--- /dev/null
+- name: Install required packages
+ ansible.builtin.apt:
+ name:
+ - php-ctype
+ - php-curl
+ - php-dom
+ - php-fileinfo
+ - php-gd
+ - php-json
+ - php-libxml
+ - php-mbstring
+ - php-openssl
+ - php-posix
+ - php-session
+ - php-simplexml
+ - php-xmlreader
+ - php-xmlwriter
+ - php-zip
+ - php-zlib
+ - php-pdo_pgsql
+ - php-intl
+ - php-bz2
+ - php-sodium
+ - php-gmp
+# - php-exif
+ - php-redis
+ - php-imagick
+ state: present
+
+- name: Boucle d'ajout du user php dans plusieurs groupe
+ ansible.builtin.user:
+ name: "php_{{ SIGLE }}_{{ SITE }}"
+ groups: "{{ item }}"
+ append: true
+ loop:
+ - nextcloud
+ - postgres-data
+ - redis
+ - "site_{{ SIGLE }}_{{ SITE }}"
+
+- name: Bloc nextcloud_version
+ when: nouvelle_version is undefined
+ block:
+ - name: Demande la version de nextcloud à installer
+ ansible.builtin.pause:
+ prompt: "Quelle version de nextcloud doit être utilisée"
+ echo: true
+ register: nextcloud_version_prompt
+
+ - name: Definir nouvelle_version
+ ansible.builtin.set_fact:
+ nouvelle_version: "{{ nextcloud_version.user_input }}"
+
+ - name: Demande la version de nextcloud déjà installer
+ ansible.builtin.pause:
+ prompt: "Quelle version de nextcloud déjà installée"
+ echo: true
+ register: ancienne_version_prompt
+
+ - name: Definir ancienne_version
+ ansible.builtin.set_fact:
+ ancienne_version: "{{ ancienne_version.user_input }}"
+
+- name: Inclure la verif de l'install nextcloud
+ ansible.builtin.include_tasks: tasks/verif_installation_nextcloud.yml
+
+- name: "[PostgreSQL] - {{ nextcloud_websrv_user }} role is created."
+ become_user: postgres
+ become: true
+ community.postgresql.postgresql_user:
+ name: "{{ nextcloud_websrv_user }}"
+ state: present
+ role_attr_flags: CREATEDB
+
+- name: "[PostgreSQL] - {{ nextcloud_db_name }} database is created."
+ become_user: postgres
+ become: true
+ community.postgresql.postgresql_db:
+ name: "{{ nextcloud_db_name }}"
+ state: "{{ item }}"
+ owner: "{{ nextcloud_websrv_user }}"
+ loop:
+ - absent
+ - present
+
+- name: Pour chaque base, ajouter les droits suivants à l'utilisateur php
+ community.postgresql.postgresql_privs:
+ db: "{{ item.db }}"
+ privs: "{{ item.privs }}"
+ type: "{{ item.type }}"
+ objs: "{{ item.objs }}"
+ role: "{{ item.role }}"
+ grant_option: "{{ item.grant_option |default(false) }}"
+ loop_control: "{{ item.name }}"
+ loop:
+ - db: "{{ php_${SIGLE}_nuage }}"
+ privs: "ALL"
+ type: "schema"
+ objs: "public"
+ role: "{{ php_${SIGLE}_nuage }}"
+ grant_option: true
+ name: "GRANT ALL ON SCHEMA public TO php_${SIGLE}_nuage WITH GRANT OPTION;"
+ - db: "{{ php_${SIGLE}_nuage }}"
+ privs: "USAGE,CREATE"
+ type: "schema"
+ objs: "public"
+ role: "{{ php_${SIGLE}_nuage }}"
+ name: "GRANT USAGE,CREATE ON SCHEMA public TO php_${SIGLE}_nuage;"
+ - db: "{{ php_${SIGLE}_nuage }}"
+ privs: "SELECT"
+ type: "table"
+ objs: "pg_namespace"
+ role: "{{ php_${SIGLE}_nuage }}"
+ name: GRANT SELECT ON TABLE pg_namespace TO php_${SIGLE}_nuage;
