33 lines
952 B
YAML
33 lines
952 B
YAML
|
|
||
|
|
---
|
||
|
|
- name: Ensure LDAP config is configured
|
||
|
|
ansible.builtin.command: |
|
||
|
|
forgejo admin auth add-ldap \
|
||
|
|
--config "/etc/gitea/gitea.ini" \
|
||
|
|
--name "lldap" \
|
||
|
|
--security-protocol "unencrypted" \
|
||
|
|
--host "ldap.mgrote.net" \
|
||
|
|
--port "3890" \
|
||
|
|
--bind-dn "uid=ladmin,ou=people,dc=mgrote,dc=net" \
|
||
|
|
--bind-password GEHEIM \
|
||
|
|
--user-search-base "ou=people,dc=mgrote,dc=net" \
|
||
|
|
--user-filter "(&(memberof=cn=gitea,ou=groups,dc=mgrote,dc=net)(|(uid=%[1]s)(mail=%[1]s)))" \
|
||
|
|
--username-attribute "uid" \
|
||
|
|
--email-attribute "mail" \
|
||
|
|
--firstname-attribute "givenName" \
|
||
|
|
--surname-attribute "sn" \
|
||
|
|
--avatar-attribute "jpegPhoto" \
|
||
|
|
--synchronize-users
|
||
|
|
register: configured
|
||
|
|
ignore_errors: true
|
||
|
|
|
||
|
|
- name: debug
|
||
|
|
ansible.builtin.debug:
|
||
|
|
msg: "{{ register }}"
|
||
|
|
|
||
|
|
- name: Modify LDAP config
|
||
|
|
ansible.builtin.command: cat /etc/motd
|
||
|
|
when: not configured.changed or configured
|
||
|
|
|
||
|
|
...
|