From fdd85fb7355d43cf185d79d1f35de9d7d647e0c5 Mon Sep 17 00:00:00 2001 From: Elizabeth Hunt Date: Thu, 4 Jan 2024 01:40:27 -0500 Subject: add sso login --- roles/authelia/files/authelia/.gitignore | 2 ++ roles/authelia/tasks/main.yml | 30 ++++++++++++++++++++++++++ roles/authelia/templates/docker-compose.yml.j2 | 17 +++++++++++++++ 3 files changed, 49 insertions(+) create mode 100644 roles/authelia/files/authelia/.gitignore create mode 100644 roles/authelia/tasks/main.yml create mode 100644 roles/authelia/templates/docker-compose.yml.j2 (limited to 'roles/authelia') diff --git a/roles/authelia/files/authelia/.gitignore b/roles/authelia/files/authelia/.gitignore new file mode 100644 index 0000000..53c78ad --- /dev/null +++ b/roles/authelia/files/authelia/.gitignore @@ -0,0 +1,2 @@ +users_database.yml +configuration.yml diff --git a/roles/authelia/tasks/main.yml b/roles/authelia/tasks/main.yml new file mode 100644 index 0000000..c9abe44 --- /dev/null +++ b/roles/authelia/tasks/main.yml @@ -0,0 +1,30 @@ +--- +- name: ensure authelia docker/compose exist + file: + path: /etc/docker/compose/authelia + state: directory + owner: root + group: root + mode: 0700 + +- name: copy authelia config + copy: + src: ../files/authelia + dest: /etc/docker/compose/authelia/ + owner: root + group: root + mode: u=rw,g=r,o=r + +- name: build authelia docker-compose.yml.j2 + template: + src: ../templates/docker-compose.yml.j2 + dest: /etc/docker/compose/authelia/docker-compose.yml + owner: root + group: root + mode: u=rw,g=r,o=r + +- name: daemon-reload and enable authelia + ansible.builtin.systemd_service: + state: restarted + enabled: true + name: docker-compose@authelia diff --git a/roles/authelia/templates/docker-compose.yml.j2 b/roles/authelia/templates/docker-compose.yml.j2 new file mode 100644 index 0000000..b60545f --- /dev/null +++ b/roles/authelia/templates/docker-compose.yml.j2 @@ -0,0 +1,17 @@ +version: '3.3' + +services: + authelia: + image: authelia/authelia + container_name: authelia + volumes: + - ./authelia:/config + ports: + - 9091:9091 + restart: unless-stopped + redis: + image: redis:alpine + container_name: redis + volumes: + - ./redis:/data + restart: unless-stopped -- cgit v1.2.3-70-g09d2