78 lines
2 KiB
YAML
78 lines
2 KiB
YAML
---
|
|
# tasks file for galaxy-caddy
|
|
|
|
- name: Create Caddy user
|
|
user: name=caddy
|
|
system=yes
|
|
createhome=yes
|
|
home={{ caddy_home }}
|
|
shell=/bin/nologin
|
|
tags: user
|
|
|
|
- name: Download new Caddy version or build
|
|
get_url: url=https://github.com/caddyserver/caddy/releases/download/v{{ caddy_version }}/caddy_{{ caddy_version }}_linux_amd64.tar.gz
|
|
dest=/tmp/caddy_{{ caddy_version }}.tar.gz
|
|
force=yes
|
|
register: caddy_binary_cache
|
|
|
|
- name: Extract new Caddy version or build
|
|
unarchive: src=/tmp/caddy_{{ caddy_version }}.tar.gz
|
|
dest=/usr/bin/
|
|
copy=no
|
|
notify: restart caddy
|
|
when: caddy_binary_cache.changed
|
|
|
|
- name: Ensure setcap bin
|
|
apt: name=libcap2-bin
|
|
state=present
|
|
|
|
- name: Check if the binary can bind to TCP port <1024
|
|
shell: getcap /usr/bin/caddy | grep cap_net_bind_service
|
|
failed_when: False
|
|
changed_when: False
|
|
register: caddy_bind_cap
|
|
|
|
- name: Set capability on the binary file to be able to bind to TCP port <1024
|
|
command: setcap cap_net_bind_service=+ep /usr/bin/caddy
|
|
when: caddy_bind_cap.rc > 0
|
|
|
|
- name: Create caddy needed directories
|
|
file: path={{ item }}
|
|
state=directory
|
|
owner=caddy
|
|
with_items:
|
|
- "{{ caddy_conf }}"
|
|
- "{{ caddy_confd }}"
|
|
- "{{ caddy_logs }}"
|
|
- "{{ caddy_www }}"
|
|
|
|
- name: Caddyfile
|
|
template: src=caddyfile.j2
|
|
dest={{ caddy_conf }}/Caddyfile
|
|
notify: restart caddy
|
|
|
|
- name: Push vhost test page caddy config
|
|
template: src=http.caddy.j2
|
|
dest={{ caddy_confd }}/test.caddy
|
|
notify: restart caddy
|
|
|
|
- name: Create test www dir
|
|
file: path={{ caddy_www }}/test
|
|
state=directory
|
|
owner=caddy
|
|
group=caddy
|
|
|
|
- name: Push test page source
|
|
copy: src=test.html
|
|
dest={{ caddy_www }}/test/index.html
|
|
|
|
- name: Create Test page logs dir
|
|
file: path={{ caddy_logs }}/test
|
|
state=directory
|
|
owner=caddy
|
|
|
|
- name: Systemd service
|
|
template: src=caddy.service.j2
|
|
dest=/etc/systemd/system/caddy.service
|
|
notify:
|
|
- start caddy
|