self-hosting/roles/forgejo/handlers/main.yml

31 lines
1,019 B
YAML

---
- name: Receive forgejo pgp key
become: true
ansible.builtin.command: gpg --keyserver hkps://keys.openpgp.org --recv EB114F5E6C0DC2BCDD183550A4B61A2DC5923710
register: result
changed_when: '"not changed" not in result.stderr'
- name: Download forgejo asc file
ansible.builtin.get_url:
url: "{{ (ansible_facts['architecture'] == 'x86_64') | ternary(latest_forgejo.amd64.asc, latest_forgejo.arm_6.asc) }}"
dest: "/tmp/forgejo-{{ latest_forgejo.version }}.asc"
mode: 0644
- name: Verify forgejo binary with gpg
become: true
ansible.builtin.command: "gpg --verify /tmp/forgejo-{{ latest_forgejo.version }}.asc {{ forgejo_run_dir }}/forgejo-{{ latest_forgejo.version }}"
register: result
failed_when: '"Good signature from" not in result.stderr'
- name: Start forgejo service
become: true
ansible.builtin.systemd:
name: forgejo
state: started
enabled: true
- name: Restart forgejo service
become: true
ansible.builtin.systemd:
name: forgejo
state: restarted