jpp/ansible-roles
1
0
Fork 0
mirror of https://git.lapiole.org/dani/ansible-roles.git synced 2025-04-22 21:23:23 +02:00
Code Issues Packages Projects Releases Wiki Activity

Update to 2024-02-21 11:00

Browse Source
This commit is contained in:
Daniel Berteaud 2024-02-21 11:00:50 +01:00
parent 9e01b5f657
commit 591a80926b
20 changed files with 38 additions and 34 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

4
roles/babashka/defaults/main.yml
View File

@ -1,8 +1,8 @@
--- ---
# Babashka version to deploy # Babashka version to deploy
bb_version: 1.3.186 bb_version: 1.3.188
# URL of the archive # URL of the archive
bb_archive_url: https://github.com/babashka/babashka/releases/download/v{{ bb_version }}/babashka-{{ bb_version }}-linux-amd64-static.tar.gz bb_archive_url: https://github.com/babashka/babashka/releases/download/v{{ bb_version }}/babashka-{{ bb_version }}-linux-amd64-static.tar.gz
# Expected sha256sum of the archive # Expected sha256sum of the archive
bb_archive_sha256: fa92d6ad5a39711a6863905bda01a37ff0ef75b646e4937128c9acc3485f1b9f bb_archive_sha256: 89431b0659e84a468da05ad78daf2982cbc8ea9e17f315fa2e51fecc78af7cc0

4
roles/bookstack/defaults/main.yml
View File

@ -1,11 +1,11 @@
--- ---
# Version to deploy # Version to deploy
bookstack_version: '23.12' bookstack_version: '23.12.2'
# URL of the arhive # URL of the arhive
bookstack_archive_url: https://github.com/BookStackApp/BookStack/archive/v{{ bookstack_version }}.tar.gz bookstack_archive_url: https://github.com/BookStackApp/BookStack/archive/v{{ bookstack_version }}.tar.gz
# Expected sha256 of the archive # Expected sha256 of the archive
bookstack_archive_sha256: fce344f1c9257465826715861ea0e3d5b8648ad39edde7a24ecf3060cf86e0fe bookstack_archive_sha256: 765450659028641019d2ef8519848da2cddbb834edc08488c92fba3988f8b6c0
# Should ansible handle bookstack upgrades or just the inintial install # Should ansible handle bookstack upgrades or just the inintial install
bookstack_manage_upgrade: True bookstack_manage_upgrade: True

1
roles/consul/defaults/main.yml
View File

@ -185,3 +185,4 @@ consul_catalog_services: "{{ consul_base_catalog_services | combine(consul_extra
# Control memory of the service # Control memory of the service
consul_memory_max: 1024M consul_memory_max: 1024M
consul_swap_max: 10M

1
roles/consul/templates/consul.service.j2
View File

@ -19,6 +19,7 @@ RestartSec=5
StartLimitInterval=0 StartLimitInterval=0
LimitNOFILE=65536 LimitNOFILE=65536
MemoryMax={{ consul_memory_max }} MemoryMax={{ consul_memory_max }}
MemorySwapMax={{ consul_swap_max }}
[Install] [Install]
WantedBy=multi-user.target WantedBy=multi-user.target

4
roles/consul_bin/defaults/main.yml
View File

@ -1,8 +1,8 @@
--- ---
# Version of consul to deploy # Version of consul to deploy
consul_version: 1.17.1 consul_version: 1.17.3
# URL from where the consul archive will be downloaded # URL from where the consul archive will be downloaded
consul_archive_url: https://releases.hashicorp.com/consul/{{ consul_version }}/consul_{{ consul_version }}_linux_amd64.zip consul_archive_url: https://releases.hashicorp.com/consul/{{ consul_version }}/consul_{{ consul_version }}_linux_amd64.zip
# Expected sha256 of the archive # Expected sha256 of the archive
consul_archive_sha256: 388889321d6aaf389ee87acc247ea9885e684a1581c8ebfbeab7348abd7c0214 consul_archive_sha256: bb71f4b9b465e314af0d98f5a6884794be9a44e930180537f0825ae9939461a4

