roles/phoneof/tasks/main.yml


1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35

---
- name: Download internal cert
  ansible.builtin.get_url:
    url: https://ca.internal.simponic.xyz/roots.pem
    validate_certs: false
    dest: /etc/roots.pem
    checksum: sha256:12a1d52af6f4073c339946e8c67bdd48fa85590480385fcce7f16b6b60d40831

- name: ensure phoneof docker/compose exist
  file:
    path: /etc/docker/compose/phoneof
    state: directory
    owner: root
    group: root
    mode: 0700

- name: ensure phoneof db exist
  file:
    path: /etc/docker/compose/phoneof/db
    state: directory
    mode: 0777

- name: build phoneof docker-compose.yml.j2
  template:
    src: ../templates/docker-compose.yml.j2
    dest: /etc/docker/compose/phoneof/docker-compose.yml
    owner: root
    group: root
    mode: u=rw,g=r,o=r

- name: daemon-reload and enable phoneof
  ansible.builtin.systemd_service:
    state: restarted
    enabled: true
    name: docker-compose@phoneof