153bd11b05
- Diun monitors Docker images - Automated updates for nginx, manual approval for gitea/postgres - Weekly cert renewal automation via cron - Health checks with automatic rollback on failure - AWS SES email notifications on update failures - Daily S3 backups + pre-update snapshots - Integration tests with Gitea Actions quality gate Deployment + optional PoC complete.
73 lines
2.1 KiB
YAML
73 lines
2.1 KiB
YAML
---
|
|
- name: Setup cron jobs for automated maintenance
|
|
hosts: gitea
|
|
become: true
|
|
|
|
tasks:
|
|
- name: Ensure scripts directory exists
|
|
ansible.builtin.file:
|
|
path: /opt/gitea/scripts
|
|
state: directory
|
|
owner: ubuntu
|
|
group: ubuntu
|
|
mode: "0755"
|
|
|
|
- name: Copy maintenance scripts to server
|
|
ansible.builtin.copy:
|
|
src: "../scripts/{{ item }}"
|
|
dest: "/opt/gitea/scripts/{{ item }}"
|
|
owner: ubuntu
|
|
group: ubuntu
|
|
mode: "0755"
|
|
loop:
|
|
- backup.sh
|
|
- health-check.sh
|
|
- auto-update.sh
|
|
- manual-update.sh
|
|
|
|
- name: Setup weekly automatic update cron job
|
|
ansible.builtin.cron:
|
|
name: "Gitea automatic container updates"
|
|
minute: "15"
|
|
hour: "3"
|
|
weekday: "0"
|
|
user: ubuntu
|
|
job: "cd /opt/gitea && /opt/gitea/scripts/auto-update.sh nginx >> /var/log/gitea-cron.log 2>&1"
|
|
state: present
|
|
|
|
- name: Setup weekly certificate renewal cron job
|
|
ansible.builtin.cron:
|
|
name: "Certbot certificate renewal"
|
|
minute: "30"
|
|
hour: "3"
|
|
weekday: "0"
|
|
user: ubuntu
|
|
job: "cd /opt/gitea && docker compose run --rm certbot renew && docker compose restart nginx >> /var/log/gitea-certbot-renewal.log 2>&1"
|
|
state: present
|
|
|
|
- name: Setup daily backup cron job
|
|
ansible.builtin.cron:
|
|
name: "Gitea daily backup"
|
|
minute: "0"
|
|
hour: "2"
|
|
user: ubuntu
|
|
job: "cd /opt/gitea && /opt/gitea/scripts/backup.sh >> /var/log/gitea-backup-cron.log 2>&1"
|
|
state: present
|
|
|
|
- name: Ensure log files exist and are writable
|
|
ansible.builtin.file:
|
|
path: "{{ item }}"
|
|
state: touch
|
|
owner: ubuntu
|
|
group: ubuntu
|
|
mode: "0644"
|
|
modification_time: preserve
|
|
access_time: preserve
|
|
loop:
|
|
- /var/log/gitea-cron.log
|
|
- /var/log/gitea-backup-cron.log
|
|
- /var/log/gitea-auto-update.log
|
|
- /var/log/gitea-manual-update.log
|
|
- /var/log/gitea-backup.log
|
|
- /var/log/gitea-certbot-renewal.log
|