Move docker folder and delete hedgedoc user
All checks were successful
continuous-integration/drone/push Build is passing
All checks were successful
continuous-integration/drone/push Build is passing
This commit is contained in:
parent
3f3d619694
commit
a1cac6b8a3
1
TODO.md
1
TODO.md
@ -6,6 +6,7 @@
|
|||||||
- [x] Make it inaccessible to anyone but root (`-rw------`)
|
- [x] Make it inaccessible to anyone but root (`-rw------`)
|
||||||
- [x] Add [Drone runner](https://docs.drone.io/runner/docker/installation/linux/)
|
- [x] Add [Drone runner](https://docs.drone.io/runner/docker/installation/linux/)
|
||||||
- [ ] Figure out how to dependably store `.env` files (Ansible vault? Something else?)
|
- [ ] Figure out how to dependably store `.env` files (Ansible vault? Something else?)
|
||||||
|
- [ ] In vault, seperate from other config
|
||||||
- [x] Check out docker swarm and current best practices for Ansible
|
- [x] Check out docker swarm and current best practices for Ansible
|
||||||
- [x] Use Gitea instead of GitLab
|
- [x] Use Gitea instead of GitLab
|
||||||
- [ ] Add drone exec runner for Nix builds with shared `/nix`
|
- [ ] Add drone exec runner for Nix builds with shared `/nix`
|
||||||
|
@ -8,7 +8,7 @@
|
|||||||
name: "{{ item.name }}"
|
name: "{{ item.name }}"
|
||||||
uid: "{{ item.uid }}"
|
uid: "{{ item.uid }}"
|
||||||
create_home: false
|
create_home: false
|
||||||
state: present
|
state: "{{ item.state }}"
|
||||||
loop:
|
loop:
|
||||||
- name: jupyter
|
- name: jupyter
|
||||||
uid: 42000
|
uid: 42000
|
||||||
@ -24,7 +24,7 @@
|
|||||||
state: present
|
state: present
|
||||||
- name: hedgedoc
|
- name: hedgedoc
|
||||||
uid: 10000
|
uid: 10000
|
||||||
state: present
|
state: absent
|
||||||
# All services that are behind Caddy need to be in this network
|
# All services that are behind Caddy need to be in this network
|
||||||
- name: Create Caddy network
|
- name: Create Caddy network
|
||||||
become: true
|
become: true
|
||||||
@ -34,7 +34,7 @@
|
|||||||
- name: Upload docker configuration
|
- name: Upload docker configuration
|
||||||
become: true
|
become: true
|
||||||
ansible.builtin.copy:
|
ansible.builtin.copy:
|
||||||
src: ../../docker
|
src: ../../docker/docker
|
||||||
dest: /etc/pbri
|
dest: /etc/pbri
|
||||||
# Files should inaccessible to non-root users.
|
# Files should inaccessible to non-root users.
|
||||||
mode: u=rw,g=,o=
|
mode: u=rw,g=,o=
|
||||||
|
Loading…
x
Reference in New Issue
Block a user