From 35c8757e601593b867ce6ef307b181a9c3bf2074 Mon Sep 17 00:00:00 2001 From: Ubuntu Date: Fri, 9 Jan 2026 15:28:44 +0000 Subject: [PATCH] refined deplyoment strategy --- infrastructure/ansible/pull_deploy.yml | 3 +++ infrastructure/ansible/roles/common/handlers/main.yml | 3 ++- infrastructure/ansible/roles/common/tasks/main.yml | 8 ++++++++ 3 files changed, 13 insertions(+), 1 deletion(-) diff --git a/infrastructure/ansible/pull_deploy.yml b/infrastructure/ansible/pull_deploy.yml index 2f33a3a..51f0530 100644 --- a/infrastructure/ansible/pull_deploy.yml +++ b/infrastructure/ansible/pull_deploy.yml @@ -17,6 +17,9 @@ # User für Docker Gruppe (wichtig für common Rolle) ansible_user: "ansible" + + # Git Repo URL (muss identisch mit deploy.yml sein, oder dynamisch ermittelt werden) + git_repo_url: "https://git.cloud-infra.prod.openmailserver.de/stabify/infrastructure.git" tasks: # 1. Identifikation diff --git a/infrastructure/ansible/roles/common/handlers/main.yml b/infrastructure/ansible/roles/common/handlers/main.yml index 7f73010..8ddc357 100644 --- a/infrastructure/ansible/roles/common/handlers/main.yml +++ b/infrastructure/ansible/roles/common/handlers/main.yml @@ -1,5 +1,6 @@ ---- - name: Reload Systemd systemd: daemon_reload: true +- name: Update CA Trust + shell: update-ca-certificates diff --git a/infrastructure/ansible/roles/common/tasks/main.yml b/infrastructure/ansible/roles/common/tasks/main.yml index a535172..8ac5c25 100644 --- a/infrastructure/ansible/roles/common/tasks/main.yml +++ b/infrastructure/ansible/roles/common/tasks/main.yml @@ -15,6 +15,14 @@ state: present update_cache: true +- name: "Verteile Stabify Root CA" + copy: + src: "{{ playbook_dir }}/../../vault-ca.crt" # Relativ zum Playbook-Root (wenn Push) + dest: /usr/local/share/ca-certificates/stabify-root-ca.crt + mode: '0644' + notify: Update CA Trust + ignore_errors: true # Fallback, falls File lokal nicht da (z.B. im Pull Mode) + - name: "Installiere Ansible & Git für GitOps (Pull-Mode)" apt: name: