Refactor anislbe role
* Divide tasks to different files
This commit is contained in:
64
roles/rproxy/tasks/dockerrepo.yml
Normal file
64
roles/rproxy/tasks/dockerrepo.yml
Normal file
@@ -0,0 +1,64 @@
|
||||
---
|
||||
- name: Create docker repository
|
||||
block:
|
||||
- name: Remove dockerrepo dir
|
||||
ansible.builtin.file:
|
||||
path: "{{ dockerrepo_dir }}"
|
||||
state: absent
|
||||
|
||||
- name: Create dockerrepo dir
|
||||
ansible.builtin.file:
|
||||
path: "{{ dockerrepo_dir }}"
|
||||
state: directory
|
||||
|
||||
- name: Create repo dir
|
||||
ansible.builtin.file:
|
||||
path: "{{ dockerrepo_data_dir }}"
|
||||
state: directory
|
||||
|
||||
- name: Create certs dir
|
||||
ansible.builtin.file:
|
||||
path: "{{ dockerrepo_dir }}/certs"
|
||||
state: directory
|
||||
|
||||
- name: Copy docker-compose
|
||||
ansible.builtin.template:
|
||||
src: templates/docker-compose.dockerrepo.yml.j2
|
||||
dest: "{{ dockerrepo_dir }}/docker-compose.yml"
|
||||
|
||||
- name: Copy dockerrepo certificate cnf
|
||||
ansible.builtin.template:
|
||||
src: templates/dockerrepo.cnf.j2
|
||||
dest: '{{ dockerrepo_dir }}/certs/dockerrepo.cnf'
|
||||
|
||||
- name: Generate dockerrepo certificate key
|
||||
ansible.builtin.shell:
|
||||
cmd: 'openssl genrsa -out {{ dockerrepo_dir }}/certs/dockerrepo.key 2048'
|
||||
|
||||
- name: Generate dockerrepo csr
|
||||
ansible.builtin.shell:
|
||||
cmd: 'openssl req -key {{ dockerrepo_dir }}/certs/dockerrepo.key -new -out {{ dockerrepo_dir }}/certs/dockerrepo.csr -config {{ dockerrepo_dir }}/certs/dockerrepo.cnf'
|
||||
|
||||
- name: Sign dockerrepo certificate
|
||||
ansible.builtin.shell:
|
||||
cmd: 'openssl x509 -req -CA {{ rproxy_dir }}/certs/RootCA.crt -CAkey {{ rproxy_dir }}/certs/RootCA.key -in {{ dockerrepo_dir }}/certs/dockerrepo.csr -out {{ dockerrepo_dir }}/certs/dockerrepo.crt -CAcreateserial -extfile {{ dockerrepo_dir }}/certs/dockerrepo.cnf -days 365 -extensions v3_x509'
|
||||
|
||||
- name: Create fullchain certificate
|
||||
ansible.builtin.shell:
|
||||
cmd: 'cat {{ rproxy_dir }}/certs/RootCA.crt >> {{ dockerrepo_dir }}/certs/dockerrepo.crt'
|
||||
|
||||
- name: Delete csr
|
||||
ansible.builtin.file:
|
||||
path: "{{ dockerrepo_dir }}/certs/dockerrepo.csr"
|
||||
state: absent
|
||||
|
||||
- name: Delete cnf
|
||||
ansible.builtin.file:
|
||||
path: "{{ dockerrepo_dir }}/certs/dockerrepo.cnf"
|
||||
state: absent
|
||||
|
||||
- name: Restart rproxy
|
||||
community.docker.docker_compose:
|
||||
project_src: "{{ dockerrepo_dir }}"
|
||||
build: false
|
||||
restarted: true
|
||||
Reference in New Issue
Block a user