ansible/dev.yml

---
- hosts: dev
  vars:
        firewall:
                - { port: '{{ global.dev.gitea.port.ssh }}', ipv: "v4", proto: "tcp" }
                - { port: '{{ global.dev.gitea.port.ssh }}', ipv: "v6", proto: "tcp" }
        systemd:
                services:
                        - { name: "gitea", enabled: true, state: restarted }
        file:
                - { path: "{{ gitea.path.config }}", owner: "git", group: "git", mode: "770", state: directory }
                - { path: "{{ gitea.path.data }}", owner: "git", group: "git", mode: "770", state: directory }
        gitea:
                user: "{{ global.dev.gitea.user }}"
                domain: "{{ global.dev.gitea.domain }}"
                port:
                        http: "{{ global.dev.gitea.port.http }}"
                        ssh: "{{ global.dev.gitea.port.ssh }}"
                path:
                        data: "/mnt/gitea" # TODO: Replace with device UUIDs
                        config: "/etc/gitea"
        users:
                - { name: 'git', shell: '/bin/bash', lock: true, system: true, comm: 'Git Version Control' }
        vault:
                - "gitea"
                - "postgresql"
  roles:
        - vault
        - users
        - file
        - gitea
        - systemd
        - firewall