alexandre.pires
8724360fb2
- Updated AGENTS.md to include new directories for execution plans and implemented feature reports. - Modified Ansible host variables for dev-02 and gpu-01 to change API endpoints and add new configurations for Scaleway. - Adjusted firewall rules in gpu-01 to allow HTTPS traffic instead of the previous Ollama port. - Added OAuth2 proxy configurations to gpu-01 for enhanced security. - Removed deprecated open-webui module from Terraform app configurations. - Updated Terraform configurations to reflect changes in local variables and removed unused secrets. - Created a new sectool.json file for CloudNS integration with Bitwarden. - Enhanced SELinux configurations for nginx to allow connections to any port and added oauth2-proxy port.
70 lines
1.7 KiB
YAML
70 lines
1.7 KiB
YAML
---
|
|
- name: Download oauth2-proxy
|
|
become: true
|
|
ansible.builtin.get_url:
|
|
url: "https://github.com/oauth2-proxy/oauth2-proxy/releases/download/v{{ nginx_proxy_oauth2_proxy_version }}/oauth2-proxy-v{{ nginx_proxy_oauth2_proxy_version }}.linux-amd64.tar.gz"
|
|
dest: /tmp/oauth2-proxy.tar.gz
|
|
mode: "0644"
|
|
|
|
- name: Extract oauth2-proxy binary
|
|
become: true
|
|
ansible.builtin.unarchive:
|
|
src: /tmp/oauth2-proxy.tar.gz
|
|
dest: /tmp/
|
|
remote_src: true
|
|
|
|
- name: Install oauth2-proxy binary
|
|
become: true
|
|
ansible.builtin.copy:
|
|
src: >-
|
|
/tmp/oauth2-proxy-v{{ nginx_proxy_oauth2_proxy_version }}.linux-amd64/oauth2-proxy
|
|
dest: /usr/local/bin/oauth2-proxy
|
|
mode: "0755"
|
|
owner: root
|
|
group: root
|
|
remote_src: true
|
|
|
|
- name: Create oauth2-proxy config directory
|
|
become: true
|
|
ansible.builtin.file:
|
|
path: /etc/oauth2-proxy
|
|
state: directory
|
|
mode: "0755"
|
|
owner: root
|
|
group: root
|
|
|
|
- name: Deploy oauth2-proxy configuration
|
|
become: true
|
|
ansible.builtin.template:
|
|
src: oauth2-proxy.cfg.j2
|
|
dest: /etc/oauth2-proxy/oauth2-proxy.cfg
|
|
mode: "0640"
|
|
owner: root
|
|
group: nginx
|
|
|
|
- name: Create oauth2-proxy log file
|
|
become: true
|
|
ansible.builtin.file:
|
|
path: "{{ nginx_proxy_oauth2_proxy_log_file }}"
|
|
state: touch
|
|
mode: "0644"
|
|
owner: nginx
|
|
group: nginx
|
|
|
|
- name: Deploy oauth2-proxy systemd service
|
|
become: true
|
|
ansible.builtin.template:
|
|
src: oauth2-proxy.service.j2
|
|
dest: /etc/systemd/system/oauth2-proxy.service
|
|
mode: "0644"
|
|
owner: root
|
|
group: root
|
|
|
|
- name: Enable and start oauth2-proxy
|
|
become: true
|
|
ansible.builtin.systemd:
|
|
name: oauth2-proxy
|
|
state: started
|
|
enabled: true
|
|
daemon_reload: true
|