--- # Tasks file for the matrix-maubot role # Infrastructure # Ansible instructions to deploy the infrastructure # Copyright (C) 2019-2020 Christoph (Sheogorath) Kern # Copyright (C) 2019-2020 Alexander (w4tsn) Wellbrock # Copyright (C) 2020-2021 Saibotk # # This program is free software: you can redistribute it and/or modify # it under the terms of the GNU General Public License as published by # the Free Software Foundation, version 3 of the License. # # This program is distributed in the hope that it will be useful, # but WITHOUT ANY WARRANTY; without even the implied warranty of # MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the # GNU General Public License for more details. # # You should have received a copy of the GNU General Public License # along with this program. If not, see . # - name: Update default SELinux contexts community.general.sefcontext: target: "{{ item }}(/.*)?" setype: "container_file_t" state: present with_items: - "{{ matrix_maubot_database_location }}" - "{{ matrix_maubot_data_location }}" when: - matrix_maubot_selinux_enabled become: true - name: Create install directory ansible.builtin.file: path: "{{ item }}" state: directory mode: "0700" owner: "root" group: "root" with_items: - "{{ matrix_maubot_install_location }}" become: true - name: Create data directory ansible.builtin.file: # noqa risky-file-permissions # Container manages permissions on its own path: "{{ item }}" state: directory setype: "container_file_t" with_items: - "{{ matrix_maubot_database_location }}" - "{{ matrix_maubot_data_location }}" become: true - name: Deploy docker-compose.yml ansible.builtin.template: src: "docker-compose.yml" dest: "{{ matrix_maubot_install_location }}/docker-compose.yml" mode: "0600" owner: "root" group: "root" validate: docker compose -f %s config -q tags: - matrix - maubot become: true - name: Compose matrix-maubot community.docker.docker_compose_v2: state: present project_src: "{{ matrix_maubot_install_location }}" pull: always remove_orphans: true tags: - docker - matrix - maubot become: true