88723b5e5f
Self-contained playbook intended to be run locally on the target server, where this repo is already cloned (typically at /var/www/e-auth). No SSH / inventory needed — hosts: localhost with connection: local. What it does: - Installs Docker Engine + compose plugin from the official repo (idempotent, no-op if already present). - Ensures /etc/caddy/site exists and templates the vhost file at /etc/caddy/site/e-auth.conf with the Cloudflare DNS-01 token for caddy-dns/cloudflare, reverse-proxying to 127.0.0.1:9450. - Validates the Caddy config and reloads the service on change. - Runs `docker compose pull` and `docker compose up -d` from the repo root. Assumes Caddy is already installed with the caddy-dns/cloudflare plugin and loads per-site files from /etc/caddy/site/*.conf. Usage (on the server): cd /var/www/e-auth/ansible && ansible-playbook deploy.yml Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
20 lines
433 B
Django/Jinja
20 lines
433 B
Django/Jinja
# Managed by Ansible - ecosplay-auth
|
|
# Reverse proxy for {{ auth_domain }} -> local Keycloak container on :{{ keycloak_local_port }}
|
|
|
|
{{ auth_domain }} {
|
|
tls {
|
|
dns cloudflare {{ cloudflare_token }}
|
|
}
|
|
|
|
encode gzip zstd
|
|
|
|
reverse_proxy 127.0.0.1:{{ keycloak_local_port }}
|
|
|
|
log {
|
|
output file /var/log/caddy/{{ auth_domain }}.log {
|
|
roll_size 10mb
|
|
roll_keep 10
|
|
}
|
|
}
|
|
}
|