rbicker / ansible-nextcloud Goto Github PK

TASK [rbicker.nextcloud : ensure rpm keys are imported] ************************
failed: [shared] (item=https://getfedora.org/static/fedora.gpg) => {"ansible_loop_var": "item", "changed": false, "item": "https://getfedora.org/static/fedora.gpg", "msg": "Not a public key: https://getfedora.org/static/fedora.gpg"}
changed: [shared] => (item=https://rpms.remirepo.net/RPM-GPG-KEY-remi2018) => {"ansible_loop_var": "item", "changed": true, "item": "https://rpms.remirepo.net/RPM-GPG-KEY-remi2018"}

diff --git a/playbooks/roles/rbicker.nextcloud/tasks/main.yml b/playbooks/roles/rbicker.nextcloud/tasks/main.yml
index ebbcad0..837e27e 100644
--- a/playbooks/roles/rbicker.nextcloud/tasks/main.yml
+++ b/playbooks/roles/rbicker.nextcloud/tasks/main.yml
@@ -169,7 +169,7 @@
     owner: root
     group: root
     mode: '0600'
-    force: no  # don't overwrite, only create if not exists
+    force: yes  # make sense to overwrite after password changed, otherwise mysql root password would be different than saved in .my.cnf
   when: mysql_root_pw_modify
 
 - name: ensure anonymous mysql user is absent
@@ -191,6 +191,10 @@
     login_user: root
     state: present
 
+- name: check if Nextcloud already configured
+  stat: path={{ nextcloud_web_root }}/config/config.php
+  register: nextcloud_config_details
+
 - name: ensure database user {{ nextcloud_mysql_user }} exists and has all privileges on {{ nextcloud_mysql_db }}
   mysql_user:
     name: '{{ nextcloud_mysql_user }}'
@@ -198,6 +202,8 @@
     login_user: root
     priv: '{{ nextcloud_mysql_db }}.*:ALL,GRANT'
     state: present
+# do not create or modify nextcloud user when it already exists, e.g. changing password of nextcloud user in this task and not in config results in Nextcloud not working
+  when: not nextcloud_config_details.stat.exists
 
 - name: ensure php options are set
   lineinfile:

---
- name: nextcloud_nginx_mysql_php
  hosts: all
  gather_facts: yes

  vars:
    pass_gen_alias: "{{ lookup('password', '/dev/null length=23 chars=ascii_letters,digits') }}"
    #mine_mysql_root_pw: "example" #will be randomly generated if not defined
    #mine_nextcloud_mysql_pw: "example" #will be randomly generated if not defined
    mine_nextcloud_domain: nextcloud.example.com
    mine_nextcloud_ssl_subject: '/C=US/ST=Example/L=Example/CN={{ nextcloud_domain }}'
    mine_nextcloud_web_root: /var/www/html/nextcloud
    mine_nextcloud_version: latest-19
#    mysql_root_pw: "{{ password_generate }}"
#    nextcloud_mysql_pw: "{{ password_generate }}"

roles:
   - role: rbicker.nextcloud
     vars:
       mysql_root_pw: "{{ mine_mysql_root_pw }}"
       nextcloud_mysql_pw: "{{ mine_nextcloud_mysql_pw }}"
       nextcloud_domain: "{{ mine_nextcloud_domain }}"
       nextcloud_ssl_subject: "{{ mine_nextcloud_ssl_subject }}"
       nextcloud_web_root: "{{ mine_nextcloud_web_root }}"
       nextcloud_version: "{{ mine_nextcloud_version }}"

  pre_tasks:
   - debug:
       msg: I execute before roles
 
   - name: (Nextcloud) Set random MySQL password when not defined
     set_fact:
       mine_mysql_root_pw: "{{ pass_gen_alias }}"
     when: mine_mysql_root_pw is undefined

###   - name: Print that password for debug purposes
###     debug:
###       var: mine_mysql_root_pw
      
   - name: (Nextcloud) Set random Nextcloud password when not defined
     set_fact:
       mine_nextcloud_mysql_pw: "{{ pass_gen_alias }}"
     when: mine_nextcloud_mysql_pw is undefined

###   - name: Print that password for debug purposes
###     debug:
###       var: mine_nextcloud_mysql_pw
       
  post_tasks:
   - debug:
       msg: I execute after roles

   - name: permit traffic in default zone for http service
     ansible.posix.firewalld:
       service: http
       permanent: yes
       state: enabled

   - name: permit traffic in default zone for https service
     ansible.posix.firewalld:
       service: https
       permanent: yes
       state: enabled

   - name: reload service firewalld
     systemd:
       name: firewalld
       state: reloaded

   - name: Create and apply httpd-to-redis-socket SELinux policy
     shell: |
       cat > /root/httpd-to-redis-socket.te << 'HERE_ENDS'
       module httpd-to-redis-socket 1.0;
       
       require {
               type httpd_t;
               type redis_var_run_t;
               class sock_file write;
       }
       
