mirror of
https://github.com/kevinveenbirkenbach/computer-playbook.git
synced 2025-08-26 21:45:20 +02:00
Kevin Veen-Birkenbach
a10dd402b8
- Improved get_service_name filter plugin (clearer suffix handling, consistent var names). - Added MODE_ASSERT flag to optionally execute validation/assertion tasks. - Fixed systemd unit handling: consistent use of %I instead of %i, correct escaping of instance names. - Unified on_failure behavior and alarm composer scripts. - Cleaned up redundant logging, handlers, and debug config. - Strengthened sys-service template resolution with assert (only active when MODE_ASSERT). - Simplified timer and suffix handling with get_service_name filter. - Hardened sensitive tasks with no_log. - Added conditional asserts across roles (Keycloak, DNS, Mailu, Discourse, etc.). These changes improve consistency, safety, and validation across the automation stack. Conversation: https://chatgpt.com/share/68a4ae28-483c-800f-b2f7-f64c7124c274
36 lines
1.1 KiB
YAML
36 lines
1.1 KiB
YAML
- name: "Include dependent services for '{{ system_service_id }}'"
|
|
include_role:
|
|
name: '{{ item }}'
|
|
loop:
|
|
- sys-ctl-alm-telegram
|
|
- sys-ctl-alm-email
|
|
vars:
|
|
flush_handlers: true
|
|
system_service_timer_enabled: false
|
|
system_service_copy_files: true
|
|
|
|
- name: "Include core service for '{{ system_service_id }}'"
|
|
include_role:
|
|
name: sys-service
|
|
vars:
|
|
flush_handlers: true
|
|
system_service_timer_enabled: false
|
|
system_service_copy_files: true
|
|
system_service_tpl_exec_start: "{{ system_service_script_exec }} %I"
|
|
system_service_tpl_on_failure: "" # No on failure needed, because it's anyhow the default on failure procedure
|
|
|
|
- block:
|
|
- name: Escape instance name for systemctl call
|
|
ansible.builtin.command:
|
|
argv:
|
|
- systemd-escape
|
|
- "{{ SYSTEMCTL_ALARM_COMPOSER_DUMMY_MESSAGE }}"
|
|
register: escaped_name
|
|
changed_when: false
|
|
|
|
- name: Start sys-ctl-alm-compose instance
|
|
ansible.builtin.systemd:
|
|
name: "{{ ('sys-ctl-alm-compose@') | get_service_name(SOFTWARE_NAME, False) ~ escaped_name.stdout ~ '.service' }}"
|
|
state: started
|
|
when: MODE_ASSERT | bool
|