Matrix Docker Ansible eploy
Вы не можете выбрать более 25 тем Темы должны начинаться с буквы или цифры, могут содержать дефисы(-) и должны содержать не более 35 символов.
 
 
 

199 строки
9.2 KiB

  1. # SPDX-FileCopyrightText: 2020 - 2021 Sabine Laszakovits
  2. # SPDX-FileCopyrightText: 2020 - 2022 MDAD project contributors
  3. # SPDX-FileCopyrightText: 2021 - 2024 Slavi Pantaleev
  4. # SPDX-FileCopyrightText: 2022 Jim Myhrberg
  5. # SPDX-FileCopyrightText: 2022 Marko Weltzer
  6. # SPDX-FileCopyrightText: 2022 Nikita Chernyi
  7. # SPDX-FileCopyrightText: 2022 Sebastian Gumprich
  8. # SPDX-FileCopyrightText: 2023 Pierre 'McFly' Marty
  9. # SPDX-FileCopyrightText: 2024 David Mehren
  10. #
  11. # SPDX-License-Identifier: AGPL-3.0-or-later
  12. ---
  13. - ansible.builtin.set_fact:
  14. matrix_bridge_mautrix_signal_migration_requires_restart: false
  15. - when: "matrix_bridge_mautrix_signal_database_engine == 'postgres'"
  16. block:
  17. - name: Check if an SQLite database already exists
  18. ansible.builtin.stat:
  19. path: "{{ matrix_bridge_mautrix_signal_sqlite_database_path_local }}"
  20. register: matrix_bridge_mautrix_signal_sqlite_database_path_local_stat_result
  21. - when: "matrix_bridge_mautrix_signal_sqlite_database_path_local_stat_result.stat.exists | bool"
  22. block:
  23. - ansible.builtin.include_role:
  24. name: galaxy/postgres
  25. tasks_from: migrate_db_to_postgres
  26. vars:
  27. postgres_db_migration_request:
  28. src: "{{ matrix_bridge_mautrix_signal_sqlite_database_path_local }}"
  29. dst: "{{ matrix_bridge_mautrix_signal_database_connection_string }}"
  30. caller: "{{ role_path | basename }}"
  31. engine_variable_name: 'matrix_bridge_mautrix_signal_database_engine'
  32. engine_old: 'sqlite'
  33. systemd_services_to_stop: ['matrix-mautrix-signal.service']
  34. pgloader_options: ['--with "quote identifiers"']
  35. - ansible.builtin.set_fact:
  36. matrix_bridge_mautrix_signal_migration_requires_restart: true
  37. - name: Ensure Mautrix signal paths exists
  38. ansible.builtin.file:
  39. path: "{{ item.path }}"
  40. state: directory
  41. mode: '0750'
  42. owner: "{{ matrix_user_name }}"
  43. group: "{{ matrix_group_name }}"
  44. with_items:
  45. - {path: "{{ matrix_bridge_mautrix_signal_base_path }}", when: true}
  46. - {path: "{{ matrix_bridge_mautrix_signal_config_path }}", when: true}
  47. - {path: "{{ matrix_bridge_mautrix_signal_data_path }}", when: true}
  48. - {path: "{{ matrix_bridge_mautrix_signal_container_src_files_path }}", when: "{{ matrix_bridge_mautrix_signal_container_image_self_build }}"}
  49. when: item.when | bool
  50. - name: Ensure Mautrix signal image is pulled
  51. community.docker.docker_image_pull:
  52. name: "{{ matrix_bridge_mautrix_signal_container_image }}"
  53. pull: always
  54. when: not matrix_bridge_mautrix_signal_container_image_self_build
  55. register: matrix_bridge_mautrix_signal_container_image_pull_result
  56. retries: "{{ devture_playbook_help_container_retries_count }}"
  57. delay: "{{ devture_playbook_help_container_retries_delay }}"
  58. until: matrix_bridge_mautrix_signal_container_image_pull_result is not failed
  59. # A checkout owned by a different user (a uid change, an earlier clone by another user, etc.) would make the git task below fail on ownership or permissions.
