1 - name: Etckeeper commit if necessary
2 ansible.builtin.command: etckeeper commit "commit by ansible because installing {{ DOMAIN }}/{{ SITE }}"
5 - name: Install required packages
14 - "php{{ php_version }}-xml"
25 - "php{{ php_version }}-pgsql"
35 - python3-psycopg2 # module ansible psql
38 - name: Boucle d'ajout du user php dans plusieurs groupe
40 name: "php_{{ SIGLE }}_{{ SITE }}"
47 - "site_{{ SIGLE }}_{{ SITE }}"
49 - name: Bloc nouvelle version nextcloud
50 when: nouvelle_version is undefined
52 - name: Demande la version de nextcloud à installer
53 ansible.builtin.pause:
54 prompt: "Quelle version de nextcloud doit être utilisée"
56 register: nextcloud_version_prompt
58 - name: Definir nouvelle_version
59 ansible.builtin.set_fact:
60 nouvelle_version: "{{ nextcloud_version_prompt.user_input }}"
62 - name: Bloc ancienne version nextcloud
63 when: ancienne_version is undefined
65 - name: Demande la version de nextcloud déjà installée
66 ansible.builtin.pause:
67 prompt: "Quelle version de nextcloud déjà installée"
69 register: ancienne_version_prompt
71 - name: Definir ancienne_version
72 ansible.builtin.set_fact:
73 ancienne_version: "{{ ancienne_version_prompt.user_input }}"
75 - name: Inclure la verif de l'install nextcloud
76 ansible.builtin.include_tasks: tasks/verif_installation_nextcloud.yml
78 - name: PostgreSQL - nextcloud_php_user role is created
81 community.postgresql.postgresql_user:
82 name: "{{ nextcloud_php_user }}"
84 role_attr_flags: CREATEDB
86 - name: PostgreSQL - nextcloud_db_name database is created
89 community.postgresql.postgresql_db:
90 name: "{{ nextcloud_db_name }}"
92 owner: "{{ nextcloud_php_user }}"
97 - name: Pour chaque base, ajouter les droits suivants à l'utilisateur php
100 community.postgresql.postgresql_privs:
102 privs: "{{ item.privs }}"
103 type: "{{ item.type |default(omit) }}"
104 objs: "{{ item.objs }}"
105 role: "{{ item.role }}"
106 grant_option: "{{ item.grant_option |default(omit) }}"
108 label: "{{ item.name }}"
110 - db: "{{ nextcloud_db_name }}"
114 role: "{{ nextcloud_php_user }}"
116 name: "GRANT ALL ON SCHEMA public TO php_{{ SIGLE }}_nuage WITH GRANT OPTION;"
118 - name: Autoriser l'utilisateur php à se connecter à la bdd nextcloud
119 community.postgresql.postgresql_pg_hba:
120 dest: "/etc/postgresql/{{ postgres_version }}/main/pg_hba.conf"
122 users: "php_{{ SIGLE }}_{{ SITE }}"
123 databases: "php_{{ SIGLE }}_{{ SITE }}"
125 keep_comments_at_rules: true
126 comment: "autoriser le user php_{{ SIGLE }}_{{ SITE }} à se connecter à la bdd du meme nom"
128 - name: Boucle création des répertoires app, config et data nextcloud
129 ansible.builtin.file:
130 path: "{{ item.path }}"
131 state: "{{ item.state }}"
132 owner: "{{ item.owner }}"
133 group: "{{ item.group }}"
134 mode: "{{ item.mode }}"
136 label: "{{ item.path }}"
138 - path: "{{ nextcloud_webroot }}/apps"
140 owner: "{{ nextcloud_php_user }}"
141 group: "{{ nextcloud_websrv_user }}"
143 - path: "{{ nextcloud_webroot }}/config"
145 owner: "{{ nextcloud_php_user }}"
146 group: "{{ nextcloud_websrv_user }}"
148 - path: "{{ nextcloud_webroot }}/data"
150 owner: "{{ nextcloud_php_user }}"
151 group: "{{ nextcloud_websrv_user }}"
154 - name: Create nextcloud root dir symbolic link
155 ansible.builtin.file:
156 src: "{{ nextcloud_symbolic_source }}"
157 dest: "{{ nextcloud_webroot }}/nextcloud"
163 - name: Create nextcloud common app dir symbolic link
164 ansible.builtin.file:
165 src: "{{ nextcloud_symbolic_common }}"
166 dest: "{{ nextcloud_webroot }}/common"
172 - name: Créer les fichiers spécifiques nextcloud
173 ansible.builtin.template:
174 src: "templates/{{ item.src }}"
175 dest: "{{ nextcloud_webroot }}/{{ item.dest }}"
176 owner: "{{ item.owner }}"
177 group: "{{ item.group }}"
178 mode: "{{ item.mode }}"
180 - src: "nextcloud_cron.j2"
182 owner: "{{ nextcloud_php_user }}"
183 group: "{{ nextcloud_websrv_user }}"
