~xenrox/ansible

deebbfb94ad05998dd75a2006b8baf6ffff75f1e — Thorben Günther a month ago 9d49863
CI: Disable molecule

The goal is to later execute most playbooks in the CI/CD pipeline.

References: https://todo.xenrox.net/~xenrox/infrastructure/7
3 files changed, 1 insertions(+), 19 deletions(-)

M .build.yml
M roles/certbot/tasks/main.yml
M roles/setup_archlinux/tasks/main.yml
M .build.yml => .build.yml +0 -17
@@ 2,15 2,8 @@ image: archlinux
packages:
  - ansible
  - ansible-lint
  - docker
  - molecule
  - molecule-docker
  - python-dnspython
  - python-hvac
  - terraform
  - yamllint
secrets:
  - 010953bd-f940-4bfa-a374-3b39d349dcda
sources:
  - https://git.xenrox.net/~xenrox/ansible
environment:


@@ 33,13 26,3 @@ tasks:
      cd ../terraform_keycloak
      terraform init -backend=false
      terraform validate
  - build-docker: |
      cd ansible/misc
      sudo systemctl start docker
      docker build -f Dockerfile -t archlinux-docker .
  - molecule: |
      set +x
      . ~/.vault-secret
      set -x
      cd ansible
      molecule test

M roles/certbot/tasks/main.yml => roles/certbot/tasks/main.yml +1 -1
@@ 27,7 27,7 @@
- name: Request certificate
  ansible.builtin.command:
    # Support minio dns style buckets
    cmd: certbot certonly {{ certbot_staging|default('') }} --agree-tos --authenticator dns-hetzner --dns-hetzner-credentials /etc/.secrets/hetzner.ini -d xenrox.net,*.xenrox.net,*.minio.xenrox.net --rsa-key-size 4096 --email admin@xenrox.net
    cmd: certbot certonly --agree-tos --authenticator dns-hetzner --dns-hetzner-credentials /etc/.secrets/hetzner.ini -d xenrox.net,*.xenrox.net,*.minio.xenrox.net --rsa-key-size 4096 --email admin@xenrox.net
    creates: /etc/letsencrypt/live/xenrox.net/privkey.pem

- name: Install renewal service

M roles/setup_archlinux/tasks/main.yml => roles/setup_archlinux/tasks/main.yml +0 -1
@@ 23,7 23,6 @@
    follow: false
    owner: root
    group: root
  when: molecule_run is not defined

- name: Install reboot service
  ansible.builtin.copy: