ansible/roles/gitea/tasks/main.yml
Salt 67f636129c Rewrite app.ini based on pregenerated one
The one on the wiki is ass and misses a couple keys that HAVE to be generated
This fixes me not being able to upload with SSH
2020-04-30 12:33:04 -05:00

123 lines
3.6 KiB
YAML

#!/usr/bin/ansible-playbook
# vim:ft=ansible:
---
- name: Set up Gitea
block:
- name: Set up MySQL
block:
- name: Create DB
mysql_db:
name: gitea
login_user: root
login_password: "{{ mysql_root_password }}"
state: present
notify: gitea add default user
- name: Create user
mysql_user:
name: gitea
host: localhost
password: "{{ gitea_mysql_password }}"
priv: "gitea.*:ALL,GRANT"
login_user: root
login_password: "{{ mysql_root_password }}"
- name: Set up Apache
block:
- name: Enable modules
command:
cmd: a2enmod "{{ item }}"
creates: "/etc/apache2/mods-enabled/{{ item }}.load"
loop:
- proxy
- proxy_http
notify: restart apache
- name: Template out vhost
template:
src: "apache2-vhost-ssl.conf"
dest: "/etc/apache2/sites-available/{{ gitea_url }}.conf"
notify: restart apache
- name: Create webroot
file:
state: directory
path: "{{ gitea_webroot }}"
- name: Enable site
command:
cmd: "a2ensite {{ gitea_url }}.conf"
creates: "/etc/apache2/sites-enabled/{{ gitea_url }}.conf"
notify: restart apache
- name: Generate certificate
include_role:
name: https
vars:
website_url: "{{ gitea_url }}"
- name: Install git
apt:
name: git
- name: Install Gitea
get_url:
url: "https://dl.gitea.io/gitea/1.11.4/gitea-1.11.4-linux-amd64"
dest: "/usr/local/bin/gitea"
mode: "0755"
- name: Create Gitea user
user:
name: git
password: "!"
home: "/home/git"
shell: "/bin/bash"
- name: Create directory structure
file:
state: directory
owner: git
group: git
mode: "0750"
path: "/var/lib/{{ item }}"
loop:
- "gitea"
- "gitea/custom"
- "gitea/data"
- "gitea/log"
- name: Create config directory
file:
state: directory
recurse: yes
mode: "0750"
owner: "root"
group: "git"
path: "/etc/gitea"
- name: Check for config
stat: path="/etc/gitea/app.ini"
register: p
- name: Deploy config
block:
- name: Generate INTERNAL_TOKEN
command: /usr/local/bin/gitea generate secret INTERNAL_TOKEN
register: gitea_internal_token
- name: Generate SECRET_KEY
command: /usr/local/bin/gitea generate secret SECRET_KEY
register: gitea_secret_key
- name: Generate JWT_SECRET
command: /usr/local/bin/gitea generate secret JWT_SECRET
register: gitea_jwt_secret
- name: Generate LFS_JWT_SECRET
command: /usr/local/bin/gitea generate secret LFS_JWT_SECRET
register: gitea_lfs_jwt_secret
- name: Template out app.ini
template:
src: "app.ini"
dest: "/etc/gitea/app.ini"
mode: "0640"
owner: "root"
group: "git"
when: not p.stat.exists
- name: Template out service
template:
src: "gitea.service"
dest: "/etc/systemd/system/gitea.service"
notify: restart gitea
- name: Start and enable service
systemd:
daemon_reload: yes
name: "gitea.service"
enabled: yes
state: "started"
become: yes