185 - src: "nextcloud_console.j2"
187 owner: "{{ nextcloud_websrv_user }}"
188 group: "{{ nextcloud_websrv_user }}"
190 - src: "nextcloud_install_config.j2"
191 dest: "config/config.php"
192 owner: "{{ nextcloud_php_user }}"
193 group: "{{ nextcloud_websrv_user }}"
196 - name: Recharger plusieurs services
197 ansible.builtin.service:
202 - "php{{ php_version }}-fpm"
204 - name: Lancement du script d'installation nextcloud # noqa : command-instead-of-module
205 become_user: "{{ nextcloud_php_user }}"
207 ansible.builtin.command: >
208 ./console maintenance:install
210 --database-name="php_{{ SIGLE }}_{{ SITE }}"
211 --database-user="php_{{ SIGLE }}_{{ SITE }}"
212 --database-host="/var/run/postgresql/"
215 --admin-pass='ckoideja'
216 --data-dir="/home/sites/data/{{ TLD }}/{{ DOMAIN }}/{{ SITE }}/data/"
218 chdir: "{{ nextcloud_webroot }}"
219 register: install_result
222 - name: Afficher les logs du script d'install
223 ansible.builtin.debug:
225 when: install_result is defined
227 - name: Afficher les logs du script d'install
228 ansible.builtin.fail:
229 msg: "Le script d'install a échoué: Voir les logs ci-dessus"
230 when: install_result.failed
232 - name: Créer les fichiers spécifiques nextcloud
233 ansible.builtin.template:
234 src: "templates/{{ item.src }}"
235 dest: "{{ nextcloud_webroot }}/{{ item.dest }}"
236 owner: "{{ item.owner }}"
237 group: "{{ item.group }}"
238 mode: "{{ item.mode }}"
240 - src: "nextcloud_sigle_config.j2"
241 dest: "config/{{ SIGLE }}.config.php"
242 owner: "{{ nextcloud_php_user }}"
243 group: "{{ nextcloud_websrv_user }}"
246 - name: Creation d'un lien symbolique vers la configuration nextcloud common
247 ansible.builtin.file:
248 src: "../../../../nextcloud/common.config.php"
249 path: "{{ nextcloud_webroot }}/config/common.config.php"
255 - name: Pour chaque base, ajouter les droits suivants à l'utilisateur php
256 become_user: postgres
258 community.postgresql.postgresql_privs:
260 privs: "{{ item.privs }}"
261 type: "{{ item.type | default(omit) }}"
262 objs: "{{ item.objs }}"
263 role: "{{ item.role }}"
264 grant_option: "{{ item.grant_option | default(omit) }}"
266 label: "{{ item.name }}"
268 - db: "{{ nextcloud_db_name }}"
269 privs: "USAGE,CREATE"
272 role: "{{ nextcloud_php_user }}"
273 name: "GRANT USAGE,CREATE ON SCHEMA public TO php_{{ SIGLE }}_nuage;"
274 # - db: "{{ nextcloud_db_name }}"
277 # objs: "pg_namespace"
278 # role: "{{ nextcloud_php_user }}"
279 # name: "GRANT SELECT ON TABLE pg_namespace TO php_{{ SIGLE }}_nuage;"
280 # - db: "{{ nextcloud_db_name }}"
283 # objs: "pg_collation"
284 # role: "{{ nextcloud_php_user }}"
285 # name: "GRANT SELECT ON TABLE pg_collation TO php_{{ SIGLE }}_nuage;"
286 # - db: "{{ nextcloud_db_name }}"
290 # role: "{{ nextcloud_php_user }}"
291 # name: "GRANT SELECT ON TABLE pg_index TO php_{{ SIGLE }}_nuage;"
292 # - db: "{{ nextcloud_db_name }}"
296 # role: "{{ nextcloud_php_user }}"
297 # name: "GRANT SELECT ON TABLE pg_attrdef TO php_{{ SIGLE }}_nuage;"
298 # - db: "{{ nextcloud_db_name }}"
301 # objs: "pg_description"
302 # role: "{{ nextcloud_php_user }}"
303 # name: "GRANT SELECT ON TABLE pg_description TO php_{{ SIGLE }}_nuage;"
304 # - db: "{{ nextcloud_db_name }}"
307 # objs: "pg_settings"
308 # role: "{{ nextcloud_php_user }}"
309 # name: "GRANT SELECT ON TABLE pg_settings TO php_{{ SIGLE }}_nuage;"
310 # - db: "{{ nextcloud_db_name }}"
312 # objs: "pg_database"
313 # role: "{{ nextcloud_php_user }}"
314 # name: "GRANT SELECT ON pg_database TO php_{{ SIGLE }}_nuage;"
316 - name: Creation d'un fichier cron pour /etc/cron.d
317 ansible.builtin.cron:
318 name: "nextcloud {{ SIGLE }}_{{ SITE }} taches d'arriere plan toutes les 5 mins"
320 user: "php_{{ SIGLE }}_{{ SITE }}"
321 job: "{{ nextcloud_webroot }}/cron"
323 - name: Recharger plusieurs services
324 ansible.builtin.service:
328 - "php{{ php_version }}-fpm"