mirror of
https://git.lapiole.org/dani/ansible-roles.git
synced 2025-04-10 15:23:27 +02:00
40 lines
1.0 KiB
YAML
40 lines
1.0 KiB
YAML
---
|
|
|
|
- name: Create random tokens
|
|
shell: "{{ gitea_root_dir }}/bin/gitea generate secret {{ item }} > {{ gitea_root_dir }}/meta/ansible_{{ item }}"
|
|
args:
|
|
creates: "{{ gitea_root_dir }}/meta/ansible_{{ item }}"
|
|
with_items:
|
|
- INTERNAL_TOKEN
|
|
- LFS_JWT_SECRET
|
|
- SECRET_KEY
|
|
- JWT_SECRET
|
|
tags: gitea
|
|
|
|
- name: Read random tokens
|
|
command: cat {{ gitea_root_dir }}/meta/ansible_{{ item }}
|
|
with_items:
|
|
- INTERNAL_TOKEN
|
|
- LFS_JWT_SECRET
|
|
- SECRET_KEY
|
|
- JWT_SECRET
|
|
changed_when: False
|
|
register: gitea_tokens
|
|
tags: gitea
|
|
|
|
- name: Deploy gitea configuration
|
|
template: src=app.ini.j2 dest={{ gitea_root_dir }}/etc/app.ini owner=root group=gitea mode=0660
|
|
notify: restart gitea
|
|
tags: gitea
|
|
|
|
- name: Set optimal permissions
|
|
command: "{{ gitea_root_dir }}/perms.sh"
|
|
changed_when: False
|
|
tags: gitea
|
|
|
|
- name: Regenerate authorized_keys
|
|
command: "{{ gitea_root_dir }}/bin/gitea -c {{ gitea_root_dir }}/etc/app.ini admin regenerate keys"
|
|
become_user: gitea
|
|
when: gitea_install_mode == 'upgrade'
|
|
tags: gitea
|