From dbfa9c70b0480c209678090bf62f2c72d68f5264 Mon Sep 17 00:00:00 2001
From: Jan Tuomi <jan@jantuomi.fi>
Date: Sat, 11 Oct 2025 17:47:46 +0300
Subject: Split jail.conf to jail.conf.d/

---
 tasks/jail_homepage.yml | 52 +++++++++++++++++++++++++++++++++++++++++++++++++
 1 file changed, 52 insertions(+)
 create mode 100644 tasks/jail_homepage.yml

(limited to 'tasks/jail_homepage.yml')

diff --git a/tasks/jail_homepage.yml b/tasks/jail_homepage.yml
new file mode 100644
index 0000000..161d02c
--- /dev/null
+++ b/tasks/jail_homepage.yml
@@ -0,0 +1,52 @@
+- name: Install packages inside jail
+  loop:
+    - { jail: homepage, package: nginx }
+    - { jail: homepage, package: rsync }
+    - { jail: homepage, package: bash }
+  include_tasks: pkg_jail_install.yml
+
+- name: Create /var/www
+  file:
+    path: /usr/local/jails/containers/homepage/var/www
+    state: directory
+    owner: www
+    group: www
+    mode: "0755"
+
+# It's important to run this after generating certs, because nginx.conf refers to files
+# generated by certbot. Certbot will fail validation if nginx.conf is configured too early.
+- name: Configure nginx.conf
+  template:
+    src: homepage/usr_local_etc_nginx_nginx.conf.j2
+    dest: /usr/local/jails/containers/homepage/usr/local/etc/nginx/nginx.conf
+    owner: root
+    group: wheel
+    mode: "0644"
+  register: nginx_conf
+
+- name: Check if nginx is enabled
+  shell: service -j homepage nginx status
+  changed_when: false
+  failed_when: false
+  register: homepage_nginx_enabled
+
+- name: Enable and start nginx
+  shell: |
+    service -j homepage nginx enable
+    service -j homepage nginx onestart
+  when: homepage_nginx_enabled.rc != 0
+
+- name: Set up crontab
+  template:
+    src: homepage/etc_crontab.j2
+    dest: /usr/local/jails/containers/homepage/etc/crontab
+    owner: root
+    group: wheel
+    mode: "0644"
+  register: jail_homepage_etc_crontab
+
+- name: Restart cron
+  service:
+    name: cron
+    state: restarted
+  when: jail_homepage_etc_crontab.changed
-- 
cgit v1.3