ansible_role_gitea/tasks/main.yml

---
- name: Perform optional versionscheck
  ansible.builtin.include_tasks: versioncheck.yml
  when: submodules_versioncheck|bool

- name: Gather installed packages for checks later on
  ansible.builtin.package_facts:
    manager: auto

- name: Prepare gitea/forgejo variable import
  block:
    - name: Gather variables for gitea or forgejo
      ansible.builtin.include_vars: "{{ lookup('first_found', gitea_fork_variables) }}"
  rescue:
    - name: Gitea/Forejo import info
      ansible.builtin.fail:
        msg: "Currently only {{ gitea_supported_forks }} are supported."

- name: Gather variables for each operating system
  ansible.builtin.include_vars: "{{ lookup('first_found', gitea_variables) }}"

- name: Gather versioning information
  ansible.builtin.include_tasks: "set_{{ gitea_fork | lower }}_version.yml"

- name: Backup gitea before update
  ansible.builtin.include_tasks: backup.yml
  when: gitea_backup_on_upgrade|bool

- name: Create gitea user and role
  ansible.builtin.include_tasks: create_user.yml

- name: "Install or update {{ gitea_fork }}"
  ansible.builtin.include_tasks: "install_{{ gitea_fork | lower }}.yml"

- name: Create directories
  ansible.builtin.include_tasks: directory.yml

- name: Setup gitea systemd service
  ansible.builtin.include_tasks: install_systemd.yml
  when: ansible_service_mgr == "systemd"

- name: Generate JWT Secrets if undefined
  ansible.builtin.include_tasks: jwt_secrets.yml

- name: Generate gitea secrets if undefined
  ansible.builtin.include_tasks: gitea_secrets.yml

- name: Configure gitea
  ansible.builtin.include_tasks: configure.yml

- name: Deploy optional fail2ban rules
  ansible.builtin.include_tasks: fail2ban.yml
  when: gitea_fail2ban_enabled|bool

- name: Optionally customize gitea
  ansible.builtin.include_tasks: customize_logo.yml
  when: gitea_customize_logo|bool

- name: Optionally customize footer
  ansible.builtin.include_tasks: customize_footer.yml
  when: gitea_customize_footer|bool

- name: Optionally deploy public files
  ansible.builtin.include_tasks: customize_public_files.yml
  when: gitea_customize_files|bool
Bunch of improvements around testing and ansible galaxy * added a license info * added galaxy tags/platforms * added travis test support * testing the playbook using molecule 2019-03-16 12:51:32 +01:00			`---`
update gitea linting 2022-09-29 23:09:19 +02:00			`- name: Perform optional versionscheck`
add optional versionscheck a simple version check that can prevent you from accidentally running an older version of this role. 2021-03-22 02:22:22 +01:00			`ansible.builtin.include_tasks: versioncheck.yml`
			`when: submodules_versioncheck\|bool`
removed trailing spaces 2021-04-12 16:01:24 +02:00
Added package_facts to determine if fail2ban is installed 2021-04-12 12:29:42 +02:00			`- name: Gather installed packages for checks later on`
			`ansible.builtin.package_facts:`
			`manager: auto`
add optional versionscheck a simple version check that can prevent you from accidentally running an older version of this role. 2021-03-22 02:22:22 +01:00
prepare to use forgejo fork 2023-01-26 22:35:10 +01:00			`- name: Prepare gitea/forgejo variable import`
			`block:`
			`- name: Gather variables for gitea or forgejo`
			`ansible.builtin.include_vars: "{{ lookup('first_found', gitea_fork_variables) }}"`
			`rescue:`
			`- name: Gitea/Forejo import info`
			`ansible.builtin.fail:`
			`msg: "Currently only {{ gitea_supported_forks }} are supported."`