  60. - name: Ensure Mautrix signal repository ownership is correct on self-build
  61. ansible.builtin.file:
  62. path: "{{ matrix_bridge_mautrix_signal_container_src_files_path }}"
  63. state: directory
  64. owner: "{{ matrix_user_name }}"
  65. group: "{{ matrix_group_name }}"
  66. recurse: true
  67. when: "matrix_bridge_mautrix_signal_container_image_self_build | bool"
  68. - name: Ensure Mautrix signal repository is present on self-build
  69. ansible.builtin.git:
  70. repo: "{{ matrix_bridge_mautrix_signal_container_image_self_build_repo }}"
  71. dest: "{{ matrix_bridge_mautrix_signal_container_src_files_path }}"
  72. version: "{{ matrix_bridge_mautrix_signal_container_image_self_build_branch }}"
  73. force: "yes"
  74. become: true
  75. become_user: "{{ matrix_user_name }}"
  76. # Keep this even though the task above normalizes ownership. Git may still see an ownership mismatch when Ansible becomes an unprivileged user (see #5065).
  77. environment:
  78. GIT_CONFIG_COUNT: "1"
  79. GIT_CONFIG_KEY_0: safe.directory
  80. GIT_CONFIG_VALUE_0: "{{ matrix_bridge_mautrix_signal_container_src_files_path }}"
  81. register: matrix_bridge_mautrix_signal_git_pull_results
  82. when: "matrix_bridge_mautrix_signal_container_image_self_build | bool"
  83. - name: Ensure Mautrix signal Docker image is built
  84. community.docker.docker_image_build:
  85. name: "{{ matrix_bridge_mautrix_signal_container_image }}"
  86. dockerfile: Dockerfile
  87. path: "{{ matrix_bridge_mautrix_signal_container_src_files_path }}"
  88. pull: true
  89. rebuild: "{{ 'always' if matrix_bridge_mautrix_signal_git_pull_results.changed | bool else 'never' }}"
  90. when: "matrix_bridge_mautrix_signal_container_image_self_build | bool"
  91. register: matrix_bridge_mautrix_signal_container_image_build_result
  92. - name: Check if an old database file exists
  93. ansible.builtin.stat:
  94. path: "{{ matrix_bridge_mautrix_signal_base_path }}/mautrix-signal.db"
  95. register: matrix_bridge_mautrix_signal_stat_database
  96. - name: Check if an old Matrix state file exists
  97. ansible.builtin.stat:
  98. path: "{{ matrix_bridge_mautrix_signal_base_path }}/mx-state.json"
  99. register: matrix_bridge_mautrix_signal_stat_mx_state
  100. - name: (Data relocation) Ensure matrix-mautrix-signal.service is stopped
  101. ansible.builtin.service:
  102. name: matrix-mautrix-signal
  103. state: stopped
  104. enabled: false
  105. daemon_reload: true
  106. failed_when: false
  107. when: "matrix_bridge_mautrix_signal_stat_database.stat.exists"
  108. - name: (Data relocation) Move mautrix-signal database file to ./data directory
  109. ansible.builtin.command:
  110. cmd: "mv {{ matrix_bridge_mautrix_signal_base_path }}/mautrix-signal.db {{ matrix_bridge_mautrix_signal_data_path }}/mautrix-signal.db"
  111. creates: "{{ matrix_bridge_mautrix_signal_data_path }}/mautrix-signal.db"
  112. removes: "{{ matrix_bridge_mautrix_signal_base_path }}/mautrix-signal.db"
  113. when: "matrix_bridge_mautrix_signal_stat_database.stat.exists"
  114. - name: (Data relocation) Move mautrix-signal mx-state file to ./data directory
  115. ansible.builtin.command:
  116. cmd: "mv {{ matrix_bridge_mautrix_signal_base_path }}/mx-state.json {{ matrix_bridge_mautrix_signal_data_path }}/mx-state.json"
