105 lines
2.8 KiB
YAML
105 lines
2.8 KiB
YAML
---
|
|
- name: Install
|
|
hosts: jumper
|
|
remote_user: ubuntu
|
|
serial: 1
|
|
vars:
|
|
pv_disks:
|
|
- /dev/sda
|
|
vg_name: vg1
|
|
lv_name: pvs
|
|
lv_size: +100%FREE
|
|
fs_type: ext4
|
|
mount_path: /mnt/docker
|
|
extra_docker_daemon_options: |
|
|
"data-root": "/mnt/docker/docker-root",
|
|
"dns": ["10.0.123.123"],
|
|
tasks:
|
|
- import_role: name=dns-client
|
|
|
|
- import_role: name=lvm
|
|
|
|
- name: Ensure docker root exists
|
|
become: true
|
|
file:
|
|
path: /mnt/docker/docker-root
|
|
state: directory
|
|
mode: "0755"
|
|
|
|
- import_role: name=docker
|
|
|
|
- name: Run portainer agent
|
|
become: true
|
|
docker_container:
|
|
name: portainer_agent
|
|
image: portainer/agent:2.16.2
|
|
ports:
|
|
- "9001:9001"
|
|
env:
|
|
AGENT_SECRET: "{{ portainer_agent_secret }}"
|
|
restart_policy: unless-stopped
|
|
mounts:
|
|
- type: bind
|
|
source: /var/run/docker.sock
|
|
target: /var/run/docker.sock
|
|
- type: bind
|
|
source: /mnt/docker/docker-root/volumes
|
|
target: /var/lib/docker/volumes
|
|
|
|
# This is used _only_ to enable stacks for things like rolling updates
|
|
- name: Init swarm
|
|
become: true
|
|
docker_swarm:
|
|
state: present
|
|
advertise_addr: "{{ansible_default_ipv4.address}}"
|
|
default_addr_pool:
|
|
- 172.17.0.0/16
|
|
- 172.18.0.0/16
|
|
- 172.19.0.0/16
|
|
|
|
- name: Create ingress network
|
|
# The ingress network conflicts with my subnet and ends up causing problems,
|
|
# so we have to set a different subnet first
|
|
become: true
|
|
docker_network:
|
|
name: ingress
|
|
driver: overlay
|
|
ingress: true
|
|
scope: swarm
|
|
ipam_config:
|
|
- subnet: 172.31.0.0/16
|
|
gateway: 172.31.0.1
|
|
driver_options:
|
|
# I'm honestly not completely sure what this, but in the default
|
|
# ingress network that's created during swarm initialization, this exists
|
|
# and things don't seem to work without it.
|
|
com.docker.network.driver.overlay.vxlanid_list: 4096
|
|
|
|
- name: Mount extra shares
|
|
tags: [extra-shares]
|
|
hosts: jumper
|
|
vars:
|
|
shares:
|
|
- src: truenas.local:/mnt/emc14t9/lfs/media
|
|
path: /mnt/media
|
|
opts: rw,_netdev,hard,intr,nolock
|
|
fstype: nfs
|
|
state: mounted
|
|
tasks:
|
|
- name: Ensure mount directory exists
|
|
become: true
|
|
file:
|
|
path: "{{ item.path }}"
|
|
state: directory
|
|
mode: '0755'
|
|
loop: "{{ shares }}"
|
|
- name: Mount media share
|
|
become: true
|
|
mount:
|
|
src: "{{ item.src }}"
|
|
path: "{{ item.path }}"
|
|
opts: "{{ item.opts }}"
|
|
state: "{{ item.state | default('mounted') }}"
|
|
fstype: "{{ item.fstype }}"
|
|
loop: "{{ shares }}"
|