Graham McIntire
292758900e
- DNS: hi.mcintire.me A/AAAA, git.mcintire.me A/AAAA updated to new host - forgejo role: Docker Compose deployment with SQLite, INSTALL_LOCK, admin user creation - Caddyfile-hi.j2: reverse proxy git.mcintire.me -> localhost:3000 - tailscale role: skip connect when no auth key; dynamic repo suite - debian role: fix Signed-By for debian.sources on trixie - curl added to base Debian packages - support.vntx.net: added to vntx_servers, DNS, host_vars
145 lines
3.7 KiB
YAML
145 lines
3.7 KiB
YAML
---
|
|
- name: Install prerequisites
|
|
ansible.builtin.apt:
|
|
name:
|
|
- ca-certificates
|
|
- curl
|
|
- gnupg
|
|
- apt-transport-https
|
|
state: present
|
|
update_cache: true
|
|
|
|
- name: Check if Docker is installed
|
|
ansible.builtin.command: which docker
|
|
register: docker_installed
|
|
changed_when: false
|
|
failed_when: false
|
|
|
|
- name: Add Docker GPG key
|
|
ansible.builtin.get_url:
|
|
url: https://download.docker.com/linux/debian/gpg
|
|
dest: /usr/share/keyrings/docker-archive-keyring.asc
|
|
mode: '0644'
|
|
when: docker_installed.rc != 0
|
|
|
|
- name: Add Docker repository
|
|
ansible.builtin.deb822_repository:
|
|
name: docker
|
|
types: deb
|
|
uris: https://download.docker.com/linux/debian
|
|
suites: "{{ ansible_facts['distribution_release'] }}"
|
|
components: stable
|
|
architectures: "{{ ansible_facts['architecture'] | replace('x86_64', 'amd64') }}"
|
|
signed_by: /usr/share/keyrings/docker-archive-keyring.asc
|
|
state: present
|
|
when: docker_installed.rc != 0
|
|
|
|
- name: Install Docker packages
|
|
ansible.builtin.apt:
|
|
name:
|
|
- docker-ce
|
|
- docker-ce-cli
|
|
- containerd.io
|
|
- docker-compose-plugin
|
|
state: present
|
|
update_cache: true
|
|
when: docker_installed.rc != 0
|
|
|
|
- name: Ensure Docker service is started and enabled
|
|
ansible.builtin.systemd:
|
|
name: docker
|
|
state: started
|
|
enabled: true
|
|
|
|
- name: Add ansible user to docker group
|
|
ansible.builtin.user:
|
|
name: ansible
|
|
groups: docker
|
|
append: true
|
|
|
|
- name: Create Forgejo data directory
|
|
ansible.builtin.file:
|
|
path: "{{ forgejo_data_dir }}"
|
|
state: directory
|
|
owner: root
|
|
group: root
|
|
mode: '0755'
|
|
|
|
- name: Deploy docker-compose.yml
|
|
ansible.builtin.template:
|
|
src: docker-compose.yml.j2
|
|
dest: "{{ forgejo_data_dir }}/docker-compose.yml"
|
|
owner: root
|
|
group: root
|
|
mode: '0644'
|
|
|
|
- name: Check if Forgejo is running
|
|
ansible.builtin.command:
|
|
cmd: docker compose ps --services --filter "status=running"
|
|
chdir: "{{ forgejo_data_dir }}"
|
|
register: forgejo_running
|
|
changed_when: false
|
|
failed_when: false
|
|
|
|
- name: Stop and remove stale Forgejo container
|
|
ansible.builtin.command:
|
|
cmd: docker compose down -v
|
|
chdir: "{{ forgejo_data_dir }}"
|
|
when: "'forgejo' in forgejo_running.stdout_lines | default([])"
|
|
|
|
- name: Clean Forgejo data for fresh install
|
|
ansible.builtin.file:
|
|
path: "{{ forgejo_data_dir }}/data"
|
|
state: absent
|
|
|
|
- name: Recreate Forgejo data directory
|
|
ansible.builtin.file:
|
|
path: "{{ forgejo_data_dir }}"
|
|
state: directory
|
|
owner: root
|
|
group: root
|
|
mode: '0755'
|
|
|
|
- name: Start Forgejo with INSTALL_LOCK
|
|
ansible.builtin.command:
|
|
cmd: docker compose up -d
|
|
chdir: "{{ forgejo_data_dir }}"
|
|
register: forgejo_started
|
|
|
|
- name: Wait for Forgejo to be ready
|
|
ansible.builtin.uri:
|
|
url: http://127.0.0.1:3000/
|
|
method: GET
|
|
status_code: 200
|
|
register: web_ready
|
|
retries: 30
|
|
delay: 2
|
|
until: web_ready.status == 200
|
|
changed_when: false
|
|
|
|
- name: Check if admin user exists
|
|
ansible.builtin.uri:
|
|
url: http://127.0.0.1:3000/api/v1/users/{{ forgejo_admin_user }}
|
|
method: GET
|
|
status_code: [200, 404]
|
|
register: admin_check
|
|
changed_when: false
|
|
|
|
- name: Create admin user via docker exec
|
|
ansible.builtin.command:
|
|
cmd: >
|
|
docker exec -u git -w /data/gitea forgejo forgejo admin user create
|
|
--config /data/gitea/conf/app.ini
|
|
--username {{ forgejo_admin_user }}
|
|
--password {{ forgejo_admin_password }}
|
|
--email {{ forgejo_admin_email }}
|
|
--admin
|
|
when: admin_check.status == 404
|
|
no_log: true
|
|
|
|
- name: Verify admin user exists
|
|
ansible.builtin.uri:
|
|
url: http://127.0.0.1:3000/api/v1/users/{{ forgejo_admin_user }}
|
|
method: GET
|
|
status_code: 200
|
|
changed_when: false
|