forked from jakub/ansible
253 lines
8.8 KiB
YAML
253 lines
8.8 KiB
YAML
# nextcloud/update_uptime_kuma.yml
|
|
|
|
- name: Update Uptime Kuma on VM via Proxmox (auto-discover compose path)
|
|
hosts: proxmox
|
|
gather_facts: false
|
|
become: true
|
|
become_user: root
|
|
become_method: sudo
|
|
|
|
vars:
|
|
# ---- VM access via sshpass (same pattern as your Collabora playbook) ----
|
|
vm_ip: "{{ lookup('env', 'VM_IP') }}"
|
|
vm_user: "{{ lookup('env', 'VM_USER') }}"
|
|
vm_pass: "{{ lookup('env', 'VM_PASS') }}"
|
|
use_sudo: false
|
|
|
|
# ---- Inputs / defaults ----
|
|
kuma_url: "https://monitor.martinfencl.eu/"
|
|
kuma_container_name: "uptime-kuma-dev" # running container name to inspect
|
|
|
|
# ---- Docker CLI prefix (consistent with your style) ----
|
|
docker_prefix: "unalias docker 2>/dev/null || true; DOCKER_CLI_HINTS=0; command docker"
|
|
|
|
tasks:
|
|
- name: Ensure sshpass is installed (for password-based SSH) # English comments
|
|
ansible.builtin.apt:
|
|
name: sshpass
|
|
state: present
|
|
update_cache: yes
|
|
|
|
# --- Discover compose metadata from the running container labels ---
|
|
- name: Discover compose labels from the container (project, service, working_dir)
|
|
ansible.builtin.command:
|
|
argv:
|
|
- sshpass
|
|
- -p
|
|
- "{{ vm_pass }}"
|
|
- ssh
|
|
- -o
|
|
- StrictHostKeyChecking=no
|
|
- -o
|
|
- ConnectTimeout=15
|
|
- "{{ vm_user }}@{{ vm_ip }}"
|
|
- bash
|
|
- -lc
|
|
- >
|
|
{{ docker_prefix }} inspect {{ kuma_container_name }}
|
|
--format '{{"{{"}}json .Config.Labels{{"}}"}}'
|
|
register: kuma_labels_raw
|
|
changed_when: false
|
|
|
|
- name: Parse compose labels JSON
|
|
ansible.builtin.set_fact:
|
|
kuma_labels: "{{ kuma_labels_raw.stdout | from_json }}"
|
|
failed_when: false
|
|
|
|
- name: Derive compose parameters (project, service, working_dir, compose_file)
|
|
ansible.builtin.set_fact:
|
|
kuma_project: "{{ kuma_labels['com.docker.compose.project'] | default('kuma') }}"
|
|
kuma_service: "{{ kuma_labels['com.docker.compose.service'] | default('uptime-kuma') }}"
|
|
kuma_workdir: "{{ kuma_labels['com.docker.compose.project.working_dir'] | default('') }}"
|
|
kuma_compose_file: >-
|
|
{{
|
|
(kuma_labels['com.docker.compose.project.working_dir'] | default('') ~ '/docker-compose.yml')
|
|
if (kuma_labels['com.docker.compose.project.working_dir'] | default('')) != '' else omit
|
|
}}
|
|
when: kuma_labels is defined
|
|
failed_when: false
|
|
|
|
- name: Debug | Discovered compose info
|
|
ansible.builtin.debug:
|
|
msg: |
|
|
Discovered:
|
|
project={{ kuma_project | default('n/a') }}
|
|
service={{ kuma_service | default('n/a') }}
|
|
working_dir={{ kuma_workdir | default('n/a') }}
|
|
compose_file={{ kuma_compose_file | default('n/a') }}
|
|
|
|
# --- Verify compose file existence on the VM ---
|
|
- name: Check that compose file exists on VM
|
|
ansible.builtin.command:
|
|
argv:
|
|
- sshpass
|
|
- -p
|
|
- "{{ vm_pass }}"
|
|
- ssh
|
|
- -o
|
|
- StrictHostKeyChecking=no
|
|
- -o
|
|
- ConnectTimeout=15
|
|
- "{{ vm_user }}@{{ vm_ip }}"
|
|
- bash
|
|
- -lc
|
|
- "test -f '{{ kuma_compose_file }}' && echo OK || echo MISSING"
|
|
register: kuma_compose_check
|
|
changed_when: false
|
|
when: kuma_compose_file is defined
|
|
|
|
- name: Fail early if compose file is missing
|
|
ansible.builtin.fail:
|
|
msg: >-
|
|
Compose file not found on VM: {{ kuma_compose_file | default('?') }}.
|
|
Discovered working_dir={{ kuma_workdir | default('?') }}, project={{ kuma_project | default('?') }}, service={{ kuma_service | default('?') }}.
|
|
The container seems to be managed by Portainer; expected path like /data/compose/<stack_id>/<version>/docker-compose.yml.