Improve ARM Support (#74) * Gitea user should be a system user * Improve installation system * Download archive instead of binary * Add checksum validation * Add GPG check * Add backup process before upgrading * Improve ARM support * Improve support for Vault Encrypted JWT tokens * Fix spacing in gitea configuration template When Gitea rewrite the configuration file (e.g.: the JWT token is not set or doesn't fit their criteria), it'll align space on a per-section basis in the .ini file. If the template is not properly spaced, at the next Ansible run, you'll have an enormous diff, hidding what the real changes are. * add proper redhat/debian deps for molecule testing * Gitea group should be a system group * fix linting for CI * Update CI and meta information for up-to-date tests and distros * molecule: fix typo for redhat packages * fix typo * bump gitea version to 1.13.1 * Use Ubuntu keyservers to play nicely with everyone * Update minimum required ansible version to 2.9.8 This is required for Ubuntu Focal, which comes with systemd >= 245 The Get Facts modules doesn't work well with it before the bugfix introduced in 2.9.8 * Replace yes by True to please the linting * Truthy values needs to be lower-case * bump gitea version to 1.13.2 * perform gitea dump as gitea user * need to set become to yes * autogenerate JWT_SECRETS (#77) * autogenerate JWT_SECRETS Based on https://docs.gitea.io/en-us/command-line/#generate we will now autogenerate JWT_SECRETS if they are not defined. In my opinion a much better idea than writing a value in the default config. The check if the variables for the secrets are now 43 characters long i took out. Gitea generates itself suitable secrets, if the user given ones do not fit. * drop ansible.builtin. syntax * Update file permissions for "{{ gitea_home }}" (#75) The file permissions for {{ gitea_home }} especially in conjunction with the recurse: true flag are on closer inspection very open to all and also have a +x set on files. This should be done better. And I have done here now. By the way: To improve the -x on normal files in his gitea installation this shell command was useful for me ``` find . -type f -exec chmod a-x {} \+; find . -type f -exec chmod u=rwX {} \+; ``` * Bump cryptography from 3.2 to 3.3.2 (#79) Bumps [cryptography](https://github.com/pyca/cryptography) from 3.2 to 3.3.2. - [Release notes](https://github.com/pyca/cryptography/releases) - [Changelog](https://github.com/pyca/cryptography/blob/master/CHANGELOG.rst) - [Commits](https://github.com/pyca/cryptography/compare/3.2...3.3.2) Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> * Gitea user should be a system user * Improve installation system * Download archive instead of binary * Add checksum validation * Add GPG check * Add backup process before upgrading * Improve ARM support * Fix spacing in gitea configuration template When Gitea rewrite the configuration file (e.g.: the JWT token is not set or doesn't fit their criteria), it'll align space on a per-section basis in the .ini file. If the template is not properly spaced, at the next Ansible run, you'll have an enormous diff, hidding what the real changes are. * add proper redhat/debian deps for molecule testing * Gitea group should be a system group * fix linting for CI * Update CI and meta information for up-to-date tests and distros * molecule: fix typo for redhat packages * fix typo * bump gitea version to 1.13.1 * Use Ubuntu keyservers to play nicely with everyone * Update minimum required ansible version to 2.9.8 This is required for Ubuntu Focal, which comes with systemd >= 245 The Get Facts modules doesn't work well with it before the bugfix introduced in 2.9.8 * Replace yes by True to please the linting * Truthy values needs to be lower-case * bump gitea version to 1.13.2 * perform gitea dump as gitea user * need to set become to yes * check-variables.yml doesn't exists anymore Co-authored-by: L3D <l3d@c3woc.de> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> 2021-02-12 18:56:31 +01:00			`- name: Gather variables for each operating system`
simplify directory handling and start using new ansible name scheme 2021-03-22 21:08:40 +01:00			`ansible.builtin.include_vars: "{{ lookup('first_found', gitea_variables) }}"`
check that jwt token is < 32 chars to prevent gitea from crashing 2020-04-04 14:06:25 +02:00
Add 'latest' version to automatically download the latest gitea release. * Versioning logic moved into separate file; versioning is determined in that file and appropriate facts are set. * Removed 'gitea_dl_url' from defaults/main.yml. This is now a generated fact from tasks/set_version.yml. * Remote gitea version is only checked if 'latest' is set, otherwise no logic change. * 'gitea_version' used in tasks is now 'gitea_version_target'. This is the target install version after versioning logic is applied. No change to end user usage of 'gitea_version' in defaults/main.yml. * Updated documentation with usage and removal of 'gitea_dl_url'. 2021-07-16 02:43:58 +02:00			`- name: Gather versioning information`
Adding support for forgejo installation 2023-01-27 01:35:16 +01:00			`ansible.builtin.include_tasks: "set_{{ gitea_fork \| lower }}_version.yml"`
Add toggle to do a version check before download Old behavior is to download the binary of `gitea_version` every run, then checksum it against the currently installed version to see if it needs to be copied over. New behavior is to attempt to extract the current running version of gitea and only initiate the old behavior if the running version != `gitea_version`. Default is old behavior due to the major logic change involved. 2019-04-28 02:00:35 +02:00
update gitea linting 2022-09-29 23:09:19 +02:00			`- name: Backup gitea before update`
simplify directory handling and start using new ansible name scheme 2021-03-22 21:08:40 +01:00			`ansible.builtin.include_tasks: backup.yml`
make the backup on update optional Documentation and introduction of the variable `gitea_backup_on_upgrade: false` 2021-02-13 05:39:24 +01:00			`when: gitea_backup_on_upgrade\|bool`
create backup direcotry create a backup folder and move the gitea backup to backup.yml 2021-02-13 05:32:27 +01:00
update gitea linting 2022-09-29 23:09:19 +02:00			`- name: Create gitea user and role`
simplify directory handling and start using new ansible name scheme 2021-03-22 21:08:40 +01:00			`ansible.builtin.include_tasks: create_user.yml`
First commit 2017-01-10 22:09:34 +01:00
Adding support for forgejo installation 2023-01-27 01:35:16 +01:00			`- name: "Install or update {{ gitea_fork }}"`
			`ansible.builtin.include_tasks: "install_{{ gitea_fork \| lower }}.yml"`
add default "gitea_group: gitea" (#71) * delete trailing whitespace * Add gitea_group This will add the `gitea_group: gitea` and will probably RESOLVE https://github.com/thomas-maurice/ansible-role-gitea/issues/70 * update variable length update variable length to make this role idempotent * vars should not include special character 2021-01-27 15:13:02 +01:00
Fix Typo directorys/directories RESOLVE https://github.com/roles-ansible/ansible_role_gitea/issues/69 2022-02-14 11:08:49 +01:00			`- name: Create directories`
simplify directory handling and start using new ansible name scheme 2021-03-22 21:08:40 +01:00			`ansible.builtin.include_tasks: directory.yml`
First commit 2017-01-10 22:09:34 +01:00
update gitea linting 2022-09-29 23:09:19 +02:00			`- name: Setup gitea systemd service`
use new ansible name scheme at more tasks 2021-03-22 21:21:25 +01:00			`ansible.builtin.include_tasks: install_systemd.yml`
First commit 2017-01-10 22:09:34 +01:00			`when: ansible_service_mgr == "systemd"`