  117. creates: "{{ matrix_bridge_mautrix_signal_data_path }}/mx-state.json"
  118. removes: "{{ matrix_bridge_mautrix_signal_base_path }}/mx-state.json"
  119. when: "matrix_bridge_mautrix_signal_stat_mx_state.stat.exists"
  120. - name: Ensure mautrix-signal config.yaml installed
  121. ansible.builtin.copy:
  122. content: "{{ matrix_bridge_mautrix_signal_configuration | to_nice_yaml(indent=2, width=999999) }}"
  123. dest: "{{ matrix_bridge_mautrix_signal_config_path }}/config.yaml"
  124. mode: '0644'
  125. owner: "{{ matrix_user_name }}"
  126. group: "{{ matrix_group_name }}"
  127. register: matrix_bridge_mautrix_signal_config_result
  128. - name: Ensure mautrix-signal registration.yaml installed
  129. ansible.builtin.copy:
  130. content: "{{ matrix_bridge_mautrix_signal_registration | to_nice_yaml(indent=2, width=999999) }}"
  131. dest: "{{ matrix_bridge_mautrix_signal_config_path }}/registration.yaml"
  132. mode: '0644'
  133. owner: "{{ matrix_user_name }}"
  134. group: "{{ matrix_group_name }}"
  135. register: matrix_bridge_mautrix_signal_registration_result
  136. - name: Ensure mautrix-signal support files installed
  137. ansible.builtin.template:
  138. src: "{{ role_path }}/templates/{{ item }}.j2"
  139. dest: "{{ matrix_bridge_mautrix_signal_base_path }}/{{ item }}"
  140. mode: '0640'
  141. owner: "{{ matrix_user_name }}"
  142. group: "{{ matrix_group_name }}"
  143. with_items:
  144. - labels
  145. register: matrix_bridge_mautrix_signal_support_files_result
  146. - name: Ensure matrix-mautrix-signal container network is created
  147. when: matrix_bridge_mautrix_signal_container_network != 'host'
  148. community.general.docker_network:
  149. enable_ipv6: "{{ devture_systemd_docker_base_ipv6_enabled }}"
  150. name: "{{ matrix_bridge_mautrix_signal_container_network }}"
  151. driver: bridge
  152. driver_options: "{{ devture_systemd_docker_base_container_networks_driver_options }}"
  153. - name: Ensure matrix-mautrix-signal.service installed
  154. ansible.builtin.template:
  155. src: "{{ role_path }}/templates/systemd/matrix-mautrix-signal.service.j2"
  156. dest: "{{ devture_systemd_docker_base_systemd_path }}/matrix-mautrix-signal.service"
  157. mode: '0644'
  158. register: matrix_bridge_mautrix_signal_systemd_service_result
  159. - name: Determine whether matrix-mautrix-signal needs a restart
  160. ansible.builtin.set_fact:
  161. matrix_bridge_mautrix_signal_restart_necessary: >-
  162. {{
  163. matrix_bridge_mautrix_signal_migration_requires_restart | default(false)
  164. or matrix_bridge_mautrix_signal_config_result.changed | default(false)
  165. or matrix_bridge_mautrix_signal_registration_result.changed | default(false)
  166. or matrix_bridge_mautrix_signal_support_files_result.changed | default(false)
  167. or matrix_bridge_mautrix_signal_systemd_service_result.changed | default(false)
  168. or matrix_bridge_mautrix_signal_container_image_pull_result.changed | default(false)
  169. or matrix_bridge_mautrix_signal_container_image_build_result.changed | default(false)
  170. }}
  171. - name: Ensure matrix-mautrix-signal.service restarted, if necessary
  172. ansible.builtin.service:
  173. name: "matrix-mautrix-signal.service"
  174. state: restarted
  175. daemon_reload: true
  176. when: "matrix_bridge_mautrix_signal_migration_requires_restart | bool"