this vault setup for injective sensitive variables uses the approach described in https://docs.ansible.com/ansible/10/tips_tricks/ansible_tips_tricks.html#keep-vaulted-variables-safely-visible
35 lines
676 B
YAML
35 lines
676 B
YAML
- name: Register uid of remote user
|
|
command: id -u
|
|
register: remote_uid_command
|
|
changed_when: false
|
|
|
|
- name: Set fact for uid
|
|
set_fact:
|
|
remote_uid: "{{ remote_uid_command.stdout }}"
|
|
|
|
- name: Ensure alpina directory exists
|
|
file:
|
|
state: directory
|
|
path: "{{ alpina_svc_path }}"
|
|
mode: "700"
|
|
|
|
- name: Deploy collection services
|
|
vars:
|
|
collection: services
|
|
stacks:
|
|
- traefik
|
|
- monitoring
|
|
- authentik
|
|
- minio
|
|
import_tasks: deploy_collection.yml
|
|
|
|
- name: Deploy collection apps
|
|
vars:
|
|
collection: apps
|
|
stacks:
|
|
- gitea
|
|
- nextcloud
|
|
- jellyfin
|
|
- arrstack
|
|
import_tasks: deploy_collection.yml
|