From c2bc53c4db117e6a80fa9cfaa7fdd15893edb6eb Mon Sep 17 00:00:00 2001 From: Michael Grote Date: Tue, 9 Jul 2024 17:35:56 +0200 Subject: [PATCH] ci: deploy config on merge or push (#127) Reviewed-on: https://git.mgrote.net/mg/homeserver/pulls/127 Co-authored-by: Michael Grote Co-committed-by: Michael Grote --- .ansible-lint | 1 + .woodpecker/ansible-lint.yml | 2 +- .woodpecker/ansible-playbook.yml | 18 ++++++++++++++++++ .woodpecker/gitleaks.yml | 2 +- docker-compose/nextcloud/mail_settings.png | Bin 7360 -> 0 bytes 5 files changed, 21 insertions(+), 2 deletions(-) create mode 100644 .woodpecker/ansible-playbook.yml delete mode 100644 docker-compose/nextcloud/mail_settings.png diff --git a/.ansible-lint b/.ansible-lint index 441aa214..5cb45ab6 100644 --- a/.ansible-lint +++ b/.ansible-lint @@ -23,3 +23,4 @@ exclude_paths: - roles/ansible-ufw - roles/ansible_role_gitea - roles/ansible-role-postgresql + - .woodpecker/ diff --git a/.woodpecker/ansible-lint.yml b/.woodpecker/ansible-lint.yml index 3c701c4a..1b2bc14a 100644 --- a/.woodpecker/ansible-lint.yml +++ b/.woodpecker/ansible-lint.yml @@ -13,6 +13,6 @@ steps: # https://woodpecker-ci.org/docs/usage/secrets#use-secrets-in-commands secrets: [vaultpass] when: - - event: [push, pull_request, cron] + - event: [push, pull_request, cron, pull_request_closed, tag, release, manual] evaluate: 'CI_COMMIT_AUTHOR_EMAIL != "renovate@mgrote.net"' ... diff --git a/.woodpecker/ansible-playbook.yml b/.woodpecker/ansible-playbook.yml new file mode 100644 index 00000000..c2e4506c --- /dev/null +++ b/.woodpecker/ansible-playbook.yml @@ -0,0 +1,18 @@ +--- +depends_on: + - ansible-lint + +steps: + ansible-playbook: + image: quay.io/ansible/creator-ee:v24.2.0 + commands: + - ansible-lint --version + - echo $${VAULTPASS} > ./vault-pass.yml # nach des Secret in Großschreibung + - ansible-galaxy install -r requirements.yaml + - echo RUUUUUN! #ansible-playbook playbooks/2_all.yml playbooks/3_service/* --limit production + # https://woodpecker-ci.org/docs/usage/secrets#use-secrets-in-commands + secrets: [vaultpass] + when: + - event: [push, pull_request_closed] + branch: