Emi Matchu
8628ab45c8
I'm glad I read the docs and found the canonical way to do this before inventing some custom thing!!
90 lines
2.2 KiB
YAML
90 lines
2.2 KiB
YAML
---
|
|
# Adapted from https://forgejo.org/docs/latest/admin/installation-binary/
|
|
- name: Install Forgejo
|
|
hosts: webserver
|
|
become: yes
|
|
become_user: root
|
|
tasks:
|
|
- name: Download Forgejo binary to /usr/local/bin (and verify its checksum)
|
|
get_url:
|
|
url: https://codeberg.org/forgejo/forgejo/releases/download/v1.21.3-0/forgejo-1.21.3-0-linux-amd64
|
|
dest: /usr/local/bin/forgejo
|
|
checksum: "sha256:8c8f34e889f968b4f9357701ceee7daab5b47ea605793325da8e3e740457b45a"
|
|
mode: "755"
|
|
|
|
- name: Update apt cache
|
|
apt:
|
|
update_cache: true
|
|
|
|
- name: Install git and git-lfs
|
|
apt:
|
|
name:
|
|
- git
|
|
- git-lfs
|
|
|
|
- name: Create git user
|
|
user:
|
|
name: git
|
|
password: "!" # disables password login
|
|
home: /home/git
|
|
shell: /bin/bash
|
|
comment: Git Version Control
|
|
|
|
- name: Create Forgejo's data directory
|
|
file:
|
|
path: /var/lib/forgejo
|
|
state: directory
|
|
mode: "750"
|
|
owner: git
|
|
group: git
|
|
|
|
- name: Create Forgejo's config directory
|
|
file:
|
|
path: /etc/forgejo
|
|
state: directory
|
|
mode: "750"
|
|
owner: root
|
|
group: git
|
|
|
|
- name: Copy app.ini to Forgejo's config directory
|
|
copy:
|
|
src: files/app.ini
|
|
dest: /etc/forgejo/app.ini
|
|
mode: "640"
|
|
notify:
|
|
- Restart Forgejo
|
|
|
|
- name: Copy secrets directory to Forgejo's config directory
|
|
copy:
|
|
src: files/secrets
|
|
dest: /etc/forgejo
|
|
directory_mode: "750"
|
|
mode: "640"
|
|
owner: root
|
|
group: git
|
|
notify:
|
|
- Restart Forgejo
|
|
|
|
- name: Install systemd service for Forgejo
|
|
copy:
|
|
src: files/forgejo.service
|
|
dest: /etc/systemd/system/forgejo.service
|
|
notify:
|
|
- Reload service files
|
|
- Restart Forgejo
|
|
|
|
- name: Enable Forgejo service
|
|
systemd_service:
|
|
name: forgejo
|
|
enabled: true
|
|
state: started
|
|
|
|
handlers:
|
|
- name: Reload service files
|
|
systemd_service:
|
|
daemon_reload: true
|
|
|
|
- name: Restart Forgejo
|
|
systemd_service:
|
|
name: forgejo
|
|
state: restarted
|