infrastructure/roles/minecraft_blockmap/tasks/main.yml
saibotk 0f83d6503b
minecraft_blockmap: Adjust directory permissions
This patch reduces the permissions on the install directory to just the root user and also fixes the ansible-lint issue by specifying the `mode`.
2020-09-26 21:37:15 +02:00

153 lines
3.6 KiB
YAML

---
# Tasks file for the minecraft_blockmap roles
# Infrastructure
# Ansible instructions to deploy the infrastructure
# Copyright (C) 2020 Saibotk
#
# This program is free software: you can redistribute it and/or modify
# it under the terms of the GNU General Public License as published by
# the Free Software Foundation, version 3 of the License.
#
# This program is distributed in the hope that it will be useful,
# but WITHOUT ANY WARRANTY; without even the implied warranty of
# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
# GNU General Public License for more details.
#
# You should have received a copy of the GNU General Public License
# along with this program. If not, see <http://www.gnu.org/licenses/>.
- name: Update default SELinux contexts
sefcontext:
target: '{{ item }}(/.*)?'
setype: "container_file_t"
state: present
with_items:
- "{{ minecraft_blockmap_output_location }}"
- "{{ minecraft_blockmap_config_location }}"
become: true
- name: Create install directory
file:
path: "{{ item }}"
state: directory
mode: '0700'
owner: 'root'
group: 'root'
with_items:
- "{{ minecraft_blockmap_install_location }}"
become: true
tags:
- blockmap
- name: Create data directories
file:
path: "{{ item }}"
state: directory
mode: '0750'
owner: 'root'
group: 'root'
setype: "container_file_t"
with_items:
- "{{ minecraft_blockmap_output_location }}"
- "{{ minecraft_blockmap_config_location }}"
become: true
tags:
- blockmap
- name: Create archive directory
file:
path: "{{ item }}"
state: directory
mode: '0755'
owner: 'root'
group: 'root'
with_items:
- "{{ minecraft_blockmap_archive_location }}"
become: true
tags:
- blockmap
- name: Deploy nginx config file
template:
src: "default.conf"
dest: "{{ minecraft_blockmap_install_location }}/default.conf"
mode: '0600'
owner: 'root'
group: 'root'
become: true
- name: Deploy blockmap config
template:
src: "blockmap.json"
dest: "{{ minecraft_blockmap_config_location }}/blockmap.json"
mode: '0600'
owner: 'root'
group: 'root'
setype: "container_file_t"
become: true
- name: Deploy docker-compose.yml
template:
src: docker-compose.yml
dest: "{{ minecraft_blockmap_install_location }}/docker-compose.yml"
mode: '0600'
owner: 'root'
group: 'root'
validate: python2 -m compose -f %s config -q
tags:
- docker
- blockmap
become: true
- name: Create lvm mount directories
file:
path: "/blockmap_snapshot"
state: directory
mode: '0700'
owner: 'root'
group: 'root'
recurse: true
become: true
- name: Install render script
template:
src: "{{ item.src }}"
dest: "{{ item.dest }}"
mode: '0700'
owner: root
group: root
with_items:
- src: "render.sh"
dest: "{{ minecraft_blockmap_install_location }}/render.sh"
become: true
- name: Install render service & timer
template:
src: "{{ item }}"
dest: /etc/systemd/system/
mode: '0755'
owner: root
group: root
with_items:
- "blockmap-render.service"
- "blockmap-render.timer"
become: true
- name: Start & enable render service timer
systemd:
daemon_reload: yes
name: blockmap-render.timer
enabled: '{{ minecraft_blockmap_timer_enabled | bool }}'
state: '{{ minecraft_blockmap_timer_state }}'
become: true
- name: Compose minecraft-blockmap
docker_compose:
state: present
project_src: "{{ minecraft_blockmap_install_location }}"
pull: yes
remove_orphans: yes
tags:
- blockmap
become: true