mirror of
https://gitea.0xace.cc/ansible-galaxy/wireguard-ui.git
synced 2024-11-28 17:36:38 +00:00
72 lines
2.7 KiB
YAML
72 lines
2.7 KiB
YAML
|
- name: Install WireGuard UI with container
|
||
|
|
block:
|
||
|
|
- name: Login to image registries with podman
|
||
|
|
containers.podman.podman_login:
|
||
|
|
registry: '{{ item.key }}'
|
||
|
|
username: '{{ item.value.username }}'
|
||
|
|
password: '{{ item.value.password }}'
|
||
|
|
become: true
|
||
|
|
no_log: true
|
||
|
|
changed_when: False
|
||
|
|
loop: '{{ wireguard_ui_container_registry_auth | dict2items }}'
|
||
|
|
when: wireguard_ui_container_registry_auth is defined
|
||
|
|
|
||
|
|
- name: Create configuration dir and subdirs for WireGuard UI
|
||
|
|
file:
|
||
|
|
name: "{{ item }}"
|
||
|
|
state: directory
|
||
|
|
loop:
|
||
|
|
- "{{ wireguard_ui_config_dir }}"
|
||
|
|
- "{{ wireguard_ui_config_dir }}/server"
|
||
|
|
- "{{ wireguard_ui_config_dir }}/users"
|
||
|
|
|
||
|
|
- name: Force login and password change for first admin user
|
||
|
|
template:
|
||
|
|
dest: "{{ wireguard_ui_config_dir }}/users/admin.json"
|
||
|
|
src: admin.json.j2
|
||
|
|
register: wireguard_ui_auth
|
||
|
|
notify: Restart WireGuard UI with podman
|
||
|
|
|
||
|
|
- name: Create WireGuard UI with podman
|
||
|
|
containers.podman.podman_container:
|
||
|
|
name: "{{ wireguard_ui_container_name }}"
|
||
|
|
hostname: "{{ wireguard_ui_container_name }}"
|
||
|
|
network_mode: "{{ wireguard_ui_network_mode }}"
|
||
|
|
image: "{{ wireguard_ui_container_registry }}/{{ wireguard_ui_image_name }}:{{ wireguard_ui_image_tag }}"
|
||
|
|
state: created
|
||
|
|
cap_add:
|
||
|
|
- NET_ADMIN
|
||
|
|
env: "{{ wireguard_ui_combined_env }}"
|
||
|
|
volumes: "{{ wireguard_ui_volumes }}"
|
||
|
|
register: wireguard_ui_container
|
||
|
|
notify: Restart WireGuard UI with podman
|
||
|
|
|
||
|
|
- name: Generate container systemd unit
|
||
|
|
shell: "podman generate systemd {{ wireguard_ui_container_name }}"
|
||
|
|
register: wireguard_ui_systemd_unit
|
||
|
|
changed_when: False
|
||
|
|
|
||
|
|
- name: Create WireGuard UI systemd unit
|
||
|
|
copy:
|
||
|
|
dest: "/etc/systemd/system/{{ wireguard_ui_systemd_unit_name }}"
|
||
|
|
content: "{{ wireguard_ui_systemd_unit.stdout | regex_replace('^#.*', multiline=True) | trim }}"
|
||
|
|
|
||
|
|
- name: Create WireGuard UI systemd watcher unit
|
||
|
|
template:
|
||
|
|
dest: "/etc/systemd/system/{{ wireguard_ui_watcher_systemd_service_unit_name }}"
|
||
|
|
src: wireguard-ui-watcher.service.j2
|
||
|
|
|
||
|
|
- name: Create WireGuard UI systemd watcher path
|
||
|
|
template:
|
||
|
|
dest: "/etc/systemd/system/{{ wireguard_ui_watcher_systemd_path_unit_name }}"
|
||
|
|
src: wireguard-ui-watcher.path.j2
|
||
|
|
|
||
|
|
- name: Logout from image registries
|
||
|
|
containers.podman.podman_logout:
|
||
|
|
registry: '{{ item.key }}'
|
||
|
|
become: true
|
||
|
|
no_log: true
|
||
|
|
changed_when: False
|
||
|
|
loop: '{{ wireguard_ui_container_registry_auth | dict2items }}'
|
||
|
|
when: wireguard_ui_container_registry_auth is defined
|