Skip to content
Snippets Groups Projects
Select Git revision
  • d324d218e003a53941806ae89cf7476d83780955
  • master default protected
  • th/caddy-wip
  • th/caddy
  • th/lego
  • th/acmebot
  • pyzabbix
  • th/keycloak
8 results

main.yml

Blame
  • Code owners
    Assign users and groups as approvers for specific file changes. Learn more.
    main.yml 2.41 KiB
    ---
    
    - name: include debian version specific vars
      include_vars: "{{ debian_version }}.yml"
    
    - name: ensure php-fpm is installed
      apt:
        name: "{{ php_fpm_pkgs }}"
        state: present
      notify:
        - restart php-fpm
    
    - name: ensure php-fpm is configured
      template:
        src: php-fpm.conf.j2
        dest: "/etc/php/{{ php_version }}/fpm/php-fpm.conf"
        owner: root
        group: root
        mode: '0644'
      notify:
        - restart php-fpm
    
    - name: create groups
      group:
        name: "{{ item.name }}"
        system: true
        state: present
      with_items: "{{ fpm_pools|default([]) }}"
    
    - name: create users
      user:
        name: "{{ item.name }}"
        group: "{{ item.name }}"
        groups: "{{ item.groups|default([]) }}"
        system: true
        home: "{{ item.home|default('/var/www/' ~ item.name) }}"
        shell: /usr/bin/nologin
        createhome: false
        state: present
      with_items: "{{ fpm_pools|default([]) }}"
      notify:
        - restart php-fpm
    
    - name: ensure we have all the pools we want
      template:
        src: pool.conf.j2
        dest: "/etc/php/{{ php_version }}/fpm/pool.d/{{ item.name }}.conf"
        owner: root
        group: root
        mode: '0644'
      with_items: "{{ fpm_pools|default([]) }}"
      notify:
        - restart php-fpm
    
    - name: ensure systemd can start php instances
      template:
        src: "{{ item }}.j2"
        dest: "/etc/systemd/system/{{ item }}"
        owner: root
        group: root
        mode: '0644'
      with_items:
        - php-fpm@.socket
        - php-fpm@.service
      notify:
        - reload systemd service files
        - restart php-fpm
    
    - name: disable standard service file
      systemd: