forked from LemmyNet/lemmy-ansible
-
Notifications
You must be signed in to change notification settings - Fork 0
/
lemmy.yml
198 lines (173 loc) · 6.86 KB
/
lemmy.yml
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
175
176
177
178
179
180
181
182
183
184
185
186
187
188
189
190
191
192
193
194
195
196
197
198
---
- hosts: all
# Install python if required
# https://www.josharcher.uk/code/ansible-python-connection-failure-ubuntu-server-1604/
gather_facts: False
pre_tasks:
- name: check lemmy_base_dir
fail:
msg: "`lemmy_base_dir` is unset. if you are upgrading from an older version, add `lemmy_base_dir=/lemmy` to your inventory file."
when: lemmy_base_dir is not defined
- name: install python for Ansible
# python2-minimal instead of python-minimal for ubuntu 20.04 and up
raw: test -e /usr/bin/python || (apt -y update && apt install -y python3-minimal python3-setuptools)
args:
executable: /bin/bash
register: output
changed_when: output.stdout != ''
- setup: # gather facts
tasks:
- name: Install aptitude
apt:
name: aptitude
state: latest
update_cache: true
- name: install dependencies
apt:
state: latest
update_cache: true
pkg:
- "nginx"
- "certbot"
- "python3-certbot-nginx"
- "apt-transport-https"
- "ca-certificates"
- "curl"
- "gnupg"
- "software-properties-common"
- "python3-pip"
- "virtualenv"
- "python3-setuptools"
- name: Configure Docker apt repo for Ubuntu < 22.04
when: ansible_distribution == 'Ubuntu' and ansible_distribution_version < '22.04'
block:
- name: Add Docker GPG apt Key
apt_key:
url: https://download.docker.com/linux/ubuntu/gpg
state: present
- name: Add Docker Repository
apt_repository:
repo: deb https://download.docker.com/linux/ubuntu focal stable
state: present
# based on https://docs.docker.com/engine/install/debian/
# and https://docs.docker.com/engine/install/ubuntu/
# note that Debian and Ubuntu use the same key
- name: Configure Docker apt repo for Debian or Ubuntu >= 22.04
when: (ansible_distribution == 'Debian') or
(ansible_distribution == 'Ubuntu' and ansible_distribution_version >= '22.04')
block:
- name: Download Docker GPG Key
get_url:
url: https://download.docker.com/linux/{{ ansible_distribution | lower }}/gpg
dest: /etc/apt/keyrings/docker.asc
checksum: sha256:1500c1f56fa9e26b9b8f42452a553675796ade0807cdce11975eb98170b3a570
- name: Add Docker apt repo
apt_repository:
repo: "deb [arch=amd64 signed-by=/etc/apt/keyrings/docker.asc] https://download.docker.com/linux/{{ ansible_distribution | lower }} {{ ansible_distribution_release }} stable"
state: present
- name: Update apt and install docker-ce
apt:
name: docker-ce
state: latest
update_cache: true
- name: Install Docker Module and docker-compose for Python
pip:
name:
- docker
- docker-compose
state: latest
- name: copy docker config
copy: src='../files/docker-daemon.json' dest='/etc/docker/daemon.json' mode='0644'
- name: request initial letsencrypt certificate
command: certbot certonly --nginx --agree-tos --cert-name '{{ domain }}' -d '{{ domain }}' -m '{{ letsencrypt_contact_email }}'
args:
creates: "/etc/letsencrypt/live/{{domain}}/privkey.pem"
- name: create lemmy folder
file:
path: "{{item.path}}"
owner: "{{item.owner}}"
state: directory
with_items:
- path: "{{lemmy_base_dir}}/{{domain}}/"
owner: "root"
- path: "{{lemmy_base_dir}}/{{domain}}/volumes/"
owner: "root"
- path: "{{lemmy_base_dir}}/{{domain}}/volumes/pictrs/"
owner: "991"
- block:
- set_fact:
lemmy_port: "{{ 32767 |random(start=1024) }}"
- name: add template files
template:
src: "{{item.src}}"
dest: "{{item.dest}}"
mode: "{{item.mode}}"
with_items:
- src: "templates/docker-compose.yml"
dest: "{{lemmy_base_dir}}/{{domain}}/docker-compose.yml"
mode: "0600"
- src: "templates/nginx_internal.conf"
dest: "{{lemmy_base_dir}}/{{domain}}/nginx_internal.conf"
mode: "0644"
- src: "templates/nginx.conf"
dest: "/etc/nginx/sites-available/{{domain}}.conf"
mode: "0644"
vars:
lemmy_docker_image: "dessalines/lemmy:{{ lemmy_version | default( lookup('file', 'VERSION') )}}"
lemmy_docker_ui_image: "dessalines/lemmy-ui:{{ lemmy_ui_version | default(lemmy_version | default(lookup('file', 'VERSION')))}}"
- block:
- name: gather stats on site enabled config
stat:
path: "/etc/nginx/sites-enabled/{{domain}}.conf"
register: reg_enabled
- name: remove if regular file (legacy) instead of symlink
file:
path: "/etc/nginx/sites-enabled/{{domain}}.conf"
state: absent
when: reg_enabled.stat.exists and reg_enabled.stat.isreg
- name: enable nginx site
file:
src: "../sites-available/{{domain}}.conf"
dest: "/etc/nginx/sites-enabled/{{domain}}.conf"
state: link
- name: add the config.hjson
template:
src: "inventory/host_vars/{{domain}}/config.hjson"
dest: "{{lemmy_base_dir}}/{{domain}}/lemmy.hjson"
mode: "0600"
owner: "1000"
group: "1000"
- name: add the customPostgresql.conf
template:
src: "inventory/host_vars/{{domain}}/customPostgresql.conf"
dest: "{{lemmy_base_dir}}/{{domain}}/customPostgresql.conf"
mode: "0600"
owner: "1000"
group: "1000"
vars:
postgres_password: "{{ lookup('password', 'inventory/host_vars/{{domain}}/passwords/postgres chars=ascii_letters,digits') }}"
- name: enable and start docker service
systemd:
name: docker
enabled: yes
state: started
# - name: Change the working directory to /opt
# ansible.builtin.shell:
# cmd: find . # To list files under /opt directory
# chdir: /opt # changes to /opt directory
# register: shell_output
# - debug: var=shell_output
- name: start docker-compose
docker_compose:
project_src: "{{lemmy_base_dir}}/{{domain}}"
state: present
pull: yes
remove_orphans: yes
- name: reload nginx with new config
shell: nginx -s reload
- name: certbot renewal cronjob
cron:
special_time: daily
name: certbot-renew-lemmy
user: root
job: "certbot certonly --nginx --cert-name '{{ domain }}' -d '{{ domain }}' --deploy-hook 'nginx -s reload'"