Matrix Docker Ansible eploy
You can not select more than 25 topics Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
 
 
 

192 lines
9.0 KiB

  1. # SPDX-FileCopyrightText: 2026 MDAD project contributors
  2. # SPDX-FileCopyrightText: 2026 Nikita Chernyi
  3. #
  4. # SPDX-License-Identifier: AGPL-3.0-or-later
  5. ---
  6. - ansible.builtin.set_fact:
  7. matrix_bridge_mautrix_linkedin_migration_requires_restart: false
  8. - when: "matrix_bridge_mautrix_linkedin_database_engine == 'postgres'"
  9. block:
  10. - name: Check if an SQLite database already exists
  11. ansible.builtin.stat:
  12. path: "{{ matrix_bridge_mautrix_linkedin_sqlite_database_path_local }}"
  13. register: matrix_bridge_mautrix_linkedin_sqlite_database_path_local_stat_result
  14. - when: "matrix_bridge_mautrix_linkedin_sqlite_database_path_local_stat_result.stat.exists | bool"
  15. block:
  16. - ansible.builtin.include_role:
  17. name: galaxy/postgres
  18. tasks_from: migrate_db_to_postgres
  19. vars:
  20. postgres_db_migration_request:
  21. src: "{{ matrix_bridge_mautrix_linkedin_sqlite_database_path_local }}"
  22. dst: "{{ matrix_bridge_mautrix_linkedin_database_connection_string }}"
  23. caller: "{{ role_path | basename }}"
  24. engine_variable_name: 'matrix_bridge_mautrix_linkedin_database_engine'
  25. engine_old: 'sqlite'
  26. systemd_services_to_stop: ['matrix-mautrix-linkedin.service']
  27. pgloader_options: ['--with "quote identifiers"']
  28. - ansible.builtin.set_fact:
  29. matrix_bridge_mautrix_linkedin_migration_requires_restart: true
  30. - name: Ensure Mautrix linkedin paths exists
  31. ansible.builtin.file:
  32. path: "{{ item.path }}"
  33. state: directory
  34. mode: '0750'
  35. owner: "{{ matrix_user_name }}"
  36. group: "{{ matrix_group_name }}"
  37. with_items:
  38. - {path: "{{ matrix_bridge_mautrix_linkedin_base_path }}", when: true}
  39. - {path: "{{ matrix_bridge_mautrix_linkedin_config_path }}", when: true}
  40. - {path: "{{ matrix_bridge_mautrix_linkedin_data_path }}", when: true}
  41. - {path: "{{ matrix_bridge_mautrix_linkedin_container_src_files_path }}", when: "{{ matrix_bridge_mautrix_linkedin_container_image_self_build }}"}
  42. when: item.when | bool
  43. - name: Ensure Mautrix linkedin image is pulled
  44. community.docker.docker_image_pull:
  45. name: "{{ matrix_bridge_mautrix_linkedin_container_image }}"
  46. pull: always
  47. when: not matrix_bridge_mautrix_linkedin_container_image_self_build
  48. register: matrix_bridge_mautrix_linkedin_container_image_pull_result
  49. retries: "{{ devture_playbook_help_container_retries_count }}"
  50. delay: "{{ devture_playbook_help_container_retries_delay }}"
  51. until: matrix_bridge_mautrix_linkedin_container_image_pull_result is not failed
  52. # A checkout owned by a different user (a uid change, an earlier clone by another user, etc.) would make the git task below fail on ownership or permissions.
  53. - name: Ensure Mautrix linkedin repository ownership is correct on self-build
  54. ansible.builtin.file:
  55. path: "{{ matrix_bridge_mautrix_linkedin_container_src_files_path }}"
  56. state: directory
  57. owner: "{{ matrix_user_name }}"
  58. group: "{{ matrix_group_name }}"
  59. recurse: true
  60. when: "matrix_bridge_mautrix_linkedin_container_image_self_build | bool"
  61. - name: Ensure Mautrix linkedin repository is present on self-build
  62. ansible.builtin.git:
  63. repo: "{{ matrix_bridge_mautrix_linkedin_container_image_self_build_repo }}"
  64. dest: "{{ matrix_bridge_mautrix_linkedin_container_src_files_path }}"
  65. version: "{{ matrix_bridge_mautrix_linkedin_container_image_self_build_branch }}"
  66. force: "yes"
  67. become: true
  68. become_user: "{{ matrix_user_name }}"
  69. # Keep this even though the task above normalizes ownership. Git may still see an ownership mismatch when Ansible becomes an unprivileged user (see #5065).
  70. environment:
  71. GIT_CONFIG_COUNT: "1"
  72. GIT_CONFIG_KEY_0: safe.directory
  73. GIT_CONFIG_VALUE_0: "{{ matrix_bridge_mautrix_linkedin_container_src_files_path }}"
  74. register: matrix_bridge_mautrix_linkedin_git_pull_results
  75. when: "matrix_bridge_mautrix_linkedin_container_image_self_build | bool"
  76. - name: Ensure Mautrix linkedin Docker image is built
  77. community.docker.docker_image_build:
  78. name: "{{ matrix_bridge_mautrix_linkedin_container_image }}"
  79. dockerfile: Dockerfile
  80. path: "{{ matrix_bridge_mautrix_linkedin_container_src_files_path }}"
  81. pull: true
  82. rebuild: "{{ 'always' if matrix_bridge_mautrix_linkedin_git_pull_results.changed | bool else 'never' }}"
  83. when: "matrix_bridge_mautrix_linkedin_container_image_self_build | bool"
  84. register: matrix_bridge_mautrix_linkedin_container_image_build_result
  85. - name: Check if an old database file exists
  86. ansible.builtin.stat:
