diff --git a/roles/wedding/tasks/main.yml b/roles/wedding/tasks/main.yml new file mode 100644 index 0000000..d06ec27 --- /dev/null +++ b/roles/wedding/tasks/main.yml @@ -0,0 +1,44 @@ +--- +- name: Include user role + ansible.builtin.include_role: + name: user + vars: + user_username: "{{ wedding_username }}" + user_password: "{{ wedding_password }}" +- name: Login to ghcr registry and create ${XDG_RUNTIME_DIR}/containers/auth.json + become: true + become_user: "{{ wedding_username }}" + containers.podman.podman_login: + username: "{{ github_registry_user }}" + password: "{{ github_registry_token }}" + registry: ghcr.io +- name: Create the wedding container + ansible.builtin.include_role: + name: podman-container + apply: + become: true + become_user: "{{ wedding_username }}" + vars: + podman_container_name: wedding-server + podman_container_image: ghcr.io/kleinendorst/wedding + podman_container_tag: "{{ wedding_version }}" + podman_container_publish: + - 127.0.0.1:3001:3000 + podman_container_volumes: [] + podman_container_env: + DATABASE_HOST: 'localhost' # TODO: Needs to be fixed later... + DATABASE_PORT: 5432 + DATABASE_DBNAME: wedding + DATABASE_USER: "{{ postgres.user }}" + DATABASE_PASSWORD: "{{ postgres.password }}" + SESSION_SECRET: "{{ wedding_env.secret }}" + # NODE_ENV: production # TODO: Enable when ready for secure cookie testing... + WEDDING_FULL_ACCESS_CODE: "{{ wedding_env.full_access_code }}" + WEDDING_NIGHT_ACCESS_CODE: "{{ wedding_env.night_access_code }}" +- name: Include simple-reverse-proxy role + ansible.builtin.include_role: + name: simple-reverse-proxy + vars: + simple_reverse_proxy_external_port: 8443 + simple_reverse_proxy_internal_port: 3001 + simple_reverse_proxy_internal_subdomain: "{{ random_pre_proxy_domain_name }}" diff --git a/roles/wedding/vars/main/defaults.yml b/roles/wedding/vars/main/defaults.yml new file mode 100644 index 0000000..9a93ce6 --- /dev/null +++ b/roles/wedding/vars/main/defaults.yml @@ -0,0 +1,3 @@ +--- +wedding_username: wedding +wedding_version: 0.0.2 diff --git a/roles/wedding/vars/main/vault.yml b/roles/wedding/vars/main/vault.yml new file mode 100644 index 0000000..9f3ac2c --- /dev/null +++ b/roles/wedding/vars/main/vault.yml @@ -0,0 +1,36 @@ +$ANSIBLE_VAULT;1.1;AES256 +32363037313036373133333734616435666536343761383934643361333065323732626665363862 +3831653166656130366263346235393036346335333561610a316137613135386566633134356262 +63653030623064366661306230376530363162366363666364373333333434396432346537356431 +3432383934383661360a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