4
roles/diagrams/defaults/main.yml
View File

@ -1,11 +1,11 @@
--- ---
# Veresion of diagrams to deploy # Veresion of diagrams to deploy
diagrams_version: 22.1.16 diagrams_version: 23.0.0
# URL of the WAR file to deploy # URL of the WAR file to deploy
diagrams_war_url: https://github.com/jgraph/drawio/releases/download/v{{ diagrams_version }}/draw.war diagrams_war_url: https://github.com/jgraph/drawio/releases/download/v{{ diagrams_version }}/draw.war
# Expected sha256 of the WAR file # Expected sha256 of the WAR file
diagrams_war_sha256: 9764be81a5d52e763efbadc5e58ecb6e9f2aebbf442a79483e693e98c084f463 diagrams_war_sha256: 96e6264f1c8a77241e83b0f2432fac31ff4d3506b7885792e4d7ae1568680070
# root directory of the installation # root directory of the installation
diagrams_root_dir: /opt/diagrams diagrams_root_dir: /opt/diagrams
# Should ansible manage upgrades, or just initial install ? # Should ansible manage upgrades, or just initial install ?

4
roles/etherpad/defaults/main.yml
View File

@ -8,11 +8,11 @@ etherpad_root_dir: /opt/etherpad_{{ etherpad_id }}
# Unix account under which etherpad will run. The user will be created if it doesn't exist # Unix account under which etherpad will run. The user will be created if it doesn't exist
etherpad_user: etherpad_{{ etherpad_id }} etherpad_user: etherpad_{{ etherpad_id }}
# Version to deploy # Version to deploy
etherpad_version: 1.9.4 etherpad_version: 1.9.6
# URL from where the archive will be downloaded # URL from where the archive will be downloaded
etherpad_archive_url: https://github.com/ether/etherpad-lite/archive/{{ etherpad_version }}.tar.gz etherpad_archive_url: https://github.com/ether/etherpad-lite/archive/{{ etherpad_version }}.tar.gz
# Expected sha256 of the archive, to check the download were OK # Expected sha256 of the archive, to check the download were OK
etherpad_archive_sha256: 5b8ccf2a3c92cbd9bb578f684bc52d2ea27fc3fb30cdc76341f9ccffe0c0ff7f etherpad_archive_sha256: cd0cb2c9c2c4a8f93972b3f5913ff00cd3733c732195df293c8f56f3ce0a018f
# Port on which the service will listen # Port on which the service will listen
etherpad_port: 9003 etherpad_port: 9003
# List of IP/CIDR for which the port will be opened (if iptables_manage == True) # List of IP/CIDR for which the port will be opened (if iptables_manage == True)

4
roles/gitea/defaults/main.yml
View File

@ -1,11 +1,11 @@
--- ---
# Version to install # Version to install
gitea_version: 1.21.3 gitea_version: 1.21.5
# URL to the binary # URL to the binary
gitea_bin_url: https://dl.gitea.io/gitea/{{ gitea_version }}/gitea-{{ gitea_version }}-linux-amd64 gitea_bin_url: https://dl.gitea.io/gitea/{{ gitea_version }}/gitea-{{ gitea_version }}-linux-amd64
# sha256 of the binary # sha256 of the binary
gitea_bin_sha256: ccf6cc2077401e382bca0d000553a781a42c9103656bd33ef32bf093cca570eb gitea_bin_sha256: 7a521914203b07c7a0613ae30d8ab229111b149a2fa219423e643cd9a039256e
# Handle updates. If set to false, ansible will only install # Handle updates. If set to false, ansible will only install
# Gitea and then won't touch an existing installation # Gitea and then won't touch an existing installation
gitea_manage_upgrade: True gitea_manage_upgrade: True

4
roles/glpi/defaults/main.yml
View File

@ -2,9 +2,9 @@
glpi_id: 1 glpi_id: 1
glpi_manage_upgrade: True glpi_manage_upgrade: True
glpi_version: '10.0.11' glpi_version: '10.0.12'
glpi_archive_url: https://github.com/glpi-project/glpi/releases/download/{{ glpi_version }}/glpi-{{ glpi_version }}.tgz glpi_archive_url: https://github.com/glpi-project/glpi/releases/download/{{ glpi_version }}/glpi-{{ glpi_version }}.tgz
glpi_archive_sha256: 7d2dec524e3e80d54cdaade606c9d42af1c52c413d92cdc165afdcf3ee34b72d glpi_archive_sha256: 7980cd5f9ab10dc234e1e42950acd42c2977e5c3da4d540ef000e9caa72cec85
glpi_root_dir: /opt/glpi_{{ glpi_id }} glpi_root_dir: /opt/glpi_{{ glpi_id }}
glpi_php_user: php-glpi_{{ glpi_id }} glpi_php_user: php-glpi_{{ glpi_id }}
# If set, will use the following custom PHP FPM pool, which must be created # If set, will use the following custom PHP FPM pool, which must be created

