Stack BunkerWeb (scheduler, UI, MariaDB, Redis), sites de test (nginx, Juice Shop, go-httpbin), filtrage DOCKER-USER, script de tests, README et schéma d'architecture. Co-Authored-By: Claude Opus 5.5 (1M context) <noreply@anthropic.com>
37 lines
1.2 KiB
YAML
37 lines
1.2 KiB
YAML
---
|
|
# Génère les fichiers compose dans build/<mode>/ sans rien déployer,
|
|
# pour les relire ou les utiliser à la main : ansible-playbook playbooks/render.yml
|
|
- name: Rendu local des fichiers compose
|
|
hosts: bunkerweb:apps
|
|
connection: local
|
|
gather_facts: false
|
|
vars:
|
|
ansible_become: false
|
|
render_dir: "{{ playbook_dir }}/../build/{{ poc_mode }}"
|
|
ansible_default_ipv4: { interface: ens18 }
|
|
tasks:
|
|
- name: Répertoires de sortie
|
|
ansible.builtin.file:
|
|
path: "{{ render_dir }}/{{ item }}"
|
|
state: directory
|
|
mode: "0755"
|
|
loop: [bunkerweb, apps]
|
|
run_once: true
|
|
|
|
- name: Compose BunkerWeb
|
|
ansible.builtin.template:
|
|
src: ../roles/bunkerweb/templates/compose.yml.j2
|
|
dest: "{{ render_dir }}/bunkerweb/compose.yml"
|
|
mode: "0600"
|
|
when: inventory_hostname in groups['bunkerweb']
|
|
|
|
- name: Compose applis et filtrage
|
|
ansible.builtin.template:
|
|
src: "../roles/apps/templates/{{ item.src }}"
|
|
dest: "{{ render_dir }}/apps/{{ item.dest }}"
|
|
mode: "0644"
|
|
loop:
|
|
- { src: compose.yml.j2, dest: compose.yml }
|
|
- { src: bwpoc-firewall.sh.j2, dest: bwpoc-firewall.sh }
|
|
when: inventory_hostname in groups['apps']
|