Skip to content
Snippets Groups Projects
Commit a8db2547 authored by Christian Elberfeld's avatar Christian Elberfeld
Browse files

removed old role

parent a3d9b6c7
No related branches found
No related tags found
No related merge requests found
---
# Einige Secrets sind auf dem Server lokal gespeichert und werden von dort gelesen
# Auslesen der Dateien vom Server, zwischengespeicert wird in der Variable gitlab_secrets
# Anschließend müssen die entsprechenden Einträge aus gitlab_secrets extrahiert werden
# Die Daten, die von Slurp gelesen werden sind Base64 codiert
# Zur Sicherheit werden Whitespace-Zeichen entfert, damit z.B. Zeilenumbrüche nicht übernommen werden
- name: get secrets from server 1
slurp: src={{ item }}
with_items:
- /srv/ldap/secret/ldap_admin_pass
- /srv/ldap/secret/ldap_readonly_pass
register: ldap_secrets
- name: get secrets from server 2
set_fact:
ldap_admin_pass: "{{ ldap_secrets.results | selectattr('item', 'equalto', '/srv/ldap/secret/ldap_admin_pass') | map(attribute='content') | list | first | b64decode | regex_replace('\\s', '') }}"
ldap_readonly_pass: "{{ ldap_secrets.results | selectattr('item', 'equalto', '/srv/ldap/secret/ldap_readonly_pass') | map(attribute='content') | list | first | b64decode | regex_replace('\\s', '') }}"
- name: create folder struct for ldap
file:
path: "/srv/ldap"
state: "directory"
- name: create folder struct for ldap
file:
path: "/srv/ldap/database"
state: "directory"
- name: create folder struct for ldap
file:
path: "/srv/ldap/config"
state: "directory"
- name: start ldap docker
docker_container:
name: ldap-service
image: osixia/openldap:1.1.6
hostname: ldap-service
state: started
restart_policy: always
volumes:
- /srv/ldap/database:/var/lib/ldap
- /srv/ldap/config:/etc/ldap/slapd.d
env:
LDAP_ORGANISATION: Warpzone
LDAP_DOMAIN: warpzone.ms
LDAP_ADMIN_PASSWORD: "{{ ldap_admin_pass }}"
LDAP_READONLY_USER: true
LDAP_READONLY_USER_USERNAME: readonly
LDAP_READONLY_USER_PASSWORD: "{{ ldap_readonly_pass }}"
- name: start phpldapadmin docker
docker_container:
name: phpldapadmin-app
image: osixia/phpldapadmin:0.6.11
state: started
restart_policy: always
env:
PHPLDAPADMIN_LDAP_HOSTS: ldap-host
PHPLDAPADMIN_HTTPS: false
PHPLDAPADMIN_TRUST_PROXY_SSL: true
links:
- ldap-service:ldap-host
ports:
- 127.0.0.1:42004:80
0% Loading or .
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment