mirror of
https://github.com/kevinveenbirkenbach/computer-playbook.git
synced 2025-09-24 11:06:24 +02:00
Kevin Veen-Birkenbach
e6803e5614
- Remove stray spaces after include_role: across many roles to ensure clean YAML and
consistent linting/formatting.
- Listmonk:
- Introduce LISTMONK_CONFIG_HOST = [ docker_compose.directories.config, 'config.toml' ] | path_join
- Use that var in the template task (dest) and the docker-compose volume mount
- Matrix:
- Build MATRIX_SYNAPSE_CONFIG_PATH_HOST, MATRIX_SYNAPSE_LOG_PATH_HOST, and
MATRIX_ELEMENT_CONFIG_PATH_HOST via path_join
- Mobilizon:
- Build mobilizon_host_conf_exs_file via path_join
- Keep get_app_conf strictness unchanged (defaults to True in our filter), so behavior
remains strict even though the explicit third arg was dropped
- Simpleicons:
- Build server.js and package.json host paths via path_join
- Numerous web-app roles (Confluence, Discourse, EspoCRM, Friendica, Funkwhale, Gitea,
GitLab, Jenkins, Joomla, Listmonk, Mailu, Mastodon, Matomo, Matrix, MediaWiki,
Mobilizon, Moodle, Nextcloud, OpenProject, Peertube, Pixelfed, Pretix, Roulette Wheel,
Snipe-IT, Syncope, Taiga, WordPress, XWiki, Yourls) and web-svc roles (coturn,
libretranslate, simpleicons) updated for consistent include_role formatting
Why:
- path_join avoids double slashes and missing separators across different config roots
- Consistent include_role: formatting improves readability and prevents linter noise
Ref:
- Conversation: https://chatgpt.com/share/68d14711-727c-800f-b454-7dc4c3c1f4cb
85 lines
2.6 KiB
YAML
85 lines
2.6 KiB
YAML
---
|
|
|
|
- name: "include docker-compose role"
|
|
include_role:
|
|
name: docker-compose
|
|
|
|
- name: Create {{ domains | get_domain(application_id) }}.conf if LDAP is exposed to internet
|
|
template:
|
|
src: "nginx.stream.conf.j2"
|
|
dest: "{{ NGINX.DIRECTORIES.STREAMS }}{{ domains | get_domain(application_id) }}.conf"
|
|
notify: restart openresty
|
|
when: applications | get_app_conf(application_id, 'network.public', True) | bool
|
|
|
|
- name: Remove {{ domains | get_domain(application_id) }}.conf if LDAP is not exposed to internet
|
|
file:
|
|
path: "{{ NGINX.DIRECTORIES.STREAMS }}{{ domains | get_domain(application_id) }}.conf"
|
|
state: absent
|
|
when: not applications | get_app_conf(application_id, 'network.public', True) | bool
|
|
|
|
- name: create docker network for LDAP, so that other applications can access it
|
|
community.docker.docker_network:
|
|
name: "{{ openldap_network }}"
|
|
state: present
|
|
ipam_config:
|
|
- subnet: "{{ networks.local[application_id].subnet }}"
|
|
|
|
- meta: flush_handlers
|
|
|
|
- name: "Wait for LDAP to be available"
|
|
wait_for:
|
|
host: "127.0.0.1"
|
|
port: "{{ ports.localhost.ldap[application_id] }}"
|
|
delay: 5
|
|
timeout: 120
|
|
state: started
|
|
|
|
- name: "Reset LDAP Credentials"
|
|
include_tasks: 01_credentials.yml
|
|
when:
|
|
- applications | get_app_conf(application_id, 'network.local')
|
|
- applications | get_app_conf(application_id, 'provisioning.credentials', True)
|
|
|
|
- name: "create directory {{openldap_ldif_host_path}}{{item}}"
|
|
file:
|
|
path: "{{openldap_ldif_host_path}}{{item}}"
|
|
state: directory
|
|
mode: "0755"
|
|
loop: "{{openldap_ldif_types}}"
|
|
|
|
- name: "Import LDIF Configuration"
|
|
include_tasks: ldifs_creation.yml
|
|
loop:
|
|
- configuration
|
|
loop_control:
|
|
loop_var: folder
|
|
when: applications | get_app_conf(application_id, 'provisioning.configuration', True)
|
|
|
|
- name: flush LDIF handlers
|
|
meta: flush_handlers
|
|
|
|
- name: install python-ldap
|
|
community.general.pacman:
|
|
name:
|
|
- python-ldap
|
|
state: present
|
|
|
|
- name: "Include Schemas (if enabled)"
|
|
include_tasks: 02_schemas.yml
|
|
when: applications | get_app_conf(application_id, 'provisioning.schemas', True)
|
|
|
|
- name: "Import LDAP Entries (if enabled)"
|
|
include_tasks: 03_users.yml
|
|
when: applications | get_app_conf(application_id, 'provisioning.users', True)
|
|
|
|
- name: "Import LDIF Data (if enabled)"
|
|
include_tasks: ldifs_creation.yml
|
|
loop:
|
|
- groups
|
|
loop_control:
|
|
loop_var: folder
|
|
when: applications | get_app_conf(application_id, 'provisioning.groups', True)
|
|
|
|
- name: "Add Objects to all users"
|
|
include_tasks: 04_update.yml
|
|
when: applications | get_app_conf(application_id, 'provisioning.update', True) |