ENG - Ansible Docker Role
May 2024 (127 Words, 1 Minutes)
Simple ansible role for configure docker on a remote machine.
This role is hosted on github.com - stethewwolf/ansible-role-docker.
Introduction
This work shall be included into an ansible playbook as ansible role. This role is intented to manage containers running on a debian system.
Docker Role
By default this role donwload and run the hello_world
container during execution.
Installed Packages
This role will install following packages on the system.
docker.io
python3
python3-pip
python3-setuptools
python3-docker
Configurations
Portainer
This role give the option to install and enable portainer, setting the var portainer_enable
to true
.
If set, the port 9000
will be opened allowing the traffic from all the sources.
Insecure registries
This role allow to configure the an insecure registry using the value insecure_registries
.
It is replaced into the /etc/docke/daemon.json
, using the template:
{
"insecure-registries":[ ]
}
Adding containers
In order to add containers you can use active_containers
variable as the following:
active_containers:
- name: 'transmission'
image: 'lscr.io/linuxserver/transmission:arm64v8-latest'
volumes:
- /etc/localtime:/etc/localtime:ro
- /media/data/srv/transmission/downloads:/downloads
- /media/data/srv/transmission/config:/config
- /media/data/srv/transmission/watch:/watch
ports:
- 0.0.0.0:9091:9091
- 0.0.0.0:51413:51413
- 0.0.0.0:51413:51413/udp
env:
PUID=1000
PGID=1000
#TRANSMISSION_WEB_HOME= #optional
#USER= #optional
#PASS= #optional
#WHITELIST= #optional
#PEERPORT= #optional
#HOST_WHITELIST= #optional
restart_policy: "unless-stopped"
- name: pihole
image: pihole/pihole:latest
ports:
- 0.0.0.0:53:53/tcp
- 0.0.0.0:53:53/udp
- 0.0.0.0:67:67/udp # Only required if you are using Pi-hole as your DHCP server
- 0.0.0.0:8083:80/tcp
env:
TZ: "Europe/Rome"
WEBPASSWORD: changeme
volumes:
- /srv/pihole/etc:/etc/pihole
- /srv/pihole/dnsmasq:/etc/dnsmasq.d
capabilities:
- NET_ADMIN # Required if you are using Pi-hole as your DHCP server, else not needed
restart_policy: unless-stopped
- name: registry
image: registry:2
ports:
- 0.0.0.0:5000:5000/tcp
volumes:
- /etc/localtime:/etc/localtime:ro
- /media/data/srv/docker-registry/:/var/lib/registry
restart_policy: unless-stopped
References
![Licenza Creative Commons](https://i.creativecommons.org/l/by-sa/4.0/80x15.png)
Quest'opera è distribuita con Licenza Creative Commons Attribuzione - Condividi allo stesso modo 4.0 Internazionale Theme Moonwalk