Both were hand-deployed to /opt/stacks. Templates match the live setup and keep the same stack dirs and volume names, so data stays put. Secrets come from the vault; .env and the StarPunk compose file are now 0640 root:docker instead of the broken 1204 mode. Adds their DNS records to dns.yml and drops the dead godulf. Caddy route (no DNS). Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
29 lines
692 B
YAML
29 lines
692 B
YAML
- name: make gondulf directories
|
|
ansible.builtin.file:
|
|
path: "{{ item }}"
|
|
state: directory
|
|
loop:
|
|
- /opt/stacks/gondulf
|
|
|
|
- name: Template out the gondulf compose file
|
|
ansible.builtin.template:
|
|
src: gondulf-compose.yml.j2
|
|
dest: /opt/stacks/gondulf/compose.yml
|
|
owner: root
|
|
mode: '0644'
|
|
|
|
- name: Template out the gondulf .env file
|
|
ansible.builtin.template:
|
|
src: gondulf-env.j2
|
|
dest: /opt/stacks/gondulf/.env
|
|
owner: root
|
|
mode: '0640'
|
|
group: docker
|
|
diff: false # contains the secret key and SMTP password
|
|
|
|
- name: deploy gondulf stack
|
|
community.docker.docker_compose_v2:
|
|
project_src: /opt/stacks/gondulf
|
|
files:
|
|
- compose.yml
|