|
|
when: kuma_compose_file is not defined or (kuma_compose_check.stdout | default('MISSING')) != "OK"
|
|
|
|
# --- Pull latest image first (generic pull) ---
|
|
- name: Pull image louislam/uptime-kuma:latest
|
|
ansible.builtin.command:
|
|
argv:
|
|
- sshpass
|
|
- -p
|
|
- "{{ vm_pass }}"
|
|
- ssh
|
|
- -o
|
|
- StrictHostKeyChecking=no
|
|
- -o
|
|
- ConnectTimeout=15
|
|
- "{{ vm_user }}@{{ vm_ip }}"
|
|
- bash
|
|
- -lc
|
|
- "{{ ('sudo ' if use_sudo else '') + docker_prefix }} pull -q louislam/uptime-kuma:latest >/dev/null"
|
|
register: kuma_pull
|
|
changed_when: false
|
|
|
|
# --- Compose pull/up for the discovered service only ---
|
|
- name: docker compose pull {{ kuma_service }}
|
|
ansible.builtin.command:
|
|
argv:
|
|
- sshpass
|
|
- -p
|
|
- "{{ vm_pass }}"
|
|
- ssh
|
|
- -o
|
|
- StrictHostKeyChecking=no
|
|
- -o
|
|
- ConnectTimeout=15
|
|
- "{{ vm_user }}@{{ vm_ip }}"
|
|
- bash
|
|
- -lc
|
|
- >
|
|
{{ ('sudo ' if use_sudo else '') + docker_prefix }}
|
|
compose -p {{ kuma_project }} -f '{{ kuma_compose_file }}' pull {{ kuma_service }} >/dev/null
|
|
register: kuma_comp_pull
|
|
changed_when: false
|
|
|
|
- name: docker compose up --no-deps --force-recreate {{ kuma_service }}
|
|
ansible.builtin.command:
|
|
argv:
|
|
- sshpass
|
|
- -p
|
|
- "{{ vm_pass }}"
|
|
- ssh
|
|
- -o
|
|
- StrictHostKeyChecking=no
|
|
- -o
|
|
- ConnectTimeout=15
|
|
- "{{ vm_user }}@{{ vm_ip }}"
|
|
- bash
|
|
- -lc
|
|
- >
|
|
{{ ('sudo ' if use_sudo else '') + docker_prefix }}
|
|
compose -p {{ kuma_project }} -f '{{ kuma_compose_file }}'
|
|
up -d --no-deps --force-recreate {{ kuma_service }} >/dev/null
|
|
register: kuma_comp_up
|
|
changed_when: false
|
|
|
|
- name: Show outputs of compose pull/up
|
|
ansible.builtin.debug:
|
|
msg: |
|
|
PULL rc={{ kuma_comp_pull.rc }} stderr="{{ (kuma_comp_pull.stderr | default('')).strip() }}"
|
|
UP rc={{ kuma_comp_up.rc }} stderr="{{ (kuma_comp_up.stderr | default('')).strip() }}"
|
|
|
|
- name: Assert compose pull/up succeeded
|
|
ansible.builtin.assert:
|
|
that:
|
|
- kuma_comp_pull.rc == 0
|
|
- kuma_comp_up.rc == 0
|
|
fail_msg: "docker compose pull/up failed (see previous stderr)."
|
|
success_msg: "Uptime Kuma updated and recreated successfully."
|
|
|
|
# ---- Health check from the controller: wait for 200 on the public URL ----
|
|
- name: Uptime Kuma | Wait for web to return 200 (controller first)
|
|
ansible.builtin.uri:
|
|
url: "{{ kuma_url }}"
|
|
method: GET
|
|
return_content: true
|
|
validate_certs: true
|
|
status_code: 200
|
|
register: kuma_controller
|
|
delegate_to: localhost
|
|
run_once: true
|
|
retries: 15
|
|
delay: 2
|
|
until: kuma_controller.status == 200
|
|
failed_when: false
|
|
changed_when: false
|
|
|
|
# ---- Optional VM-side fetch (double-check from VM) ----
|
|
- name: Uptime Kuma | VM-side fetch HTML (via Python)
|
|
ansible.builtin.command:
|
|
argv:
|
|
- sshpass
|
|
- -p
|
|
- "{{ vm_pass }}"
|
|
- ssh
|
|
- -o
|
|
- StrictHostKeyChecking=no
|
|
- -o
|
|
- ConnectTimeout=15
|
|
- "{{ vm_user }}@{{ vm_ip }}"
|
|
- bash
|
|
- -lc
|
|
- |
|
|
python3 - <<'PY'
|
|
import sys, urllib.request, ssl
|
|
try:
|
|
ctx = ssl.create_default_context()
|
|
with urllib.request.urlopen("{{ kuma_url }}", timeout=15, context=ctx) as r:
|
|
sys.stdout.write(r.read().decode(errors="ignore"))
|
|
except Exception:
|
|
pass
|
|
PY
|
|
register: kuma_vm
|
|
changed_when: false
|
|
failed_when: false
|
|
when: kuma_controller.status | default(0) != 200 or kuma_controller.content is not defined
|
|
|
|
# ---- Pick HTML source (controller wins) ----
|
|
- name: Uptime Kuma | Choose HTML (controller wins, else VM)
|
|
ansible.builtin.set_fact:
|
|
kuma_html: >-
|
|
{{
|
|
(kuma_controller.content
|
|
if (kuma_controller.status|default(0))==200 and (kuma_controller.content is defined)
|
|
else ((kuma_vm.stdout | default('') | trim | length > 0) | ternary(kuma_vm.stdout | trim, omit))
|
|
)
|
|
}}
|
|
failed_when: false
|
|
|
|
- name: Uptime Kuma | Print concise summary
|
|
ansible.builtin.debug:
|
|
msg: >-
|
|
Uptime Kuma reachable at {{ kuma_url }}
|
|
(HTTP {{ kuma_controller.status | default('unknown') }}).
|
|
Title="{{ (kuma_html | default('') | regex_search('(?is)<title[^>]*>(.*?)</title>', '\\1')) | default('n/a') }}"
|
|
when: kuma_html is defined
|
|
|
|
- name: Uptime Kuma | Web unavailable (after retries)
|
|
ansible.builtin.debug:
|
|
msg: "Uptime Kuma web není dostupný ani po pokusech."
|
|
when: kuma_html is not defined
|