misc/ansible-base
0
0
Fork 0
Code Issues Pull requests 1 Projects Releases Packages Wiki Activity Actions

[del] role:postgresql-for-hydra [del] role:hydra

Browse source
This commit is contained in:
Christian Fraß 2023-12-10 12:52:44 +01:00
parent 2a5a1c6fdc
commit 3a69c74dcf
5 changed files with 0 additions and 125 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

5
ansible/roles/hydra/defaults/main.json
View file

@ -1,5 +0,0 @@
{
"var_hydra_directory": "/opt",
"var_hydra_name": "hydra",
"var_hydra_secrets_system": "REPLACE_ME"
}

53
ansible/roles/hydra/tasks/main.json
View file

@ -1,53 +0,0 @@
[
{
"name": "unlock destination",
"become": true,
"ansible.builtin.file": {
"state": "directory",
"dest": "{{var_hydra_directory}}",
"mode": "0777"
}
},
{
"name": "prepare directory",
"ansible.builtin.file": {
"state": "directory",
"path": "{{var_hydra_directory}}/{{var_hydra_name}}"
}
},
{
"name": "download",
"ansible.builtin.get_url": {
"url": "https://raw.githubusercontent.com/ory/meta/master/install.sh",
"dest": "{{var_hydra_directory}}/{{var_hydra_name}}/install.sh"
}
},
{
"name": "user",
"ansible.builtin.command": {
"chdir": "{{var_hydra_directory}}/{{var_hydra_name}}",
"cmd": "bash install.sh hydra"
}
},
{
"name": "lock destination",
"become": true,
"ansible.builtin.file": {
"state": "directory",
"dest": "{{var_hydra_directory}}",
"mode": "0555"
}
},
{
"name": "initialize database",
"ansible.builtin.shell": {
"cmd": "{{var_hydra_directory}}/{{var_hydra_name}}/bin/hydra migrate sql $(cat /etc/hydra/database) --yes"
}
},
{
"name": "generate secret",
"ansible.builtin.shell": {
"cmd": "export LC_CTYPE=C; cat /dev/urandom | tr -dc 'a-zA-Z0-9' | fold -w 32 | head -n 1 > /etc/hydra/secrets_system"
}
}
]

5
ansible/roles/postgresql-for-hydra/defaults/main.json
View file

@ -1,5 +0,0 @@
{
"var_postgresql_for_hydra_username": "hydra_user",
"var_postgresql_for_hydra_password": "REPLACE_ME",
"var_postgresql_for_hydra_schema": "hydra"
}

61
ansible/roles/postgresql-for-hydra/tasks/main.json
View file

@ -1,61 +0,0 @@
[
{
"name": "packages",
"become": true,
"ansible.builtin.apt": {
"pkg": [
"acl"
]
}
},
{
"name": "user",
"become": true,
"become_user": "postgres",
"community.postgresql.postgresql_user": {
"state": "present",
"name": "{{var_postgresql_for_hydra_username}}",
"password": "{{var_postgresql_for_hydra_password}}"
}
},
{
"name": "schema",
"become": true,
"become_user": "postgres",
"community.postgresql.postgresql_db": {
"state": "present",
"name": "{{var_postgresql_for_hydra_schema}}",
"owner": "{{var_postgresql_for_hydra_username}}",
"encoding": "UTF-8"
}
},
{
"name": "rights",
"become": true,
"become_user": "postgres",
"community.postgresql.postgresql_privs": {
"state": "present",
"db": "{{var_postgresql_for_hydra_schema}}",
"objs": "ALL_IN_SCHEMA",
"roles": "{{var_postgresql_for_hydra_username}}",
"privs": "ALL",
"grant_option": true
}
},
{
"name": "start script | prepare directory",
"become": true,
"ansible.builtin.file": {
"state": "directory",
"path": "/etc/hydra"
}
},
{
"name": "start script | emplace",
"become": true,
"ansible.builtin.template": {
"src": "dsn.j2",
"dest": "/etc/hydra/dsn"
}
}
]

1
ansible/roles/postgresql-for-hydra/templates/dsn.j2
View file

@ -1 +0,0 @@
postgres://{{var_postgresql_for_hydra_username}}:{{var_postgresql_for_hydra_password}}@localhost:5432/{{var_postgresql_for_hydra_schema}}?sslmode=disable