1 - name: Etckeeper commit if necessary
2 ansible.builtin.command: etckeeper commit "commit by ansible because installing {{ DOMAIN }}/{{ SITE }}"
5 - name: Install required packages
14 - "php{{ php_version }}-xml"
25 - "php{{ php_version }}-pgsql"
34 - python3-psycopg2 # module ansible psql
37 - name: Boucle d'ajout du user php dans plusieurs groupe
39 name: "php_{{ SIGLE }}_{{ SITE }}"
46 - "site_{{ SIGLE }}_{{ SITE }}"
48 - name: Bloc nouvelle version nextcloud
49 when: nouvelle_version is undefined
51 - name: Demande la version de nextcloud à installer
52 ansible.builtin.pause:
53 prompt: "Quelle version de nextcloud doit être utilisée"
55 register: nextcloud_version_prompt
57 - name: Definir nouvelle_version
58 ansible.builtin.set_fact:
59 nouvelle_version: "{{ nextcloud_version_prompt.user_input }}"
61 - name: Bloc ancienne version nextcloud
62 when: ancienne_version is undefined
64 - name: Demande la version de nextcloud déjà installée
65 ansible.builtin.pause:
66 prompt: "Quelle version de nextcloud déjà installée"
68 register: ancienne_version_prompt
70 - name: Definir ancienne_version
71 ansible.builtin.set_fact:
72 ancienne_version: "{{ ancienne_version_prompt.user_input }}"
74 - name: Inclure la verif de l'install nextcloud
75 ansible.builtin.include_tasks: tasks/verif_installation_nextcloud.yml
77 - name: PostgreSQL - nextcloud_php_user role is created
80 community.postgresql.postgresql_user:
81 name: "{{ nextcloud_php_user }}"
83 role_attr_flags: CREATEDB
85 - name: PostgreSQL - nextcloud_db_name database is created
88 community.postgresql.postgresql_db:
89 name: "{{ nextcloud_db_name }}"
91 owner: "{{ nextcloud_php_user }}"
96 - name: Pour chaque base, ajouter les droits suivants à l'utilisateur php
99 community.postgresql.postgresql_privs:
101 privs: "{{ item.privs }}"
102 type: "{{ item.type |default(omit) }}"
103 objs: "{{ item.objs }}"
104 role: "{{ item.role }}"
105 grant_option: "{{ item.grant_option |default(omit) }}"
107 label: "{{ item.name }}"
109 - db: "{{ nextcloud_db_name }}"
113 role: "{{ nextcloud_php_user }}"
115 name: "GRANT ALL ON SCHEMA public TO php_{{ SIGLE }}_nuage WITH GRANT OPTION;"
117 - name: Autoriser l'utilisateur php à se connecter à la bdd nextcloud
118 community.postgresql.postgresql_pg_hba:
119 dest: "/etc/postgresql/{{ postgres_version }}/main/pg_hba.conf"
121 users: "php_{{ SIGLE }}_{{ SITE }}"
122 databases: "php_{{ SIGLE }}_{{ SITE }}"
124 keep_comments_at_rules: true
125 comment: "autoriser le user php_{{ SIGLE }}_{{ SITE }} à se connecter à la bdd du meme nom"
127 - name: Boucle création des répertoires app, config et data nextcloud
128 ansible.builtin.file:
129 path: "{{ item.path }}"
130 state: "{{ item.state }}"
131 owner: "{{ item.owner }}"
132 group: "{{ item.group }}"
133 mode: "{{ item.mode }}"
135 label: "{{ item.path }}"
137 - path: "{{ nextcloud_webroot }}/apps"
139 owner: "{{ nextcloud_php_user }}"
140 group: "{{ nextcloud_websrv_user }}"
142 - path: "{{ nextcloud_webroot }}/config"
144 owner: "{{ nextcloud_php_user }}"
145 group: "{{ nextcloud_websrv_user }}"
147 - path: "{{ nextcloud_webroot }}/data"
149 owner: "{{ nextcloud_php_user }}"
150 group: "{{ nextcloud_websrv_user }}"
153 - name: Create nextcloud root dir symbolic link
154 ansible.builtin.file:
155 src: "{{ nextcloud_symbolic_source }}"
156 dest: "{{ nextcloud_webroot }}/nextcloud"
162 - name: Create nextcloud common app dir symbolic link
163 ansible.builtin.file:
164 src: "{{ nextcloud_symbolic_common }}"
165 dest: "{{ nextcloud_webroot }}/common"
171 - name: Créer les fichiers spécifiques nextcloud
172 ansible.builtin.template:
173 src: "templates/{{ item.src }}"
174 dest: "{{ nextcloud_webroot }}/{{ item.dest }}"
175 owner: "{{ item.owner }}"
176 group: "{{ item.group }}"
177 mode: "{{ item.mode }}"
179 - src: "nextcloud_cron.j2"
181 owner: "{{ nextcloud_php_user }}"
182 group: "{{ nextcloud_websrv_user }}"
