Kevin Veen-Birkenbach a10dd402b8
refactor: improve service handling and introduce MODE_ASSERT
- Improved get_service_name filter plugin (clearer suffix handling, consistent var names).
- Added MODE_ASSERT flag to optionally execute validation/assertion tasks.
- Fixed systemd unit handling: consistent use of %I instead of %i, correct escaping of instance names.
- Unified on_failure behavior and alarm composer scripts.
- Cleaned up redundant logging, handlers, and debug config.
- Strengthened sys-service template resolution with assert (only active when MODE_ASSERT).
- Simplified timer and suffix handling with get_service_name filter.
- Hardened sensitive tasks with no_log.
- Added conditional asserts across roles (Keycloak, DNS, Mailu, Discourse, etc.).

These changes improve consistency, safety, and validation across the automation stack.

Conversation: https://chatgpt.com/share/68a4ae28-483c-800f-b2f7-f64c7124c274
2025-08-19 19:02:52 +02:00

28 lines
656 B
YAML
Raw Blame History

This file contains ambiguous Unicode characters

This file contains Unicode characters that might be confused with other characters. If you think that this is intentional, you can safely ignore this warning. Use the Escape button to reveal them.

- block:
- name: Include dependencies
include_role:
name: '{{ item }}'
loop:
- sys-ctl-cln-bkps
- sys-lock
- include_tasks: utils/run_once.yml
when: run_once_svc_bkp_loc_2_usb is not defined
- name: Fail if any backup_to_usb variable is empty
assert:
that:
- BACKUP_TO_USB_MOUNT != ""
- BACKUP_TO_USB_target != ""
- BACKUP_TO_USB_SOURCE != ""
fail_msg: |
One or more of the configuration variables are empty!
Please set:
- mount
- target
- source
to nonempty values in your configuration file.
when: MODE_ASSERT | bool
- include_role:
name: sys-service