3
0
forked from jakub/ansible
Files
ansible_fencl/nextcloud/update_collabora.yml

104 lines
4.2 KiB
YAML

- name: Update Collabora CODE on VM via Proxmox
hosts: proxmox
gather_facts: false
become: true
become_user: root
become_method: sudo
vars:
vm_ip: "{{ lookup('env', 'VM_IP') }}"
vm_user: "{{ lookup('env', 'VM_USER') }}"
vm_pass: "{{ lookup('env', 'VM_PASS') }}"
use_sudo: false
collabora_project: "nextcloud-collabora"
collabora_compose_file: "/data/compose/nextcloud/collabora-only.yml"
# English comments: prefix ensures we bypass aliases/functions and use real docker
docker_prefix: "unalias docker 2>/dev/null || true; DOCKER_CLI_HINTS=0; command docker"
collabora_commands:
- "{{ docker_prefix }} pull -q collabora/code:latest >/dev/null"
- "{{ docker_prefix }} compose -p {{ collabora_project }} -f {{ collabora_compose_file }} pull collabora >/dev/null"
- "{{ docker_prefix }} compose -p {{ collabora_project }} -f {{ collabora_compose_file }} up -d --no-deps --force-recreate collabora >/dev/null"
tasks:
- name: Ensure sshpass is installed (for password-based SSH) # English comments
ansible.builtin.apt:
name: sshpass
state: present
update_cache: yes
- name: Run Collabora update commands on VM (via SSH)
ansible.builtin.command:
argv:
- sshpass
- -p
- "{{ vm_pass }}"
- ssh
- -o
- StrictHostKeyChecking=no
- -o
- ConnectTimeout=15
- "{{ vm_user }}@{{ vm_ip }}"
- bash
- -lc
- "{{ ('sudo ' if use_sudo else '') + item }}"
loop: "{{ collabora_commands }}"
register: collab_cmds
changed_when: false
- name: Show outputs for each Collabora command
ansible.builtin.debug:
msg: |
CMD: {{ item.item }}
RC: {{ item.rc }}
STDOUT:
{{ (item.stdout | default('')).strip() }}
STDERR:
{{ (item.stderr | default('')).strip() }}
loop: "{{ collab_cmds.results }}"
- name: Fail play if any Collabora command failed
ansible.builtin.assert:
that: "item.rc == 0"
fail_msg: "Collabora update failed on VM: {{ item.item }} (rc={{ item.rc }})"
success_msg: "All Collabora update commands succeeded."
loop: "{{ collab_cmds.results }}"
# --- Fetch and show Collabora capabilities (public endpoint) ---
- name: Collabora | Fetch capabilities JSON # English comments
ansible.builtin.uri:
url: "https://collabora.martinfencl.eu/hosting/capabilities"
method: GET
return_content: true
status_code: 200
validate_certs: true
register: collab_caps
delegate_to: localhost
run_once: true
- name: Collabora | Show raw capabilities payload (fallback to content if not JSON)
ansible.builtin.debug:
msg: |
RAW_CAPABILITIES:
{{ (collab_caps.json | default(collab_caps.content)) }}
- name: Collabora | Pretty-print selected fields if JSON is available
ansible.builtin.debug:
msg: |
convert-to.available: {{ collab_caps.json['convert-to']['available'] | default('n/a') }}
hasDocumentSigningSupport: {{ collab_caps.json.hasDocumentSigningSupport | default('n/a') }}
hasMobileSupport: {{ collab_caps.json.hasMobileSupport | default('n/a') }}
hasProxyPrefix: {{ collab_caps.json.hasProxyPrefix | default('n/a') }}
hasSettingIframeSupport: {{ collab_caps.json.hasSettingIframeSupport | default('n/a') }}
hasTemplateSaveAs: {{ collab_caps.json.hasTemplateSaveAs | default('n/a') }}
hasTemplateSource: {{ collab_caps.json.hasTemplateSource | default('n/a') }}
hasWASMSupport: {{ collab_caps.json.hasWASMSupport | default('n/a') }}
hasWopiAccessCheck: {{ collab_caps.json.hasWopiAccessCheck | default('n/a') }}
hasZoteroSupport: {{ collab_caps.json.hasZoteroSupport | default('n/a') }}
productName: {{ collab_caps.json.productName | default('n/a') }}
productVersion: {{ collab_caps.json.productVersion | default('n/a') }}
productVersionHash: {{ collab_caps.json.productVersionHash | default('n/a') }}
serverId: {{ collab_caps.json.serverId | default('n/a') }}
when: collab_caps.json is defined