Joakim
8e8aabd5e7
Changes: - Migrate Authentik to journald logging (remove file-based logs) - Update Gitea to use infrastructure variables for PostgreSQL access - Add comprehensive logging documentation to deployment guide - Add infrastructure variable pattern guide to integration docs Authentik Logging: - Remove LogDriver=k8s-file from server and worker containers - Remove logs directory creation from user setup tasks - Update deployment guide with journald examples and JSON log patterns Gitea Infrastructure Variables: - Add infrastructure dependencies section to role defaults - Replace hardcoded paths with postgresql_unix_socket_directories variable - Replace hardcoded 'postgres' group with postgresql_client_group variable - Add infrastructure variable validation in tasks - Remove manual socket permission override (handled by infrastructure) Documentation: - Add journald logging best practices to service integration guide - Add infrastructure variable pattern documentation with Gitea example - Update Authentik deployment guide with journald commands and JSON filtering - Document benefits: centralized logging, single source of truth, maintainability Validated on arch-vps: - Authentik logs accessible via journalctl and podman logs (identical output) - Gitea user added to postgres-clients group (GID 962) - No PostgreSQL socket permission errors after service restart
43 lines
1.2 KiB
YAML
43 lines
1.2 KiB
YAML
---
|
|
# Authentik User Management - Service-Specific User Setup
|
|
|
|
- name: Create authentik group
|
|
group:
|
|
name: "{{ authentik_group }}"
|
|
system: true
|
|
|
|
- name: Create authentik user
|
|
user:
|
|
name: "{{ authentik_user }}"
|
|
group: "{{ authentik_group }}"
|
|
groups: "{{ [postgresql_client_group, valkey_client_group] }}"
|
|
system: true
|
|
shell: /bin/bash
|
|
home: "{{ authentik_home }}"
|
|
create_home: true
|
|
comment: "Authentik authentication service"
|
|
append: true
|
|
|
|
- name: Create authentik directories
|
|
file:
|
|
path: "{{ item }}"
|
|
state: directory
|
|
owner: "{{ authentik_user }}"
|
|
group: "{{ authentik_group }}"
|
|
mode: '0755'
|
|
loop:
|
|
- "{{ authentik_home }}"
|
|
- "{{ authentik_home }}/data"
|
|
- "{{ authentik_home }}/media"
|
|
|
|
- name: Get authentik user UID and GID for container configuration
|
|
shell: |
|
|
echo "uid=$(id -u {{ authentik_user }})"
|
|
echo "gid=$(id -g {{ authentik_user }})"
|
|
register: authentik_user_info
|
|
changed_when: false
|
|
|
|
- name: Set authentik UID/GID facts for container templates
|
|
set_fact:
|
|
authentik_uid: "{{ authentik_user_info.stdout_lines[0] | regex_replace('uid=', '') }}"
|
|
authentik_gid: "{{ authentik_user_info.stdout_lines[1] | regex_replace('gid=', '') }}" |