7d3adc4512
We do use some `:latest` images by default for the following services: - matrix-dimension - Goofys (in the matrix-synapse role) - matrix-bridge-appservice-irc - matrix-bridge-appservice-discord - matrix-bridge-mautrix-facebook - matrix-bridge-mautrix-whatsapp It's terribly unfortunate that those software projects don't release anything other than `:latest`, but that's how it is for now. Updating that software requires that users manually do `docker pull` on the server. The playbook didn't force-repull images that it already had. With this patch, it starts doing so. Any image tagged `:latest` will be force re-pulled by the playbook every time it's executed. It should be noted that even though we ask the `docker_image` module to force-pull, it only reports "changed" when it actually pulls something new. This is nice, because it lets people know exactly when something gets updated, as opposed to giving the indication that it's always updating the images (even though it isn't).
102 lines
3.5 KiB
YAML
102 lines
3.5 KiB
YAML
---
|
|
|
|
#
|
|
# Tasks related to setting up mxisd
|
|
#
|
|
|
|
- name: Ensure mxisd paths exist
|
|
file:
|
|
path: "{{ item }}"
|
|
state: directory
|
|
mode: 0750
|
|
owner: "{{ matrix_user_username }}"
|
|
group: "{{ matrix_user_username }}"
|
|
with_items:
|
|
- "{{ matrix_mxisd_config_path }}"
|
|
- "{{ matrix_mxisd_data_path }}"
|
|
when: matrix_mxisd_enabled|bool
|
|
|
|
- name: Ensure mxisd image is pulled
|
|
docker_image:
|
|
name: "{{ matrix_mxisd_docker_image }}"
|
|
source: "{{ 'pull' if ansible_version.major > 2 or ansible_version.minor > 7 else omit }}"
|
|
force_source: "{{ matrix_mxisd_docker_image_force_pull if ansible_version.major > 2 or ansible_version.minor >= 8 else omit }}"
|
|
force: "{{ omit if ansible_version.major > 2 or ansible_version.minor >= 8 else matrix_mxisd_docker_image_force_pull }}"
|
|
when: matrix_mxisd_enabled|bool
|
|
|
|
- name: Ensure mxisd config installed
|
|
copy:
|
|
content: "{{ matrix_mxisd_configuration|to_nice_yaml }}"
|
|
dest: "{{ matrix_mxisd_config_path }}/mxisd.yaml"
|
|
mode: 0644
|
|
owner: "{{ matrix_user_username }}"
|
|
group: "{{ matrix_user_username }}"
|
|
when: matrix_mxisd_enabled|bool
|
|
|
|
- name: Ensure custom templates are installed if any
|
|
copy:
|
|
content: "{{ item.value }}"
|
|
dest: "{{ matrix_mxisd_data_path }}/{{ item.location }}"
|
|
mode: 0644
|
|
owner: "{{ matrix_user_username }}"
|
|
group: "{{ matrix_user_username }}"
|
|
with_items:
|
|
- {value: "{{ matrix_mxisd_threepid_medium_email_custom_invite_template }}", location: 'invite-template.eml'}
|
|
- {value: "{{ matrix_mxisd_threepid_medium_email_custom_session_validation_template }}", location: 'validate-template.eml'}
|
|
- {value: "{{ matrix_mxisd_threepid_medium_email_custom_unbind_fraudulent_template }}", location: 'unbind-fraudulent.eml'}
|
|
- {value: "{{ matrix_mxisd_threepid_medium_email_custom_matrixid_template }}", location: 'mxid-template.eml'}
|
|
when: "matrix_mxisd_enabled|bool and matrix_mxisd_threepid_medium_email_custom_templates_enabled|bool and item.value"
|
|
|
|
- name: Ensure matrix-mxisd.service installed
|
|
template:
|
|
src: "{{ role_path }}/templates/systemd/matrix-mxisd.service.j2"
|
|
dest: "/etc/systemd/system/matrix-mxisd.service"
|
|
mode: 0644
|
|
register: matrix_mxisd_systemd_service_result
|
|
when: matrix_mxisd_enabled|bool
|
|
|
|
- name: Ensure systemd reloaded after matrix-mxisd.service installation
|
|
service:
|
|
daemon_reload: yes
|
|
when: "matrix_mxisd_enabled|bool and matrix_mxisd_systemd_service_result.changed"
|
|
|
|
#
|
|
# Tasks related to getting rid of mxisd (if it was previously enabled)
|
|
#
|
|
|
|
- name: Check existence of matrix-mxisd service
|
|
stat:
|
|
path: "/etc/systemd/system/matrix-mxisd.service"
|
|
register: matrix_mxisd_service_stat
|
|
|
|
- name: Ensure matrix-mxisd is stopped
|
|
service:
|
|
name: matrix-mxisd
|
|
state: stopped
|
|
daemon_reload: yes
|
|
register: stopping_result
|
|
when: "not matrix_mxisd_enabled|bool and matrix_mxisd_service_stat.stat.exists"
|
|
|
|
- name: Ensure matrix-mxisd.service doesn't exist
|
|
file:
|
|
path: "/etc/systemd/system/matrix-mxisd.service"
|
|
state: absent
|
|
when: "not matrix_mxisd_enabled|bool and matrix_mxisd_service_stat.stat.exists"
|
|
|
|
- name: Ensure systemd reloaded after matrix-mxisd.service removal
|
|
service:
|
|
daemon_reload: yes
|
|
when: "not matrix_mxisd_enabled|bool and matrix_mxisd_service_stat.stat.exists"
|
|
|
|
- name: Ensure Matrix mxisd paths don't exist
|
|
file:
|
|
path: "{{ matrix_mxisd_base_path }}"
|
|
state: absent
|
|
when: "not matrix_mxisd_enabled|bool"
|
|
|
|
- name: Ensure mxisd Docker image doesn't exist
|
|
docker_image:
|
|
name: "{{ matrix_mxisd_docker_image }}"
|
|
state: absent
|
|
when: "not matrix_mxisd_enabled|bool"
|