Unreal amounts of linter fixes
This commit is contained in:
parent
8ef606153f
commit
75b7f2fa3d
@ -10,6 +10,6 @@ jobs:
|
|||||||
steps:
|
steps:
|
||||||
- name: Checkout repo content
|
- name: Checkout repo content
|
||||||
uses: actions/checkout@v4
|
uses: actions/checkout@v4
|
||||||
- run: ansible-lint
|
- run: ansible-lint -c linter.yaml
|
||||||
working-directory: ansible/
|
working-directory: ansible/
|
||||||
|
|
||||||
|
@ -2,14 +2,15 @@
|
|||||||
# The rest of the role stuff is meant to be ran as the admin user that
|
# The rest of the role stuff is meant to be ran as the admin user that
|
||||||
# this playbook creates for us
|
# this playbook creates for us
|
||||||
---
|
---
|
||||||
- hosts: nigel.local
|
- name: Setup local admin user with a fresh ubuntu host
|
||||||
|
hosts: nigel.local
|
||||||
remote_user: nigel
|
remote_user: nigel
|
||||||
vars:
|
vars:
|
||||||
admin:
|
admin:
|
||||||
username: nigel
|
username: nigel
|
||||||
tasks:
|
tasks:
|
||||||
- name: Copy the nigel admin key
|
- name: Copy the nigel admin key
|
||||||
ansible.builtin.authorized_key:
|
ansible.posix.authorized_key:
|
||||||
user: "{{ admin.username }}"
|
user: "{{ admin.username }}"
|
||||||
state: present
|
state: present
|
||||||
key: "{{ lookup('file', '~/.ssh/nigel/admin.pub') }}"
|
key: "{{ lookup('file', '~/.ssh/nigel/admin.pub') }}"
|
||||||
|
@ -1,5 +1,6 @@
|
|||||||
---
|
---
|
||||||
- hosts: nigel.local
|
- name: Setup bare metal requirements for nomad
|
||||||
|
hosts: nigel.local
|
||||||
remote_user: nigel
|
remote_user: nigel
|
||||||
tasks:
|
tasks:
|
||||||
- name: Setup basic role on nigel
|
- name: Setup basic role on nigel
|
||||||
|
@ -1,5 +1,6 @@
|
|||||||
---
|
---
|
||||||
- hosts: nigel.local
|
- name: Setup host as a reverse proxy
|
||||||
|
hosts: nigel.local
|
||||||
remote_user: nigel
|
remote_user: nigel
|
||||||
tasks:
|
tasks:
|
||||||
- name: Apply reverse proxy role
|
- name: Apply reverse proxy role
|
||||||
|
@ -10,25 +10,26 @@
|
|||||||
keypath: /usr/share/keyrings/hashicorp-archive-keyring.gpg
|
keypath: /usr/share/keyrings/hashicorp-archive-keyring.gpg
|
||||||
gpgpath: /tmp/hashicorp.gpg
|
gpgpath: /tmp/hashicorp.gpg
|
||||||
block:
|
block:
|
||||||
- name: Download the hashicorp GPG Key
|
- name: Download the hashicorp GPG Key
|
||||||
ansible.builtin.get_url:
|
ansible.builtin.get_url:
|
||||||
url: https://apt.releases.hashicorp.com/gpg
|
url: https://apt.releases.hashicorp.com/gpg
|
||||||
dest: "{{ gpgpath }}"
|
dest: "{{ gpgpath }}"
|
||||||
- name: Dearmor the hashicorp gpg key
|
mode: "0755"
|
||||||
ansible.builtin.command:
|
- name: Dearmor the hashicorp gpg key
|
||||||
cmd: "gpg --dearmor --yes -o {{ keypath }} {{ gpgpath }}"
|
ansible.builtin.command:
|
||||||
register: gpg
|
cmd: "gpg --dearmor --yes -o {{ keypath }} {{ gpgpath }}"
|
||||||
changed_when: gpg.rc == 0
|
register: gpg
|
||||||
- name: Add the hashicorp linux repo
|
changed_when: gpg.rc == 0
|
||||||
vars:
|
- name: Add the hashicorp linux repo
|
||||||
keyfile: "{{ keypath }}"
|
vars:
|
||||||
ansible.builtin.template:
|
keyfile: "{{ keypath }}"
|
||||||
src: hashicorp.list
|
ansible.builtin.template:
|
||||||
dest: /etc/apt/sources.list.d/hashicorp.list
|
src: hashicorp.list
|
||||||
mode: "0644"
|
dest: /etc/apt/sources.list.d/hashicorp.list
|
||||||
- name: Update apt repo cache
|
mode: "0644"
|
||||||
ansible.builtin.apt:
|
- name: Update apt repo cache
|
||||||
update_cache: true
|
ansible.builtin.apt:
|
||||||
|
update_cache: true
|
||||||
- name: Install consul
|
- name: Install consul
|
||||||
