Prerequsits
To use this playbook, ansible must be installed.
First install the community.general collection:
ansible-galaxy collection install community.general
Preparation
The first time the system initialize playbook should be executed.
ansible-playbook system.yml --ask-vault-pass
Execute
ansible-playbook site.yml --ask-vault-pass
You can pass following environment variables via the -e command line option, like
ansible-playbook site.yml --ask-vault-pass -e "restart_container=yes"
Following extra parameters are available:
restart_container=yes| default "no"
Motivation
The motivation for the separation of system and site is that system is run with the user root, whereas the site.yml playbook is run with a devops user. The system playbook disables the root login via ssh for security reasons.
Docker
Inspect docker labels of container
$ docker inspect paint | grep labels -iA 12
List docker networks
$ docker network ls
Inspect docker network
$ docker network inspect web_proxy
Execute command
$ docker exec -it registry /bin/bash
Registry / Portus
Generate secret
openssl rand -hex 64
Generate key file and certificate
openssl req -x509 -sha256 -nodes -days 365 -newkey rsa:2048 -keyout roles/web/files/portus/portus.key -out roles/web/files/portus/portus.crt
TODO
- backups