mirror of
https://github.com/kevinveenbirkenbach/computer-playbook.git
synced 2025-10-10 02:38:10 +02:00
Kevin Veen-Birkenbach
59b652958f
Introduced new variable HEALTH_CSP_IGNORE_NETWORK_BLOCKS_FROM (list, default []) to suppress network block reports (e.g., ORB) from specific external domains. Updated script.py to accept and forward the flag, extended systemd exec command in tasks, added defaults, and documented usage in README. Ref: https://chatgpt.com/share/68dfc69b-7c94-800f-871b-3525deb8e374
29 lines
1.1 KiB
YAML
29 lines
1.1 KiB
YAML
- name: Include dependency 'sys-ctl-alm-compose'
|
|
include_role:
|
|
name: sys-ctl-alm-compose
|
|
when: run_once_sys_ctl_alm_compose is not defined
|
|
|
|
- name: "pkgmgr install"
|
|
include_role:
|
|
name: pkgmgr-install
|
|
vars:
|
|
package_name: checkcsp
|
|
package_notify: rebuild checkcsp docker image
|
|
|
|
- include_role:
|
|
name: sys-service
|
|
vars:
|
|
system_service_suppress_flush: true # The healthcheck will just work after all routines passed
|
|
system_service_on_calendar: "{{ SYS_SCHEDULE_HEALTH_CSP_CRAWLER }}"
|
|
system_service_timer_enabled: true
|
|
system_service_tpl_on_failure: "{{ SYS_SERVICE_ON_FAILURE_COMPOSE }}"
|
|
system_service_tpl_timeout_start_sec: "{{ CURRENT_PLAY_DOMAINS_ALL | timeout_start_sec_for_domains }}"
|
|
system_service_tpl_exec_start: >-
|
|
{{ system_service_script_exec }}
|
|
--nginx-config-dir={{ NGINX.DIRECTORIES.HTTP.SERVERS }}
|
|
{%- if HEALTH_CSP_IGNORE_NETWORK_BLOCKS_FROM | length > 0 -%}
|
|
--ignore-network-blocks-from {{ HEALTH_CSP_IGNORE_NETWORK_BLOCKS_FROM | join(' ') }}
|
|
{%- endif -%}
|
|
|
|
- include_tasks: utils/run_once.yml
|