mirror of
https://github.com/kevinveenbirkenbach/computer-playbook.git
synced 2025-12-02 07:38:22 +00:00
Kevin Veen-Birkenbach
e09f561f0b
- Replace legacy utils/run_once.yml with the new helpers utils/once_flag.yml and utils/once_finalize.yml - Introduce utils/compose_up.yml to ensure docker-compose stacks are up and to flush handlers safely without coupling to run-once flags - Migrate all affected roles (desk-*, dev-*, sys-ctl-*, sys-svc-*, web-app-*, web-svc-*, util-*) to the new run-once helpers - Rework sys-svc-msmtp to auto-load Mailu once per deploy, check reachability, and reuse the running stack instead of requiring multiple playbook passes - Adjust web-app-mailu to integrate cert deployment, handler flushing, and run-once handling so Mailu is fully initialized in a single deploy - Improve Matomo, CDN, logout and CSP/health-check related roles to cooperate with the new compose_up / once_* pattern - Simplify alarm/backup/timer/service orchestration (sys-ctl-alm-*, sys-bkp-provider, sys-timer-cln-bkps, etc.) by moving run-once logic into dedicated 01_core.yml files - Update integration tests so utils/once_flag.yml and utils/once_finalize.yml are recognised as valid run-once providers, keeping the global run_once_* guarantees consistent - Align frontend injection and service dependencies so Mastodon- and Mailu-related services can be brought up coherently within a single deployment cycle rather than several iterations
53 lines
1.2 KiB
YAML
53 lines
1.2 KiB
YAML
- name: Include dependency 'dev-shell'
|
|
include_role:
|
|
name: dev-shell
|
|
when: run_once_dev_shell is not defined
|
|
|
|
- name: pull ssh repository from {{desk_ssh_repository}}
|
|
git:
|
|
repo: "{{desk_ssh_repository}}"
|
|
dest: "$HOME/.ssh"
|
|
update: yes
|
|
register: git_result
|
|
ignore_errors: true
|
|
become: false
|
|
|
|
- name: Warn if repo is not reachable
|
|
debug:
|
|
msg: "Warning: Repository is not reachable."
|
|
when: git_result.failed and MODE_DEBUG | bool
|
|
|
|
- name: Ensure systemd user directory exists
|
|
file:
|
|
path: "$HOME/.config/systemd/user"
|
|
state: directory
|
|
mode: "0700"
|
|
become: false
|
|
|
|
- name: Deploy ssh-agent systemd unit file
|
|
template:
|
|
src: ssh-agent.service.j2
|
|
dest: "$HOME/.config/systemd/user/ssh-agent.service"
|
|
mode: "0644"
|
|
become: false
|
|
|
|
- name: Enable and start ssh-agent service
|
|
systemd:
|
|
name: ssh-agent.service
|
|
scope: user
|
|
enabled: true
|
|
state: started
|
|
daemon_reload: true
|
|
become: false
|
|
|
|
- name: Ensure ~/.profile exists with common environment
|
|
lineinfile:
|
|
path: "$HOME/.profile"
|
|
line: 'export SSH_AUTH_SOCK="$XDG_RUNTIME_DIR/ssh-agent.socket"'
|
|
insertafter: EOF
|
|
state: present
|
|
create: yes
|
|
mode: "0644"
|
|
become: false
|
|
|
|
- include_tasks: utils/once_finalize.yml |