infra/roles/partdb/tasks/main.yml

---

- name: Install dependencies
  apt: name={{ item }}
  loop:
  - php7.3-fpm
  - php7.3-ldap
  - php7.3-mysql
  - php7.3-opcache
  - php7.3-sqlite3
  - php7.3-xml

- name: Create vhost directory
  file: path=/var/www/partdb state=directory owner=www-data group=www-data

- name: Ensure partdb certificates are available
  command: openssl req -x509 -nodes -newkey rsa:2048 -keyout /etc/nginx/ssl/partdb.binary-kitchen.de.key -out /etc/nginx/ssl/partdb.binary-kitchen.de.crt -days 730 -subj "/CN=partdb.binary-kitchen.de" creates=/etc/nginx/ssl/partdb.binary-kitchen.de.crt
  notify: Restart nginx

- name: Configure certificate manager
  copy: src=certs dest=/etc/acertmgr/partdb.binary-kitchen.de.conf
  notify: Run acertmgr

- name: Configure vhosts
  copy: src=vhost dest=/etc/nginx/sites-available/www
  notify: Restart nginx

- name: Enable vhosts
  file: src=/etc/nginx/sites-available/www dest=/etc/nginx/sites-enabled/www state=link
  notify: Restart nginx

- name: Start php7.3-fpm
  service: name=php7.3-fpm state=started enabled=yes