diff options
| author | Trygve Laugstøl <trygvis@inamo.no> | 2024-07-24 22:21:02 +0200 |
|---|---|---|
| committer | Trygve Laugstøl <trygvis@inamo.no> | 2024-07-24 22:21:41 +0200 |
| commit | 603f3abadd566b51a5f52cf04150c852dbc2dc11 (patch) | |
| tree | 48b7dc65b9e0e803b2ab3ef0a47b8fbe9ccb769a /ansible/plays | |
| parent | 99bbaa8f3441471f13305ae9abab454cd1410fc1 (diff) | |
| download | infra-603f3abadd566b51a5f52cf04150c852dbc2dc11.tar.gz infra-603f3abadd566b51a5f52cf04150c852dbc2dc11.tar.bz2 infra-603f3abadd566b51a5f52cf04150c852dbc2dc11.tar.xz infra-603f3abadd566b51a5f52cf04150c852dbc2dc11.zip | |
roa-server
Diffstat (limited to 'ansible/plays')
| -rw-r--r-- | ansible/plays/roa-server.yml | 25 | ||||
| -rw-r--r-- | ansible/plays/templates/roa-server/docker-compose.yml | 14 |
2 files changed, 39 insertions, 0 deletions
diff --git a/ansible/plays/roa-server.yml b/ansible/plays/roa-server.yml new file mode 100644 index 0000000..c662640 --- /dev/null +++ b/ansible/plays/roa-server.yml @@ -0,0 +1,25 @@ +- hosts: + - hash + tasks: + - name: mkdir /etc/docker-service/roa-server + become: true + file: + path: /etc/docker-service/roa-server + state: directory + mode: 0700 + - name: Install /etc/docker-service/roa-server/private.pem + become: true + copy: + dest: /etc/docker-service/roa-server/private.pem + content: "{{ roa_server.private }}" + owner: root + group: root + mode: 0444 + + - import_role: + name: docker-service + vars: + service: roa-server + template: templates/roa-server/docker-compose.yml +# systemd_enabled: no +# systemd_state: stopped diff --git a/ansible/plays/templates/roa-server/docker-compose.yml b/ansible/plays/templates/roa-server/docker-compose.yml new file mode 100644 index 0000000..c11933c --- /dev/null +++ b/ansible/plays/templates/roa-server/docker-compose.yml @@ -0,0 +1,14 @@ +version: "3" +services: + stayrtr: + image: rpki/stayrtr:latest # no tagged images are available :( + volumes: + - /etc/docker-service/roa-server/id_ecdsa:/id_ecdsa:ro + ports: + - 8022:8022 + command: + - -bind= + - -ssh.bind=:8022 + - -ssh.key=/id_ecdsa + - -checktime=false + - -cache=https://dn42.burble.com/roa/dn42_roa_46.json |