101 lines
2.5 KiB
YAML
101 lines
2.5 KiB
YAML
---
|
|
- name: Gitea setup
|
|
hosts: gitea
|
|
|
|
vars:
|
|
username: matt
|
|
nas_host: nas.localdomain
|
|
|
|
mounts:
|
|
gitea_data:
|
|
local: "/mnt/gitea_data"
|
|
remote: "/var/nfs/shared/gitea_data"
|
|
gitea_repos:
|
|
local: "/mnt/gitea_repos"
|
|
remote: "/var/nfs/shared/gitea_repos"
|
|
gitea_backups:
|
|
local: "/mnt/gitea_backups"
|
|
remote: "/var/nfs/shared/gitea_backups"
|
|
|
|
tasks:
|
|
- name: Install Podman
|
|
become: true
|
|
ansible.builtin.package:
|
|
name: podman
|
|
state: present
|
|
|
|
- name: Allow containers to access NFS mounts
|
|
become: true
|
|
ansible.posix.seboolean:
|
|
name: virt_use_nfs
|
|
state: true
|
|
persistent: true
|
|
|
|
- name: Unmount NFS volumes before creating mountpoint directories
|
|
become: true
|
|
ansible.posix.mount:
|
|
path: "{{ item.value.local }}"
|
|
state: unmounted
|
|
loop: "{{ mounts | dict2items }}"
|
|
|
|
- name: Create mountpoint directories for gitea
|
|
become: true
|
|
ansible.builtin.file:
|
|
path: "{{ item.value.local }}"
|
|
state: directory
|
|
mode: "0755"
|
|
loop: "{{ mounts | dict2items }}"
|
|
|
|
- name: Mount NFS volumes for gitea
|
|
become: true
|
|
ansible.posix.mount:
|
|
src: "192.168.1.160:{{ item.value.remote }}"
|
|
path: "{{ item.value.local }}"
|
|
opts: nfsvers=3,proto=tcp,rw
|
|
state: mounted
|
|
fstype: nfs
|
|
loop: "{{ mounts | dict2items }}"
|
|
|
|
- name: Open firewall ports for gitea
|
|
become: true
|
|
ansible.posix.firewalld:
|
|
port: "{{ item }}/tcp"
|
|
permanent: true
|
|
state: enabled
|
|
immediate: true
|
|
loop:
|
|
- 3002
|
|
- 2222
|
|
|
|
- name: Create shared container network
|
|
containers.podman.podman_network:
|
|
name: webservices
|
|
state: present
|
|
|
|
- name: Start gitea
|
|
containers.podman.podman_container:
|
|
name: gitea
|
|
image: docker.io/gitea/gitea:latest
|
|
restart_policy: always
|
|
network: webservices
|
|
label:
|
|
io.containers.autoupdate: registry
|
|
env:
|
|
USER_UID: "977"
|
|
USER_GID: "988"
|
|
TZ: Europe/London
|
|
volumes:
|
|
- /mnt/gitea_data:/data:z
|
|
- /mnt/gitea_repos:/data/git/repositories:z
|
|
ports:
|
|
- "3002:3000"
|
|
- "2222:22"
|
|
state: started
|
|
|
|
- name: Enable podman auto-update timer
|
|
become: true
|
|
ansible.builtin.systemd:
|
|
name: podman-auto-update.timer
|
|
enabled: true
|
|
state: started
|