72 lines
2.4 KiB
YAML
72 lines
2.4 KiB
YAML
name: Ansible Playbook lint & deploy
|
|
on: [push]
|
|
|
|
jobs:
|
|
ansible-lint:
|
|
runs-on: imgbuilder
|
|
container:
|
|
image: gitea.konchin.com/system/ansible-image
|
|
credentials:
|
|
username: ${{ secrets.REGISTRY_USERNAME }}
|
|
password: ${{ secrets.REGISTRY_PASSWORD }}
|
|
steps:
|
|
- name: Check out repository code
|
|
uses: actions/checkout@v4
|
|
- name: Ansible Lint
|
|
run: |
|
|
ansible-lint roles/ playbooks/
|
|
|
|
run-ansible-mongo:
|
|
needs: ansible-lint
|
|
runs-on: imgbuilder
|
|
container:
|
|
image: gitea.konchin.com/system/ansible-image
|
|
credentials:
|
|
username: ${{ secrets.REGISTRY_USERNAME }}
|
|
password: ${{ secrets.REGISTRY_PASSWORD }}
|
|
options: --dns 192.168.68.254 --dns-search konchin.com --dns-option ndots:15
|
|
steps:
|
|
- name: Check out repository code
|
|
uses: actions/checkout@v4
|
|
- name: Setup ssh key
|
|
run: |
|
|
printf '%s\n' "${{ secrets.ANSIBLE_ED25519 }}" > ~/.ssh/id_ed25519
|
|
chmod 0600 ~/.ssh/id_ed25519
|
|
- name: Setup ssh pubkey
|
|
run: |
|
|
printf '%s\n' "${{ secrets.ANSIBLE_ED25519_PUB }}" > ~/.ssh/id_ed25519_pub
|
|
|
|
- name: Setup secret
|
|
run: |
|
|
mkdir -p group_vars/mongo/
|
|
echo "${{ secrets.MONGO_SECRET }}" > group_vars/mongo/secret.yml
|
|
- name: Run playbook
|
|
run: ansible-playbook playbooks/mongo_users.yml
|
|
|
|
run-ansible-postgres:
|
|
needs: ansible-lint
|
|
runs-on: imgbuilder
|
|
container:
|
|
image: gitea.konchin.com/system/ansible-image
|
|
credentials:
|
|
username: ${{ secrets.REGISTRY_USERNAME }}
|
|
password: ${{ secrets.REGISTRY_PASSWORD }}
|
|
options: --dns 192.168.68.254 --dns-search konchin.com --dns-option ndots:15
|
|
steps:
|
|
- name: Check out repository code
|
|
uses: actions/checkout@v4
|
|
- name: Setup ssh key
|
|
run: |
|
|
printf '%s\n' "${{ secrets.ANSIBLE_ED25519 }}" > ~/.ssh/id_ed25519
|
|
chmod 0600 ~/.ssh/id_ed25519
|
|
- name: Setup ssh pubkey
|
|
run: |
|
|
printf '%s\n' "${{ secrets.ANSIBLE_ED25519_PUB }}" > ~/.ssh/id_ed25519_pub
|
|
|
|
- name: Setup secret
|
|
run: |
|
|
mkdir -p group_vars/postgres/
|
|
echo "${{ secrets.POSTGRES_SECRET }}" > group_vars/postgres/secret.yml
|
|
- name: Run playbook
|
|
run: ansible-playbook playbooks/postgres_users.yml
|