Move docker folder and delete hedgedoc user
All checks were successful
continuous-integration/drone/push Build is passing

This commit is contained in:
Paul Brinkmeier 2023-01-27 04:29:32 +01:00
parent 3f3d619694
commit a1cac6b8a3
18 changed files with 4 additions and 3 deletions

View File

@ -6,6 +6,7 @@
- [x] Make it inaccessible to anyone but root (`-rw------`) - [x] Make it inaccessible to anyone but root (`-rw------`)
- [x] Add [Drone runner](https://docs.drone.io/runner/docker/installation/linux/) - [x] Add [Drone runner](https://docs.drone.io/runner/docker/installation/linux/)
- [ ] Figure out how to dependably store `.env` files (Ansible vault? Something else?) - [ ] Figure out how to dependably store `.env` files (Ansible vault? Something else?)
- [ ] In vault, seperate from other config
- [x] Check out docker swarm and current best practices for Ansible - [x] Check out docker swarm and current best practices for Ansible
- [x] Use Gitea instead of GitLab - [x] Use Gitea instead of GitLab
- [ ] Add drone exec runner for Nix builds with shared `/nix` - [ ] Add drone exec runner for Nix builds with shared `/nix`

View File

@ -8,7 +8,7 @@
name: "{{ item.name }}" name: "{{ item.name }}"
uid: "{{ item.uid }}" uid: "{{ item.uid }}"
create_home: false create_home: false
state: present state: "{{ item.state }}"
loop: loop:
- name: jupyter - name: jupyter
uid: 42000 uid: 42000
@ -24,7 +24,7 @@
state: present state: present
- name: hedgedoc - name: hedgedoc
uid: 10000 uid: 10000
state: present state: absent
# All services that are behind Caddy need to be in this network # All services that are behind Caddy need to be in this network
- name: Create Caddy network - name: Create Caddy network
become: true become: true
@ -34,7 +34,7 @@
- name: Upload docker configuration - name: Upload docker configuration
become: true become: true
ansible.builtin.copy: ansible.builtin.copy:
src: ../../docker src: ../../docker/docker
dest: /etc/pbri dest: /etc/pbri
# Files should inaccessible to non-root users. # Files should inaccessible to non-root users.
mode: u=rw,g=,o= mode: u=rw,g=,o=