Salt
67f636129c
The one on the wiki is ass and misses a couple keys that HAVE to be generated This fixes me not being able to upload with SSH
123 lines
3.6 KiB
YAML
123 lines
3.6 KiB
YAML
#!/usr/bin/ansible-playbook
|
|
# vim:ft=ansible:
|
|
---
|
|
- name: Set up Gitea
|
|
block:
|
|
- name: Set up MySQL
|
|
block:
|
|
- name: Create DB
|
|
mysql_db:
|
|
name: gitea
|
|
login_user: root
|
|
login_password: "{{ mysql_root_password }}"
|
|
state: present
|
|
notify: gitea add default user
|
|
- name: Create user
|
|
mysql_user:
|
|
name: gitea
|
|
host: localhost
|
|
password: "{{ gitea_mysql_password }}"
|
|
priv: "gitea.*:ALL,GRANT"
|
|
login_user: root
|
|
login_password: "{{ mysql_root_password }}"
|
|
- name: Set up Apache
|
|
block:
|
|
- name: Enable modules
|
|
command:
|
|
cmd: a2enmod "{{ item }}"
|
|
creates: "/etc/apache2/mods-enabled/{{ item }}.load"
|
|
loop:
|
|
- proxy
|
|
- proxy_http
|
|
notify: restart apache
|
|
- name: Template out vhost
|
|
template:
|
|
src: "apache2-vhost-ssl.conf"
|
|
dest: "/etc/apache2/sites-available/{{ gitea_url }}.conf"
|
|
notify: restart apache
|
|
- name: Create webroot
|
|
file:
|
|
state: directory
|
|
path: "{{ gitea_webroot }}"
|
|
- name: Enable site
|
|
command:
|
|
cmd: "a2ensite {{ gitea_url }}.conf"
|
|
creates: "/etc/apache2/sites-enabled/{{ gitea_url }}.conf"
|
|
notify: restart apache
|
|
- name: Generate certificate
|
|
include_role:
|
|
name: https
|
|
vars:
|
|
website_url: "{{ gitea_url }}"
|
|
- name: Install git
|
|
apt:
|
|
name: git
|
|
- name: Install Gitea
|
|
get_url:
|
|
url: "https://dl.gitea.io/gitea/1.11.4/gitea-1.11.4-linux-amd64"
|
|
dest: "/usr/local/bin/gitea"
|
|
mode: "0755"
|
|
- name: Create Gitea user
|
|
user:
|
|
name: git
|
|
password: "!"
|
|
home: "/home/git"
|
|
shell: "/bin/bash"
|
|
- name: Create directory structure
|
|
file:
|
|
state: directory
|
|
owner: git
|
|
group: git
|
|
mode: "0750"
|
|
path: "/var/lib/{{ item }}"
|
|
loop:
|
|
- "gitea"
|
|
- "gitea/custom"
|
|
- "gitea/data"
|
|
- "gitea/log"
|
|
- name: Create config directory
|
|
file:
|
|
state: directory
|
|
recurse: yes
|
|
mode: "0750"
|
|
owner: "root"
|
|
group: "git"
|
|
path: "/etc/gitea"
|
|
- name: Check for config
|
|
stat: path="/etc/gitea/app.ini"
|
|
register: p
|
|
- name: Deploy config
|
|
block:
|
|
- name: Generate INTERNAL_TOKEN
|
|
command: /usr/local/bin/gitea generate secret INTERNAL_TOKEN
|
|
register: gitea_internal_token
|
|
- name: Generate SECRET_KEY
|
|
command: /usr/local/bin/gitea generate secret SECRET_KEY
|
|
register: gitea_secret_key
|
|
- name: Generate JWT_SECRET
|
|
command: /usr/local/bin/gitea generate secret JWT_SECRET
|
|
register: gitea_jwt_secret
|
|
- name: Generate LFS_JWT_SECRET
|
|
command: /usr/local/bin/gitea generate secret LFS_JWT_SECRET
|
|
register: gitea_lfs_jwt_secret
|
|
- name: Template out app.ini
|
|
template:
|
|
src: "app.ini"
|
|
dest: "/etc/gitea/app.ini"
|
|
mode: "0640"
|
|
owner: "root"
|
|
group: "git"
|
|
when: not p.stat.exists
|
|
- name: Template out service
|
|
template:
|
|
src: "gitea.service"
|
|
dest: "/etc/systemd/system/gitea.service"
|
|
notify: restart gitea
|
|
- name: Start and enable service
|
|
systemd:
|
|
daemon_reload: yes
|
|
name: "gitea.service"
|
|
enabled: yes
|
|
state: "started"
|
|
become: yes
|