mirror of
https://github.com/iiab/iiab.git
synced 2025-03-09 15:40:17 +00:00
133 lines
2.8 KiB
YAML
133 lines
2.8 KiB
YAML
# Prepare to install Gitea: create user and directory structure
|
|
|
|
- name: Shut down existing Gitea instance (if we're reinstalling)
|
|
systemd:
|
|
name: gitea
|
|
state: stopped
|
|
tags:
|
|
- pre-install
|
|
ignore_errors: yes
|
|
|
|
- name: Ensure group gitea exists
|
|
group:
|
|
name: gitea
|
|
state: present
|
|
tags:
|
|
- pre-install
|
|
|
|
- name: Create user gitea
|
|
user:
|
|
name: gitea
|
|
comment: Gitea daemon account
|
|
groups: gitea
|
|
home: "{{ gitea_home }}"
|
|
tags:
|
|
- pre-install
|
|
|
|
- name: Create Gitea directory structure
|
|
file:
|
|
path: "{{ gitea_root_directory }}/{{ item }}"
|
|
state: directory
|
|
owner: gitea
|
|
group: gitea
|
|
with_items: "{{ gitea_subdirectories }}"
|
|
tags:
|
|
- pre-install
|
|
|
|
- name: Make directories data, indexers, and log writable
|
|
file:
|
|
path: "{{ gitea_root_directory }}/{{ item }}"
|
|
mode: 0750
|
|
with_items:
|
|
- data
|
|
- indexers
|
|
- log
|
|
tags:
|
|
- pre-install
|
|
|
|
# Download, verify, and link Gitea binary
|
|
|
|
- name: Fail if we detect unknown architecture
|
|
fail:
|
|
msg: "Could not find a binary for the CPU architecture \"{{ ansible_architecture }}\""
|
|
when: gitea_iset_suffix == "unknown"
|
|
|
|
- name: Download Gitea binary
|
|
get_url:
|
|
url: "{{ gitea_download_url }}"
|
|
dest: "{{ gitea_install_path }}"
|
|
mode: 0775
|
|
tags:
|
|
- install
|
|
when: internet_available | bool
|
|
|
|
- name: Download Gitea GPG signature
|
|
get_url:
|
|
url: "{{ gitea_integrity_url }}"
|
|
dest: "{{ gitea_checksum_path }}"
|
|
tags:
|
|
- never
|
|
- verify
|
|
when: internet_available | bool
|
|
|
|
- name: Verify Gitea binary with GPG signature
|
|
shell: |
|
|
gpg --keyserver pgp.mit.edu --recv {{ gitea_gpg_key }}
|
|
gpg --verify {{ gitea_checksum_path }} {{ gitea_install_path }}
|
|
tags:
|
|
- never
|
|
- verify
|
|
ignore_errors: yes
|
|
|
|
- name: Link Gitea
|
|
file:
|
|
src: "{{ gitea_install_path }}"
|
|
dest: "{{ gitea_link_path }}"
|
|
owner: gitea
|
|
group: gitea
|
|
state: link
|
|
tags:
|
|
- install
|
|
|
|
# Configure Gitea
|
|
|
|
# For security reasons, the Gitea developers recommend removing group write
|
|
# permissions from /etc/gitea/ and /etc/gitea/app.ini after the first run of
|
|
# Gitea. User gitea needs write permissions during the first run but not
|
|
# subsequent runs.
|
|
|
|
- name: Create Gitea config directory
|
|
file:
|
|
path: /etc/gitea
|
|
state: directory
|
|
owner: root
|
|
group: gitea
|
|
mode: 0770
|
|
tags:
|
|
- config
|
|
|
|
- name: Create app.ini
|
|
template:
|
|
src: app.ini.j2
|
|
dest: /etc/gitea/app.ini
|
|
owner: root
|
|
group: gitea
|
|
mode: 0664
|
|
tags:
|
|
- config
|
|
|
|
# Create systemd service
|
|
|
|
- name: Create 'gitea' service
|
|
template:
|
|
src: gitea.service.j2
|
|
dest: "/etc/systemd/system/gitea.service"
|
|
tags:
|
|
- systemd
|
|
|
|
- name: Add 'gitea_installed' variable values to {{ iiab_state_file }}
|
|
lineinfile:
|
|
dest: "{{ iiab_state_file }}"
|
|
regexp: '^gitea_installed'
|
|
line: 'gitea_installed: True'
|
|
state: present
|