5
roles/kimai/defaults/main.yml
View File

@ -5,13 +5,12 @@
# You can set it to a number or a simple string (no special chars) # You can set it to a number or a simple string (no special chars)
kimai_id: 1 kimai_id: 1
# Kimai version to deploy # Kimai version to deploy
kimai_version: '2.8.0' kimai_version: '2.11.0'
# URL of the archive # URL of the archive
kimai_archive_url: https://github.com/kevinpapst/kimai2/archive/refs/tags/{{ kimai_version }}.tar.gz kimai_archive_url: https://github.com/kevinpapst/kimai2/archive/refs/tags/{{ kimai_version }}.tar.gz
# Expected sha256 of the archive # Expected sha256 of the archive
kimai_archive_sha256: 2c37aa5160ac2f1dd2c798dd02a7a29ea008e59ca6fe3c34810e9dc4a1f9e98f kimai_archive_sha256: 428f149bd10f81d254e791caf0f68ebb16d67d146f357d47c38464a664100d4f
# Directory where kimai will be installed # Directory where kimai will be installed
kimai_root_dir: /opt/kimai_{{ kimai_id }} kimai_root_dir: /opt/kimai_{{ kimai_id }}
# Should ansible handle upgrades or only initial install # Should ansible handle upgrades or only initial install

6
roles/metabase/defaults/main.yml
View File

@ -1,15 +1,15 @@
--- ---
# Version to deploy # Version to deploy
metabase_version: 0.47.10 metabase_version: 0.48.6
# URL to fetch the jar # URL to fetch the jar
metabase_jar_url: https://downloads.metabase.com/v{{ metabase_version }}/metabase.jar metabase_jar_url: https://downloads.metabase.com/v{{ metabase_version }}/metabase.jar
# Expected sha256 of the jar # Expected sha256 of the jar
metabase_jar_sha256: e03c247ae1192b2c17a5fd9966cbbb9c289f625b56862d1b22680ce7a452c0d2 metabase_jar_sha256: aefb5e000abe14ff3cb4ba754c55e1da34bdaea35a77fbea3282ee32bc73978b
# When building from source # When building from source
metabase_archive_url: https://github.com/metabase/metabase/archive/refs/tags/v{{ metabase_version }}.tar.gz metabase_archive_url: https://github.com/metabase/metabase/archive/refs/tags/v{{ metabase_version }}.tar.gz
# Expected sha256 of the archive # Expected sha256 of the archive
metabase_archive_sha256: 4eb4bec096c23b6aeeacfee7e9f574c8aa7f946074097788dce4a21dccca544a metabase_archive_sha256: 3f9ac75625610849f63129fde31d0831260fc11088e26705346a0df1c265059e
# Should ansible handle upgrades ? If set to false, only the initial install (and the config) will be handled # Should ansible handle upgrades ? If set to false, only the initial install (and the config) will be handled
metabase_manage_upgrade: True metabase_manage_upgrade: True

1
roles/metabase/templates/metabase.service.j2
View File

@ -8,6 +8,7 @@ User={{ metabase_user }}
WorkingDirectory={{ metabase_root_dir }}/app WorkingDirectory={{ metabase_root_dir }}/app
EnvironmentFile={{ metabase_root_dir }}/etc/env EnvironmentFile={{ metabase_root_dir }}/etc/env
ExecStart=/usr/bin/java -Djava.net.preferIPv4Stack=true \ ExecStart=/usr/bin/java -Djava.net.preferIPv4Stack=true \
-Djava.io.tmpdir={{ metabase_root_dir }}/tmp \
{% if system_proxy is defined and system_proxy != '' %} {% if system_proxy is defined and system_proxy != '' %}
-Dhttp.proxyHost={{ system_proxy | urlsplit('hostname') }} -Dhttp.proxyPort={{ system_proxy | urlsplit('port') }} \ -Dhttp.proxyHost={{ system_proxy | urlsplit('hostname') }} -Dhttp.proxyPort={{ system_proxy | urlsplit('port') }} \
-Dhttps.proxyHost={{ system_proxy | urlsplit('hostname') }} -Dhttps.proxyPort={{ system_proxy | urlsplit('port') }} \ -Dhttps.proxyHost={{ system_proxy | urlsplit('hostname') }} -Dhttps.proxyPort={{ system_proxy | urlsplit('port') }} \

