565 lines
14 KiB
YAML
565 lines
14 KiB
YAML
---
|
|
# - name: (git.yml) include variables
|
|
# include_vars: "{{ item }}"
|
|
# with_first_found:
|
|
# - "git-{{ inventory_hostname }}.yml"
|
|
# - "git-{{ ansible_distribution_release }}.yml"
|
|
# - "git-{{ ansible_distribution | lower }}.yml"
|
|
# - git-default.yml
|
|
# tags:
|
|
# - git-default-repositories
|
|
# - git-lxc-guest-repositories
|
|
# - git-apache2-repositories
|
|
# - git-nginx-repositories
|
|
# - git-mysql-server-repositories
|
|
# - git-postgresql-server-repositories
|
|
# - git-nextcloud-server-repositories
|
|
# - git-dns-server-repositories
|
|
# - git-backup-server-repositories
|
|
# - git-samba-server-repositories
|
|
# - git-mailservers-repositories
|
|
# - git-sympa-repositories
|
|
# - git-other-repositories
|
|
# ---
|
|
# Firewall repository
|
|
# ---
|
|
|
|
- name: (git.yml) Install/Update firewall repository
|
|
ansible.builtin.git:
|
|
repo: "{{ git_firewall_repository.repo }}"
|
|
dest: "{{ git_firewall_repository.dest }}"
|
|
version: >-
|
|
{{
|
|
git_firewall_repository.version
|
|
| default(git_firewall_repository.branch)
|
|
| default(
|
|
'master'
|
|
if (lookup('pipe', 'git ls-remote --heads ' ~ git_firewall_repository.repo ~ ' master') | length > 0)
|
|
else 'main'
|
|
)
|
|
}}
|
|
|
|
when: git_firewall_repository is defined and git_firewall_repository | length > 0
|
|
tags:
|
|
- git-firewall-repository
|
|
|
|
# ---
|
|
# Default reposotories
|
|
# ---
|
|
|
|
- name: (git.yml) Install/Update default repositories
|
|
ansible.builtin.git:
|
|
repo: "{{ item.repo }}"
|
|
dest: "{{ item.dest }}"
|
|
version: >-
|
|
{{
|
|
item.version
|
|
| default(item.branch)
|
|
| default(
|
|
'master'
|
|
if (lookup('pipe', 'git ls-remote --heads ' ~ item.repo ~ ' master') | length > 0)
|
|
else 'main'
|
|
)
|
|
}}
|
|
|
|
with_items: "{{ git_default_repositories }}"
|
|
loop_control:
|
|
label: "{{ item.name }}"
|
|
tags:
|
|
- git-default-repositories
|
|
|
|
# ---
|
|
# Group [oopen_server] reposotories
|
|
# ---
|
|
|
|
- name: (git.yml) Install/Update oopen_server repositories
|
|
ansible.builtin.git:
|
|
repo: "{{ item.repo }}"
|
|
dest: "{{ item.dest }}"
|
|
version: >-
|
|
{{
|
|
item.version
|
|
| default(item.branch)
|
|
| default(
|
|
'master'
|
|
if (lookup('pipe', 'git ls-remote --heads ' ~ item.repo ~ ' master') | length > 0)
|
|
else 'main'
|
|
)
|
|
}}
|
|
|
|
with_items: "{{ git_oopen_server_repositories }}"
|
|
loop_control:
|
|
label: "{{ item.name }}"
|
|
when: "groups['oopen_server']|string is search(inventory_hostname)"
|
|
tags:
|
|
- git-oopen-server-repositories
|
|
|
|
# ---
|
|
# Group [warenform_server] reposotories
|
|
# ---
|
|
|
|
- name: (git.yml) Install/Update warenform_server repositories
|
|
ansible.builtin.git:
|
|
repo: "{{ item.repo }}"
|
|
dest: "{{ item.dest }}"
|
|
version: >-
|
|
{{
|
|
item.version
|
|
| default(item.branch)
|
|
| default(
|
|
'master'
|
|
if (lookup('pipe', 'git ls-remote --heads ' ~ item.repo ~ ' master') | length > 0)
