feat: gitea works!

playbooks/deploy.yml

@@ -11,7 +11,7 @@
         ansible_ssh_host: "{{ server_ip.value }}"
         ansible_user: root
         ansible_port: 22
-        ansible_private_key_file: "{{ deploy.private_ssh_key_path }}"
+        ansible_private_key_file: "{{ secret.private_ssh_key_path }}"
 
 - name: Switch port to 2222.
   hosts: server_fresh
@@ -42,7 +42,7 @@
         ansible_ssh_host: "{{ server_ip.value }}"
         ansible_user: root
         ansible_port: 2222
-        ansible_private_key_file: "{{ deploy.private_ssh_key_path }}"
+        ansible_private_key_file: "{{ secret.private_ssh_key_path }}"
 
 - name: Install Docker.
   gather_facts: true
@@ -89,3 +89,80 @@
           - containerd.io
           - docker-buildx-plugin
           - docker-compose-plugin
+
+- name: Deploy artifact to instance.
+  hosts: server
+  gather_facts: false
+  vars_files:
+    - ../variables.yml
+    - ../vault.yml
+    - ../dist/terraform_outputs.yml
+  tasks:
+    - name: Copy gitea folder.
+      ansible.builtin.copy:
+        src: ../gitea/
+        dest: /root/gitea/
+        mode: preserve
+
+    - name: Build image.
+      community.docker.docker_image_build:
+        name: "{{ variables.image_name }}"
+        path: /root/gitea
+        nocache: true
+        rebuild: always
+        pull: true
+
+    - name: Create data directory.
+      ansible.builtin.file:
+        path: /root/data
+        state: directory
+        mode: '0777'
+
+    - name: Run image.
+      community.docker.docker_container:
+        name: server
+        image: "{{ variables.image_name }}"
+        state: started
+        recreate: true
+        restart_policy: unless-stopped
+        memory: 425m
+        memory_swap: 900m
+        ports: [80:80, 443:443, "22:22"]
+        env:
+          GITEA__security__INTERNAL_TOKEN: "{{ secret.internal }}"
+          GITEA__server__LFS_JWT_SECRET: "{{ secret.lfs }}"
+          GITEA__oauth2__JWT_SECRET: "{{ secret.jwt }}"
+          GITEA__server__ACME_EMAIL: "acme@maximhutz.me"
+          GITEA__server__SSH_DOMAIN: "{{ server_fqdn.value }}"
+          GITEA__server__DOMAIN: "{{ server_fqdn.value }}"
+          GITEA__server__ROOT_URL: "https://{{ server_fqdn.value }}/"
+
+          GITEA__storage__MINIO_BUCKET: "{{ secret.bucket.name }}"
+          GITEA__storage__MINIO_ENDPOINT: "{{ secret.bucket.endpoint }}"
+          GITEA__storage__MINIO_ACCESS_KEY_ID: "{{ secret.bucket.access_key }}"
+          GITEA__storage__MINIO_SECRET_ACCESS_KEY: "{{ secret.bucket.secret_key }}"
+        labels:
+          docker-volume-backup.stop-during-backup: "true"
+        volumes:
+          - /root/data:/var/lib/gitea
+          - /etc/timezone:/etc/timezone:ro
+          - /etc/localtime:/etc/localtime:ro
+
+    - name: Run backup.
+      community.docker.docker_container:
+        name: backup
+        image: offen/docker-volume-backup:v2
+        state: started
+        recreate: true
+        restart_policy: unless-stopped
+        volumes:
+          - /root/data:/backup/my-app-backup:ro
+          - /var/run/docker.sock:/var/run/docker.sock:ro
+        env:
+          AWS_S3_BUCKET_NAME: "{{ secret.bucket.name }}"
+          AWS_S3_PATH: "{{ secret.backup.key }}"
+          AWS_REGION: "{{ secret.bucket.region }}"
+          AWS_ACCESS_KEY_ID: "{{ secret.bucket.access_key }}"
+          AWS_SECRET_ACCESS_KEY: "{{ secret.bucket.secret_key }}"
+          AWS_ENDPOINT: "{{ secret.bucket.endpoint }}"
+          BACKUP_CRON_EXPRESSION: "0 0 * * *"