update gitea linting 2022-09-29 23:09:19 +02:00			`- name: Generate JWT Secrets if undefined`
use new ansible name scheme at more tasks 2021-03-22 21:21:25 +01:00			`ansible.builtin.include_tasks: jwt_secrets.yml`
autogenerate JWT_SECRETS (#77) * autogenerate JWT_SECRETS Based on https://docs.gitea.io/en-us/command-line/#generate we will now autogenerate JWT_SECRETS if they are not defined. In my opinion a much better idea than writing a value in the default config. The check if the variables for the secrets are now 43 characters long i took out. Gitea generates itself suitable secrets, if the user given ones do not fit. * drop ansible.builtin. syntax 2021-02-10 20:04:13 +01:00
update gitea linting 2022-09-29 23:09:19 +02:00			`- name: Generate gitea secrets if undefined`
use new ansible name scheme at more tasks 2021-03-22 21:21:25 +01:00			`ansible.builtin.include_tasks: gitea_secrets.yml`
change secret mechanism and continue with README clenaup 2021-03-21 02:22:36 +01:00
update gitea linting 2022-09-29 23:09:19 +02:00			`- name: Configure gitea`
use new ansible name scheme at more tasks 2021-03-22 21:21:25 +01:00			`ansible.builtin.include_tasks: configure.yml`
First commit 2017-01-10 22:09:34 +01:00
update gitea linting 2022-09-29 23:09:19 +02:00			`- name: Deploy optional fail2ban rules`
use new ansible name scheme at more tasks 2021-03-22 21:21:25 +01:00			`ansible.builtin.include_tasks: fail2ban.yml`
Fixing deprecation warning ANsible comes with the error: ```bash [DEPRECATION WARNING]: evaluating gitea_fail2ban_enabled as a bare variable, this behaviour will go away and you might need to add \|bool to the expression in the future. Also see CONDITIONAL_BARE_VARS configuration toggle.. This feature will be removed in version 2.12. Deprecation warnings can be disabled by setting deprecation_warnings=False in ansible.cfg. ``` appending ``\|bool`` after a boolean variable will resolve the issue. 2019-05-22 09:30:09 +02:00			`when: gitea_fail2ban_enabled\|bool`
implement custom logos 2021-06-03 17:59:14 +02:00
update gitea linting 2022-09-29 23:09:19 +02:00			`- name: Optionally customize gitea`
implement custom logos 2021-06-03 17:59:14 +02:00			`ansible.builtin.include_tasks: customize_logo.yml`
			`when: gitea_customize_logo\|bool`
Add custom footer support 2021-06-03 21:06:04 +02:00
update gitea linting 2022-09-29 23:09:19 +02:00			`- name: Optionally customize footer`
Add custom footer support 2021-06-03 21:06:04 +02:00			`ansible.builtin.include_tasks: customize_footer.yml`
			`when: gitea_customize_footer\|bool`
allow optional public files 2021-06-03 22:51:28 +02:00
update gitea linting 2022-09-29 23:09:19 +02:00			`- name: Optionally deploy public files`
allow optional public files 2021-06-03 22:51:28 +02:00			`ansible.builtin.include_tasks: customize_public_files.yml`
			`when: gitea_customize_files\|bool`