av
eefd476761
- контейнер запускается от своего пользователя, доступ к docker.sock через дополнительную группу docker - добавлен data/ под /data, он же попадает в backup-targets
68 lines
2.0 KiB
YAML
68 lines
2.0 KiB
YAML
---
|
|
- name: "Configure dozzle application"
|
|
hosts: all
|
|
|
|
vars:
|
|
app_name: "dozzle"
|
|
app_user: "{{ app_name }}"
|
|
app_owner_uid: 1016
|
|
app_owner_gid: 1017
|
|
base_dir: "{{ (application_dir, app_name) | path_join }}"
|
|
data_dir: "{{ (base_dir, 'data') | path_join }}"
|
|
|
|
tasks:
|
|
- name: "Create user and environment"
|
|
ansible.builtin.import_role:
|
|
name: owner
|
|
vars:
|
|
owner_name: "{{ app_user }}"
|
|
owner_uid: "{{ app_owner_uid }}"
|
|
owner_gid: "{{ app_owner_gid }}"
|
|
|
|
- name: "Create internal application directories"
|
|
ansible.builtin.file:
|
|
path: "{{ item }}"
|
|
state: "directory"
|
|
owner: "{{ app_user }}"
|
|
group: "{{ app_user }}"
|
|
mode: "0770"
|
|
loop:
|
|
- "{{ base_dir }}"
|
|
- "{{ data_dir }}"
|
|
|
|
- name: "Create backup targets file"
|
|
ansible.builtin.copy:
|
|
dest: "{{ base_dir }}/backup-targets"
|
|
content: |
|
|
{{ data_dir }}
|
|
owner: "{{ app_user }}"
|
|
group: "{{ app_user }}"
|
|
mode: "0640"
|
|
|
|
- name: "Grab docker group info"
|
|
ansible.builtin.getent:
|
|
database: "group"
|
|
key: "docker"
|
|
|
|
# getent_group отдаёт поля строки /etc/group без имени группы,
|
|
# то есть [пароль, gid, участники] — gid лежит под индексом 1.
|
|
- name: "Store docker group id"
|
|
ansible.builtin.set_fact:
|
|
dozzle_docker_gid: "{{ ansible_facts.getent_group['docker'][1] }}"
|
|
|
|
- name: "Copy docker compose file"
|
|
ansible.builtin.template:
|
|
src: "./files/{{ app_name }}/docker-compose.template.yml"
|
|
dest: "{{ base_dir }}/docker-compose.yml"
|
|
owner: "{{ app_user }}"
|
|
group: "{{ app_user }}"
|
|
mode: "0640"
|
|
|
|
- name: "Run application with docker compose"
|
|
community.docker.docker_compose_v2:
|
|
project_src: "{{ base_dir }}"
|
|
state: "present"
|
|
remove_orphans: true
|
|
tags:
|
|
- run-app
|