94 lines
3.2 KiB
YAML
94 lines
3.2 KiB
YAML
- name: Start docker service
|
|
ansible.builtin.service:
|
|
name: docker
|
|
state: started
|
|
enabled: true
|
|
|
|
- name: Setup Docker Swarm
|
|
when: docker_swarm_manager | bool
|
|
block:
|
|
- name: Enable Docker Swarm mode
|
|
community.docker.docker_swarm:
|
|
state: present
|
|
|
|
- name: Create Traefik network
|
|
community.docker.docker_network:
|
|
name: reverse-proxy
|
|
driver: overlay
|
|
attachable: true
|
|
|
|
- name: Deploy Traefik service
|
|
community.docker.docker_compose_v2:
|
|
remove_orphans: true
|
|
project_name: reverse-proxy
|
|
definition:
|
|
networks:
|
|
reverse-proxy:
|
|
external: true
|
|
services:
|
|
traefik:
|
|
container_name: traefix-proxy
|
|
image: 'traefik:latest'
|
|
restart: unless-stopped
|
|
networks:
|
|
- reverse-proxy
|
|
ports:
|
|
# listen on host ports without ingress network
|
|
- target: 80
|
|
published: 80
|
|
protocol: tcp
|
|
mode: host
|
|
- target: 443
|
|
published: 443
|
|
protocol: tcp
|
|
mode: host
|
|
- target: 8080
|
|
published: 8080
|
|
protocol: tcp
|
|
mode: host
|
|
volumes:
|
|
- /var/run/docker.sock:/var/run/docker.sock:ro
|
|
healthcheck:
|
|
test: 'wget -qO- http://localhost:80/ping || exit 1'
|
|
interval: 4s
|
|
timeout: 2s
|
|
retries: 5
|
|
command:
|
|
- '--ping=true'
|
|
- '--ping.entrypoint=http'
|
|
- '--api.dashboard=true'
|
|
- '--api.insecure=true'
|
|
- '--entrypoints.http.address=:80'
|
|
- '--entryPoints.http.forwardedHeaders.trustedIPs=10.0.10.0/24'
|
|
- '--entrypoints.http.http.encodequerysemicolons=true'
|
|
- '--entryPoints.http.http2.maxConcurrentStreams=50'
|
|
# - "--providers.swarm.endpoint=tcp://{{ ansible_default_ipv4.address }}:2375"
|
|
- --providers.swarm.exposedByDefault=false
|
|
- --providers.swarm.network=reverse-proxy
|
|
deploy:
|
|
mode: global
|
|
placement:
|
|
constraints:
|
|
- node.role==manager
|
|
labels:
|
|
- traefik.enable=true
|
|
- traefik.http.routers.traefik.entrypoints=http
|
|
- traefik.http.routers.traefik.service=api@internal
|
|
- traefik.http.services.traefik.loadbalancer.server.port=8080
|
|
|
|
- name: Check if Docker context exists
|
|
local_action: ansible.builtin.command docker context inspect {{ ansible_hostname }}
|
|
register: context_exists
|
|
ignore_errors: true
|
|
|
|
- name: Create Docker context for each Swarm manager machine
|
|
local_action: >
|
|
ansible.builtin.command docker context create {{ ansible_hostname }} --docker "host=ssh://{{ ansible_default_ipv4.address }}"
|
|
when: context_exists.stderr != ''
|
|
|
|
- name: Join Docker Swarm as a worker
|
|
community.docker.docker_swarm:
|
|
state: join
|
|
join_token: "{{ hostvars['manager']['docker_swarm_worker_token'] }}"
|
|
remote_addrs: ["{{ hostvars['manager']['ansible_default_ipv4']['address'] }}"]
|
|
when: not docker_swarm_manager | bool
|