master +... diff --git a/.woodpecker/gitleaks.yml b/.woodpecker/gitleaks.yml index fcc9d083..afb2b029 100644 --- a/.woodpecker/gitleaks.yml +++ b/.woodpecker/gitleaks.yml @@ -5,6 +5,6 @@ steps: commands: - gitleaks detect --no-git --verbose --source $CI_WORKSPACE when: - - event: [push, pull_request, cron] + - event: [push, pull_request, cron, pull_request_closed, tag, release, manual] evaluate: 'CI_COMMIT_AUTHOR_EMAIL != "renovate@mgrote.net"' ... diff --git a/docker-compose/nextcloud/mail_settings.png b/docker-compose/nextcloud/mail_settings.png deleted file mode 100644 index e1138de7eb0bf585ce40694279cceb07108327f2..0000000000000000000000000000000000000000 GIT binary patch literal 0 HcmV?d00001 literal 7360 zcmbtZXH-+$wx+0nXaMO*Q9zmkQl$4P7@E?NUJ`l&rl!%;TX6jDP^tdHx~n zaWAw3Zr<=#HTHhu?%?ff?PX7(?qzT927|hLTNsc6Lzu-iR221}TWn^2^<0t|sh>!$ z`!w@b=ttY{gNVr^)|JxF1A3q}9ttrf5RVdT>GdP|GWyK8>#-R&v=Ntbagsc*RM_KG zh}@q%V8XDSiF7lFu%mo!BN?f&%|hLgVFz;zw%uKLw@4vd8@PCPicnSSP1}JKV|0{| z1Gsbx=+5;YyUS-aG&HQPt_GeRq0b=EuQDNLMM_1XLU~qj`5U6&s^=-jI{4hxI`A(U z1O)}-lMu_h*=NVAZD%L$jQ5W^kTqxeipx0y_U$PNws85kl)j1iDFeg0xyN|@-a5x)bxPq!aQ=qQxmGj&9fjReI@DB~oo%HeD8FbjA`L*Q}ucpLS3fE0or?5c~dY#5_)R~BB42(>H< zrxI4SZbgOsq-g{@5CDU17bGqVBrp;Hri~@EgAjICa_He_J3o8m0~MQ%w|-(UjwQN? zQd4M|2l!WHBpVysxP9A1eNsLfwT8_(MCV7OJPBC$EOi)ns1?R z(z%Mw4;wyn@k!Sx%|YKt84Z^|Eo2JMcwN_#>vMbS8lvbXLiNQY2jfoaTxshls!NY7 z>}+pHJ_2*~ueDW0Uw-@!^)Pa*Jl4=*II(=^!6gA`lD3@>v6fMK<%n;YfbDhzIsX## zEEjV)a}0G1WmNBNCc-(?huK?!B=`9q$|NFvW(~P)KYtK}lN51Va?=`u*Zr|*zRY$W zEt<4)F~w6uG(BBfhJj~|M_0l~w0dmZ72&eny9cscuN<42z}@@GzIYHRol@#@sm;Pk zW<|AfiSviY4KfjxBRH|Nd&9lTRl3q+UNIh&Pbsq42<<=JtXM$dv>HEwyS+Ph@X<^T z2a3L&d9P%rDcutA+BZpxM1H)IRR`TaEo)V-llq-fSE>8p?#9=Hj;b#ragjIP2}C*R zeJ;CmJjglmzAwcMvv|Vd*H44x=FzL-B1<3jwR(t*uhg7S$#?U6f%0wF8qT@V6%qn< zCM`Cp)RfRnw4}j~aU>=mz&Q+)`cmXDJA0{BRUR2c@B6O30)pcn^QU%uVPY#d`X+e~ zuSe{#ZLqkJ!_&lrC zsldCPBl=b|~j*+1|3;4)Li#>|V;Y~hxnL}sjCvpRY>)hVrUb}Sml1PLPg|j8~ zR5uClW4>Oet9Nh5;acey$@U7GV)pLoNxK6l(8?K_Jz1IOei89WE#G~>u?j#Ai+RD* zqX3q?p~aJ{?#O6hIkQf1bjo|M#ISwTlkx?