+ - db: "{{ php_${SIGLE}_nuage }}"
+ privs: "SELECT"
+ type: "table"
+ objs: "pg_collation"
+ role: "{{ php_${SIGLE}_nuage }}"
+ name: GRANT SELECT ON TABLE pg_collation TO php_${SIGLE}_nuage;
+ - db: "{{ php_${SIGLE}_nuage }}"
+ privs: "SELECT"
+ type: "table"
+ objs: "pg_index"
+ role: "{{ php_${SIGLE}_nuage }}"
+ name: GRANT SELECT ON TABLE pg_index TO php_${SIGLE}_nuage;
+ - db: "{{ php_${SIGLE}_nuage }}"
+ privs: "SELECT"
+ type: "table"
+ objs: "pg_attrdef"
+ role: "{{ php_${SIGLE}_nuage }}"
+ name: GRANT SELECT ON TABLE pg_attrdef TO php_${SIGLE}_nuage;
+ - db: "{{ php_${SIGLE}_nuage }}"
+ privs: "SELECT"
+ type: "table"
+ objs: "pg_description"
+ role: "{{ php_${SIGLE}_nuage }}"
+ name: GRANT SELECT ON TABLE pg_description TO php_${SIGLE}_nuage;
+ - db: "{{ php_${SIGLE}_nuage }}"
+ privs: "SELECT"
+ type: "table"
+ objs: "pg_settings"
+ role: "{{ php_${SIGLE}_nuage }}"
+ name: GRANT SELECT ON TABLE pg_settings TO php_${SIGLE}_nuage;
+ - db: "{{ php_${SIGLE}_nuage }}"
+ privs: "SELECT"
+ objs: "pg_database"
+ role: "{{ php_${SIGLE}_nuage }}"
+ name: GRANT SELECT ON pg_database TO php_${SIGLE}_nuage;
+
+- name: Autoriser l'utilisateur php à se connecter à la bdd nextcloud
+ community.postgresql.postgresql_pg_hba:
+ dest: "/etc/postgresql/{{ postgres_version }}/main/pg_hba.conf"
+ contype: local
+ users: "php_{{ SIGLE}}_{{SITE}}"
+ databases: "php_{{ SIGLE}}_{{SITE}}"
+ method: peer
+ keep_comments_at_rules: true
+ comment: "autoriser le user php_{{ SIGLE}}_{{SITE}} à se connecter à la bdd du meme nom"
+
+# - name: Update nextcloud root dir symbolic link
+# become: true
+# ansible.builtin.file:
+# src: "{{ nextcloud_source }}"
+# dest: "{{ nextcloud_webroot }}/nextcloud"
+# owner: nextcloud
+# group: nextcloud
+# state: link
+# follow: false
+
+# - name: Update nextcloud common app dir symbolic link
+# become: true
+# ansible.builtin.file:
+# src: "{{ nextcloud_common }}"
+# dest: "{{ nextcloud_webroot }}/common"
+# owner: nextcloud
+# group: nextcloud
+# state: link
+# follow: false
+
+# copy skeleton?
+
+# lancement de la commande d'installation
+
+# lien symbolic common conf
+
+- name: Create sigle nextcloud config
+ become_user: "{{ nextcloud_websrv_user }}"
+ become: true
+ ansible.builtin.template:
+ src: templates/sigle.config.php.j2
+ dest: "{{ nextcloud_webroot }}/config/sigle.config.php"
+ owner: "{{ nextcloud_websrv_user }}"
+ group: "{{ nextcloud_websrv_user }}"
+ mode: '640' # or u=rwx,g=r,o=
+
+- name: Creation d'un fichier cron pour /etc/cron.d
+ ansible.builtin.cron:
+ name: "nextcloud {{ SIGLE }}_{{ SITE }} taches d'arriere plan "
+ minute: "5"
+ user: "php_{{ SIGLE}}_{{SITE}}"
+ job: "/home/sites/data/{{ TLD }}/{{ DOMAIN }}/{{ SITE }}/cron"
+
+- name: Recharger plusieurs services
+ ansible.builtin.service:
+ name: "{{ item }}"
+ state: reloaded
+ loop:
+ - "postgresql"
+ - "php{{ php_version }}-fpm"
+ - "nginx"
dépôts / lhc / ansible.git / blobdiff