mirror of
				https://github.com/kevinveenbirkenbach/computer-playbook.git
				synced 2025-11-04 12:18:17 +00:00 
			
		
		
		
	Compare commits
	
		
			3 Commits
		
	
	
		
			7f42462514
			...
			2f12d8ea83
		
	
	| Author | SHA1 | Date | |
|---|---|---|---|
| 2f12d8ea83 | |||
| 58620f6695 | |||
| abc064fa56 | 
@@ -13,3 +13,5 @@
 | 
			
		||||
  loop: "{{ cloudflare_domains }}"
 | 
			
		||||
  loop_control:
 | 
			
		||||
    label: "{{ item }}"
 | 
			
		||||
  async: "{{ ASYNC_TIME if ASYNC_ENABLED | bool else omit }}"
 | 
			
		||||
  poll:  "{{ ASYNC_POLL if ASYNC_ENABLED | bool else omit }}"
 | 
			
		||||
@@ -16,7 +16,7 @@ server:
 | 
			
		||||
        unsafe-inline: true
 | 
			
		||||
    whitelist:
 | 
			
		||||
      font-src:
 | 
			
		||||
        - "http://*.{{PRIMARY_DOMAIN}}"
 | 
			
		||||
        - "{{ WEB_PROTOCOL }}://*.{{PRIMARY_DOMAIN}}"
 | 
			
		||||
  domains:
 | 
			
		||||
    canonical:
 | 
			
		||||
      - "forum.{{ PRIMARY_DOMAIN }}"
 | 
			
		||||
 
 | 
			
		||||
@@ -21,4 +21,6 @@
 | 
			
		||||
  args:
 | 
			
		||||
    executable: /bin/bash  
 | 
			
		||||
    chdir: "{{docker_repository_directory }}"
 | 
			
		||||
  async: "{{ ASYNC_TIME if ASYNC_ENABLED | bool else omit }}"
 | 
			
		||||
  poll:  "{{ ASYNC_POLL if ASYNC_ENABLED | bool else omit }}"
 | 
			
		||||
  listen: recreate discourse
 | 
			
		||||
@@ -39,6 +39,8 @@
 | 
			
		||||
        tls_certificate_string = '{{ openproject_ldap.tls_certificate_string }}'
 | 
			
		||||
      WHERE name = '{{ openproject_ldap.name }}';
 | 
			
		||||
  when: ldap_check.query_result | length > 0
 | 
			
		||||
  async: "{{ ASYNC_TIME if ASYNC_ENABLED | bool else omit }}"
 | 
			
		||||
  poll:  "{{ ASYNC_POLL if ASYNC_ENABLED | bool else omit }}"
 | 
			
		||||
 | 
			
		||||
- name: Create new LDAP auth source
 | 
			
		||||
  community.postgresql.postgresql_query:
 | 
			
		||||
@@ -73,22 +75,8 @@
 | 
			
		||||
        '{{ openproject_ldap.tls_certificate_string }}'
 | 
			
		||||
      );
 | 
			
		||||
  when: ldap_check.query_result | length == 0
 | 
			
		||||
 | 
			
		||||
- name: Show all LDAP sources (debug)
 | 
			
		||||
  community.postgresql.postgresql_query:
 | 
			
		||||
    db: "{{ database_name }}"
 | 
			
		||||
    login_user: "{{ database_username }}"
 | 
			
		||||
    login_password: "{{ database_password }}"
 | 
			
		||||
    login_host: "127.0.0.1"
 | 
			
		||||
    login_port: "{{ database_port }}"
 | 
			
		||||
    query: "SELECT id, name FROM ldap_auth_sources"
 | 
			
		||||
  register: ldap_entries
 | 
			
		||||
  when: MODE_DEBUG | bool
 | 
			
		||||
 | 
			
		||||
- name: Debug LDAP entries
 | 
			
		||||
  debug:
 | 
			
		||||
    var: ldap_entries
 | 
			
		||||
  when: MODE_DEBUG | bool
 | 
			
		||||
  async: "{{ ASYNC_TIME if ASYNC_ENABLED | bool else omit }}"
 | 
			
		||||
  poll:  "{{ ASYNC_POLL if ASYNC_ENABLED | bool else omit }}"
 | 
			
		||||
 | 
			
		||||
# This works just after the first admin login
 | 
			
		||||
# @todo Remove and replace trough LDAP RBAC group
 | 
			
		||||
@@ -109,3 +97,5 @@
 | 
			
		||||
    "
 | 
			
		||||
  args:
 | 
			
		||||
    chdir: "{{ docker_compose.directories.instance }}"
 | 
			
		||||
  async: "{{ ASYNC_TIME if ASYNC_ENABLED | bool else omit }}"
 | 
			
		||||
  poll:  "{{ ASYNC_POLL if ASYNC_ENABLED | bool else omit }}"
 | 
			
		||||
@@ -33,6 +33,8 @@
 | 
			
		||||
  args:
 | 
			
		||||
    chdir: "{{ docker_compose.directories.instance }}"
 | 
			
		||||
  loop: "{{ openproject_rails_settings | dict2items }}"
 | 
			
		||||
  async: "{{ ASYNC_TIME if ASYNC_ENABLED | bool else omit }}"
 | 
			
		||||
  poll:  "{{ ASYNC_POLL if ASYNC_ENABLED | bool else omit }}"
 | 
			
		||||
 | 
			
		||||
- name: Setup LDAP
 | 
			
		||||
  include_tasks: 01_ldap.yml
 | 
			
		||||
 
 | 
			
		||||
		Reference in New Issue
	
	Block a user