|
|
else 'main'
|
|
)
|
|
}}
|
|
|
|
with_items: "{{ git_warenform_server_repositories }}"
|
|
loop_control:
|
|
label: "{{ item.name }}"
|
|
when: "groups['warenform_server']|string is search(inventory_hostname)"
|
|
tags:
|
|
- git-warenform-server-repositories
|
|
|
|
# ---
|
|
# Group [lxc_guest] reposotories
|
|
# ---
|
|
|
|
- name: (git.yml) Install/Update lxc_guest repositories
|
|
ansible.builtin.git:
|
|
repo: "{{ item.repo }}"
|
|
dest: "{{ item.dest }}"
|
|
version: >-
|
|
{{
|
|
item.version
|
|
| default(item.branch)
|
|
| default(
|
|
'master'
|
|
if (lookup('pipe', 'git ls-remote --heads ' ~ item.repo ~ ' master') | length > 0)
|
|
else 'main'
|
|
)
|
|
}}
|
|
|
|
with_items: "{{ git_lxc_guest_repositories }}"
|
|
loop_control:
|
|
label: "{{ item.name }}"
|
|
when: "groups['lxc_guest']|string is search(inventory_hostname)"
|
|
tags:
|
|
- git-lxc-guest-repositories
|
|
|
|
# ---
|
|
# Group [lxc_host] reposotories
|
|
# ---
|
|
|
|
- name: (git.yml) Install/Update lxc_host repositories
|
|
ansible.builtin.git:
|
|
repo: "{{ item.repo }}"
|
|
dest: "{{ item.dest }}"
|
|
version: >-
|
|
{{
|
|
item.version
|
|
| default(item.branch)
|
|
| default(
|
|
'master'
|
|
if (lookup('pipe', 'git ls-remote --heads ' ~ item.repo ~ ' master') | length > 0)
|
|
else 'main'
|
|
)
|
|
}}
|
|
|
|
with_items: "{{ git_lxc_host_repositories }}"
|
|
loop_control:
|
|
label: "{{ item.name }}"
|
|
when: "groups['lxc_host']|string is search(inventory_hostname)"
|
|
tags:
|
|
- git-lxc-host-repositories
|
|
|
|
# ---
|
|
# Group [gateway_server] reposotories
|
|
# ---
|
|
|
|
- name: (git.yml) Install/Update gateway repositories
|
|
ansible.builtin.git:
|
|
repo: "{{ item.repo }}"
|
|
dest: "{{ item.dest }}"
|
|
version: >-
|
|
{{
|
|
item.version
|
|
| default(item.branch)
|
|
| default(
|
|
'master'
|
|
if (lookup('pipe', 'git ls-remote --heads ' ~ item.repo ~ ' master') | length > 0)
|
|
else 'main'
|
|
)
|
|
}}
|
|
|
|
with_items: "{{ git_gateway_repositories }}"
|
|
loop_control:
|
|
label: "{{ item.name }}"
|
|
when: "groups['gateway_server']|string is search(inventory_hostname)"
|
|
tags:
|
|
- git-gateway-server-repositories
|
|
|
|
# ---
|
|
# Group [apache2_webserver] reposotories
|
|
# ---
|
|
|
|
- name: (git.yml) Install/Update apache2 repositories
|
|
ansible.builtin.git:
|
|
repo: "{{ item.repo }}"
|
|
dest: "{{ item.dest }}"
|
|
version: >-
|
|
{{
|
|
item.version
|
|
| default(item.branch)
|
|
| default(
|
|
'master'
|
|
if (lookup('pipe', 'git ls-remote --heads ' ~ item.repo ~ ' master') | length > 0)
|
|
else 'main'
|
|
)
|
|
}}
|
|
|
|
with_items: "{{ git_apache2_repositories }}"
|
|
loop_control:
|
|
label: "{{ item.name }}"
|
|
when: "groups['apache2_webserver']|string is search(inventory_hostname)"
|
|
tags:
|
|
- git-apache2-repositories
|
|
|
|
# ---
|
|
# Group [nginx_webserver] reposotories
|
|
# ---
|
|
|
|
- name: (git.yml) Install/Update nginx repositories
|
|
ansible.builtin.git:
|
|
repo: "{{ item.repo }}"
|
|
