Matthias Johnson
b38cd94fc8
- Seed postfix-accounts.cf before mailserver start to satisfy Dovecot's requirement for at least one account on first boot - Add failed_when: false to mail user/alias list tasks (files don't exist on first run) - Add forgejo_runner_version (was undefined); default to 12 - Create /srv/forgejo/data/gitea/conf before deploying app.ini - Decouple goaccess sync from restic: new enable_goaccess_sync flag with its own goaccess_sync_* variables - Move Docker installation to bootstrap exclusively; rename docker.yml to networks.yml (runs docker_network role only) - Add radicale_password to vault template and setup.sh - Fix goaccess sync tasks gated on enable_goaccess_sync - Add upstream bug comment to authorized_key deprecation warning - Update CLAUDE.md and README.md throughout Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
60 lines
1.6 KiB
YAML
60 lines
1.6 KiB
YAML
---
|
|
- name: Ensure DNS zone exists
|
|
hetzner.hcloud.zone:
|
|
name: "{{ item.zone }}"
|
|
mode: primary
|
|
api_token: "{{ hcloud_token }}"
|
|
state: present
|
|
loop: "{{ dns_zones }}"
|
|
loop_control:
|
|
label: "{{ item.zone }}"
|
|
tags: dns
|
|
|
|
- name: Manage DNS records
|
|
hetzner.hcloud.zone_rrset:
|
|
zone: "{{ item.0.zone }}"
|
|
name: "{{ item.1.name }}"
|
|
type: "{{ item.1.type }}"
|
|
ttl: "{{ item.1.ttl | default(300) }}"
|
|
records: "{{ item.1.records }}"
|
|
api_token: "{{ hcloud_token }}"
|
|
state: present
|
|
loop: "{{ dns_zones | subelements('records') }}"
|
|
loop_control:
|
|
label: "{{ item.0.zone }} {{ item.1.name }} {{ item.1.type }}"
|
|
when: item.1.when | default(true) | bool
|
|
tags: dns
|
|
|
|
- name: Ensure extra mail domain zones exist
|
|
hetzner.hcloud.zone:
|
|
name: "{{ item }}"
|
|
mode: primary
|
|
api_token: "{{ hcloud_token }}"
|
|
state: present
|
|
loop: "{{ mail_domains | difference([domain]) }}"
|
|
when: enable_mail
|
|
tags: dns
|
|
|
|
- name: Configure extra mail domain DNS records
|
|
ansible.builtin.include_tasks: extra_mail_domain.yml
|
|
vars:
|
|
extra_domain: "{{ item }}"
|
|
loop: "{{ mail_domains | difference([domain]) }}"
|
|
when: enable_mail
|
|
tags: dns
|
|
|
|
- name: Manage DKIM records
|
|
hetzner.hcloud.zone_rrset:
|
|
zone: "{{ item.key }}"
|
|
name: mail._domainkey
|
|
type: TXT
|
|
ttl: 300
|
|
records:
|
|
- value: "{{ item.value | hetzner.hcloud.txt_record }}"
|
|
api_token: "{{ hcloud_token }}"
|
|
state: present
|
|
loop: "{{ dkim_keys | default({}) | dict2items }}"
|
|
loop_control:
|
|
label: "{{ item.key }} mail._domainkey TXT"
|
|
when: enable_mail | default(false) and item.value | length > 0
|
|
tags: dns
|