1 - name: Etckeeper commit if necessary
2 ansible.builtin.command: etckeeper commit "commit by ansible because installing {{ DOMAIN }}/{{ SITE }}"
4 - name: Install required packages
13 - "php{{ php_version }}-xml"
24 - "php{{ php_version }}-pgsql"
33 - python3-psycopg2 # module ansible psql
36 - name: Boucle d'ajout du user php dans plusieurs groupe
38 name: "php_{{ SIGLE }}_{{ SITE }}"
45 - "site_{{ SIGLE }}_{{ SITE }}"
47 - name: Bloc nextcloud_version
48 when: nouvelle_version is undefined
50 - name: Demande la version de nextcloud à installer
51 ansible.builtin.pause:
52 prompt: "Quelle version de nextcloud doit être utilisée"
54 register: nextcloud_version_prompt
56 - name: Definir nouvelle_version
57 ansible.builtin.set_fact:
58 nouvelle_version: "{{ nextcloud_version_prompt.user_input }}"
60 - name: Demande la version de nextcloud déjà installée
61 ansible.builtin.pause:
62 prompt: "Quelle version de nextcloud déjà installée"
64 register: ancienne_version_prompt
66 - name: Definir ancienne_version
67 ansible.builtin.set_fact:
68 ancienne_version: "{{ ancienne_version_prompt.user_input }}"
70 - name: Inclure la verif de l'install nextcloud
71 ansible.builtin.include_tasks: tasks/verif_installation_nextcloud.yml
73 - name: PostgreSQL - nextcloud_php_user role is created
76 community.postgresql.postgresql_user:
77 name: "{{ nextcloud_php_user }}"
79 role_attr_flags: CREATEDB
81 - name: PostgreSQL - nextcloud_db_name database is created
84 community.postgresql.postgresql_db:
85 name: "{{ nextcloud_db_name }}"
87 owner: "{{ nextcloud_php_user }}"
92 - name: Pour chaque base, ajouter les droits suivants à l'utilisateur php
95 community.postgresql.postgresql_privs:
97 privs: "{{ item.privs }}"
98 type: "{{ item.type |default(omit) }}"
99 objs: "{{ item.objs }}"
100 role: "{{ item.role }}"
101 grant_option: "{{ item.grant_option |default(omit) }}"
103 label: "{{ item.name }}"
105 - db: "{{ nextcloud_db_name }}"
109 role: "{{ nextcloud_php_user }}"
111 name: "GRANT ALL ON SCHEMA public TO php_{{ SIGLE }}_nuage WITH GRANT OPTION;"
113 - name: Autoriser l'utilisateur php à se connecter à la bdd nextcloud
114 community.postgresql.postgresql_pg_hba:
115 dest: "/etc/postgresql/{{ postgres_version }}/main/pg_hba.conf"
117 users: "php_{{ SIGLE }}_{{ SITE }}"
118 databases: "php_{{ SIGLE }}_{{ SITE }}"
120 keep_comments_at_rules: true
121 comment: "autoriser le user php_{{ SIGLE }}_{{ SITE }} à se connecter à la bdd du meme nom"
123 - name: Boucle création des répertoires app, config et data nextcloud
124 ansible.builtin.file:
125 path: "{{ item.path }}"
126 state: "{{ item.state }}"
127 owner: "{{ item.owner }}"
128 group: "{{ item.group }}"
129 mode: "{{ item.mode }}"
131 label: "{{ item.path }}"
133 - path: "{{ nextcloud_webroot }}/apps"
135 owner: "{{ nextcloud_php_user }}"
136 group: "{{ nextcloud_websrv_user }}"
138 - path: "{{ nextcloud_webroot }}/config"
140 owner: "{{ nextcloud_php_user }}"
141 group: "{{ nextcloud_websrv_user }}"
143 - path: "{{ nextcloud_webroot }}/data"
145 owner: "{{ nextcloud_php_user }}"
146 group: "{{ nextcloud_websrv_user }}"
149 - name: Create nextcloud root dir symbolic link
150 ansible.builtin.file:
151 src: "{{ nextcloud_symbolic_source }}"
152 dest: "{{ nextcloud_webroot }}/nextcloud"
158 - name: Create nextcloud common app dir symbolic link
159 ansible.builtin.file:
160 src: "{{ nextcloud_symbolic_common }}"
161 dest: "{{ nextcloud_webroot }}/common"
167 - name: Créer les fichiers spécifiques nextcloud
168 ansible.builtin.template:
169 src: "templates/{{ item.src }}"
170 dest: "{{ nextcloud_webroot }}/{{ item.dest }}"
171 owner: "{{ item.owner }}"
172 group: "{{ item.group }}"
173 mode: "{{ item.mode }}"
175 - src: "nextcloud_cron.j2"
177 owner: "{{ nextcloud_php_user }}"