dest: "{{ item.dest }}"
|
|
version: >-
|
|
{{
|
|
item.version
|
|
| default(item.branch)
|
|
| default(
|
|
'master'
|
|
if (lookup('pipe', 'git ls-remote --heads ' ~ item.repo ~ ' master') | length > 0)
|
|
else 'main'
|
|
)
|
|
}}
|
|
|
|
with_items: "{{ git_nginx_repositories }}"
|
|
loop_control:
|
|
label: "{{ item.name }}"
|
|
when: "groups['nginx_webserver']|string is search(inventory_hostname)"
|
|
tags:
|
|
- git-nginx-repositories
|
|
|
|
# ---
|
|
# Group [mysql_server] reposotories
|
|
# ---
|
|
|
|
- name: (git.yml) Install/Update mysql server repositories
|
|
ansible.builtin.git:
|
|
repo: "{{ item.repo }}"
|
|
dest: "{{ item.dest }}"
|
|
version: >-
|
|
{{
|
|
item.version
|
|
| default(item.branch)
|
|
| default(
|
|
'master'
|
|
if (lookup('pipe', 'git ls-remote --heads ' ~ item.repo ~ ' master') | length > 0)
|
|
else 'main'
|
|
)
|
|
}}
|
|
|
|
with_items: "{{ git_mysql_repositories }}"
|
|
loop_control:
|
|
label: "{{ item.name }}"
|
|
when: "groups['mysql_server']|string is search(inventory_hostname)"
|
|
tags:
|
|
- git-mysql-server-repositories
|
|
|
|
# ---
|
|
# Group [postgresql_server] reposotories
|
|
# ---
|
|
|
|
- name: (git.yml) Install/Update postgresql-server repositories
|
|
ansible.builtin.git:
|
|
repo: "{{ item.repo }}"
|
|
dest: "{{ item.dest }}"
|
|
version: >-
|
|
{{
|
|
item.version
|
|
| default(item.branch)
|
|
| default(
|
|
'master'
|
|
if (lookup('pipe', 'git ls-remote --heads ' ~ item.repo ~ ' master') | length > 0)
|
|
else 'main'
|
|
)
|
|
}}
|
|
|
|
with_items: "{{ git_postgresql_repositories }}"
|
|
loop_control:
|
|
label: "{{ item.name }}"
|
|
when: "groups['postgresql_server']|string is search(inventory_hostname)"
|
|
tags:
|
|
- git-postgresql-server-repositories
|
|
|
|
# ---
|
|
# Group [nextcloud_server] reposotories
|
|
# ---
|
|
|
|
- name: (git.yml) Install/Update nextcloud server repositories
|
|
ansible.builtin.git:
|
|
repo: "{{ item.repo }}"
|
|
dest: "{{ item.dest }}"
|
|
version: >-
|
|
{{
|
|
item.version
|
|
| default(item.branch)
|
|
| default(
|
|
'master'
|
|
if (lookup('pipe', 'git ls-remote --heads ' ~ item.repo ~ ' master') | length > 0)
|
|
else 'main'
|
|
)
|
|
}}
|
|
|
|
with_items: "{{ git_nextcloud_repositories }}"
|
|
loop_control:
|
|
label: "{{ item.name }}"
|
|
when: "groups['nextcloud_server']|string is search(inventory_hostname)"
|
|
tags:
|
|
- git-nextcloud-server-repositories
|
|
|
|
# ---
|
|
# Group [dns_server] reposotories
|
|
# ---
|
|
|
|
- name: (git.yml) Install/Update dns server repositories
|
|
ansible.builtin.git:
|
|
repo: "{{ item.repo }}"
|
|
dest: "{{ item.dest }}"
|
|
version: >-
|
|
{{
|
|
item.version
|
|
| default(item.branch)
|
|
| default(
|
|
'master'
|
|
if (lookup('pipe', 'git ls-remote --heads ' ~ item.repo ~ ' master') | length > 0)
|
|
else 'main'
|
|
)
|
|
}}
|
|
|
|
with_items: "{{ git_dns_repositories }}"
|
|
loop_control:
|
|
label: "{{ item.name }}"
|
|
when: "groups['dns_server']|string is search(inventory_hostname)"
|
|
tags:
