125 lines
3.5 KiB
YAML
125 lines
3.5 KiB
YAML
---
|
|
- name: Stop container service
|
|
ansible.builtin.systemd:
|
|
name: container-gogs
|
|
state: stopped
|
|
become: true
|
|
register: result_gogs_systemd_stop
|
|
failed_when: "result_gogs_systemd_stop is failed and 'Could not find the requested service' not in result_gogs_systemd_stop.msg"
|
|
|
|
- name: Check if gogs container is running
|
|
command: 'podman ps -q --filter "name=gogs"'
|
|
changed_when: false
|
|
register: podman_ps
|
|
become: true
|
|
|
|
- name: Assert that no gogs container is running
|
|
ansible.builtin.assert:
|
|
that:
|
|
- podman_ps.stdout_lines | length == 0
|
|
|
|
- name: Check if restore from backup is already done
|
|
stat:
|
|
path: /mnt/volumes/restore_states/gogs_restored
|
|
register: gogs_restored_flag
|
|
|
|
- name: Setup volume
|
|
ansible.builtin.include_role:
|
|
name: role_setup_volume
|
|
vars:
|
|
volume: "{{ item }}"
|
|
with_items:
|
|
- name: gogs_data
|
|
size: 1
|
|
vol_type: classic
|
|
when: not gogs_restored_flag.stat.exists
|
|
|
|
- name: change ownership of duplicity working directories
|
|
ansible.builtin.file:
|
|
path: "{{ item }}"
|
|
owner: "{{ LINUX_USERNAME }}"
|
|
group: "{{ LINUX_USERNAME }}"
|
|
become: true
|
|
with_items:
|
|
- "{{ DUPLICITY_WORKDIR }}"
|
|
- "{{ DUPLICITY_ARCHIVE_DIR }}"
|
|
when: not gogs_restored_flag.stat.exists
|
|
|
|
- name: restore volume backup
|
|
ansible.builtin.command:
|
|
cmd: "duplicity restore --archive-dir {{ DUPLICITY_ARCHIVE_DIR }} --name {{ item }} swift://{{ item }} /mnt/volumes/{{ item }}/data"
|
|
environment:
|
|
SWIFT_USERNAME: "{{ OS_USERNAME }}"
|
|
SWIFT_PASSWORD: "{{ OS_PASSWORD }}"
|
|
SWIFT_AUTHURL: "{{ OS_AUTH_URL }}"
|
|
SWIFT_REGIONNAME: "{{ SWIFT_REGIONNAME }}"
|
|
SWIFT_TENANTNAME: "{{ OS_TENANT_NAME }}"
|
|
SWIFT_AUTHVERSION: "{{ OS_IDENTITY_API_VERSION }}"
|
|
PASSPHRASE: "{{ duplicity_passphrase }}"
|
|
# /usr/bin/duplicity uses "-s" python argument to prevent loading modules from user's python directory,
|
|
# this variable will override that.
|
|
PYTHONPATH: ".local/lib/python3.9/site-packages"
|
|
register: duplicity_result
|
|
with_items:
|
|
- gogs_data
|
|
failed_when: duplicity_result is failed and (duplicity_result.rc is not defined or duplicity_result.rc != 11)
|
|
changed_when: duplicity_result.rc is defined and duplicity_result.rc == 0
|
|
become: true
|
|
when: not gogs_restored_flag.stat.exists
|
|
|
|
- name: Create gogs container
|
|
containers.podman.podman_container:
|
|
name: gogs
|
|
image: docker.io/gogs/gogs:0.12.3
|
|
state: present
|
|
network:
|
|
- reverse-proxy
|
|
- mysqlnet
|
|
ports:
|
|
- 2222:22/tcp
|
|
volume:
|
|
- /mnt/volumes/gogs_data/data:/data:Z
|
|
generate_systemd:
|
|
path: /etc/systemd/system
|
|
become: true
|
|
|
|
- name: start/enable container service
|
|
ansible.builtin.systemd:
|
|
daemon-reload: true
|
|
name: container-gogs
|
|
state: started
|
|
enabled: true
|
|
become: true
|
|
|
|
- name: Add git.{{ DOMAIN }} to /etc/hosts
|
|
ansible.builtin.lineinfile:
|
|
path: "/etc/hosts"
|
|
line: "127.0.0.1 git.{{ DOMAIN }} git"
|
|
become: true
|
|
|
|
- name: Allow git SSH port
|
|
ansible.posix.firewalld:
|
|
zone: public
|
|
port: 2222/tcp
|
|
permanent: true
|
|
immediate: true
|
|
state: enabled
|
|
become: true
|
|
|
|
# A local volume is needed to store restore states
|
|
- name: Create /mnt/volumes/restore_states directory if it does not exist
|
|
ansible.builtin.file:
|
|
path: "/mnt/volumes/restore_states"
|
|
state: directory
|
|
mode: '0755'
|
|
become: true
|
|
when: not gogs_restored_flag.stat.exists
|
|
|
|
- name: Create gogs_restored state file
|
|
ansible.builtin.file:
|
|
path: "/mnt/volumes/restore_states/gogs_restored"
|
|
state: touch
|
|
mode: '0755'
|
|
become: true
|
|
when: not gogs_restored_flag.stat.exists
|