From 6a4311689f280e285aa47a2dd758990ca583f3c5 Mon Sep 17 00:00:00 2001
From: Jan Tuomi <jan@jantuomi.fi>
Date: Sat, 6 Jun 2026 23:01:50 +0300
Subject: Add valkey conf to redis jail

---
 roles/jails/09_redis/tasks/main.yml | 26 +++++++-------------------
 1 file changed, 7 insertions(+), 19 deletions(-)

(limited to 'roles/jails/09_redis/tasks')

diff --git a/roles/jails/09_redis/tasks/main.yml b/roles/jails/09_redis/tasks/main.yml
index 9e79df1..02d261c 100644
--- a/roles/jails/09_redis/tasks/main.yml
+++ b/roles/jails/09_redis/tasks/main.yml
@@ -2,25 +2,13 @@
     name: jail
     tasks_from: jail_setup
 
-- name: Configure bind address
-  lineinfile:
-    path: /usr/local/etc/valkey.conf
-    line: "bind * -::*"
-    regexp: "^bind "
-  notify: Restart valkey
-
-- name: Configure protected-mode
-  lineinfile:
-    path: /usr/local/etc/valkey.conf
-    line: "protected-mode yes"
-    regexp: "^protected-mode"
-  notify: Restart valkey
-
-- name: Configure requirepass
-  lineinfile:
-    path: /usr/local/etc/valkey.conf
-    line: "requirepass {{ valkey_password }}"
-    regexp: "^requirepass"
+- name: Deploy valkey.conf
+  template:
+    src: "{{ jail_role_dir }}/templates/valkey.conf.j2"
+    dest: /usr/local/etc/valkey.conf
+    owner: root
+    group: wheel
+    mode: "0640"
   notify: Restart valkey
 
 - import_role:
-- 
cgit v1.3