  87. path: "{{ matrix_bridge_mautrix_linkedin_base_path }}/mautrix-linkedin.db"
  88. register: matrix_bridge_mautrix_linkedin_stat_database
  89. - name: Check if an old Matrix state file exists
  90. ansible.builtin.stat:
  91. path: "{{ matrix_bridge_mautrix_linkedin_base_path }}/mx-state.json"
  92. register: matrix_bridge_mautrix_linkedin_stat_mx_state
  93. - name: (Data relocation) Ensure matrix-mautrix-linkedin.service is stopped
  94. ansible.builtin.service:
  95. name: matrix-mautrix-linkedin
  96. state: stopped
  97. enabled: false
  98. daemon_reload: true
  99. failed_when: false
  100. when: "matrix_bridge_mautrix_linkedin_stat_database.stat.exists"
  101. - name: (Data relocation) Move mautrix-linkedin database file to ./data directory
  102. ansible.builtin.command:
  103. cmd: "mv {{ matrix_bridge_mautrix_linkedin_base_path }}/mautrix-linkedin.db {{ matrix_bridge_mautrix_linkedin_data_path }}/mautrix-linkedin.db"
  104. creates: "{{ matrix_bridge_mautrix_linkedin_data_path }}/mautrix-linkedin.db"
  105. removes: "{{ matrix_bridge_mautrix_linkedin_base_path }}/mautrix-linkedin.db"
  106. when: "matrix_bridge_mautrix_linkedin_stat_database.stat.exists"
  107. - name: (Data relocation) Move mautrix-linkedin mx-state file to ./data directory
  108. ansible.builtin.command:
  109. cmd: "mv {{ matrix_bridge_mautrix_linkedin_base_path }}/mx-state.json {{ matrix_bridge_mautrix_linkedin_data_path }}/mx-state.json"
  110. creates: "{{ matrix_bridge_mautrix_linkedin_data_path }}/mx-state.json"
  111. removes: "{{ matrix_bridge_mautrix_linkedin_base_path }}/mx-state.json"
  112. when: "matrix_bridge_mautrix_linkedin_stat_mx_state.stat.exists"
  113. - name: Ensure mautrix-linkedin config.yaml installed
  114. ansible.builtin.copy:
  115. content: "{{ matrix_bridge_mautrix_linkedin_configuration | to_nice_yaml(indent=2, width=999999) }}"
  116. dest: "{{ matrix_bridge_mautrix_linkedin_config_path }}/config.yaml"
  117. mode: '0644'
  118. owner: "{{ matrix_user_name }}"
  119. group: "{{ matrix_group_name }}"
  120. register: matrix_bridge_mautrix_linkedin_config_result
  121. - name: Ensure mautrix-linkedin registration.yaml installed
  122. ansible.builtin.copy:
  123. content: "{{ matrix_bridge_mautrix_linkedin_registration | to_nice_yaml(indent=2, width=999999) }}"
  124. dest: "{{ matrix_bridge_mautrix_linkedin_config_path }}/registration.yaml"
  125. mode: '0644'
  126. owner: "{{ matrix_user_name }}"
  127. group: "{{ matrix_group_name }}"
  128. register: matrix_bridge_mautrix_linkedin_registration_result
  129. - name: Ensure matrix-mautrix-linkedin.service installed
  130. ansible.builtin.template:
  131. src: "{{ role_path }}/templates/systemd/matrix-mautrix-linkedin.service.j2"
  132. dest: "{{ devture_systemd_docker_base_systemd_path }}/matrix-mautrix-linkedin.service"
  133. mode: '0644'
  134. register: matrix_bridge_mautrix_linkedin_systemd_service_result
  135. - name: Ensure mautrix-linkedin support files installed
  136. ansible.builtin.template:
  137. src: "{{ role_path }}/templates/{{ item }}.j2"
  138. dest: "{{ matrix_bridge_mautrix_linkedin_base_path }}/{{ item }}"
  139. mode: '0640'
  140. owner: "{{ matrix_user_name }}"
  141. group: "{{ matrix_group_name }}"
  142. with_items:
  143. - labels
  144. register: matrix_bridge_mautrix_linkedin_support_files_result
  145. - name: Ensure matrix-mautrix-linkedin container network is created
  146. when: matrix_bridge_mautrix_linkedin_container_network != 'host'
  147. community.general.docker_network:
  148. enable_ipv6: "{{ devture_systemd_docker_base_ipv6_enabled }}"
  149. name: "{{ matrix_bridge_mautrix_linkedin_container_network }}"
  150. driver: bridge
  151. driver_options: "{{ devture_systemd_docker_base_container_networks_driver_options }}"
  152. - name: Determine whether matrix-mautrix-linkedin needs a restart
  153. ansible.builtin.set_fact:
  154. matrix_bridge_mautrix_linkedin_restart_necessary: >-
  155. {{
  156. matrix_bridge_mautrix_linkedin_migration_requires_restart | default(false)
  157. or matrix_bridge_mautrix_linkedin_config_result.changed | default(false)
  158. or matrix_bridge_mautrix_linkedin_registration_result.changed | default(false)
  159. or matrix_bridge_mautrix_linkedin_support_files_result.changed | default(false)
  160. or matrix_bridge_mautrix_linkedin_systemd_service_result.changed | default(false)
  161. or matrix_bridge_mautrix_linkedin_container_image_pull_result.changed | default(false)
  162. or matrix_bridge_mautrix_linkedin_container_image_build_result.changed | default(false)
  163. }}
  164. - name: Ensure matrix-mautrix-linkedin.service restarted, if necessary
  165. ansible.builtin.service:
  166. name: "matrix-mautrix-linkedin.service"
  167. state: restarted
  168. daemon_reload: true
  169. when: "matrix_bridge_mautrix_linkedin_migration_requires_restart | bool"