Files
infrastructure/roles/hedgedoc/tasks/main.yml
Mark HegrebergandChristian Heusel 410f59cb5a apply http_redirect role to our nginx
these are all the systems that the new redirect snippet can be cleanly
applied to. there are a few others not included, that will need a more
manual approach:
 - gitlab (multiple domains)
 - mta.sts(multiple domains)
 - archweb(mutltiple domains, snippets)
 - buildbtw(dynamic dev domains)
 - redirects(different structure)
 - public html(multiple domains)
 - archweb maintenence(different structure)
 - maintenence(different structure)

some of these might be solvable by tweaking the snippet to accept
multiple domains. I'll look into this

Co-authored-by: Christian Heusel <christian@heusel.eu>
2026-03-04 00:52:19 +01:00

41 lines
1.3 KiB
YAML

- name: Install hedgedoc
pacman: name=hedgedoc state=present
- name: Add hedgedoc postgres db
postgresql_db: name=hedgedoc
become: true
become_user: postgres
become_method: ansible.builtin.su
- name: Add hedgedoc postgres user
postgresql_user: login_db=hedgedoc name=hedgedoc password={{ vault_postgres_users.hedgedoc }} encrypted=true
become: true
become_user: postgres
become_method: ansible.builtin.su
- name: Make nginx log dir
file: path=/var/log/nginx/{{ hedgedoc_domain }} state=directory owner=root group=root mode=0755
- name: Setup HTTP redirect
include_role:
name: http_redirect
vars:
domain: "{{ hedgedoc_domain }}"
- name: Set up nginx
template: src=nginx.d.conf.j2 dest={{ hedgedoc_nginx_conf }} owner=root group=http mode=640
notify: Reload nginx
tags: ['nginx']
- name: Add hedgedoc.service.d dir
file: state=directory path=/etc/systemd/system/hedgedoc.service.d owner=root group=root mode=0755
- name: Install hedgedoc.service snippet for configuration
template: src=hedgedoc.service.d.j2 dest=/etc/systemd/system/hedgedoc.service.d/local.conf owner=root group=root mode=0644
- name: Install hedgedoc config file
template: src=config.json.j2 dest=/etc/webapps/hedgedoc/config.json owner=root group=hedgedoc mode=0640
- name: Start and enable hedgedoc
service: name=hedgedoc.service enabled=yes state=started