178 group: "{{ nextcloud_websrv_user }}"
180 - src: "nextcloud_console.j2"
182 owner: "{{ nextcloud_websrv_user }}"
183 group: "{{ nextcloud_websrv_user }}"
185 - src: "nextcloud_install_config.j2"
186 dest: "config/config.php"
187 owner: "{{ nextcloud_php_user }}"
188 group: "{{ nextcloud_websrv_user }}"
191 - name: Lancement du script d'installation nextcloud # noqa : command-instead-of-module
192 become_user: "{{ nextcloud_php_user }}"
194 ansible.builtin.command: >
195 ./console maintenance:install
197 --database-name="php_{{ SIGLE }}_{{ SITE }}"
198 --database-user="php_{{ SIGLE }}_{{ SITE }}/data/"
199 --database-host="/var/run/postgresql/"
201 --admin-pass='ckoideja'
202 --data-dir="/home/sites/data/$TLD/{{ DOMAIN }}/{{ SITE }}/data/"
204 chdir: "{{ nextcloud_webroot }}"
205 register: install_result
208 - name: Afficher les logs du script d'install
209 ansible.builtin.debug:
211 when: install_result is defined
213 - name: Créer les fichiers spécifiques nextcloud
214 ansible.builtin.template:
215 src: "templates/{{ item.src }}"
216 dest: "{{ nextcloud_webroot }}/{{ item.dest }}"
217 owner: "{{ item.owner }}"
218 group: "{{ item.group }}"
219 mode: "{{ item.mode }}"
221 - src: "nextcloud_sigle_config.j2"
222 dest: "config/{{ SIGLE }}.config.php"
223 owner: "{{ nextcloud_php_user }}"
224 group: "{{ nextcloud_websrv_user }}"
227 - name: Creation d'un lien symbolique vers le configuration nextcloud commun
228 ansible.builtin.file:
229 src: "../../../../nextcloud/common/common.config.php"
230 dest: "config/common.config.php"
236 - name: Create sigle nextcloud config
237 become_user: "{{ nextcloud_php_user }}"
239 ansible.builtin.template:
240 src: templates/sigle.config.php.j2
241 dest: "{{ nextcloud_webroot }}/config/sigle.config.php"
242 owner: "{{ nextcloud_php_user }}"
243 group: "{{ nextcloud_websrv_user }}"
244 mode: '640' # or u=rwx,g=r,o=
246 - name: Pour chaque base, ajouter les droits suivants à l'utilisateur php
247 become_user: postgres
249 community.postgresql.postgresql_privs:
251 privs: "{{ item.privs }}"
252 type: "{{ item.type |default(omit) }}"
253 objs: "{{ item.objs }}"
254 role: "{{ item.role }}"
255 grant_option: "{{ item.grant_option |default(omit) }}"
257 label: "{{ item.name }}"
259 - db: "{{ nextcloud_db_name }}"
260 privs: "USAGE,CREATE"
263 role: "{{ nextcloud_php_user }}"
264 name: "GRANT USAGE,CREATE ON SCHEMA public TO php_{{ SIGLE }}_nuage;"
265 - db: "{{ nextcloud_db_name }}"
269 role: "{{ nextcloud_php_user }}"
270 name: "GRANT SELECT ON TABLE pg_namespace TO php_{{ SIGLE }}_nuage;"
271 - db: "{{ nextcloud_db_name }}"
275 role: "{{ nextcloud_php_user }}"
276 name: "GRANT SELECT ON TABLE pg_collation TO php_{{ SIGLE }}_nuage;"
277 - db: "{{ nextcloud_db_name }}"
281 role: "{{ nextcloud_php_user }}"
282 name: "GRANT SELECT ON TABLE pg_index TO php_{{ SIGLE }}_nuage;"
283 - db: "{{ nextcloud_db_name }}"
287 role: "{{ nextcloud_php_user }}"
288 name: "GRANT SELECT ON TABLE pg_attrdef TO php_{{ SIGLE }}_nuage;"
289 - db: "{{ nextcloud_db_name }}"
292 objs: "pg_description"
293 role: "{{ nextcloud_php_user }}"
294 name: "GRANT SELECT ON TABLE pg_description TO php_{{ SIGLE }}_nuage;"
295 - db: "{{ nextcloud_db_name }}"
299 role: "{{ nextcloud_php_user }}"
300 name: "GRANT SELECT ON TABLE pg_settings TO php_{{ SIGLE }}_nuage;"
301 - db: "{{ nextcloud_db_name }}"
304 role: "{{ nextcloud_php_user }}"
305 name: "GRANT SELECT ON pg_database TO php_{{ SIGLE }}_nuage;"
307 - name: Creation d'un fichier cron pour /etc/cron.d
308 ansible.builtin.cron:
309 name: "nextcloud {{ SIGLE }}_{{ SITE }} taches d'arriere plan toutes les 5 mins"
311 user: "php_{{ SIGLE }}_{{ SITE }}"
312 job: "{{ nextcloud_webroot }}/cron"
314 - name: Recharger plusieurs services
315 ansible.builtin.service:
320 - "php{{ php_version }}-fpm"