4
roles/nomad/defaults/main.yml
View File

@ -3,8 +3,8 @@
# List of plugins to install # List of plugins to install
nomad_plugins: nomad_plugins:
podman: podman:
archive_url: https://releases.hashicorp.com/nomad-driver-podman/0.5.1/nomad-driver-podman_0.5.1_linux_amd64.zip archive_url: https://releases.hashicorp.com/nomad-driver-podman/0.5.2/nomad-driver-podman_0.5.2_linux_amd64.zip
sha256: cef60b0dfd708ab2b5b1e517991cf933bce509a27b087c482e6993f3784dd572 sha256: e4fd4c94b429d5fe1f70086522061d0e0a217b81a5920572fbfc196973a6ce61
containerd: containerd:
archive_url: https://github.com/Roblox/nomad-driver-containerd/releases/download/v0.9.4/containerd-driver archive_url: https://github.com/Roblox/nomad-driver-containerd/releases/download/v0.9.4/containerd-driver
sha256: 337e1bab178071500bfbe46a59946e0e3bafc652906ed1b755d2aa4d35990982 sha256: 337e1bab178071500bfbe46a59946e0e3bafc652906ed1b755d2aa4d35990982

4
roles/nomad_bin/defaults/main.yml
View File

@ -1,9 +1,9 @@
--- ---
# Version of Nomad to install # Version of Nomad to install
nomad_version: 1.7.2 nomad_version: 1.7.5
# URL of the archive # URL of the archive
nomad_archive_url: https://releases.hashicorp.com/nomad/{{ nomad_version }}/nomad_{{ nomad_version }}_linux_amd64.zip nomad_archive_url: https://releases.hashicorp.com/nomad/{{ nomad_version }}/nomad_{{ nomad_version }}_linux_amd64.zip
# Expected sha256 of the archive # Expected sha256 of the archive
nomad_archive_sha256: 5264b4f4b9a0bf8f086544f15e6a6377c856e5556bf44337c958f5356d251331 nomad_archive_sha256: da04e002e5b12fba3713de89f5d89d1374184009d32a68b16c8791c3bed6ceb0

1
roles/odoo/templates/nginx.conf.j2
View File

@ -40,6 +40,7 @@ server {
proxy_set_header X-Forwarded-Proto $scheme; proxy_set_header X-Forwarded-Proto $scheme;
proxy_set_header X-Real-IP $remote_addr; proxy_set_header X-Real-IP $remote_addr;
proxy_redirect off; proxy_redirect off;
client_max_body_size 100m;
proxy_pass http://localhost:{{ odoo_http_port }}; proxy_pass http://localhost:{{ odoo_http_port }};
} }
} }

1
roles/penpot/templates/penpot-server.service.j2
View File

@ -7,6 +7,7 @@ Type=simple
User={{ penpot_user }} User={{ penpot_user }}
WorkingDirectory={{ penpot_root_dir }}/backend WorkingDirectory={{ penpot_root_dir }}/backend
EnvironmentFile={{ penpot_root_dir }}/etc/env EnvironmentFile={{ penpot_root_dir }}/etc/env
Environment=JAVA_HOME=/usr/lib/jvm/java-17
ExecStart={{ penpot_root_dir }}/backend/run.sh ExecStart={{ penpot_root_dir }}/backend/run.sh
SuccessExitStatus=143 SuccessExitStatus=143
PrivateTmp=yes PrivateTmp=yes

4
roles/seafile/defaults/main.yml
View File

@ -11,11 +11,11 @@
# MaxUsers = "9" # MaxUsers = "9"
# Mode = "subscription" # Mode = "subscription"
# etc... # etc...
seafile_version: "{{ seafile_license is defined | ternary('10.0.9','11.0.3') }}" seafile_version: "{{ seafile_license is defined | ternary('10.0.9','11.0.5') }}"
# Archive URL and sha256 are only used for the community version # Archive URL and sha256 are only used for the community version
seafile_archive_url: https://s3.eu-central-1.amazonaws.com/download.seadrive.org/seafile-server_{{ seafile_version }}_x86-64.tar.gz seafile_archive_url: https://s3.eu-central-1.amazonaws.com/download.seadrive.org/seafile-server_{{ seafile_version }}_x86-64.tar.gz
seafile_archive_sha256: 72fced8581fcded3b63d64c2cc34ca22c30278e4a540d9321cb4727a566a3bf7 seafile_archive_sha256: 47d994238519c679969a3c5591063041dc10102a6b1ac0e4d59be069c137225d
seafile_root_dir: /opt/seafile seafile_root_dir: /opt/seafile
seafile_data_dir: "{{ seafile_root_dir }}/data" seafile_data_dir: "{{ seafile_root_dir }}/data"

