Refactor anislbe role

* Divide tasks to different files
This commit is contained in:
2025-06-08 02:55:09 +03:00
parent 26aa6b6cc3
commit 740968eac9
12 changed files with 299 additions and 258 deletions

View File

@@ -0,0 +1,64 @@
---
- name: Create docker repository
block:
- name: Remove dockerrepo dir
ansible.builtin.file:
path: "{{ dockerrepo_dir }}"
state: absent
- name: Create dockerrepo dir
ansible.builtin.file:
path: "{{ dockerrepo_dir }}"
state: directory
- name: Create repo dir
ansible.builtin.file:
path: "{{ dockerrepo_data_dir }}"
state: directory
- name: Create certs dir
ansible.builtin.file:
path: "{{ dockerrepo_dir }}/certs"
state: directory
- name: Copy docker-compose
ansible.builtin.template:
src: templates/docker-compose.dockerrepo.yml.j2
dest: "{{ dockerrepo_dir }}/docker-compose.yml"
- name: Copy dockerrepo certificate cnf
ansible.builtin.template:
src: templates/dockerrepo.cnf.j2
dest: '{{ dockerrepo_dir }}/certs/dockerrepo.cnf'
- name: Generate dockerrepo certificate key
ansible.builtin.shell:
cmd: 'openssl genrsa -out {{ dockerrepo_dir }}/certs/dockerrepo.key 2048'
- name: Generate dockerrepo csr
ansible.builtin.shell:
cmd: 'openssl req -key {{ dockerrepo_dir }}/certs/dockerrepo.key -new -out {{ dockerrepo_dir }}/certs/dockerrepo.csr -config {{ dockerrepo_dir }}/certs/dockerrepo.cnf'
- name: Sign dockerrepo certificate
ansible.builtin.shell:
cmd: 'openssl x509 -req -CA {{ rproxy_dir }}/certs/RootCA.crt -CAkey {{ rproxy_dir }}/certs/RootCA.key -in {{ dockerrepo_dir }}/certs/dockerrepo.csr -out {{ dockerrepo_dir }}/certs/dockerrepo.crt -CAcreateserial -extfile {{ dockerrepo_dir }}/certs/dockerrepo.cnf -days 365 -extensions v3_x509'
- name: Create fullchain certificate
ansible.builtin.shell:
cmd: 'cat {{ rproxy_dir }}/certs/RootCA.crt >> {{ dockerrepo_dir }}/certs/dockerrepo.crt'
- name: Delete csr
ansible.builtin.file:
path: "{{ dockerrepo_dir }}/certs/dockerrepo.csr"
state: absent
- name: Delete cnf
ansible.builtin.file:
path: "{{ dockerrepo_dir }}/certs/dockerrepo.cnf"
state: absent
- name: Restart rproxy
community.docker.docker_compose:
project_src: "{{ dockerrepo_dir }}"
build: false
restarted: true