First commit

ansible/roles/consul/tasks/main.yml

@@ -0,0 +1,78 @@
+- name: Install requirements
+  ansible.builtin.apt:
+    name:
+      - "unzip"
+
+- name: Create Consul directory
+  ansible.builtin.file:
+    path: "/usr/local/consul-{{ consul_version }}"
+    state: "directory"
+    mode: "0755"
+
+- name: Install Consul
+  ansible.builtin.unarchive:
+    src: "https://releases.hashicorp.com/consul/{{ consul_version }}/consul_{{ consul_version }}_linux_amd64.zip"
+    dest: "/usr/local/consul-{{ consul_version }}"
+    remote_src: true
+  notify:
+    - "Restart Consul"
+
+- name: Link Consul
+  ansible.builtin.file:
+    src: "/usr/local/consul-{{ consul_version }}/consul"
+    dest: "/usr/local/bin/consul"
+    state: "link"
+  notify:
+    - "Restart Consul"
+
+- name: Create consul system group
+  ansible.builtin.group:
+    name: "consul"
+    system: true
+
+- name: Create consul system user
+  ansible.builtin.user:
+    name: "consul"
+    group: "consul"
+    groups: ["ssl-cert"]
+    password: "!"
+    system: true
+    home: "/opt/consul"
+
+- name: Create consul config directory
+  ansible.builtin.file:
+    path: "/etc/consul"
+    state: "directory"
+    group: "consul"
+    mode: "0750"
+
+- name: Create consul log dir
+  ansible.builtin.file:
+    path: "/var/log/consul"
+    state: "directory"
+    group: "consul"
+    mode: "0770"
+
+- name: Generate Consul config
+  ansible.builtin.template:
+    src: "templates/config.json"
+    dest: "/etc/consul/config.json"
+    group: "consul"
+    mode: "0640"
+  notify:
+    - "Reload Consul"
+
+- name: Deploy Consul service file
+  ansible.builtin.template:
+    src: "templates/consul.service"
+    dest: "/etc/systemd/system/consul.service"
+    mode: "0644"
+  notify:
+    - "Restart Consul"
+
+- name: Enable and start Consul
+  ansible.builtin.service:
+    name: "consul"
+    state: "started"
+    enabled: true
+    daemon_reload: true