&wHA7?;R5*#>vCCPdnhER?1)9-;0ILhNif zErl32)XG^GYP}8&PfF&Ha^Mkeh}QN;Arx z1Un!dUo$*Dn6Ny9{`nar-@na%@mLu;XytehQpseiqQOG_Fum9sQ5@`;yLMTbl1o^2 zqsr~UW&g(IuNCF7LO;ZbF_OvHO06cSFjY8 zRBeYb`HtJBlKk=X?N`2qcd9TOWA@b$uet)v_xPE<4<@f$m$*Gc-VK+*lg2*h$;298 zkPA6R+7;tdU!$21&DC5G?0|VSr94Q@{cMxup^u@85`e;zMNGc?GMdr7orc^d$-muu zHS}sE(;(6n2(iB{k~z$E!Q)tot`-+;fuGM<-dhAicN}@T}LT zL}31`_l1avkW<;qUd0MVXpi=4*uPFuWX@KtC&;{$J=+lN*_p!OY|}Uln)}KiL^#CI zk02DXUCYITOw%fwO2q8uGRAzT#}i4DP6$^Sh&onG+MyC)xuVGM)J#SHo2TPEU9XpV zjVlAA{X zAPKN3f=x6e*H9{=M=<<={!*AI6wD{6b{K#^t#7#YEwOL-VPt-iWOB+b^sms-N3&ge z5qg@8*05||3dejqWIdjpNpP&C8jaYt+FOUZ^lMjypOp&Z= zWqT#}Vdri@_S*6s8!`n*PuN~rEG(Ryw4{L9bg7cM1-H%tI8q!~r%b(sqxJ zU2^5GKFd03s7~Lh{BM%Kmole^y|z<(s~qN7+e0ULa%UjjL#9@|kk^gqnG2Zse3#V} z`x3DJHc(!Xdt>{E>?v0Jk5gL&kO*G$T#$7AW*7a|w2)`U!hhnkGOIpz9_UMeW>|MQ z#1Z4VSK8Pn>wYCyY&YkWorA6QiP!}9i<&&O{6MyHpCK1BEa(Dq*9888T*y{n8LaFG zQeuibPxAf-ULOE>-M`iS$}V%7yMSNujZ?DlbNF35b)PZEo=z2`;5GmVgQyduF-cne zwHlOr&?^E7fQc(|V2&z{R53Ce*1>lB>ej8n_E1MoG2T%w#eqD=MlgWpjDPM&b#d8G zbH4KvC4P^o!k_-^i3#Mgu(U+956j5P#+hM`ksaT;_We?x+p&J}{VC(|EHP^|d_x*_P{@M|4D_`XGL5oc}xX|y;TKrL;@B5}(p|HWY z#!&Shbg~=5TONgD!XBMO7H`3t_jh)Jy7ub!1BDnrl9Xadc;bvc@}3#S@>oq1ytX;@?Oj7`)E^i3ukepwNxFQ7Q#~dP8Za?)ta`dxTn$ ziOfS8rY_iWQ&&$1rCOBIvv(#6;$At5My~HdjNfDYP>ha6KDmO{-W$Gu|nq~!)?5*8GIl0&E#5)*j z73prhbg9s!G)sF_Svfv=`)aLj&+msSMndBthNxLDA{ceapUj$K@T$$kSt}pM#4Foe zF{>DAvf9oBOpch<>TID_UW+#E)F;zB>J|*9+DUrJy<`!ncoUzLM$R||kePjO`ZKP8 zYGUQXY9Y?mYcb5^247cEnKjDuoe3k!VP06qJVF_VjR5BQoa@yJb&f8MiM&Q0)+Kw6 zLH!BO#!6&wOo>E4iRD<8`1hkMRt`bN3aB7=-YGxP8VU^y+w{2s{`#bsJNsc!jN7*k z%Gx4BC`|)2;$rs>3wRA$1?-48b;MZ-8Nv|-O->M-5^k1C=xQEemCrEgE^Ag|J$Oui zh&5`~0X?nm_WB;>9ZJ8FykLY`rVhf3g(GKr@-BO{u|MdLY3B%Hkc#{U#YgK*c78Iy zbMEfgwKxa_e+K2Z8MiiVG!m|lmCy4-Z&wJ^Os7t+Ymk(s-^>Ys);{^mkqniNCWm$i z>la~%>09I~WGeGc>?OgbdTMbEQrXEUYIcW9`ppNWfH&Cj>BXt2Z0#}8qqo!ZKkRzc zEaE3{-$-tgPvr^|xpHNO6Zz@*UVXAbsN=4Ms`78}HT%$jsg;%8-u@b&Sk+Cw(v8i; zFQMG|{M17wp(A@l=B`94slu+Ym*3TUOdEV%F3XbPUk|?Lq^oC`eP-&Lf zu}w2Qo|K5VFaGhC6ZzXEvVN@|^8pj#642;uORyOAJs4#j(h?HB;C* zV8&j4{%M6RWkjf9cTJe(-9M4@ahyCwkj(?