mirror of
https://github.com/kevinveenbirkenbach/computer-playbook.git
synced 2025-10-10 02:38:10 +02:00
Kevin Veen-Birkenbach
5cdcc18a99
- Store oidc_settings as proper YAML dict with correct keys - Ensure plugin is installed only if missing - Update DB settings as jsonb and enforce enabled/uninstalled state - Add CLI enforcement for plugin activation - Correct task conditions (enable/disable logic) with boolean filters Ref: https://chatgpt.com/share/68dd1d16-9b34-800f-b2bf-a3fe058f25b1
51 lines
1.7 KiB
YAML
51 lines
1.7 KiB
YAML
---
|
|
- name: "Load OIDC Settings for Peertube"
|
|
include_vars: vars/oidc-settings.yml
|
|
changed_when: false
|
|
|
|
- name: Check if OIDC plugin is already installed
|
|
command: >
|
|
docker exec {{ PEERTUBE_CONTAINER }} test -d /data/plugins/data/peertube-plugin-auth-openid-connect
|
|
register: peertube_oidc_plugin_check
|
|
failed_when: false
|
|
changed_when: false
|
|
|
|
- name: "Install auth-openid-connect plugin for Peertube"
|
|
command: >
|
|
docker exec {{ PEERTUBE_CONTAINER }} npm run plugin:install -- --npm-name {{ PEERTUBE_OIDC_PLUGIN }}
|
|
when: peertube_oidc_plugin_check.rc != 0
|
|
notify: docker compose up
|
|
|
|
- name: "Update the settings column of the auth-openid-connect plugin"
|
|
community.postgresql.postgresql_query:
|
|
db: "{{ database_name }}"
|
|
login_user: "{{ database_username }}"
|
|
login_password: "{{ database_password }}"
|
|
login_host: "127.0.0.1"
|
|
login_port: "{{ database_port }}"
|
|
query: |
|
|
UPDATE public.plugin
|
|
SET settings = '{{ oidc_settings | to_json }}'::jsonb,
|
|
enabled = TRUE,
|
|
uninstalled = FALSE
|
|
WHERE name = 'auth-openid-connect'
|
|
AND (
|
|
settings IS DISTINCT FROM '{{ oidc_settings | to_json }}'::jsonb
|
|
OR enabled IS DISTINCT FROM TRUE
|
|
OR uninstalled IS DISTINCT FROM FALSE
|
|
);
|
|
register: _peertube_oidc_update
|
|
retries: 5
|
|
delay: 3
|
|
until: _peertube_oidc_update is succeeded
|
|
notify: docker compose up
|
|
|
|
- name: "Ensure plugin is enabled in PeerTube (CLI)"
|
|
command: >
|
|
docker exec {{ PEERTUBE_CONTAINER }} npm run plugin:enable -- --npm-name {{ PEERTUBE_OIDC_PLUGIN }}
|
|
register: _peertube_enable
|
|
failed_when: false
|
|
changed_when: >
|
|
_peertube_enable.stdout is defined and
|
|
('already enabled' not in _peertube_enable.stdout)
|