group_vars/all/main.yml

@@ -0,0 +1,3 @@
+---
+domjudge_base_dir: /opt/domjudge/midterm
+domserver_url: https://cp1.konchin.com

group_vars/domserver/main.yml

@@ -1,4 +1,3 @@
 ---
-domjudge_base_dir: /opt/domjudge/midterm
 mariadb_version: 11.7.2
 domserver_version: 8.3.1

playbooks/judgehost.yml

@@ -0,0 +1,6 @@
+---
+- name: Install judgehost
+  hosts: judgehost
+  roles:
+    - role: install_packages
+    - role: configure_judgehost

roles/configure_judgehost/handlers/main.yml

@@ -0,0 +1,6 @@
+---
+- name: Restart judgehost docker compose
+  community.docker.docker_compose_v2:
+    project_src: "{{ domjudge_base_dir }}"
+    state: restarted
+    remove_orphans: true

roles/configure_judgehost/tasks/main.yml

@@ -7,3 +7,51 @@
       cgroup_enable=memory
       swapaccount=1
       systemd.unified_cgroup_hierarchy=0
+  notify: Reboot
+- name: Flush handlers
+  ansible.builtin.meta: flush_handlers
+
+- name: Fetch judgehost password
+  community.docker.docker_compose_v2_exec:
+    project_src: "{{ domjudge_base_dir }}"
+    service: domserver
+    command: >-
+      sed -nr 's/^.*\W+judgehost\W+(.+)$/\1/p'
+      /opt/domjudge/domserver/etc/restapi.secret
+  register: fetch_reg
+- name: Set judgehost facts
+  ansible.builtin.set_fact:
+    domserver_url: "{{ domserver_url }}"
+    judgehost_password: "{{ fetch_reg['stdout'] }}"
+  delegate_to: domserver[0]
+  run_once: true
+- name: Show judgehost password
+  ansible.builtin.debug:
+    var: judgehost_password
+
+- name: Install judgehost directory
+  ansible.builtin.file:
+    path: "{{ domjudge_base_dir }}"
+    state: directory
+    mode: '0750'
+    owner: root
+    group: docker
+- name: Install judgehost docker compose
+  notify:
+    - Restart judgehost docker compose
+  block:
+    - name: Install docker-compose.yml
+      ansible.builtin.template:
+        src: docker-compose.yml.jinja
+        dest: "{{ domjudge_base_dir }}/docker-compose.yml"
+        mode: '0644'
+        owner: root
+        group: root
+- name: Enable and start docker
+  ansible.builtin.systemd_service:
+    name: docker.service
+    state: started
+    enabled: true
+- name: Run docker compose up
+  community.docker.docker_compose_v2:
+    project_src: "{{ domjudge_base_dir }}"

roles/configure_judgehost/templates/docker-compose.yml.jinja

@@ -0,0 +1,12 @@
+services:
+  judgehost:
+    image: domjudge/judgehost:{{ judgehost_version }}
+    privileged: true
+    environment:
+      DAEMON_ID: 0
+      DOMSERVER_BASEURL: {{ domserver_url }}
+      JUDGEDAEMON_USERNAME: judgehost
+      JUDGEDAEMON_PASSWORD: {{ judgehost_password }}
+      DOMJUDGE_CREATE_WRITABLE_TEMP_DIR: 1
+      CONTAINER_TIMEZONE: Asia/Taipei
+    restart: always