%?RUaH!RL%8K66fgTi73MLy-EeKv>gx zCD8^tJ(_lS1Tdh4&U-}uzE+?vi<3&e=9%Hse*v^S0et4y#Amr-@;O6vWiv{)#X@88pB^0!SLyq;fqwN5ii*N9@-%`wHjJvh0) zIBh9Fubm#)zsNJ`_uDeNvx7t6i}M_r^w{USrCaJ9;&1T*sC|OE=d%s#E7z^688_v6Q3vVXTb_fu9= ziX*O@R3SOKhc(oJXukoT?f9(Jx1;`S=!LueiPM>SYo9SX=C=N;W+U(lv@j&xtA_OV zQ`Av5G6MvZRokxBZfSuK7x&pcY1<<~tkIvSMlL`_A%II@#c^`O{sIs9PD&(IP268f z!PJ0V%WL=&apqvwvo^YJAlSsshrJHC4Zk2v@%PQ@f=vKnR{T)0Z&|<$Xq*#lYXnXQ zv43qmSFJ>@OG3}Y{katEF<_{3JQ&bSs_VhdCo#)Ur_$2TJ6E81jm-+`PJ6t{T?Plw zi$x6xvhQT+;#mH7WG@d2uL$Fj4kjJswq5wrE97&iISL-Ofw(|2@qbYP4E z*IYZYj2_X3iNzHB9(1{}bZ&s}Y+}O5oVquZe`djR)x)5E<%>(f7P=LV=&6Fy{$a;w zE##JNP1MwbOOE#lm3wR-4dX(yTC6TQ=4}DW4D*xLtxs02sVF?j#wu2A2A>IUq}PKcAG1f?mkUm>d9Z4O zIBPA2QJAQ&t)#z_TkjZ6@qQB9&$F_E41)D~((+jrhvYVKhV1tJMR#>x!U~hIkC;p} zUb{ftma=E~!6wf~Vlhp({DxDSzfhc$XeG+BG8Ja_M)v(nGdBb(Bbxuf+++MFwAlQ1 zK4}%*ZRP-T=>{cVwTEc4+%N;Wx3>gqGjwWIoyiQ%%O>d*2V%{GA@CuclLoxSv0U68 z8fIu>)f=^vfMojRyRM8nJ;lObO#`i9lMN$|y0n@QXSZHdM%?BB3ujt@xkO%)+GsLe z=n1}wv497pG9ae^aHxZFDa3Rrl2uZ=mab~uDa7#V2d#DK-%yBumPJT0^uT;GoY~H8 z7`mGB$<`p%s!Tqey2s^4X72F+S}*TS4Ay`a7W!Dk04TR zN`%+}PLkwjNb^NHmBs%$&Ust2zXL3qHa$hFR&ANw%G5;kixv)Gs&rg+J7clIC1vT< z!*p+pLn<2%e^AQp(ocP;H}k*~n$Y|+#O|%~Ayh`1I$X|n<g+t@fj4BhLxs|EixF&HopBT-DY`-ONH} z(45Op{(cvFl)L+%KZ`W>Er*x^#`EfG{@};Ii>Z~j6EmlX7ek||B7f7zoalu(P`4@R>gb5x;|zo31HEi0Xo%ao)?;W!p%?BG!67q3iR zcE74-+t00I2Exv(tcG8Qhf_*{=VRKMe)~K|k;rCBUjDD>;~z3SuJg}C+v&ks`IS}S zK?d9MPCzp&eCBBWl@DSY85DJJGQ*u;bAzk(TpoV5CK#NIWO1S8o-{H;-s%zj?9U$sUWsMVa7QZ9JC8;T`JRNdq?RoXROPn%uadOm-NYb|;H%#2krsa7 zw#I&!!mas3pae}HoO+BtI3*nyFFtG$R+H=(eG^@$|F%N7o94$Fg48;D-@S7;36m}I zGG19@EHR$c#DrEIWV67_CpPBG|B-~ZK*x(nXj*Ps3Hf^SOTf}C#1gU6$FDR2Hn|%G z$Kyzi`L=MO^vcv$tW#0hUYXdENM?mf77>t$zh+g=ID%rQ3uRX=Lk8(}Ccv&-d>WB) ztkgfF%^68{?@cF|)VbtuN$N1Y;Gs$-i0W;6QQMT^Hvkp6Q!sRB*<=gWk7wYJ~l3Y!5gm%OdRh#4rfLY+iKCJA&qb}b@m1b0 zb&l{7lD!w^q!E6r<5>tkSd@-4H=(XH1r?uR4ClhBLFCk%>-+HCONhcJNY9wp5maNy z3E~yE%di@=H)(qn9gA%Af}tIZLo#}<9sLXa677iwzGkx(TM0Y%`XEl~nGmY6a#mM? z)pa3`v5Y|4XKp6KoM!l3*1<46cw;fLWUwIuL0>lm@$Dbb$7)K)yRw+cp6 z%)X^)O)8-Gga&KH3B7mhE(NUh^P|JpUoLLLcDW~JSDBM5gf4sW9Euc|6YUygRZ?<0 zDAo(w8F;p}COk%pwHIb6G6u)TQSIjOFGY3^^<{V23jA5E3>cJ7Q0|letxI^wr(^t% zy5`mlef8Dqm|hcuVY{*QewAL3scLt|5?2WWOnxRn&erY6OSt%v)$#-GZ$PA?a5YwN z@rz49NQQjHy8+qP|KsJ`KXc4~fW-N$y|}ZJtutb~R>t6TP7^8M1tWoms