From e49610d551b73cb9c08ccbaa5bd9b59709c55e1e Mon Sep 17 00:00:00 2001 From: "flyingscorpio@clevo" Date: Tue, 27 Dec 2022 10:51:38 +0100 Subject: [PATCH] Move some tasks from gitea main to gitea unix --- roles/gitea/tasks/main.yml | 56 ++------------------------------------ roles/gitea/tasks/unix.yml | 55 +++++++++++++++++++++++++++++++++++++ 2 files changed, 57 insertions(+), 54 deletions(-) create mode 100644 roles/gitea/tasks/unix.yml diff --git a/roles/gitea/tasks/main.yml b/roles/gitea/tasks/main.yml index 72d47d5..690cbc2 100644 --- a/roles/gitea/tasks/main.yml +++ b/roles/gitea/tasks/main.yml @@ -8,60 +8,8 @@ - name: Include mariadb tasks ansible.builtin.include_tasks: mariadb.yml -- name: Install needed packages - become: true - ansible.builtin.apt: - name: - - git - - unzip - - gpg # to verify binary - - acl # for become_user: git - state: present - -- name: Create git group - become: true - ansible.builtin.group: - name: git - system: true - -- name: Create git user - become: true - ansible.builtin.user: - name: git - group: git - append: true - groups: - - sudo - - mail - create_home: true - home: /home/git - shell: /bin/bash - system: true - -- name: Set sudoer permissions to git user - become: true - ansible.builtin.copy: - content: 'git ALL=(root) NOPASSWD:/usr/bin/systemctl' - dest: /etc/sudoers.d/git - owner: root - group: root - mode: 0440 - validate: /usr/sbin/visudo -csf %s - -- name: Create needed directories - become: true - ansible.builtin.file: - path: "{{ item }}" - state: directory - owner: git - group: git - mode: 0750 - with_items: - - /etc/gitea - - /var/lib/gitea - - /var/lib/gitea/custom - - /var/lib/gitea/data - - /var/log/gitea +- name: Include unix tasks + ansible.builtin.include_tasks: unix.yml - name: Find latest gitea version ansible.builtin.uri: diff --git a/roles/gitea/tasks/unix.yml b/roles/gitea/tasks/unix.yml new file mode 100644 index 0000000..f916df7 --- /dev/null +++ b/roles/gitea/tasks/unix.yml @@ -0,0 +1,55 @@ +--- +- name: Install needed packages + become: true + ansible.builtin.apt: + name: + - git + - unzip + - gpg # to verify binary + - acl # for become_user: git + state: present + +- name: Create git group + become: true + ansible.builtin.group: + name: git + system: true + +- name: Create git user + become: true + ansible.builtin.user: + name: git + group: git + append: true + groups: + - sudo + - mail + create_home: true + home: /home/git + shell: /bin/bash + system: true + +- name: Set sudoer permissions to git user + become: true + ansible.builtin.copy: + content: 'git ALL=(root) NOPASSWD:/usr/bin/systemctl' + dest: /etc/sudoers.d/git + owner: root + group: root + mode: 0440 + validate: /usr/sbin/visudo -csf %s + +- name: Create needed directories + become: true + ansible.builtin.file: + path: "{{ item }}" + state: directory + owner: git + group: git + mode: 0750 + with_items: + - /etc/gitea + - /var/lib/gitea + - /var/lib/gitea/custom + - /var/lib/gitea/data + - /var/log/gitea