42 lines
1.1 KiB
YAML
42 lines
1.1 KiB
YAML
---
|
|
- name: Pull rproxy image
|
|
containers.podman.podman_image:
|
|
name: "{{ image_repo }}/{{ rproxy_image }}:{{ rproxy_version }}"
|
|
state: present
|
|
|
|
- name: Delete rproxy container if exists
|
|
containers.podman.podman_container:
|
|
name: rproxy
|
|
state: absent
|
|
|
|
- name: Start rproxy
|
|
containers.podman.podman_container:
|
|
name: rproxy
|
|
image: "{{ image_repo }}/{{ rproxy_image }}:{{ rproxy_version }}"
|
|
state: started
|
|
ports:
|
|
- "443:443"
|
|
- "80:80"
|
|
- "9000:9000"
|
|
volumes:
|
|
- '{{ rproxy_dir }}/nginx.conf:/etc/nginx/nginx.conf:z,rw'
|
|
- '{{ rproxy_dir }}/sites:/etc/nginx/sites:z,rw'
|
|
- '{{ rproxy_dir }}/certs:/etc/nginx/certs:z,rw'
|
|
- '{{ repo_data_dir }}:/repo:z,rw'
|
|
- "/etc/localtime:/etc/localtime:ro"
|
|
privileged: true
|
|
security_opt:
|
|
- "label=disable"
|
|
log_driver: journald
|
|
generate_systemd:
|
|
path: /etc/systemd/system/
|
|
restart_policy: always
|
|
stop_timeout: 120
|
|
names: true
|
|
|
|
- name: Enable rproxy service
|
|
ansible.builtin.systemd:
|
|
name: "container-rproxy.service"
|
|
state: started
|
|
enabled: yes
|
|
daemon_reload: yes |