|
|
- git-dns-server-repositories
|
|
|
|
# ---
|
|
# Group [backup_server] reposotories
|
|
# ---
|
|
|
|
# Optional repositories: tolerate transient network errors, but fail on config/auth/permission issues.
|
|
|
|
- name: (git.yml) Install/Update backup server repositories
|
|
ansible.builtin.git:
|
|
repo: "{{ item.repo }}"
|
|
dest: "{{ item.dest }}"
|
|
version: >-
|
|
{{
|
|
item.version
|
|
| default(item.branch)
|
|
| default(
|
|
'master'
|
|
if (lookup('pipe', 'git ls-remote --heads ' ~ item.repo ~ ' master') | length > 0)
|
|
else 'main'
|
|
)
|
|
}}
|
|
|
|
with_items: "{{ git_backup_repositories }}"
|
|
loop_control:
|
|
label: "{{ item.name }}"
|
|
when: "groups['backup_server']|string is search(inventory_hostname)"
|
|
failed_when: >-
|
|
failed and (
|
|
msg is not defined or (
|
|
('Could not resolve host' not in msg)
|
|
and ('Connection timed out' not in msg)
|
|
and ('Failed to connect to' not in msg)
|
|
and ('Connection reset by peer' not in msg)
|
|
and ('Operation timed out' not in msg)
|
|
)
|
|
)
|
|
tags:
|
|
- git-backup-server-repositories
|
|
|
|
# ---
|
|
# Group [samba_server] reposotories
|
|
# ---
|
|
|
|
# Same policy as backup repositories: only temporary connectivity problems are accepted.
|
|
|
|
- name: (git.yml) Install/Update samba server repositories
|
|
ansible.builtin.git:
|
|
repo: "{{ item.repo }}"
|
|
dest: "{{ item.dest }}"
|
|
version: >-
|
|
{{
|
|
item.version
|
|
| default(item.branch)
|
|
| default(
|
|
'master'
|
|
if (lookup('pipe', 'git ls-remote --heads ' ~ item.repo ~ ' master') | length > 0)
|
|
else 'main'
|
|
)
|
|
}}
|
|
|
|
with_items: "{{ git_samba_repositories }}"
|
|
loop_control:
|
|
label: "{{ item.name }}"
|
|
when: "groups['samba_server']|string is search(inventory_hostname)"
|
|
failed_when: >-
|
|
failed and (
|
|
msg is not defined or (
|
|
('Could not resolve host' not in msg)
|
|
and ('Connection timed out' not in msg)
|
|
and ('Failed to connect to' not in msg)
|
|
and ('Connection reset by peer' not in msg)
|
|
and ('Operation timed out' not in msg)
|
|
)
|
|
)
|
|
tags:
|
|
- git-samba-server-repositories
|
|
|
|
# ---
|
|
# Group [mail_server] reposotories
|
|
# ---
|
|
|
|
- name: (git.yml) Install/Update mail server repositories
|
|
ansible.builtin.git:
|
|
repo: "{{ item.repo }}"
|
|
dest: "{{ item.dest }}"
|
|
version: >-
|
|
{{
|
|
item.version
|
|
| default(item.branch)
|
|
| default(
|
|
'master'
|
|
if (lookup('pipe', 'git ls-remote --heads ' ~ item.repo ~ ' master') | length > 0)
|
|
else 'main'
|
|
)
|
|
}}
|
|
|
|
with_items: "{{ git_mailserver_repositories }}"
|
|
loop_control:
|
|
label: "{{ item.name }}"
|
|
when: "groups['mail_server']|string is search(inventory_hostname)"
|
|
tags:
|
|
- git-mailservers-repositories
|
|
|
|
# ---
|
|
