67 lines
2.1 KiB
YAML
67 lines
2.1 KiB
YAML
---
|
|
- name: Setup volume
|
|
ansible.builtin.include_role:
|
|
name: role_setup_volume
|
|
vars:
|
|
volume: "{{ item }}"
|
|
with_items:
|
|
- name: gogs_data
|
|
size: 1
|
|
vol_type: classic
|
|
|
|
- name: change ownership of duplicity working directories
|
|
ansible.builtin.file:
|
|
path: "{{ item }}"
|
|
owner: "{{ LINUX_USERNAME }}"
|
|
group: "{{ LINUX_USERNAME }}"
|
|
become: true
|
|
with_items:
|
|
- "{{ DUPLICITY_WORKDIR }}"
|
|
- "{{ DUPLICITY_ARCHIVE_DIR }}"
|
|
|
|
- name: restore volume backup
|
|
ansible.builtin.command:
|
|
cmd: "duplicity restore --file-to-restore {{ item }}.tar.gz --do-not-restore-ownership --archive-dir {{ DUPLICITY_ARCHIVE_DIR }} swift://backup_ovh1 {{ DUPLICITY_WORKDIR }}/{{ item }}.tar.gz"
|
|
environment:
|
|
SWIFT_USERNAME: "{{ OS_USERNAME }}"
|
|
SWIFT_PASSWORD: "{{ OS_PASSWORD }}"
|
|
SWIFT_AUTHURL: "{{ OS_AUTH_URL }}"
|
|
SWIFT_REGIONNAME: "{{ SWIFT_REGIONNAME }}"
|
|
SWIFT_TENANTNAME: "{{ OS_TENANT_NAME }}"
|
|
SWIFT_AUTHVERSION: "{{ OS_IDENTITY_API_VERSION }}"
|
|
PASSPHRASE: "{{ DUPLICITY_PASSPHRASE}}"
|
|
# /usr/bin/duplicity uses "-s" python argument to prevent loading modules from user's python directory,
|
|
# this variable will override that.
|
|
PYTHONPATH: ".local/lib/python3.9/site-packages"
|
|
register: duplicity_result
|
|
with_items:
|
|
- gogs_data
|
|
failed_when: duplicity_result is failed and (duplicity_result.rc is not defined or duplicity_result.rc != 11)
|
|
changed_when: duplicity_result.rc is defined and duplicity_result.rc == 0
|
|
|
|
- name: Unarchive volume backup
|
|
ansible.builtin.command:
|
|
cmd: "tar -xzvf {{ DUPLICITY_WORKDIR }}/{{ item }}.tar.gz -C /mnt/volumes/{{ item }}/data --strip 2"
|
|
become: true
|
|
with_items:
|
|
- gogs_data
|
|
|
|
- name: Create gogs container
|
|
containers.podman.podman_container:
|
|
name: gogs
|
|
image: docker.io/gogs/gogs:0.12.3
|
|
network:
|
|
- reverse-proxy
|
|
- mysqlnet
|
|
ports:
|
|
- 2222:22/tcp
|
|
volume:
|
|
- /mnt/volumes/gogs_data/data:/data:Z
|
|
become: true
|
|
|
|
- name: Add git.{{ DOMAIN }} to /etc/hosts
|
|
ansible.builtin.lineinfile:
|
|
path: "/etc/hosts"
|
|
line: "{{ ansible_host }} git.{{ DOMAIN }} git"
|
|
become: true
|