       #============= httpd_t ==============
       allow httpd_t redis_var_run_t:sock_file write;
       HERE_ENDS
       
       cd /root
       checkmodule -M -m -o httpd-to-redis-socket.mod httpd-to-redis-socket.te
       semodule_package -o httpd-to-redis-socket.pp -m httpd-to-redis-socket.mod
       rm -f httpd-to-redis-socket.mod
       semodule -i httpd-to-redis-socket.pp  

       exit 0 

   - name: Create /usr/local/bin/nextcloud-cron
     copy:
       dest: /usr/local/bin/nextcloud-cron
       content: |
         #!/bin/bash
         php -f /var/www/html/nextcloud/cron.php
       owner: root
       group: root
       mode: '755'

   - name: Set SELinux context of /usr/local/bin/nextcloud-cron so it will run under httpd_t
     sefcontext:
       target: '/usr/local/bin/nextcloud-cron'
       setype: httpd_exec_t
       state: present
     register: filecontext

   - name: Run restore context to reload SELinux
     shell: restorecon -R -v /usr/local/bin
     when: filecontext.changed

   - name: nextcloud cron in root's crontab
     cron:
       name: "nextcloud cron"
       user: root
       minute: "*/5"
       job: "sudo -u nginx -r system_r -t initrc_t /usr/local/bin/nextcloud-cron"

   - name: delete (because SELinux) not working nextcloud cron under user nginx
     cron:
       name: "nextcloud"
       user: nginx
       state: absent

Syntax Error while loading YAML.
  did not find expected node content

          nextcloud_config_options:
            - { option: overwrite.cli.url, value: "'https://nc-demo.example.com'" }
            ^ here

- hosts: all
  gather_facts: yes
  become: yes
  roles:
    - { role: rbicker.nextcloud,
              nextcloud_domain: nc-demo.hosting.example.com,
              nextcloud_version: latest-20,
              nextcloud_use_https: false,
              nextcloud_web_root:  '/var/www/virtual/nc-demo',
              nextcloud_data_root: '/srv/nextcloud/nc-demo/data',
              php_version: "7.4",
              nextcloud_config_options:
                - { option: overwrite.cli.url, value: "'https://nc-demo.example.com'" }
                - { option: trusted.domains, value: "'webhost.example.com'" }
      }

ed@BigMac:~/etc/ansible-nextcloud$ ansible --version
ansible 2.10.4
  config file = /Users/ed/etc/ansible-nextcloud/ansible.cfg
  configured module search path = ['/Users/ed/.ansible/plugins/modules', '/usr/share/ansible/plugins/modules']
  ansible python module location = /usr/local/Cellar/ansible/2.10.5/libexec/lib/python3.9/site-packages/ansible
  executable location = /usr/local/bin/ansible
  python version = 3.9.1 (default, Jan  8 2021, 17:17:17) [Clang 12.0.0 (clang-1200.0.32.28)]

tasks:                                                                        
    - import_role:                                                              
        name: ansible-nextcloud                                                 
      tags:                                                                     
        - nextcloud                                                             
                                                                                
    - import_role:                                                              
        name: collabora                                                         
      tags:                                                                     
        - collabora

FAILED! => {"msg": "The conditional check 'new_installation.changed' failed. The error was: error while evaluating conditional (new_installation.changed): 'new_installation' is undefined ...

rbicker.nextcloud/handlers/main.yml

 - name: mysql optimization
   lineinfile:
-    path: /etc/my.cnf.d/server.cnf
+    path: /etc/my.cnf.d/mariadb-server.cnf
     regexp: '^{{ item.option }}'
     line: '{{ item.option }}={{ item.value }}'
     insertafter: '\[mysqld\]'

rbicker.nextcloud/tasks/main.yml

 - name: ensure mysql binary logging is disabled
   lineinfile:
-    path: /etc/my.cnf.d/server.cnf
+    path: /etc/my.cnf.d/mariadb-server.cnf
     state: absent
     regexp: "^log-bin$"
   notify:
@@ -255,7 +255,7 @@

 - name: ensure redis options are set
   lineinfile:
-    path: /etc/redis/redis.conf
+    path: /etc/redis.conf
     regexp: '^{{ item.option }}\s'
     line: "{{ item.option }} {{ item.value }}"

TASK [rbicker.nextcloud : ensure MariaDB-server is installed] ******************                                                                                                                             
fatal: [default]: FAILED! => {"changed": false, "failures": ["MariaDB-server All matches were filtered out by modular filtering for argument: MariaDB-server"], "msg": "Failed to install some of the specified packages", "rc": 1, "results": []}                                                                                                                                                                        

TASK [rbicker.nextcloud : ensure epel-release and Remi yum repos are installed] *****************************************************************************************************$
fatal: [nextcloud-01]: FAILED! => {"changed": false, "msg": "Failed to validate GPG signature for epel-release-8-8.el8.noarch"}

Interner Serverfehler

Der Server konnte die Anfrage nicht fertig stellen.

Sollte dies erneut auftreten, sende bitte die nachfolgenden technischen Einzelheiten an Deinen Server-Administrator.

Weitere Details können im Server-Protokoll gefunden werden.
Technische Details

    Entfernte Adresse: <snipped>
    Anfragekennung: <snipped>