91 lines
2.3 KiB
YAML
91 lines
2.3 KiB
YAML
- name: Setup matrix server
|
|
hosts: berliet.medicenlutte.fr
|
|
tasks:
|
|
|
|
- name: Setup Continuwuity repository key
|
|
ansible.builtin.copy:
|
|
src: matrix/forgejo-continuwuation.asc
|
|
dest: /etc/apt/keyrings/forgejo-continuwuation.asc
|
|
owner: root
|
|
group: root
|
|
mode: u=rw,g=rw,o=r
|
|
become: true
|
|
|
|
- name: Setup Continuwuity repository
|
|
ansible.builtin.copy:
|
|
src: matrix/continuwuation.list
|
|
dest: /etc/apt/sources.list.d/continuwuation.list
|
|
owner: root
|
|
group: root
|
|
mode: u=rw,g=rw,o=r
|
|
become: true
|
|
|
|
- name: Install Continuwuity
|
|
ansible.builtin.apt:
|
|
name: continuwuity
|
|
state: present
|
|
update_cache: yes
|
|
become: true
|
|
|
|
- name: Setup Continuwuity config
|
|
ansible.builtin.copy:
|
|
src: matrix/conduwuit.toml
|
|
dest: /etc/conduwuit/conduwuit.toml
|
|
owner: root
|
|
group: root
|
|
mode: u=rw,g=rw,o=r
|
|
become: true
|
|
|
|
- name: Create conduwuit user
|
|
ansible.builtin.user:
|
|
name: conduwuit
|
|
state: present
|
|
create_home: false
|
|
home: /var/lib/conduwuit
|
|
shell: /usr/sbin/nologin
|
|
password: '!'
|
|
system: true
|
|
become: true
|
|
|
|
- name: Start and Enable Continuwuity
|
|
ansible.builtin.systemd_service:
|
|
name: conduwuit
|
|
state: reloaded
|
|
enabled: true
|
|
become: true
|
|
|
|
- name: Setup NGINX
|
|
ansible.builtin.import_playbook: nginx.yaml
|
|
|
|
- name: Setup NGINX config for matrix server
|
|
hosts: berliet.medicenlutte.fr
|
|
tasks:
|
|
|
|
- name: Setup matrix.medicenlutte.fr site
|
|
ansible.builtin.copy:
|
|
src: matrix/matrix.medicenlutte.fr.conf
|
|
dest: /etc/nginx/sites-available/matrix.medicenlutte.fr.conf
|
|
owner: root
|
|
group: root
|
|
mode: u=rw,g=rw,o=r
|
|
become: true
|
|
|
|
- name: Add www-data to conduwuit group
|
|
ansible.builtin.user:
|
|
name: www-data
|
|
groups: conduwuit
|
|
append: true
|
|
become: true
|
|
|
|
- name: Enable matrix.medicenlutte.fr site
|
|
ansible.builtin.file:
|
|
path: /etc/nginx/sites-enabled/matrix.medicenlutte.fr.conf
|
|
state: link
|
|
src: ../sites-available/matrix.medicenlutte.fr.conf
|
|
become: true
|
|
|
|
- name: Reload NGINX
|
|
ansible.builtin.systemd_service:
|
|
name: nginx
|
|
state: reloaded
|
|
become: true |