kris
a1ef6e76a5
- Front git-over-SSH with host sshd and live key lookup - Build and load custom SELinux policies oci_log and gitea_ssh
43 lines
1.3 KiB
YAML
43 lines
1.3 KiB
YAML
- name: Install MariaDB
|
|
ansible.builtin.apt:
|
|
name: mariadb-server
|
|
state: present
|
|
|
|
- name: Set MariaDB restarted fact
|
|
ansible.builtin.set_fact:
|
|
mariadb_restarted: false
|
|
|
|
- name: Regather facts for the potentially new docker0 interface
|
|
ansible.builtin.setup:
|
|
|
|
- name: Change the bind-address to allow from docker0
|
|
ansible.builtin.lineinfile:
|
|
path: /etc/mysql/mariadb.conf.d/50-server.cnf
|
|
regex: "^bind-address"
|
|
line: "bind-address = {{ ansible_facts.docker0.ipv4.address }}"
|
|
notify: restart_mariadb
|
|
when: ansible_facts['docker0'] is defined
|
|
|
|
- name: Change the bind-address for rootless containers
|
|
ansible.builtin.lineinfile:
|
|
path: /etc/mysql/mariadb.conf.d/50-server.cnf
|
|
regexp: "^bind-address"
|
|
line: "bind-address = 0.0.0.0"
|
|
notify: restart_mariadb
|
|
when:
|
|
- ansible_facts['docker0'] is not defined
|
|
- podman_compose is defined
|
|
|
|
- name: Flush handlers to ensure MariaDB restarts immediately
|
|
ansible.builtin.meta: flush_handlers
|
|
tags: restart_mariadb
|
|
when: ansible_facts['docker0'] is defined or podman_compose is defined
|
|
|
|
- name: Allow database connections from Docker
|
|
community.general.ufw:
|
|
rule: allow
|
|
port: "3306"
|
|
proto: tcp
|
|
src: "{{ item }}"
|
|
loop: "{{ mariadb_trust | default(['169.254.0.0/16']) }}"
|