netz39-infra-ansible/main.yml

---
- hosts: tau
  become: true

  vars:
    ansible_python_interpreter: /usr/bin/python3

    server_admin: "admin@netz39.de"
    admin_users: [tux, alex]

    ag_timezone: Europe/Berlin

    docker_compose_version: "1.25.4"
    docker_compose_path: /usr/local/bin/docker-compose

    mysql_root_pw: !vault |
      $ANSIBLE_VAULT;1.1;AES256
      64313138383833643866383332623265383863623332343864306537633931326139303638303761
      6464653933613663643632383935376164393033363233330a313063613832396166666464666136
      36633532393231663634663034666666356332373438646130643161383134653739663066626538
      3661663132343639310a613431653031626434323064313465373866666332353931313836623465
      3461

  roles:
  - role: ansible.timezone

  tasks:
    - name: Update and clean package cache
      apt:
        update_cache: true
        cache_valid_time: 3600
        autoclean: true

    - name: Ensure unattended-upgrades is installed and up to date
      apt:
        name: unattended-upgrades
        state: latest

    - name: Setup unattended-upgrades
      include_role:
        name: ansible-role-unattended-upgrades
      vars:
        unattended_origins_patterns:
          - 'origin=Debian,archive=buster-security'
          - 'o=Debian,a=buster-updates'
        unattended_package_blacklist: [cowsay]
        unattended_mail: 'root'

    - name: Setup users
      include_tasks: tasks/users.yml

    - name: Install Docker
      include_tasks: tasks/docker_install.yml

    - name: Setup Docker Containers
      include_tasks: tasks/docker_setup.yml

    - name: Setup httpd
      include_tasks: tasks/httpd.yml