--- # Tasks file for the matrix-maubot role # Infrastructure # Ansible instructions to deploy the infrastructure # Copyright (C) 2019-2020 Christoph (Sheogorath) Kern # Copyright (C) 2019-2020 Alexander (w4tsn) Wellbrock # Copyright (C) 2020-2021 Saibotk # # This program is free software: you can redistribute it and/or modify # it under the terms of the GNU General Public License as published by # the Free Software Foundation, version 3 of the License. # # This program is distributed in the hope that it will be useful, # but WITHOUT ANY WARRANTY; without even the implied warranty of # MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the # GNU General Public License for more details. # # You should have received a copy of the GNU General Public License # along with this program. If not, see . # - name: Update default SELinux contexts community.general.sefcontext: target: '{{ item }}(/.*)?' setype: "container_file_t" state: present with_items: - "{{ matrix_maubot_database_location }}" - "{{ matrix_maubot_data_location }}" when: - matrix_maubot_selinux_enabled become: true - name: Create install directory ansible.builtin.file: path: "{{ item }}" state: directory mode: '0700' owner: 'root' group: 'root' with_items: - "{{ matrix_maubot_install_location }}" become: true - name: Create data directory ansible.builtin.file: # noqa risky-file-permissions # Container manages permissions on its own path: "{{ item }}" state: directory setype: "container_file_t" with_items: - "{{ matrix_maubot_database_location }}" - "{{ matrix_maubot_data_location }}" become: true - name: Deploy docker-compose.yml ansible.builtin.template: src: "docker-compose.yml" dest: "{{ matrix_maubot_install_location }}/docker-compose.yml" mode: '0600' owner: 'root' group: 'root' validate: docker-compose -f %s config -q tags: - matrix - maubot become: true - name: Compose matrix-maubot community.docker.docker_compose: state: present project_src: "{{ matrix_maubot_install_location }}" pull: true remove_orphans: true tags: - docker - matrix - maubot become: true