101 lines
3 KiB
YAML
101 lines
3 KiB
YAML
---
|
|
- name: install dependencies
|
|
become: true
|
|
ansible.builtin.apt:
|
|
update_cache: yes
|
|
force_apt_get: true
|
|
state: present
|
|
cache_valid_time: 3600
|
|
pkg:
|
|
- git
|
|
- git-lfs
|
|
- name: gather facts
|
|
ansible.builtin.include_tasks: gather_facts.yml
|
|
- name: create service group
|
|
become: true
|
|
ansible.builtin.group:
|
|
name: '{{ forgejo_group }}'
|
|
system: true
|
|
state: present
|
|
- name: create service user
|
|
become: true
|
|
ansible.builtin.user:
|
|
name: '{{ forgejo_user }}'
|
|
group: '{{ forgejo_group }}'
|
|
shell: '/usr/sbin/nologin'
|
|
create_home: true
|
|
home: '{{ forgejo_home_dir }}'
|
|
system: true
|
|
state: present
|
|
- name: fetch Forgejo binary
|
|
become: true
|
|
ansible.builtin.get_url:
|
|
url: '{{ forgejo_assets_url }}/v{{ forgejo_target_version }}/{{ forgejo_asset_name }}'
|
|
checksum: 'sha256:{{ forgejo_assets_url }}/v{{ forgejo_target_version }}/{{ forgejo_asset_name }}.sha256'
|
|
mode: 'u=rwx,g=rx,o=rx'
|
|
owner: '{{ forgejo_user }}'
|
|
group: '{{ forgejo_group }}'
|
|
dest: '{{ forgejo_binary_filepath }}'
|
|
register: forgejo_install_cmd
|
|
- name: create directories
|
|
become: true
|
|
ansible.builtin.file:
|
|
path: '{{ item.path }}'
|
|
owner: '{{ item.owner }}'
|
|
group: '{{ forgejo_group }}'
|
|
mode: '{{ item.mode }}'
|
|
state: directory
|
|
loop:
|
|
- path: '{{ forgejo_config_dir }}'
|
|
mode: 'u=rwX,g=rwX,o='
|
|
owner: root
|
|
- path: '{{ forgejo_install_dir }}'
|
|
mode: 'u=rwX,g=rX,o='
|
|
owner: '{{ forgejo_user }}'
|
|
- name: install systemd unit files
|
|
become: true
|
|
ansible.builtin.template:
|
|
src: ../templates/systemd/forgejo.service.j2
|
|
dest: '{{ systemd_unit_directory }}/forgejo.service'
|
|
owner: root
|
|
group: root
|
|
mode: 'u=rwX,g=rX,o='
|
|
notify:
|
|
- 'forgejo : restart forgejo service'
|
|
- name: create app configuration from template
|
|
when: forgejo_custom_config is falsy and (forgejo_config_file_present is falsy or forgejo_overwrite_config_file is truthy)
|
|
become: true
|
|
ansible.builtin.template:
|
|
src: '../templates/app.ini.j2'
|
|
dest: '{{ forgejo_config_dir }}/app.ini'
|
|
owner: '{{ forgejo_user }}'
|
|
group: '{{ forgejo_group }}'
|
|
mode: 'u=rw,g=r,o='
|
|
notify:
|
|
- 'forgejo : restart forgejo service'
|
|
- name: create app configuration from custom content
|
|
when: forgejo_custom_config is truthy and (forgejo_config_file_present is falsy or forgejo_overwrite_config_file is truthy)
|
|
become: true
|
|
ansible.builtin.copy:
|
|
content: '{{ forgejo_custom_config }}'
|
|
dest: '{{ forgejo_config_dir }}/app.ini'
|
|
owner: '{{ forgejo_user }}'
|
|
group: '{{ forgejo_group }}'
|
|
mode: 'u=rw,g=r,o='
|
|
notify:
|
|
- 'forgejo : restart forgejo service'
|
|
- name: enable git-related configuration to sshd_config.d
|
|
become: true
|
|
ansible.builtin.template:
|
|
src: '../templates/sshd_config.d/git_env.conf.j2'
|
|
dest: '{{ forgejo_sshd_conf_dir }}/git_env.conf'
|
|
owner: root
|
|
group: root
|
|
mode: 'u=rw,g=r,o='
|
|
- name: start services
|
|
become: true
|
|
ansible.builtin.systemd:
|
|
name: forgejo.service
|
|
enabled: true
|
|
state: started
|
|
daemon_reload: true
|