summaryrefslogtreecommitdiffstats
path: root/roles/media/tasks/main.yml
blob: 8cd854d7f1677f592b06fb827f0d1097896fdf9a (plain) (blame)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
- name: Set up packages
  ansible.builtin.apt:
    update_cache: true
    pkg:
      - nginx
    state: present
- name: Install package for setting htpasswd
  package:
    name: python3-passlib
- name: Ensure web path exists
  file:
    path: /var/www/{{ media_server_name }}/{{ emacsconf_year }}/backstage
    state: directory
- name: Create group
  group:
    name: "{{ emacsconf_group }}"
    state: present
- name: Create user
  user:
    name: "{{ emacsconf_user }}"
    group: "{{ emacsconf_group }}"
    state: present
- name: Change ownership and permissions
  file:
    path: /var/www/{{ media_server_name }}/{{ emacsconf_year }}
    owner: "{{ emacsconf_user }}"
    group: "{{ emacsconf_group }}"
    mode: "u=rwX,g=rwX,o=rX"
    recurse: true
- name: Add public key for authorized access
  ansible.posix.authorized_key:
    user: "{{ emacsconf_user }}"
    state: present
    key: '{{ item }}'
  with_file:
    - ../../base/files/keys/sachac
    - ../../base/files/keys/orga
- name: Create htpasswd entry
  htpasswd:
    create: yes
    name: "{{ emacsconf_backstage_user }}"
    password: "{{ emacsconf_backstage_password }}"
    path: /etc/nginx/sites-available/{{ media_server_name }}-{{ emacsconf_year }}-htpasswd
- name: Create Nginx include
  template:
    src: nginx-include
    dest: /etc/nginx/sites-available/{{ media_server_name }}-{{ emacsconf_year }}-include
- name: Create main configuration if needed
  template:
    src: nginx-site-config
    dest: /etc/nginx/sites-available/{{ media_server_name }}
    force: no
- name: Make sure main configuration is enabled
  file:
    src: /etc/nginx/sites-available/{{ media_server_name }}
    dest: /etc/nginx/sites-enabled/{{ media_server_name }}
    owner: "{{ emacsconf_user }}"
    group: "{{ emacsconf_group }}"
    force: no
    state: link
- name: Include it in the main configuration
  lineinfile:
    path: /etc/nginx/sites-available/{{ media_server_name }}
    regexp: "{{ media_server_name }}-{{ emacsconf_year }}-include"
    line: "    include sites-available/{{ media_server_name }}-{{ emacsconf_year }}-include;"
    insertafter: root
- name: Reload configuration
  service:
    name: nginx
    state: reloaded