feat: deployable playbook

roles/traefik/tasks/main.yml

@@ -0,0 +1,101 @@
+---
+- name: Create Traefik installation directory
+  file:
+    path: "{{ traefik_install_dir }}"
+    state: directory
+    owner: root
+    group: root
+    mode: '0755'
+  tags:
+    - traefik-deploy
+    - directories
+
+- name: Create Traefik data directory
+  file:
+    path: "{{ traefik_data_dir }}"
+    state: directory
+    owner: root
+    group: root
+    mode: '0755'
+  tags:
+    - traefik-deploy
+    - directories
+
+- name: Create Traefik config directory
+  file:
+    path: "{{ traefik_config_dir }}"
+    state: directory
+    owner: root
+    group: root
+    mode: '0755'
+  tags:
+    - traefik-deploy
+    - directories
+
+- name: Create ACME storage file
+  file:
+    path: "{{ traefik_data_dir }}/acme.json"
+    state: touch
+    owner: root
+    group: root
+    mode: '0600'
+  tags:
+    - traefik-deploy
+    - config
+
+- name: Download custom root CA certificate
+  get_url:
+    url: "{{ traefik_custom_ca_url }}"
+    dest: "{{ traefik_custom_ca_path }}"
+    mode: '0644'
+    owner: root
+    group: root
+    validate_certs: "{{ traefik_custom_ca_verify_ssl }}"
+    timeout: 30
+  when: traefik_custom_ca_enabled | default(false) and traefik_custom_ca_url | default('') != ''
+  notify: restart traefik
+  tags:
+    - traefik-deploy
+    - custom-ca
+
+- name: Create Traefik static configuration
+  template:
+    src: traefik.yml.j2
+    dest: "{{ traefik_config_dir }}/traefik.yml"
+    mode: '0644'
+  notify: restart traefik
+  tags:
+    - traefik-deploy
+    - config
+
+- name: Create Traefik Docker Compose file
+  template:
+    src: docker-compose.yml.j2
+    dest: "{{ traefik_install_dir }}/docker-compose.yml"
+    mode: '0644'
+  notify: restart traefik
+  tags:
+    - traefik-deploy
+    - config
+
+- name: Start Traefik services
+  community.docker.docker_compose_v2:
+    project_src: "{{ traefik_install_dir }}"
+    state: present
+  tags:
+    - traefik-deploy
+    - docker-start
+
+- name: Wait for Traefik to be ready
+  uri:
+    url: "https://traefik.{{ traefik_domain | default('localhost') }}/api/rawdata"
+    method: GET
+    status_code: 200
+    ca_path: "{{ traefik_custom_ca_path }}"
+  register: traefik_ready
+  until: traefik_ready.status == 200
+  retries: 30
+  delay: 5
+  tags:
+    - traefik-deploy
+    - health-check