av
1cf660b4fd
- vars/vars.yml → group_vars/all/main.yml, vars/secrets.yml → group_vars/all/secrets.yml; boilerplate vars_files убран из всех плейбуков - имя secrets.yml сохранено намеренно: pre-commit-хук и .crushignore ищут слово secret(s) в имени файла - host_vars инвентаря теперь имеют приоритет над общими переменными
38 lines
1007 B
YAML
38 lines
1007 B
YAML
---
|
|
- name: "Configure docker parameters"
|
|
hosts: all
|
|
|
|
tasks:
|
|
# - name: "Install python docker lib from pip"
|
|
# ansible.builtin.pip:
|
|
# name: docker
|
|
|
|
- name: "Install docker"
|
|
ansible.builtin.import_role:
|
|
name: geerlingguy.docker
|
|
vars:
|
|
docker_edition: "ce"
|
|
docker_packages:
|
|
- "docker-{{ docker_edition }}"
|
|
- "docker-{{ docker_edition }}-cli"
|
|
- "docker-{{ docker_edition }}-rootless-extras"
|
|
docker_users:
|
|
- "{{ primary_user }}"
|
|
|
|
- name: Create a network for web proxy
|
|
community.docker.docker_network:
|
|
name: "web_proxy_network"
|
|
driver: "bridge"
|
|
|
|
- name: Create a network for monitoring
|
|
community.docker.docker_network:
|
|
name: "monitoring_network"
|
|
driver: "bridge"
|
|
|
|
- name: "Schedule docker image prune"
|
|
ansible.builtin.cron:
|
|
name: "docker image prune"
|
|
minute: "0"
|
|
hour: "3"
|
|
job: "/usr/bin/docker image prune -af"
|