From 75732c1a9aa1fed11794f509d33bdea5171d41c0 Mon Sep 17 00:00:00 2001
From: Jan Tuomi <jan@jantuomi.fi>
Date: Sat, 16 May 2026 19:19:07 +0300
Subject: Set up redis jail, improve role setup

---
 roles/jails/09_redis/tasks/main.yml | 26 ++++++++++++++++++++++++++
 1 file changed, 26 insertions(+)

(limited to 'roles/jails/09_redis/tasks')

diff --git a/roles/jails/09_redis/tasks/main.yml b/roles/jails/09_redis/tasks/main.yml
index 2abdaff..9e79df1 100644
--- a/roles/jails/09_redis/tasks/main.yml
+++ b/roles/jails/09_redis/tasks/main.yml
@@ -1,2 +1,28 @@
 - import_role:
     name: jail
+    tasks_from: jail_setup
+
+- name: Configure bind address
+  lineinfile:
+    path: /usr/local/etc/valkey.conf
+    line: "bind * -::*"
+    regexp: "^bind "
+  notify: Restart valkey
+
+- name: Configure protected-mode
+  lineinfile:
+    path: /usr/local/etc/valkey.conf
+    line: "protected-mode yes"
+    regexp: "^protected-mode"
+  notify: Restart valkey
+
+- name: Configure requirepass
+  lineinfile:
+    path: /usr/local/etc/valkey.conf
+    line: "requirepass {{ valkey_password }}"
+    regexp: "^requirepass"
+  notify: Restart valkey
+
+- import_role:
+    name: jail
+    tasks_from: jail_launch
-- 
cgit v1.3