# Group [sympa_list_servers] reposotories
|
|
# ---
|
|
|
|
- name: (git.yml) Install/Update sympa server repositories
|
|
ansible.builtin.git:
|
|
repo: "{{ item.repo }}"
|
|
dest: "{{ item.dest }}"
|
|
version: >-
|
|
{{
|
|
item.version
|
|
| default(item.branch)
|
|
| default(
|
|
'master'
|
|
if (lookup('pipe', 'git ls-remote --heads ' ~ item.repo ~ ' master') | length > 0)
|
|
else 'main'
|
|
)
|
|
}}
|
|
|
|
with_items: "{{ git_sympa_repositories }}"
|
|
loop_control:
|
|
label: "{{ item.name }}"
|
|
when: "groups['sympa_list_server']|string is search(inventory_hostname)"
|
|
tags:
|
|
- git-sympa-repositories
|
|
|
|
# ---
|
|
# Group [jitsi_meet_server] reposotories
|
|
# ---
|
|
|
|
- name: (git.yml) Install/Update sympa server repositories
|
|
ansible.builtin.git:
|
|
repo: "{{ item.repo }}"
|
|
dest: "{{ item.dest }}"
|
|
version: >-
|
|
{{
|
|
item.version
|
|
| default(item.branch)
|
|
| default(
|
|
'master'
|
|
if (lookup('pipe', 'git ls-remote --heads ' ~ item.repo ~ ' master') | length > 0)
|
|
else 'main'
|
|
)
|
|
}}
|
|
|
|
with_items: "{{ git_jitsi_meet_repositories }}"
|
|
loop_control:
|
|
label: "{{ item.name }}"
|
|
when: "groups['jitsi_meet_server']|string is search(inventory_hostname)"
|
|
tags:
|
|
- git-jitsi_meet-repositories
|
|
|
|
# ---
|
|
# Group [so36_server_dehydrated] reposotories
|
|
# ---
|
|
|
|
# - name: (git.yml) Install/Update sympa server repositories
|
|
# git:
|
|
# repo: '{{ item.repo }}'
|
|
# dest: '{{ item.dest }}'
|
|
# with_items: '{{ git_so36_dehydrated_repositories }}'
|
|
# loop_control:
|
|
# label: "{{ item.name }}"
|
|
# when: "groups['so36_server_dehydrated']|string is search(inventory_hostname)"
|
|
# tags:
|
|
# - git-so36-dehydrated-repositories
|
|
|
|
# ---
|
|
# Other (host specific) repositories
|
|
# ---
|
|
|
|
# Read in host specific vars file if exists
|
|
- name: (git.yml) Check for host specific git vars file
|
|
ansible.builtin.stat:
|
|
path: "vars/git-{{ inventory_hostname }}.yml"
|
|
register: common_git_host_vars_file
|
|
tags:
|
|
- git-other-repositories
|
|
|
|
- name: (git.yml) Include only files matching git-<hostname>.yml (2.2)
|
|
ansible.builtin.include_vars:
|
|
file: "vars/git-{{ inventory_hostname }}.yml"
|
|
when: common_git_host_vars_file.stat.exists
|
|
tags:
|
|
- git-other-repositories
|
|
|
|
- name: (git.yml) Install/Update other repositories
|
|
ansible.builtin.git:
|
|
repo: "{{ item.repo }}"
|
|
dest: "{{ item.dest }}"
|
|
version: >-
|
|
{{
|
|
item.version
|
|
| default(item.branch)
|
|
| default(
|
|
'master'
|
|
if (lookup('pipe', 'git ls-remote --heads ' ~ item.repo ~ ' master') | length > 0)
|
|
else 'main'
|
|
)
|
|
}}
|
|
|
|
loop_control:
|
|
label: "{{ item.name }}"
|
|
with_items: "{{ git_other_repositories }}"
|
|
tags:
|
|
- git-other-repositories
|