mirror of
https://github.com/kevinveenbirkenbach/computer-playbook.git
synced 2026-11-08 03:38:23 +00:00
kevinveenbirkenbachandClaude Opus 4.8
4039313266
Add tests/lint/repository/test_task_file_numbering.py: numbered task files use exactly two leading digits, a numbered *_core.yml must be 00_core.yml, per directory the numbers are unique/consecutive and start at 01 (00 with a core file), numbered includes appear in ascending order, and shared helpers live in tasks/utils/ instead of the numbered chain. Apply it across every role: rename NN_core.yml to 00_core.yml with a consecutive down-shift of the siblings, move letter-suffix children into a subdirectory named after their parent task, relocate helpers included from more than one place into tasks/utils/, and update every reference (include_tasks, path_absolute, .ansible-lint-ignore, requirement docs). Legacy narration comments in the touched files are deleted; the upstream xwiki.properties reference block opts out via nocheck. The unused MAILU_IP6_PUBLIC var (only ever named in now-removed comments) is dropped. Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
65 lines
2.0 KiB
YAML
65 lines
2.0 KiB
YAML
---
|
|
- name: 🔎 Check if DKIM private key file exists in the antispam container
|
|
ansible.builtin.shell: >
|
|
container exec -i {{ MAILU_ANTISPAM_CONTAINER_ADDRESS }}
|
|
test -f {{ MAILU_DKIM_KEY_PATH }}
|
|
register: dkim_key_file_stat
|
|
failed_when: false
|
|
changed_when: false
|
|
retries: 10
|
|
delay: 6
|
|
until: "'is not running' not in dkim_key_file_stat.stderr"
|
|
args:
|
|
chdir: "{{ MAILU_INSTANCE_DIR }}"
|
|
|
|
- name: ⚙️ Generate DKIM key
|
|
ansible.builtin.shell: >
|
|
container exec -i {{ MAILU_ANTISPAM_CONTAINER_ADDRESS }}
|
|
rspamadm dkim_keygen -s dkim -d {{ MAILU_DOMAIN }} -k {{ MAILU_DKIM_KEY_PATH }}
|
|
register: dkim_keygen_output
|
|
when: dkim_key_file_stat.rc != 0
|
|
retries: 10
|
|
delay: 6
|
|
until: dkim_keygen_output.rc == 0
|
|
args:
|
|
chdir: "{{ MAILU_INSTANCE_DIR }}"
|
|
no_log: "{{ MASK_CREDENTIALS_IN_LOGS | bool }}"
|
|
|
|
- name: ⬇️ Fetch DKIM private key from antispam container
|
|
ansible.builtin.shell: >
|
|
container exec -i {{ MAILU_ANTISPAM_CONTAINER_ADDRESS }}
|
|
cat {{ MAILU_DKIM_KEY_PATH }}
|
|
register: dkim_priv_content
|
|
failed_when: dkim_priv_content.rc != 0
|
|
changed_when: false
|
|
no_log: "{{ MASK_CREDENTIALS_IN_LOGS | bool }}"
|
|
|
|
- name: ✅ Ensure openssl is installed on host
|
|
include_role:
|
|
name: sys-openssl
|
|
when: run_once_sys_openssl is not defined
|
|
|
|
- name: ⚙️ Generate DKIM public key on the host
|
|
command: openssl rsa -pubout
|
|
args:
|
|
stdin: "{{ dkim_priv_content.stdout }}"
|
|
register: dkim_pub_raw
|
|
changed_when: false
|
|
no_log: "{{ MASK_CREDENTIALS_IN_LOGS | bool }}"
|
|
|
|
- name: 📐 Normalize and build Mailu DKIM TXT record
|
|
set_fact:
|
|
mailu_dkim_public_key: >-
|
|
v=DKIM1; k=rsa; p={{
|
|
dkim_pub_raw.stdout
|
|
| regex_replace('-----BEGIN PUBLIC KEY-----', '')
|
|
| regex_replace('-----END PUBLIC KEY-----', '')
|
|
| regex_replace('\s+', '')
|
|
}}
|
|
no_log: "{{ MASK_CREDENTIALS_IN_LOGS | bool }}"
|
|
|
|
- name: 🐛 Debug Mailu DKIM public key
|
|
debug:
|
|
msg: "Mailu DKIM public key: {{ mailu_dkim_public_key }}"
|
|
when: MODE_DEBUG | bool
|