59 lines
1.5 KiB
YAML
59 lines
1.5 KiB
YAML
|
- name: "(Re)Create {{ project_dir }} project directory"
|
||
|
|
file:
|
||
|
|
path: "{{ project_dir }}"
|
||
|
|
state: "{{ item }}"
|
||
|
|
loop:
|
||
|
|
- absent
|
||
|
|
- directory
|
||
|
|
|
||
|
|
- name: Template docker-compose.yaml & turnserver.conf to project directory
|
||
|
|
template:
|
||
|
|
src: "{{ item }}"
|
||
|
|
dest: "{{ project_dir }}/{{ item }}"
|
||
|
|
owner: "{{ host_uid }}"
|
||
|
|
group: "{{ host_uid }}"
|
||
|
|
mode: '640'
|
||
|
|
loop:
|
||
|
|
- docker-compose.yaml
|
||
|
|
- turnserver.conf
|
||
|
|
|
||
|
|
# Separate task because template module cannot chown/chgrp to a non-existing user/group
|
||
|
|
- name: "Change group of turnserver.conf to coturn GID ({{ users['coturn'] + uid_shift }})"
|
||
|
|
file:
|
||
|
|
path: "{{ project_dir }}/turnserver.conf"
|
||
|
|
group: "{{ users['coturn'] + uid_shift }}"
|
||
|
|
become: true
|
||
|
|
|
||
|
|
- name: Set limited permissions on certificate directories
|
||
|
|
file:
|
||
|
|
path: "/etc/{{ item }}"
|
||
|
|
state: directory
|
||
|
|
owner: root
|
||
|
|
group: root
|
||
|
|
mode: '751'
|
||
|
|
become: true
|
||
|
|
loop:
|
||
|
|
- letsencrypt
|
||
|
|
- letsencrypt/live
|
||
|
|
- letsencrypt/archive
|
||
|
|
|
||
|
|
- name: Set limited permissions on certificate directories
|
||
|
|
file:
|
||
|
|
path: "/etc/letsencrypt/{{ item }}/turn.{{ domain }}"
|
||
|
|
state: directory
|
||
|
|
owner: "{{ host_uid }}"
|
||
|
|
group: "{{ users['coturn'] + uid_shift }}"
|
||
|
|
mode: '550'
|
||
|
|
become: true
|
||
|
|
loop:
|
||
|
|
- live
|
||
|
|
- archive
|
||
|
|
|
||
|
|
- name: Set limited permissions on certificate key file
|
||
|
|
file:
|
||
|
|
path: "/etc/letsencrypt/live/turn.{{ domain }}/privkey.pem"
|
||
|
|
owner: root
|
||
|
|
group: "{{ users['coturn'] + uid_shift }}"
|
||
|
|
mode: '640'
|
||
|
|
become: true
|