4
roles/unifi/defaults/main.yml
View File

@ -3,11 +3,11 @@
# Where unifi will be installed # Where unifi will be installed
unifi_root_dir: /opt/unifi unifi_root_dir: /opt/unifi
# Version to deploy # Version to deploy
unifi_version: 8.0.26 unifi_version: 8.0.28
# URL to get the installation tarball # URL to get the installation tarball
unifi_archive_url: https://www.ubnt.com/downloads/unifi/{{ unifi_version }}/UniFi.unix.zip unifi_archive_url: https://www.ubnt.com/downloads/unifi/{{ unifi_version }}/UniFi.unix.zip
# Expected sha256 # Expected sha256
unifi_archive_sha256: 1945feef7f453d8d1c992aea8c4938b9a3c89cd257b682236b164b4d061dd2a2 unifi_archive_sha256: 8dde5bc26d00908150d37871963d11ae6660d269654a003248464c03d9a84059
# Should ansible handle upgrades (if False, only initial install will be done) # Should ansible handle upgrades (if False, only initial install will be done)
unifi_manage_upgrade: True unifi_manage_upgrade: True
# List of ports used by UniFi controler # List of ports used by UniFi controler

4
roles/vault_bin/defaults/main.yml
View File

@ -1,7 +1,7 @@
# Version of Vault to install # Version of Vault to install
vault_version: 1.15.4 vault_version: 1.15.5
# URL of the archive # URL of the archive
vault_archive_url: https://releases.hashicorp.com/vault/{{ vault_version }}/vault_{{ vault_version }}_linux_amd64.zip vault_archive_url: https://releases.hashicorp.com/vault/{{ vault_version }}/vault_{{ vault_version }}_linux_amd64.zip
# Expected sha256 of the archive # Expected sha256 of the archive
vault_archive_sha256: f42f550713e87cceef2f29a4e2b754491697475e3d26c0c5616314e40edd8e1b vault_archive_sha256: 6a370c7506a48c323743b0d81ebc6a4037ba1388c9838ef45f9eada53d7966e9

8
roles/vaultwarden/defaults/main.yml
View File

@ -1,12 +1,12 @@
--- ---
vaultwarden_version: 1.30.0 vaultwarden_version: 1.30.2
vaultwarden_archive_url: https://github.com/dani-garcia/vaultwarden/archive/{{ vaultwarden_version }}.tar.gz vaultwarden_archive_url: https://github.com/dani-garcia/vaultwarden/archive/{{ vaultwarden_version }}.tar.gz
vaultwarden_archive_sha256: b9bcb75c671b0f28ef8ff1c3aae05a5e23306aceef43f86621a5c20dc1e9516d vaultwarden_archive_sha256: f6aa95377d4d28d9a8d5a88e7c86255d677afe21fcce96df7d7cea0beaeea005
vaultwarden_web_version: 2023.10.0 vaultwarden_web_version: 2023.12.0
vaultwarden_web_archive_url: https://github.com/dani-garcia/bw_web_builds/releases/download/v{{ vaultwarden_web_version }}/bw_web_v{{ vaultwarden_web_version }}.tar.gz vaultwarden_web_archive_url: https://github.com/dani-garcia/bw_web_builds/releases/download/v{{ vaultwarden_web_version }}/bw_web_v{{ vaultwarden_web_version }}.tar.gz
vaultwarden_web_archive_sha256: 17758e5a37af2e1f847d76d3386551c519526884ee06912d9f78d97e61dd52a0 vaultwarden_web_archive_sha256: b3788dae85aa57ada4c04b1be63741479cab5c9de9d39ea764c811d6342b720e
vaultwarden_root_dir: /opt/vaultwarden vaultwarden_root_dir: /opt/vaultwarden
vaultwarden_user: vaultwarden vaultwarden_user: vaultwarden