migrate

2026-07-20 09:23:17 -04:00
parent c1315882da
commit 72272e4006
3179 changed files with 562960 additions and 14 deletions
@@ -0,0 +1,52 @@
+---
+- name: Enable Docker TLS
+  hosts: all
+  become: true
+  vars:
+    certs_path: "<< certs_path >>"
+
+  tasks:
+    - name: Check if docker certs are existing
+      ansible.builtin.stat:
+        path: {{ certs_path }}
+      register: certs_dir
+
+    - name: Fail if docker certs are not existing
+      ansible.builtin.fail:
+        msg: "Docker certificates are not existing in /root/docker-certs."
+      when: not certs_dir.stat.exists
+
+    - name: Get machine's primary internal ip address from eth0 interface
+      ansible.builtin.setup:
+      register: ip_address
+
+    - name: Set machine's primary internal ip address
+      ansible.builtin.set_fact:
+        ip_address: {{ ip_address.ansible_facts.ansible_default_ipv4.address }}
+
+    - name: Check if ip_address is a valid ip address
+      ansible.builtin.assert:
+        that:
+          - ip_address is match("^(?:[0-9]{1,3}\\.){3}[0-9]{1,3}$")
+        fail_msg: "ip_address is not a valid ip address."
+        success_msg: "ip_address is a valid ip address."
+
+    - name: Change docker daemon to use certs
+      ansible.builtin.lineinfile:
+        path: /lib/systemd/system/docker.service
+        line: >
+          ExecStart=/usr/bin/dockerd -H fd:// --containerd=/run/containerd/containerd.sock
+          -H tcp://{{ ip_address }}:2376 --tlsverify --tlscacert={{ certs_path }}/ca.pem
+          --tlscert={{ certs_path }}/server-cert.pem --tlskey={{ certs_path }}/server-key.pem
+        regexp: '^ExecStart='
+        state: present
+
+    - name: Reload systemd daemon
+      ansible.builtin.systemd:
+        daemon_reload: true
+
+    - name: Restart docker daemon
+      ansible.builtin.systemd:
+        name: docker
+        state: restarted
+        enabled: true
@@ -0,0 +1,37 @@
+{
+  "slug": "docker-certs-enable",
+  "kind": "ansible",
+  "metadata": {
+    "name": "Enable Docker TLS",
+    "description": "Enables TLS on the Docker daemon using existing certificates. Configures Docker for secure remote API access over an encrypted connection.",
+    "tags": [],
+    "icon": {
+      "provider": "simple-icons",
+      "id": "docker"
+    },
+    "draft": true,
+    "version": {
+      "name": "1.0.0",
+      "source_dep_name": "manual/docker-certs-enable"
+    }
+  },
+  "variables": [
+    {
+      "title": "Certificate Configuration",
+      "name": "certificates",
+      "items": [
+        {
+          "name": "certs_path",
+          "type": "str",
+          "title": "Certs Path",
+          "required": false,
+          "default": "/root/docker-certs",
+          "description": "Path where certificates are stored",
+          "config": {
+            "placeholder": "/root/docker-certs"
+          }
+        }
+      ]
+    }
+  ]
+}