Kevin Veen-Birkenbach a10dd402b8
refactor: improve service handling and introduce MODE_ASSERT
- Improved get_service_name filter plugin (clearer suffix handling, consistent var names).
- Added MODE_ASSERT flag to optionally execute validation/assertion tasks.
- Fixed systemd unit handling: consistent use of %I instead of %i, correct escaping of instance names.
- Unified on_failure behavior and alarm composer scripts.
- Cleaned up redundant logging, handlers, and debug config.
- Strengthened sys-service template resolution with assert (only active when MODE_ASSERT).
- Simplified timer and suffix handling with get_service_name filter.
- Hardened sensitive tasks with no_log.
- Added conditional asserts across roles (Keycloak, DNS, Mailu, Discourse, etc.).

These changes improve consistency, safety, and validation across the automation stack.

Conversation: https://chatgpt.com/share/68a4ae28-483c-800f-b2f7-f64c7124c274
2025-08-19 19:02:52 +02:00
..

OpenResty

This role deploys an OpenResty container via Docker Compose, validates its configuration, and restarts it on changes.

Description

  • Runs an OpenResty container in host network mode
  • Mounts Nginx configuration and Lets Encrypt directories
  • Validates the OpenResty (Nginx) configuration before any restart
  • Restarts the container only if the configuration is valid

Overview

  1. Loads the base Docker Compose setup
  2. Adds the OpenResty service
  3. Defines handlers to validate and restart the container
  4. Triggers a restart on configuration changes

Further Reading