M .build.yml => .build.yml +0 -17
@@ 2,15 2,8 @@ image: archlinux
packages:
- ansible
- ansible-lint
- - docker
- - molecule
- - molecule-docker
- - python-dnspython
- - python-hvac
- terraform
- yamllint
-secrets:
- - 010953bd-f940-4bfa-a374-3b39d349dcda
sources:
- https://git.xenrox.net/~xenrox/ansible
environment:
@@ 33,13 26,3 @@ tasks:
cd ../terraform_keycloak
terraform init -backend=false
terraform validate
- - build-docker: |
- cd ansible/misc
- sudo systemctl start docker
- docker build -f Dockerfile -t archlinux-docker .
- - molecule: |
- set +x
- . ~/.vault-secret
- set -x
- cd ansible
- molecule test
M roles/certbot/tasks/main.yml => roles/certbot/tasks/main.yml +1 -1
@@ 27,7 27,7 @@
- name: Request certificate
ansible.builtin.command:
# Support minio dns style buckets
- cmd: certbot certonly {{ certbot_staging|default('') }} --agree-tos --authenticator dns-hetzner --dns-hetzner-credentials /etc/.secrets/hetzner.ini -d xenrox.net,*.xenrox.net,*.minio.xenrox.net --rsa-key-size 4096 --email admin@xenrox.net
+ cmd: certbot certonly --agree-tos --authenticator dns-hetzner --dns-hetzner-credentials /etc/.secrets/hetzner.ini -d xenrox.net,*.xenrox.net,*.minio.xenrox.net --rsa-key-size 4096 --email admin@xenrox.net
creates: /etc/letsencrypt/live/xenrox.net/privkey.pem
- name: Install renewal service
M roles/setup_archlinux/tasks/main.yml => roles/setup_archlinux/tasks/main.yml +0 -1
@@ 23,7 23,6 @@
follow: false
owner: root
group: root
- when: molecule_run is not defined
- name: Install reboot service
ansible.builtin.copy: