sjat
8f1c7d47ec
Add check_mode: false to the state:directory base_dir tasks so that 'make check' on a brand-new compose service role creates the scaffold during --check and the rest of the dry-run (templates + docker_compose_v2 up) can be evaluated instead of failing on a missing project_src. The directive is inert under a normal converge (incl. Molecule + its tagged second converge), so role tests are unchanged. Consumes the 2026-06-16 signal in docs/FRICTION.md. Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
54 lines
1.8 KiB
YAML
54 lines
1.8 KiB
YAML
---
|
|
- name: Ensure the service directory exists
|
|
ansible.builtin.file:
|
|
path: "{{ reverse_proxy__base_dir }}"
|
|
state: directory
|
|
mode: "0750"
|
|
# create the scaffold even in --check so dry-run can evaluate templates + compose (idempotent mkdir)
|
|
check_mode: false
|
|
tags: [config]
|
|
|
|
- name: Ensure the Caddy config directory exists
|
|
ansible.builtin.file:
|
|
path: "{{ reverse_proxy__base_dir }}/caddy"
|
|
state: directory
|
|
mode: "0750"
|
|
# create the scaffold even in --check so dry-run can evaluate templates + compose (idempotent mkdir)
|
|
check_mode: false
|
|
tags: [config]
|
|
|
|
# Render into a directory that is bind-mounted whole (./caddy -> /etc/caddy). Mounting
|
|
# the directory, not the single file, means an atomic template rewrite (which swaps the
|
|
# file inode) stays visible inside the running container, so `caddy reload` picks it up.
|
|
# A single-file bind mount pins the original inode and reload silently no-ops (ADR-024).
|
|
- name: Render the Caddyfile
|
|
ansible.builtin.template:
|
|
src: Caddyfile.j2
|
|
dest: "{{ reverse_proxy__base_dir }}/caddy/Caddyfile"
|
|
mode: "0644"
|
|
notify: reload caddy
|
|
tags: [config]
|
|
|
|
- name: Render the Gandi DNS-01 token env file
|
|
ansible.builtin.template:
|
|
src: env.j2
|
|
dest: "{{ reverse_proxy__base_dir }}/env"
|
|
mode: "0600"
|
|
no_log: true # contains the Gandi PAT
|
|
when: reverse_proxy__acme_dns_provider == 'gandi'
|
|
notify: reload caddy
|
|
tags: [config]
|
|
|
|
- name: Render the compose file
|
|
ansible.builtin.template:
|
|
src: docker-compose.yml.j2
|
|
dest: "{{ reverse_proxy__base_dir }}/docker-compose.yml"
|
|
mode: "0644"
|
|
tags: [config]
|
|
|
|
- name: Bring the reverse proxy up
|
|
community.docker.docker_compose_v2:
|
|
project_src: "{{ reverse_proxy__base_dir }}"
|
|
state: present
|
|
when: reverse_proxy__manage | bool
|
|
tags: [deploy]
|