2022-01-01 19:24:52 +01:00
|
|
|
---
|
|
|
|
- name: "Install Docker via apt"
|
2023-03-05 19:00:38 +01:00
|
|
|
ansible.builtin.apt:
|
2022-01-01 19:24:52 +01:00
|
|
|
update_cache: yes
|
|
|
|
state: present
|
|
|
|
name:
|
|
|
|
- docker.io
|
|
|
|
- docker-compose
|
|
|
|
|
|
|
|
- name: Disable userland proxy
|
2023-03-05 19:00:38 +01:00
|
|
|
ansible.builtin.copy:
|
2022-01-01 19:24:52 +01:00
|
|
|
src: daemon.json
|
|
|
|
dest: /etc/docker/daemon.json
|
|
|
|
mode: 644
|
|
|
|
owner: root
|
2022-04-16 21:17:11 +02:00
|
|
|
group: backup
|
2022-01-01 19:24:52 +01:00
|
|
|
|
|
|
|
- name: Enable and restart Docker daemon
|
2023-03-05 19:00:38 +01:00
|
|
|
ansible.builtin.service:
|
2022-01-01 19:24:52 +01:00
|
|
|
name: docker
|
|
|
|
state: restarted
|
|
|
|
enabled: yes
|
2022-01-10 04:49:15 +01:00
|
|
|
|
2022-02-05 21:00:03 +01:00
|
|
|
- name: "Add service user to docker group"
|
|
|
|
ansible.builtin.user:
|
2023-07-25 15:00:05 +02:00
|
|
|
name: service-user@intra.tormakris.dev
|
2022-02-05 21:00:03 +01:00
|
|
|
comment: Service user
|
|
|
|
groups: docker
|
|
|
|
append: yes
|
2022-05-29 15:15:02 +02:00
|
|
|
|
|
|
|
- name: Allow docker exporter via ufw
|
|
|
|
community.general.ufw:
|
|
|
|
rule: allow
|
2022-05-29 22:51:55 +02:00
|
|
|
port: "4194"
|
2022-05-29 15:15:02 +02:00
|
|
|
proto: tcp
|
|
|
|
src: 192.168.69.0/24
|
2022-04-16 19:55:29 +02:00
|
|
|
...
|