mirror of
https://github.com/CPunch/openpunk-ansible.git
synced 2025-11-03 22:30:15 +00:00
CPunch
e8fe024b77
- roles/git now uses blockinfile to ensure the github ssh keypairs are trusted, and to allow subsequent ssh keypairs to be trusted and not overwritten by future runs. - this commit marks idempotency for all roles. after a successful run of this playbook, subsequent runs will result in a change=0 !!!!!
40 lines
1.1 KiB
YAML
40 lines
1.1 KiB
YAML
---
|
|
- name: Check if Gitea is installed
|
|
shell: gitea --version
|
|
register: validate_gitea
|
|
changed_when: no
|
|
|
|
- name: Add Gitea key && repository
|
|
block:
|
|
- name: Check for Gitea gpg key
|
|
stat:
|
|
path: /etc/apt/trusted.gpg.d/morph027-gitea.gpg
|
|
register: gitea_key
|
|
|
|
- name: Import Gitea key
|
|
shell: curl -s https://packaging.gitlab.io/gitea/gpg.key | sudo gpg --no-default-keyring --keyring gnupg-ring:/etc/apt/trusted.gpg.d/morph027-gitea.gpg --import && sudo chmod 644 /etc/apt/trusted.gpg.d/morph027-gitea.gpg
|
|
when: gitea_key.stat.exists == false or gitea_key.stat.mode != "0644"
|
|
|
|
- name: Add Gitea repository
|
|
apt_repository:
|
|
filename: morph027-gitea
|
|
repo: deb https://packaging.gitlab.io/gitea gitea main
|
|
when: '"not found" in validate_gitea.stdout'
|
|
|
|
- name: Install Gitea
|
|
package:
|
|
name:
|
|
- gitea
|
|
|
|
- name: Configure Gitea
|
|
template:
|
|
src: templates/app.ini
|
|
dest: /etc/gitea/app.ini
|
|
owner: gitea
|
|
force: no # we don't want to kill our existing config D:
|
|
|
|
- name: Reload Gitea
|
|
systemd:
|
|
name: gitea
|
|
enabled: yes
|
|
state: started |