ansible-role-chill/tasks/main.yml

# code: language=ansible
---

- name: Install docker and docker compose plugin
  ansible.builtin.include_role:
    name: geerlingguy.docker
  vars:
    docker_edition: ce
    docker_package_state: latest
    docker_service_manage: true
    docker_service_state: started
    docker_service_enabled: true
    docker_install_compose_plugin: true
    docker_add_repo: true

- name: Print all available facts
  ansible.builtin.debug:
    var: ansible_facts

- name: Authenticate against private docker registry
  community.docker.docker_login:
    registry_url: "{{ registry_url }}"
    username: "{{ registry_username }}"
    password: "{{ registry_password }}"

- name: Authenticate against docker hub
  community.docker.docker_login:
    username: "{{ docker_hub_username }}"
    password: "{{ docker_hub_token }}"

- name: Create group php-fpm on host (require to store logs)
  ansible.builtin.group:
    gid: 82
    name: php-fpm
    system: true

- name: Create user php-fpm on host (required to store logs)
  ansible.builtin.user:
    uid: 82
    group: php-fpm
    name: php-fpm
    create_home: false
    system: true

- name: Create log directory
  ansible.builtin.file:
    path: /var/log/chill
    state: directory
    owner: php-fpm
    group: php-fpm
    mode: '0774'

- name: Configure logrotate for chill
  ansible.builtin.template:
    dest: /etc/logrotate.d/chill
    src: logrotate/chill
    owner: root
    group: root
    mode: '0644'

- name: Install traefik
  ansible.builtin.include_tasks: traefik.yml

- name: Install systemd services
  ansible.builtin.template:
    src: "systemd/{{ file }}"
    dest: "/etc/systemd/system/{{ file }}"
    owner: root
    group: root
    mode: '0766'
  notify: Reload systemd
  loop:
    - chill-cronjob@.service
    - chill-cronjob@.timer
  loop_control:
    loop_var: file

- name: Install individual chill
  ansible.builtin.include_tasks: chill/main.yml
  with_items: "{{ chills }}"