pet-project-server/playbook-netdata.yml

---
- name: "Install Netdata monitoring service"
  hosts: all

  vars:
    app_name: "netdata"
    app_user: "{{ app_name }}"
    app_owner_uid: 1012
    app_owner_gid: 1013
    base_dir: "{{ (application_dir, app_name) | path_join }}"
    config_dir: "{{ (base_dir, 'config') | path_join }}"
    config_go_d_dir: "{{ (config_dir, 'go.d') | path_join }}"
    config_health_d_dir: "{{ (config_dir, 'health.d') | path_join }}"
    data_dir: "{{ (base_dir, 'data') | path_join }}"

  tasks:
    - name: "Create user and environment"
      ansible.builtin.import_role:
        name: owner
      vars:
        owner_name: "{{ app_user }}"
        owner_uid: "{{ app_owner_uid }}"
        owner_gid: "{{ app_owner_gid }}"

    - name: "Create internal application directories"
      ansible.builtin.file:
        path: "{{ item }}"
        state: "directory"
        owner: "{{ app_user }}"
        group: "{{ app_user }}"
        mode: "0770"
      loop:
        - "{{ base_dir }}"
        - "{{ data_dir }}"
        - "{{ config_dir }}"
        - "{{ config_go_d_dir }}"
        - "{{ config_health_d_dir }}"

    - name: "Copy netdata config file"
      ansible.builtin.template:
        src: "files/{{ app_name }}/netdata.template.conf"
        dest: "{{ config_dir }}/netdata.conf"
        owner: "{{ app_user }}"
        group: "{{ app_user }}"
        mode: "0640"
      notify: "Restart application"

    - name: "Find all go.d plugin config files"
      ansible.builtin.find:
        paths: "files/{{ app_name }}/go.d"
        file_type: file
      delegate_to: localhost
      register: go_d_source_files

    - name: "Template all go.d plugin config files"
      ansible.builtin.template:
        src: "{{ item.path }}"
        dest: "{{ config_go_d_dir }}/{{ item.path | basename }}"
        owner: "{{ app_user }}"
        group: "{{ app_user }}"
        mode: "0640"
      loop: "{{ go_d_source_files.files }}"
      notify: "Restart application"

    - name: "Find existing go.d config files on server"
      ansible.builtin.find:
        paths: "{{ config_go_d_dir }}"
        file_type: file
      register: go_d_existing_files

    - name: "Remove go.d config files that don't exist in source"
      ansible.builtin.file:
        path: "{{ item.path }}"
        state: absent
      loop: "{{ go_d_existing_files.files }}"
      when: (item.path | basename) not in (go_d_source_files.files | map(attribute='path') | map('basename') | list)
      notify: "Restart application"

    - name: "Find all health.d config files"
      ansible.builtin.find:
        paths: "files/{{ app_name }}/health.d"
        file_type: file
      delegate_to: localhost
      register: health_d_source_files

    - name: "Template all health.d config files"
      ansible.builtin.template:
        src: "{{ item.path }}"
        dest: "{{ config_health_d_dir }}/{{ item.path | basename }}"
        owner: "{{ app_user }}"
        group: "{{ app_user }}"
        mode: "0640"
      loop: "{{ health_d_source_files.files }}"
      notify: "Restart application"

    - name: "Find existing health.d config files on server"
      ansible.builtin.find:
        paths: "{{ config_health_d_dir }}"
        file_type: file
      register: health_d_existing_files

    - name: "Remove health.d config files that don't exist in source"
      ansible.builtin.file:
        path: "{{ item.path }}"
        state: absent
      loop: "{{ health_d_existing_files.files }}"
      when: (item.path | basename) not in (health_d_source_files.files | map(attribute='path') | map('basename') | list)
      notify: "Restart application"

    - name: "Copy health alarm notify config"
      ansible.builtin.template:
        src: "files/{{ app_name }}/health_alarm_notify.template.conf"
        dest: "{{ config_dir }}/health_alarm_notify.conf"
        owner: "{{ app_user }}"
        group: "{{ app_user }}"
        mode: "0640"
      notify: "Restart application"

    - name: "Grab docker group info"
      ansible.builtin.getent:
        database: "group"
        key: "docker"

    # getent_group отдаёт поля строки /etc/group без имени группы,
    # то есть [пароль, gid, участники] — gid лежит под индексом 1.
    - name: "Store docker group id"
      ansible.builtin.set_fact:
        netdata_docker_gid: "{{ ansible_facts.getent_group['docker'][1] }}"

    - name: "Copy docker compose file"
      ansible.builtin.template:
        src: "./files/{{ app_name }}/docker-compose.template.yml"
        dest: "{{ base_dir }}/docker-compose.yml"
        owner: "{{ app_user }}"
        group: "{{ app_user }}"
        mode: "0640"

    - name: "Run application with docker compose"
      community.docker.docker_compose_v2:
        project_src: "{{ base_dir }}"
        state: "present"
        remove_orphans: true
      tags:
        - run-app

  handlers:
    # Приложение читает конфиги только при старте, а `state: present` не
    # пересоздаёт контейнер, если docker-compose.yml не изменился, — поэтому
    # правку конфига применяет только явный рестарт.
    - name: "Restart application"
      community.docker.docker_compose_v2:
        project_src: "{{ base_dir }}"
        state: "restarted"
      tags:
        - run-app