apache2/sites-enabled/{{ site_name }}.conf creates: /etc/apache2/sites-enabled/{{ site_name }}.conf
notify: Restart apache2 notify: Restart apache2

2
roles/users/handlers/main.yml
View file

@ -1,3 +1,3 @@
--- ---
- name: Update aliases - name: Update aliases
shell: which newaliases && newaliases || true ansible.builtin.shell: which newaliases && newaliases || true

14
roles/users/tasks/main.yml
View file

@ -1,12 +1,12 @@
--- ---
- name: Ensure sudo is installed - name: Ensure sudo is installed
package: ansible.builtin.package:
name: name:
- sudo - sudo
state: present state: present
- name: Configure group sudo for sudoers without password - name: Configure group sudo for sudoers without password
lineinfile: ansible.builtin.lineinfile:
path: /etc/sudoers path: /etc/sudoers
state: present state: present
regexp: '^%sudo\s' regexp: '^%sudo\s'
@ -14,7 +14,7 @@
validate: /usr/sbin/visudo -cf %s validate: /usr/sbin/visudo -cf %s
- name: Add users | create users' shell and home dir - name: Add users | create users' shell and home dir
user: ansible.builtin.user:
name: "{{ item.logname }}" name: "{{ item.logname }}"
shell: /bin/bash shell: /bin/bash
createhome: yes createhome: yes
@ -22,7 +22,7 @@
with_items: "{{ users }}" with_items: "{{ users }}"
- name: Add authorized keys for user - name: Add authorized keys for user
authorized_key: ansible.posix.authorized_key:
user: "{{ item.0.logname }}" user: "{{ item.0.logname }}"
key: "{{ item.1 }}" key: "{{ item.1 }}"
state: present state: present
@ -32,7 +32,7 @@
- skip_missing: true - skip_missing: true
- name: Place user in sudo group - name: Place user in sudo group
user: ansible.builtin.user:
name: "{{ item.logname }}" name: "{{ item.logname }}"
groups: [sudo] groups: [sudo]
append: yes append: yes
@ -40,12 +40,12 @@
with_items: "{{ users }}" with_items: "{{ users }}"
- name: Check if /etc/aliases exists - name: Check if /etc/aliases exists
stat: ansible.builtin.stat:
path: /etc/aliases path: /etc/aliases
register: aliases register: aliases
- name: Set system email alias - name: Set system email alias
lineinfile: ansible.builtin.lineinfile:
path: /etc/aliases path: /etc/aliases
state: present state: present
regexp: "^{{ item.logname }}:" regexp: "^{{ item.logname }}:"