mirror of
https://github.com/kevinveenbirkenbach/computer-playbook.git
synced 2025-12-02 07:38:22 +00:00
Kevin Veen-Birkenbach
e09f561f0b
- Replace legacy utils/run_once.yml with the new helpers utils/once_flag.yml and utils/once_finalize.yml - Introduce utils/compose_up.yml to ensure docker-compose stacks are up and to flush handlers safely without coupling to run-once flags - Migrate all affected roles (desk-*, dev-*, sys-ctl-*, sys-svc-*, web-app-*, web-svc-*, util-*) to the new run-once helpers - Rework sys-svc-msmtp to auto-load Mailu once per deploy, check reachability, and reuse the running stack instead of requiring multiple playbook passes - Adjust web-app-mailu to integrate cert deployment, handler flushing, and run-once handling so Mailu is fully initialized in a single deploy - Improve Matomo, CDN, logout and CSP/health-check related roles to cooperate with the new compose_up / once_* pattern - Simplify alarm/backup/timer/service orchestration (sys-ctl-alm-*, sys-bkp-provider, sys-timer-cln-bkps, etc.) by moving run-once logic into dedicated 01_core.yml files - Update integration tests so utils/once_flag.yml and utils/once_finalize.yml are recognised as valid run-once providers, keeping the global run_once_* guarantees consistent - Align frontend injection and service dependencies so Mastodon- and Mailu-related services can be brought up coherently within a single deployment cycle rather than several iterations
59 lines
1.3 KiB
YAML
59 lines
1.3 KiB
YAML
- name: Include dependencies
|
|
include_role:
|
|
name: '{{ item }}'
|
|
loop:
|
|
- dev-fakeroot
|
|
- dev-git
|
|
- dev-base-devel
|
|
|
|
- name: Install yay build prerequisites
|
|
community.general.pacman:
|
|
name:
|
|
- base-devel
|
|
- patch
|
|
state: present
|
|
|
|
- name: Create the AUR builder user
|
|
become: true
|
|
ansible.builtin.user:
|
|
name: "{{ AUR_BUILDER_USER }}"
|
|
create_home: yes
|
|
group: "{{ AUR_BUILDER_GROUP }}"
|
|
|
|
- name: Allow AUR builder to run pacman without password
|
|
become: true
|
|
ansible.builtin.lineinfile:
|
|
path: "{{ AUR_BUILDER_SUDOERS_PATH }}"
|
|
line: '{{ AUR_BUILDER_USER }} ALL=(ALL) NOPASSWD: /usr/bin/pacman'
|
|
create: yes
|
|
validate: 'visudo -cf %s'
|
|
|
|
- name: Clone yay from AUR
|
|
become: true
|
|
become_user: "{{ AUR_BUILDER_USER }}"
|
|
git:
|
|
repo: https://aur.archlinux.org/yay.git
|
|
dest: "/home/{{ AUR_BUILDER_USER }}/yay"
|
|
clone: yes
|
|
update: yes
|
|
|
|
- name: Build and install yay
|
|
become: true
|
|
become_user: "{{ AUR_BUILDER_USER }}"
|
|
shell: |
|
|
cd /home/{{ AUR_BUILDER_USER }}/yay
|
|
makepkg -si --noconfirm
|
|
args:
|
|
creates: /usr/bin/yay
|
|
|
|
- name: upgrade the system using yay, only act on AUR packages.
|
|
become: true
|
|
become_user: "{{ AUR_BUILDER_USER }}"
|
|
kewlfft.aur.aur:
|
|
upgrade: yes
|
|
use: "{{ AUR_HELPER }}"
|
|
aur_only: yes
|
|
when: MODE_UPDATE | bool
|
|
|
|
- include_tasks: utils/once_finalize.yml
|