ansible.builtin.apt:
|
ansible.builtin.apt:
|
||||||
name: consul
|
name: consul
|
||||||
|
@ -1 +0,0 @@
|
|||||||
host_vol_root: /opt/volumes
|
|
@ -2,7 +2,9 @@
|
|||||||
ansible.builtin.file:
|
ansible.builtin.file:
|
||||||
path: "{{ nomad.volumes.root }}"
|
path: "{{ nomad.volumes.root }}"
|
||||||
state: directory
|
state: directory
|
||||||
|
mode: "0755"
|
||||||
- name: Ensure registry volume is present
|
- name: Ensure registry volume is present
|
||||||
ansible.builtin.file:
|
ansible.builtin.file:
|
||||||
path: "{{ nomad.volumes.registry }}"
|
path: "{{ nomad.volumes.registry }}"
|
||||||
state: directory
|
state: directory
|
||||||
|
mode: "0755"
|
||||||
|
@ -1,40 +0,0 @@
|
|||||||
networks:
|
|
||||||
gitea:
|
|
||||||
external: false
|
|
||||||
|
|
||||||
|
|
||||||
services:
|
|
||||||
gitea:
|
|
||||||
image: gitea/gitea:latest-rootless
|
|
||||||
container_name: gitea
|
|
||||||
environment:
|
|
||||||
- USER_UID=1000
|
|
||||||
- USER_GID=1000
|
|
||||||
restart: always
|
|
||||||
networks:
|
|
||||||
- gitea
|
|
||||||
volumes:
|
|
||||||
- /opt/containers/gitea:/data
|
|
||||||
- /etc/timezone:/etc/timezone:ro
|
|
||||||
- /etc/localtime:/etc/localtime:ro
|
|
||||||
ports:
|
|
||||||
- "3000:3000"
|
|
||||||
- "2222:22"
|
|
||||||
gitea-runner:
|
|
||||||
image: gitea/act_runner:nightly
|
|
||||||
container_name: gitea-runner
|
|
||||||
restart: always
|
|
||||||
networks:
|
|
||||||
- gitea
|
|
||||||
volumes:
|
|
||||||
- /opt/containers/gitea_runner/
|
|
||||||
- /var/run/docker.sock:/var/run/docker.sock
|
|
||||||
environment:
|
|
||||||
- GITEA_INSTANCE_URL=https://git.shockrah.xyz
|
|
||||||
- GITEA_RUNNER_NAME=gitea-main
|
|
||||||
- GITEA_RUNNER_LABELS=gitea-main
|
|
||||||
- GITEA_RUNNER_REGISTRATION_TOKEN=${token}
|
|
||||||
|
|
||||||
|
|
||||||
|
|
||||||
|
|
@ -1,29 +0,0 @@
|
|||||||
What is this
|
|
||||||
============
|
|
||||||
|
|
||||||
Here we contain scripts to build out all the containers that are run.
|
|
||||||
All of these images are based on images that are made from other projects
|
|
||||||
|
|
||||||
docker-compose.yaml
|
|
||||||
===================
|
|
||||||
|
|
||||||
Services that are more/less "special" go here since most of the stuff that is
|
|
||||||
run on the main host are basically just static html websites
|
|
||||||
|
|
||||||
Services & Containers
|
|
||||||
=====================
|
|
||||||
|
|
||||||
| Service | Docker Image Used |
|
|
||||||
|------------|--------------------------|
|
|
||||||
| Gitea | gitea/gitea:latest |
|
|
||||||
| Act Runner | gitea/act_runner:nightly |
|
|
||||||
|
|
||||||
Why the servics above?
|
|
||||||
======================
|
|
||||||
|
|
||||||
The Gitea related services are there so that I can host my own Git projects
|
|
||||||
away from "Git as a service" services. I have no issue with Github/Gitlab
|
|
||||||
but I just like being able to host my own stuff when possible :smiley:
|
|
||||||
|
|
||||||
|
|
||||||
|
|
@ -1,4 +0,0 @@
|
|||||||
# Because I just really needed ok?
|
|
||||||
FROM nginx:latest
|
|
||||||
|
|
||||||
COPY default /etc/nginx/conf.d/default.conf
|
|
@ -1,15 +0,0 @@
|
|||||||
server {
|
|
||||||
listen 8080;
|
|
||||||
listen [::]:8080;
|
|
||||||
server_name localhost;
|
|
||||||
location / {
|
|
||||||
root /usr/share/nginx/html;
|
|
||||||
index index.html index.htm;
|
|
||||||
}
|
|
||||||
|
|
||||||
error_page 500 502 503 504 /50x.html;
|
|
||||||
location = /50x.html {
|
|
||||||
root /usr/share/nginx/html;
|
|
||||||
}
|
|
||||||
|
|
||||||
}
|
|
Loading…
Reference in New Issue
Block a user