184 - src: "nextcloud_console.j2"
186 owner: "{{ nextcloud_websrv_user }}"
187 group: "{{ nextcloud_websrv_user }}"
189 - src: "nextcloud_install_config.j2"
190 dest: "config/config.php"
191 owner: "{{ nextcloud_php_user }}"
192 group: "{{ nextcloud_websrv_user }}"
195 - name: Recharger plusieurs services
196 ansible.builtin.service:
201 - "php{{ php_version }}-fpm"
203 - name: Lancement du script d'installation nextcloud # noqa : command-instead-of-module
204 become_user: "{{ nextcloud_php_user }}"
206 ansible.builtin.command: >
207 ./console maintenance:install
209 --database-name="php_{{ SIGLE }}_{{ SITE }}"
210 --database-user="php_{{ SIGLE }}_{{ SITE }}"
211 --database-host="/var/run/postgresql/"
214 --admin-pass='ckoideja'
215 --data-dir="/home/sites/data/{{ TLD }}/{{ DOMAIN }}/{{ SITE }}/data/"
217 chdir: "{{ nextcloud_webroot }}"
218 register: install_result
221 - name: Afficher les logs du script d'install
222 ansible.builtin.debug:
224 when: install_result is defined
226 - name: Afficher les logs du script d'install
227 ansible.builtin.fail:
228 msg: "Le script d'install a échoué: Voir les logs ci-dessus"
229 when: install_result.failed
231 - name: Créer les fichiers spécifiques nextcloud
232 ansible.builtin.template:
233 src: "templates/{{ item.src }}"
234 dest: "{{ nextcloud_webroot }}/{{ item.dest }}"
235 owner: "{{ item.owner }}"
236 group: "{{ item.group }}"
237 mode: "{{ item.mode }}"
239 - src: "nextcloud_sigle_config.j2"
240 dest: "config/{{ SIGLE }}.config.php"
241 owner: "{{ nextcloud_php_user }}"
242 group: "{{ nextcloud_websrv_user }}"
245 - name: Creation d'un lien symbolique vers le configuration nextcloud commun
246 ansible.builtin.file:
247 src: "../../../../nextcloud/common.config.php"
248 path: "{{ nextcloud_webroot }}/config/common.config.php"
254 - name: Pour chaque base, ajouter les droits suivants à l'utilisateur php
255 become_user: postgres
257 community.postgresql.postgresql_privs:
259 privs: "{{ item.privs }}"
260 type: "{{ item.type | default(omit) }}"
261 objs: "{{ item.objs }}"
262 role: "{{ item.role }}"
263 grant_option: "{{ item.grant_option | default(omit) }}"
265 label: "{{ item.name }}"
267 - db: "{{ nextcloud_db_name }}"
268 privs: "USAGE,CREATE"
271 role: "{{ nextcloud_php_user }}"
272 name: "GRANT USAGE,CREATE ON SCHEMA public TO php_{{ SIGLE }}_nuage;"
273 # - db: "{{ nextcloud_db_name }}"
276 # objs: "pg_namespace"
277 # role: "{{ nextcloud_php_user }}"
278 # name: "GRANT SELECT ON TABLE pg_namespace TO php_{{ SIGLE }}_nuage;"
279 # - db: "{{ nextcloud_db_name }}"
282 # objs: "pg_collation"
283 # role: "{{ nextcloud_php_user }}"
284 # name: "GRANT SELECT ON TABLE pg_collation TO php_{{ SIGLE }}_nuage;"
285 # - db: "{{ nextcloud_db_name }}"
289 # role: "{{ nextcloud_php_user }}"
290 # name: "GRANT SELECT ON TABLE pg_index TO php_{{ SIGLE }}_nuage;"
291 # - db: "{{ nextcloud_db_name }}"
295 # role: "{{ nextcloud_php_user }}"
296 # name: "GRANT SELECT ON TABLE pg_attrdef TO php_{{ SIGLE }}_nuage;"
297 # - db: "{{ nextcloud_db_name }}"
300 # objs: "pg_description"
301 # role: "{{ nextcloud_php_user }}"
302 # name: "GRANT SELECT ON TABLE pg_description TO php_{{ SIGLE }}_nuage;"
303 # - db: "{{ nextcloud_db_name }}"
306 # objs: "pg_settings"
307 # role: "{{ nextcloud_php_user }}"
308 # name: "GRANT SELECT ON TABLE pg_settings TO php_{{ SIGLE }}_nuage;"
309 # - db: "{{ nextcloud_db_name }}"
311 # objs: "pg_database"
312 # role: "{{ nextcloud_php_user }}"
313 # name: "GRANT SELECT ON pg_database TO php_{{ SIGLE }}_nuage;"
315 - name: Creation d'un fichier cron pour /etc/cron.d
316 ansible.builtin.cron:
317 name: "nextcloud {{ SIGLE }}_{{ SITE }} taches d'arriere plan toutes les 5 mins"
319 user: "php_{{ SIGLE }}_{{ SITE }}"
320 job: "{{ nextcloud_webroot }}/cron"
322 - name: Recharger plusieurs services
323 ansible.builtin.service:
327 - "php{{ php_version }}-fpm"