created dockerrepo preparings

roles/rproxy/tasks/main.yml

@@ -7,6 +7,11 @@
     - install
     - add_config
 
+  - name: Get IP address
+    ansible.builtin.shell:
+      cmd: hostname -I | awk '{print $1}'
+    register: IP
+
 - name: Install docker (Debian)
   ansible.builtin.apt:
     name:
@@ -58,7 +63,7 @@
 
     - name: Copy docker-compose
       ansible.builtin.template:
-        src: templates/docker-compose.yml.j2
+        src: templates/docker-compose.rproxy.yml.j2
         dest: "{{ rproxy_dir }}/docker-compose.yml"
 
     - name: Copy nginx.conf
@@ -83,11 +88,6 @@
 
 - name: Create https repository
   block:
-    - name: Get IP address
-      ansible.builtin.shell:
-        cmd: hostname -I | awk '{print $1}'
-      register: IP
-
     - name: Create repo dir
       ansible.builtin.file:
         path: "{{ rproxy_dir }}/repo"
@@ -137,6 +137,56 @@
         restarted: true
   tags: install
 
+- name: Create docker repository
+  block:
+    - name: Create repo dir
+      ansible.builtin.file:
+        path: "{{ dockerrepo_dir }}/repo"
+        state: directory
+
+    - name: Create certs dir
+      ansible.builtin.file:
+        path: "{{ dockerrepo_dir }}/certs"
+        state: directory
+
+    - name: Copy dockerrepo certificate cnf
+      ansible.builtin.template:
+        src: templates/dockerrepo.cnf.j2
+        dest: '{{ dockerrepo_dir }}/certs/dockerrepo.cnf'
+
+    - name: Generate dockerrepo certificate key
+      ansible.builtin.shell:
+        cmd: 'openssl genrsa -out {{ dockerrepo_dir }}/certs/dockerrepo.key 2048'
+
+    - name: Generate dockerrepo csr
+      ansible.builtin.shell:
+        cmd: 'openssl req -key {{ dockerrepo_dir }}/certs/dockerrepo.key -new -out {{ dockerrepo_dir }}/certs/dockerrepo.csr -config {{ dockerrepo_dir }}/certs/dockerrepo.cnf'
+
+    - name: Sign dockerrepo certificate
+      ansible.builtin.shell:
+        cmd: 'openssl x509 -req -CA {{ rproxy_dir }}/certs/RootCA.crt -CAkey {{ rproxy_dir }}/certs/RootCA.key -in {{ dockerrepo_dir }}/certs/dockerrepo.csr -out {{ dockerrepo_dir }}/certs/dockerrepo.crt -CAcreateserial -extfile {{ dockerrepo_dir }}/certs/dockerrepo.cnf -days 365 -extensions v3_x509'
+
+    - name: Create fullchain certificate
+      ansible.builtin.shell:
+        cmd: 'cat {{ rproxy_dir }}/certs/RootCA.crt >> {{ dockerrepo_dir }}/certs/dockerrepo.crt'
+
+    - name: Delete csr
+      ansible.builtin.file:
+        path: "{{ dockerrepo_dir }}/certs/dockerrepo.csr"
+        state: absent
+
+    - name: Delete cnf
+      ansible.builtin.file:
+        path: "{{ dockerrepo_dir }}/certs/dockerrepo.cnf"
+        state: absent
+
+    - name: Restart rproxy
+      community.docker.docker_compose:
+        project_src: "{{ dockerrepo_dir }}"
+        build: false
+        restarted: true
+  tags: install
+
 - name: Create configs
   block:
     - name: Copy server.conf