92 lines
2.2 KiB
YAML
92 lines
2.2 KiB
YAML
---
|
|
|
|
- name: "Install dependencies"
|
|
ansible.builtin.apt:
|
|
pkg:
|
|
- docker-ce
|
|
- apparmor
|
|
|
|
- name: "Create directory for Authentik with Docker"
|
|
ansible.builtin.file:
|
|
path: "{{ item }}"
|
|
state: directory
|
|
owner: root
|
|
group: root
|
|
mode: '0750'
|
|
with_items:
|
|
- "{{ docker_volumes_dir }}/authentik"
|
|
|
|
- name: "Create directories for Authentik Docker"
|
|
ansible.builtin.file:
|
|
path: "{{ item }}"
|
|
state: directory
|
|
owner: 1000
|
|
group: 1000
|
|
mode: '0750'
|
|
with_items:
|
|
- "{{ docker_volumes_dir }}/authentik/media"
|
|
- "{{ docker_volumes_dir }}/authentik/custom-templates"
|
|
- "{{ docker_volumes_dir }}/authentik/certs"
|
|
|
|
- name: "Create Redis directory for Authentik with Docker"
|
|
ansible.builtin.file:
|
|
path: "{{ docker_volumes_dir }}/authentik/redis"
|
|
state: directory
|
|
owner: 999
|
|
group: root
|
|
mode: '0750'
|
|
|
|
- name: "Create Database directory for Authentik with Docker"
|
|
ansible.builtin.file:
|
|
path: "{{ docker_volumes_dir }}/authentik/database"
|
|
state: directory
|
|
owner: '70'
|
|
group: root
|
|
mode: '0700'
|
|
|
|
- name: "Template .env file for Authentik with Docker"
|
|
ansible.builtin.template:
|
|
src: "authentik.env.j2"
|
|
dest: "{{ docker_volumes_dir }}/authentik/authentik.env"
|
|
force: true
|
|
owner: root
|
|
group: root
|
|
mode: '0660'
|
|
notify: restart-authentik-docker
|
|
|
|
- name: "Create Docker network authentik_net"
|
|
docker_network:
|
|
name: authentik_net
|
|
|
|
- name: "Template systemd units for Authentik with Docker"
|
|
ansible.builtin.template:
|
|
src: "{{ item }}.j2"
|
|
dest: "/etc/systemd/system/{{ item }}"
|
|
force: true
|
|
owner: root
|
|
group: root
|
|
mode: '0664'
|
|
with_items:
|
|
- authentik-server-docker.service
|
|
- authentik-worker-docker.service
|
|
- authentik-redis-docker.service
|
|
- authentik-db-docker.service
|
|
register: units
|
|
notify: restart-authentik-docker
|
|
|
|
- name: "Reload systemd units"
|
|
ansible.builtin.systemd:
|
|
daemon_reload: yes
|
|
when: units.changed
|
|
|
|
- name: "Enable systemd units for Authentik with Docker"
|
|
ansible.builtin.systemd:
|
|
state: started
|
|
enabled: true
|
|
name: "{{ item }}"
|
|
with_items:
|
|
- authentik-db-docker.service
|
|
- authentik-redis-docker.service
|
|
- authentik-server-docker.service
|
|
- authentik-worker-docker.service
|