mirror of
https://github.com/kevinveenbirkenbach/computer-playbook.git
synced 2025-11-17 10:36:31 +00:00
Kevin Veen-Birkenbach
3da645f3b8
• Rename: 02_create-user.yml → 02_manage_user.yml; 03_create-token.yml → 03a_manage_user_token.yml + 03b_create_user_token.yml
• Only (re)run sys-svc-msmtp when no-reply token exists; set run_once_sys_svc_msmtp=true in 01_core
• Reset by setting run_once_sys_svc_msmtp=false after creating no-reply token; then include sys-svc-msmtp
• Harden when-guards (no '{{ }}' in when, safe .get lookups)
• Minor formatting and failed_when readability
Conversation: https://chatgpt.com/share/68ebd196-a264-800f-a215-3a89d0f96c79
69 lines
2.1 KiB
YAML
69 lines
2.1 KiB
YAML
- name: Ensure MAILU_HOSTNAMES is a list with max 1 entry
|
|
ansible.builtin.assert:
|
|
that:
|
|
- MAILU_HOSTNAMES is iterable
|
|
- MAILU_HOSTNAMES is sequence
|
|
- MAILU_HOSTNAMES | length <= 1
|
|
fail_msg: "MAILU_HOSTNAMES must be a list with at most one entry (only one host is supported). You can set the other ones as alias."
|
|
success_msg: "MAILU_HOSTNAMES is valid."
|
|
when: MODE_ASSERT | bool
|
|
|
|
- name: "load variables from {{ DOCKER_VARS_FILE }}"
|
|
include_vars: "{{ DOCKER_VARS_FILE }}"
|
|
|
|
- name: Ensure Rspamd overrides directory exists (host)
|
|
file:
|
|
path: "{{ MAILU_RSPAMD_HOST_DIR }}"
|
|
state: directory
|
|
mode: "0755"
|
|
|
|
- name: Render ratelimit.conf
|
|
template:
|
|
src: ratelimit.conf.j2
|
|
dest: "{{ MAILU_RSPAMD_HOST_FILE }}"
|
|
mode: "0644"
|
|
|
|
- name: "Mailu Docker and Webserver Setup"
|
|
block:
|
|
- name: "load docker, db and proxy for {{ application_id }}"
|
|
include_role:
|
|
name: sys-stk-full-stateful
|
|
vars:
|
|
docker_compose_flush_handlers: true
|
|
|
|
- name: "Include Cert deploy service for '{{ role_name }}'"
|
|
include_role:
|
|
name: sys-ctl-mtn-cert-deploy
|
|
vars:
|
|
domain: "{{ MAILU_HOSTNAME }}"
|
|
|
|
- name: Flush docker service handlers
|
|
meta: flush_handlers
|
|
|
|
- name: "Create Mailu accounts"
|
|
include_tasks: 02_manage_user.yml
|
|
vars:
|
|
MAILU_DOCKER_DIR: "{{ docker_compose.directories.instance }}"
|
|
mailu_api_base_url: "http://127.0.0.1:8080/api/v1"
|
|
mailu_action: >-
|
|
{{
|
|
(
|
|
'administrator' in (item.value.get('roles', []))
|
|
)
|
|
| ternary('admin','user')
|
|
}}
|
|
mailu_user_key: "{{ item.key }}"
|
|
mailu_user_name: "{{ item.value.username }}"
|
|
mailu_password: "{{ item.value.password }}"
|
|
mailu_token_ip: "{{ item.value.ip | default('') }}"
|
|
loop: "{{ users | dict2items }}"
|
|
loop_control:
|
|
loop_var: item
|
|
no_log: "{{ MASK_CREDENTIALS_IN_LOGS | bool }}"
|
|
|
|
- name: Generate DKIM public key
|
|
include_tasks: 04_generate-and-read-dkim.yml
|
|
|
|
- name: Set Mailu DNS records
|
|
include_tasks: 05_dns-records.yml
|