Tobias J. Endres
f01c0fa045
Ahoy! This be a finer design for our fleet of roles. Instead of a central decree, each role now opens its own ports, as a proper captain should. - The Portainer role now opens port 9000 for its treasure map (web UI). - The Network role opens the main cannons (ports 80 & 443 for Nginx) and the secret communication channel (port 51820 for Wireguard). This makes our roles more modular and seaworthy for future voyages. Yarrr!
31 lines
705 B
YAML
31 lines
705 B
YAML
|
|
|
|
- name: Pull Portainer Podman image
|
|
containers.podman.podman_image:
|
|
name: portainer/portainer-ce
|
|
|
|
- name: Create Portainer container
|
|
containers.podman.podman_container:
|
|
name: portainer
|
|
image: portainer/portainer-ce
|
|
state: started
|
|
ports:
|
|
- "9000:9000"
|
|
volumes:
|
|
- "/var/run/podman/podman.sock:/var/run/podman/podman.sock"
|
|
- "portainer_data:/data"
|
|
restart_policy: unless-stopped
|
|
|
|
- name: Ensure Portainer container is running
|
|
containers.podman.podman_container:
|
|
name: portainer
|
|
state: started
|
|
|
|
- name: Allow Portainer UI port
|
|
ansible.posix.firewalld:
|
|
port: 9000/tcp
|
|
permanent: true
|
|
state: enabled
|
|
immediate: true
|
|
become: true
|