diff --git a/warpsrvint/docker_ldap/tasks/main.yml b/warpsrvint/docker_ldap/tasks/main.yml deleted file mode 100644 index 66388402d6fffffcf768a0641e695eea3b4a5b7d..0000000000000000000000000000000000000000 --- a/warpsrvint/docker_ldap/tasks/main.yml +++ /dev/null @@ -1,67 +0,0 @@ ---- -# Einige Secrets sind auf dem Server lokal gespeichert und werden von dort gelesen -# Auslesen der Dateien vom Server, zwischengespeicert wird in der Variable gitlab_secrets -# Anschließend müssen die entsprechenden Einträge aus gitlab_secrets extrahiert werden -# Die Daten, die von Slurp gelesen werden sind Base64 codiert -# Zur Sicherheit werden Whitespace-Zeichen entfert, damit z.B. Zeilenumbrüche nicht übernommen werden - -- name: get secrets from server 1 - slurp: src={{ item }} - with_items: - - /srv/ldap/secret/ldap_admin_pass - - /srv/ldap/secret/ldap_readonly_pass - register: ldap_secrets - -- name: get secrets from server 2 - set_fact: - ldap_admin_pass: "{{ ldap_secrets.results | selectattr('item', 'equalto', '/srv/ldap/secret/ldap_admin_pass') | map(attribute='content') | list | first | b64decode | regex_replace('\\s', '') }}" - ldap_readonly_pass: "{{ ldap_secrets.results | selectattr('item', 'equalto', '/srv/ldap/secret/ldap_readonly_pass') | map(attribute='content') | list | first | b64decode | regex_replace('\\s', '') }}" - -- name: create folder struct for ldap - file: - path: "/srv/ldap" - state: "directory" - -- name: create folder struct for ldap - file: - path: "/srv/ldap/database" - state: "directory" - -- name: create folder struct for ldap - file: - path: "/srv/ldap/config" - state: "directory" - -- name: start ldap docker - docker_container: - name: ldap-service - image: osixia/openldap:1.1.6 - hostname: ldap-service - state: started - restart_policy: always - volumes: - - /srv/ldap/database:/var/lib/ldap - - /srv/ldap/config:/etc/ldap/slapd.d - env: - LDAP_ORGANISATION: Warpzone - LDAP_DOMAIN: warpzone.ms - LDAP_ADMIN_PASSWORD: "{{ ldap_admin_pass }}" - LDAP_READONLY_USER: true - LDAP_READONLY_USER_USERNAME: readonly - LDAP_READONLY_USER_PASSWORD: "{{ ldap_readonly_pass }}" - -- name: start phpldapadmin docker - docker_container: - name: phpldapadmin-app - image: osixia/phpldapadmin:0.6.11 - state: started - restart_policy: always - env: - PHPLDAPADMIN_LDAP_HOSTS: ldap-host - PHPLDAPADMIN_HTTPS: false - PHPLDAPADMIN_TRUST_PROXY_SSL: true - links: - - ldap-service:ldap-host - ports: - - 127.0.0.1:42004:80 -