89 lines
2.1 KiB
YAML
89 lines
2.1 KiB
YAML
---
|
|
- name: Install dependencies
|
|
apt:
|
|
name: [nginx, docker.io, docker-compose-v2]
|
|
state: present
|
|
update_cache: true
|
|
|
|
- name: Enable and start Docker
|
|
systemd:
|
|
name: docker
|
|
enabled: true
|
|
state: started
|
|
|
|
- name: Create gitea data directory
|
|
file:
|
|
path: "{{ gitea_data_dir }}"
|
|
state: directory
|
|
owner: root
|
|
group: root
|
|
mode: "0700"
|
|
|
|
- name: Deploy docker-compose file
|
|
template:
|
|
src: docker-compose.yml.j2
|
|
dest: "{{ gitea_data_dir }}/docker-compose.yml"
|
|
mode: "0600"
|
|
notify: Restart gitea
|
|
|
|
- name: Start gitea
|
|
community.docker.docker_compose_v2:
|
|
project_src: "{{ gitea_data_dir }}"
|
|
state: present
|
|
|
|
# ─── Cloudflare Origin Certificate ───────────────────────────────────────────
|
|
|
|
- name: Create SSL directory
|
|
file:
|
|
path: /etc/nginx/ssl
|
|
state: directory
|
|
owner: root
|
|
group: root
|
|
mode: "0700"
|
|
|
|
- name: Install Cloudflare origin certificate
|
|
copy:
|
|
content: "{{ cf_origin_cert }}"
|
|
dest: /etc/nginx/ssl/cf-origin.pem
|
|
owner: root
|
|
group: root
|
|
mode: "0600"
|
|
notify: Reload nginx
|
|
|
|
- name: Install Cloudflare origin key
|
|
copy:
|
|
content: "{{ cf_origin_key }}"
|
|
dest: /etc/nginx/ssl/cf-origin.key
|
|
owner: root
|
|
group: root
|
|
mode: "0600"
|
|
notify: Reload nginx
|
|
|
|
# ─── nginx ────────────────────────────────────────────────────────────────────
|
|
|
|
- name: Deploy nginx config
|
|
template:
|
|
src: nginx.conf.j2
|
|
dest: /etc/nginx/sites-available/gitea
|
|
mode: "0644"
|
|
notify: Reload nginx
|
|
|
|
- name: Enable nginx site
|
|
file:
|
|
src: /etc/nginx/sites-available/gitea
|
|
dest: /etc/nginx/sites-enabled/gitea
|
|
state: link
|
|
notify: Reload nginx
|
|
|
|
- name: Remove nginx default site
|
|
file:
|
|
path: /etc/nginx/sites-enabled/default
|
|
state: absent
|
|
notify: Reload nginx
|
|
|
|
- name: Ensure nginx is started
|
|
systemd:
|
|
name: nginx
|
|
enabled: true
|
|
state: started
|