Tududi: add task tracke application

2026-07-04 16:56:01 +03:00
parent 8ec0327851
commit 5cd66d01bc
11 changed files with 846 additions and 162 deletions
@@ -0,0 +1,71 @@
+---
+- name: "Configure tududi application"
+  hosts: all
+
+  vars_files:
+    - vars/secrets.yml
+    - vars/vars.yml
+
+  vars:
+    app_name: "tududi"
+    app_user: "{{ app_name }}"
+    app_owner_uid: 1108
+    app_owner_gid: 1108
+
+    base_dir: "{{ (application_dir, app_name) | path_join }}"
+    db_dir: "{{ (base_dir, 'db') | path_join }}"
+    uploads_dir: "{{ (base_dir, 'uploads') | path_join }}"
+
+  tasks:
+    - name: "Create user and environment"
+      ansible.builtin.import_role:
+        name: owner
+      vars:
+        owner_name: "{{ app_user }}"
+        owner_uid: "{{ app_owner_uid }}"
+        owner_gid: "{{ app_owner_gid }}"
+        owner_extra_groups: ["docker"]
+
+    - name: "Create application internal directories"
+      ansible.builtin.file:
+        path: "{{ item }}"
+        state: "directory"
+        owner: "{{ app_user }}"
+        group: "{{ app_user }}"
+        mode: "0750"
+      loop:
+        - "{{ base_dir }}"
+        - "{{ db_dir }}"
+        - "{{ uploads_dir }}"
+
+    # SQLite-база и загрузки бэкапятся restic'ом напрямую (без gobackup-дампа):
+    # ночной прогон одного пользователя -> вероятность записи в момент чтения
+    # ничтожна, а retention (90 дневных / 36 месячных) страхует от редкого
+    # несогласованного снимка.
+    - name: "Create backup targets file"
+      ansible.builtin.lineinfile:
+        path: "{{ base_dir }}/backup-targets"
+        line: "{{ item }}"
+        create: true
+        owner: "{{ app_user }}"
+        group: "{{ app_user }}"
+        mode: "0750"
+      loop:
+        - "{{ db_dir }}"
+        - "{{ uploads_dir }}"
+
+    - name: "Copy docker compose file"
+      ansible.builtin.template:
+        src: "./files/{{ app_name }}/docker-compose.template.yml"
+        dest: "{{ base_dir }}/docker-compose.yml"
+        owner: "{{ app_user }}"
+        group: "{{ app_user }}"
+        mode: "0640"
+
+    - name: "Run application with docker compose"
+      community.docker.docker_compose_v2:
+        project_src: "{{ base_dir }}"
+        state: "present"
+        remove_orphans: true
+      tags:
+        - run-app