Kris Lamoureux
d2473533d5
- Upgrade base OS from Debian 11 to Rocky Linux 9 - Configure 100GB XFS filesystem with auto-expansion - Replace Docker with rootless Podman for improved security - Add nginx reverse proxy for non-privileged port handling - Move the Traefik dashboard from port 8443 to 9443 - Configure SELinux contexts for container operations
71 lines
1.8 KiB
YAML
71 lines
1.8 KiB
YAML
- name: Restart nginx
|
|
ansible.builtin.systemd:
|
|
name: nginx
|
|
state: restarted
|
|
|
|
- name: Restart MariaDB
|
|
ansible.builtin.service:
|
|
name: mariadb
|
|
state: restarted
|
|
listen: restart_mariadb
|
|
|
|
- name: Start podman compose project
|
|
ansible.builtin.command:
|
|
cmd: podman compose up -d
|
|
chdir: "/home/oci/webserver"
|
|
notify: Generate systemd service files
|
|
changed_when: false
|
|
become_user: oci
|
|
become: true
|
|
|
|
- name: Reload systemd user daemon
|
|
ansible.builtin.systemd:
|
|
daemon_reload: true
|
|
scope: user
|
|
notify: Enable systemd user service
|
|
become_user: oci
|
|
become: true
|
|
|
|
- name: Enable systemd user service
|
|
ansible.builtin.systemd:
|
|
name: webserver
|
|
enabled: true
|
|
scope: user
|
|
become_user: oci
|
|
become: true
|
|
|
|
- name: Grab Nextcloud container information
|
|
community.docker.docker_container_info:
|
|
name: "{{ webserver_root | basename }}_nextcloud_1"
|
|
listen: composeup_webserver
|
|
register: nextcloud_info
|
|
|
|
- name: Wait for Nextcloud to become available
|
|
ansible.builtin.wait_for:
|
|
host: "{{ nextcloud_info.container.NetworkSettings.Networks.traefik.IPAddress }}"
|
|
port: 80
|
|
listen: composeup_webserver
|
|
|
|
- name: Check Nextcloud status
|
|
ansible.builtin.command:
|
|
"docker exec --user www-data {{ webserver_root | basename }}_nextcloud_1
|
|
php occ status"
|
|
listen: composeup_webserver
|
|
register: nextcloud_status
|
|
|
|
- name: Import Nextcloud installation handlers
|
|
ansible.builtin.import_tasks: nextcloud.yml
|
|
listen: composeup_webserver
|
|
when:
|
|
- nextcloud_status.stderr[:26] == "Nextcloud is not installed"
|
|
- nextcloud_autoinstall
|
|
|
|
- name: Install webserver docker-compose.yml
|
|
ansible.builtin.copy:
|
|
src: docker-compose.yml
|
|
dest: /home/oci/webserver/compose.yml
|
|
mode: "600"
|
|
owner: oci
|
|
group: oci
|
|
notify: Generate systemd service files
|