homeserver/.woodpecker/ansible-playbook.yml

---
depends_on:
  - ansible-lint

steps:
  ansible-playbook:
    image: quay.io/ansible/creator-ee:v24.2.0
    commands:
      - echo $${VAULTPASS} > ./vault-pass.yml # nach des Secret in Großschreibung
      - ansible-galaxy install -r requirements.yaml
      - echo $${SSHKEY}
      - echo $${SSHKEY} | base64 -d > ./id_ed25519
      - echo $${SSHKEY} | base64 -d
      - chmod 0400 ./id_ed25519
      - ansible-playbook -vv playbooks/2_all.yml playbooks/3_service/* --limit production
    # https://woodpecker-ci.org/docs/usage/secrets#use-secrets-in-commands
    secrets: [vaultpass, sshkey]
    when:
      - event: [push, pull_request_closed]
        branch: master
...