c04955a168
This patch will change the name of the config file from `traefik` to `traefik.conf`, since tor now includes `/etc/torrc.d/*.conf` in their config file. This should make sure that the config is actually loaded. This patch originates from the observation that new setups no longer create the tor hidden service for traefik. Some investigation resulted in the insight, that the tor node is no longer including the configuration file.
79 lines
2.2 KiB
YAML
79 lines
2.2 KiB
YAML
---
|
|
# Tasks file traefik/tor for the traefik role
|
|
|
|
# Infrastructure
|
|
# Ansible instructions to deploy the infrastructure
|
|
# Copyright (C) 2019-2020 Christoph (Sheogorath) Kern
|
|
# Copyright (C) 2020 Alexander Wellbrock
|
|
#
|
|
# This program is free software: you can redistribute it and/or modify
|
|
# it under the terms of the GNU General Public License as published by
|
|
# the Free Software Foundation, version 3 of the License.
|
|
#
|
|
# This program is distributed in the hope that it will be useful,
|
|
# but WITHOUT ANY WARRANTY; without even the implied warranty of
|
|
# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
|
|
# GNU General Public License for more details.
|
|
#
|
|
# You should have received a copy of the GNU General Public License
|
|
# along with this program. If not, see <http://www.gnu.org/licenses/>.
|
|
|
|
- name: Update default SELinux contexts tor
|
|
sefcontext:
|
|
target: '{{ item }}(/.*)?'
|
|
setype: "container_file_t"
|
|
selevel: "{{ traefik_tor_selinux_level | default(omit) }}"
|
|
state: present
|
|
with_items:
|
|
- "{{ traefik_tor_data_location }}"
|
|
- "{{ traefik_tor_config_location }}"
|
|
become: true
|
|
|
|
- name: Create install directory
|
|
file:
|
|
path: "{{ item }}"
|
|
state: directory
|
|
mode: '0700'
|
|
owner: 'root'
|
|
group: 'root'
|
|
with_items:
|
|
- "{{ traefik_tor_location }}"
|
|
become: true
|
|
|
|
- name: Create data directory
|
|
file:
|
|
path: "{{ item }}"
|
|
state: directory
|
|
mode: '0700'
|
|
owner: '994'
|
|
group: '994'
|
|
setype: "container_file_t"
|
|
selevel: "{{ traefik_tor_selinux_level | default(omit) }}"
|
|
with_items:
|
|
- "{{ traefik_tor_data_location }}"
|
|
become: true
|
|
|
|
- name: Create config directory
|
|
file:
|
|
path: "{{ item }}"
|
|
state: directory
|
|
setype: "container_file_t"
|
|
selevel: "{{ traefik_tor_selinux_level | default(omit) }}"
|
|
mode: '0750'
|
|
owner: 'root'
|
|
group: 'root'
|
|
with_items:
|
|
- "{{ traefik_tor_config_location }}"
|
|
become: true
|
|
|
|
- name: Setup tor config
|
|
copy:
|
|
src: traefik-tor.conf
|
|
dest: "{{ traefik_tor_config_location }}/traefik.conf"
|
|
setype: "container_file_t"
|
|
selevel: "{{ traefik_tor_selinux_level | default(omit) }}"
|
|
mode: '0644'
|
|
owner: 'root'
|
|
group: 'root'
|
|
notify: Restart tor proxy
|
|
become: true
|