Переисан makefile

ansible/amber.yml

@@ -1,64 +0,0 @@
----
-- hosts: all
-
-  tasks:
-
-    - name: 'Install additional packages.'
-      apt:
-        name: '{{ packages }}'
-        update_cache: yes
-      vars:
-        packages:
-          - python3-pip
-
-    - import_role:
-        name: yatesr.timezone
-      vars:
-        timezone: UTC
-
-    - import_role:
-        name: geerlingguy.security
-      vars:
-        security_ssh_permit_root_login: "yes"
-        security_autoupdate_enabled: false
-        security_fail2ban_enabled: false
-
-    - name: 'Install python docker lib.'
-      pip:
-        name: docker
-
-    - import_role:
-        name: geerlingguy.docker
-      vars:
-        docker_users:
-          - homepage
-
-    - import_role:
-        name: antoiner77.caddy
-      vars:
-        caddy_config: '{{ lookup("template", "templates/Caddyfile.j2") }}'
-        caddy_setcap: True
-        caddy_systemd_capabilities_enabled: True
-        caddy_systemd_capabilities: "CAP_NET_BIND_SERVICE"
-      tags:
-        - webserver
-
-    - import_role:
-        name: netdata
-      tags:
-        - monitoring
-
-    # Applications
-
-    - import_role:
-        name: docker-app
-      vars:
-        username: homepage
-        extra_groups:
-          - www-data
-        ssh_keys:
-          - '{{ lookup("file", "files/av_id_rsa.pub") }}'
-        env:
-          DOCKER_PREFIX: homepage
-      tags:
-        - apps

ansible/configuration.yml

@@ -1,60 +1,64 @@
 ---
 - hosts: all
-  become: true
 
-  vars:
-    deploy_user: deployer
+  tasks:
 
-    timezone: UTC
+    - name: 'Install additional packages.'
+      apt:
+        name: '{{ packages }}'
+        update_cache: yes
+      vars:
+        packages:
+          - python3-pip
 
-    # nginx settings
+    - import_role:
+        name: yatesr.timezone
+      vars:
+        timezone: UTC
 
-    nginx_remove_default_vhost: true
+    - import_role:
+        name: geerlingguy.security
+      vars:
+        security_ssh_permit_root_login: "yes"
+        security_autoupdate_enabled: false
+        security_fail2ban_enabled: false
 
-    # php settings
+    - name: 'Install python docker lib.'
+      pip:
+        name: docker
 
-    php_version: '7.1'
-    php_packages_extra:
-      - 'php{{ php_version }}'
-      - 'php{{ php_version }}-curl'
-      - 'php{{ php_version }}-gd'
-      - 'php{{ php_version }}-fpm'
-      - 'php{{ php_version }}-mbstring'
-      - 'php{{ php_version }}-xml'
-      - 'php{{ php_version }}-intl'
-      - 'php{{ php_version }}-zip'
-      - 'php{{ php_version }}-mysql'
-    php_webserver_daemon: nginx
-    php_enable_php_fpm: true
-    php_date_timezone: '{{ timezone }}'
+    - import_role:
+        name: geerlingguy.docker
+      vars:
+        docker_users:
+          - homepage
 
-  pre_tasks:
-    - name: Install system packages
-      apt: pkg={{ item }} state=latest
-      with_items:
-        - curl
-        - git
-        - make
-        - python-software-properties
-        - wget
-        - zip
-    - name: Ensure that PHP PPA is added.
-      apt_repository: repo=ppa:ondrej/php state=present
-    - name: Update apt cache
-      apt: update_cache=yes cache_valid_time=86400
-    - name: Add deploy user
-      user:
-        name: '{{ deploy_user }}'
-        groups: www-data
-
-  roles:
-    - name: yatesr.timezone
-    - name: geerlingguy.nginx
+    - import_role:
+        name: antoiner77.caddy
+      vars:
+        caddy_config: '{{ lookup("template", "templates/Caddyfile.j2") }}'
+        caddy_setcap: True
+        caddy_systemd_capabilities_enabled: True
+        caddy_systemd_capabilities: "CAP_NET_BIND_SERVICE"
       tags:
         - webserver
-    - name: geerlingguy.php-versions
-    - name: geerlingguy.php
 
-    - homepage
-#    - s2photo
-#    - notes
+    - import_role:
+        name: netdata
+      tags:
+        - monitoring
+
+    # Applications
+
+    - import_role:
+        name: docker-app
+      vars:
+        username: homepage
+        extra_groups:
+          - www-data
+        ssh_keys:
+          - '{{ lookup("file", "files/av_id_rsa.pub") }}'
+        env:
+          DOCKER_PREFIX: homepage
+      tags:
+        - apps

ansible/roles/netdata/tasks/main.yml

@@ -19,4 +19,4 @@
     security_opts:
       - 'apparmor:unconfined'
     env:
-      PGID: '{{ docker_group.stdout }}'
+      PGID: '{{ docker_group.stdout|default(999) }}'