first commit

ansible/roles/laravel_docker/tasks/main.yml

@@ -0,0 +1,30 @@
+---
+- name: Эффективный URL Git
+  ansible.builtin.set_fact:
+    effective_git_repo_url: "{{ (vault_git_repo_url | default('') | length > 0) | ternary(vault_git_repo_url, git_repo_url_public) }}"
+
+- name: Клонирование приложения
+  ansible.builtin.git:
+    repo: "{{ effective_git_repo_url }}"
+    dest: "{{ project_path }}"
+    version: "{{ git_branch }}"
+    force: false
+    accept_hostkey: true
+  become_user: "{{ deploy_user }}"
+
+- name: Конфигурация docker/app.env для Laravel и Compose
+  ansible.builtin.template:
+    src: docker.app.env.j2
+    dest: "{{ project_path }}/docker/app.env"
+    owner: "{{ deploy_user }}"
+    group: "{{ deploy_user }}"
+    mode: "0600"
+
+- name: Запуск стека Docker Compose
+  ansible.builtin.shell: |
+    set -e
+    cd {{ project_path }}
+    docker compose -f docker-compose.yml -f docker-compose.prod.yml up -d --build --remove-orphans
+  become_user: "{{ deploy_user }}"
+  args:
+    executable: /bin/bash

ansible/roles/laravel_docker/templates/docker.app.env.j2

@@ -0,0 +1,37 @@
+# Сгенерировано Ansible — не редактируйте вручную на сервере (обновляйте vault и плейбук).
+
+MYSQL_DATABASE=laravel
+MYSQL_USER={{ vault_db_username | default('db') }}
+MYSQL_PASSWORD={{ vault_mysql_password }}
+MYSQL_ROOT_PASSWORD={{ vault_mysql_root_password }}
+
+APP_NAME=Laravel
+APP_ENV=production
+APP_KEY={{ vault_app_key }}
+APP_DEBUG=false
+APP_URL=https://{{ project_domain }}
+
+LOG_CHANNEL=stack
+LOG_LEVEL=warning
+
+DB_CONNECTION=mysql
+DB_HOST=mysql
+DB_PORT=3306
+DB_DATABASE=laravel
+DB_USERNAME={{ vault_db_username | default('db') }}
+DB_PASSWORD={{ vault_mysql_password }}
+
+SESSION_DRIVER=file
+CACHE_STORE=file
+FILESYSTEM_DISK=local
+
+QUEUE_CONNECTION=redis
+
+REDIS_CLIENT=phpredis
+REDIS_HOST=redis
+REDIS_PASSWORD=null
+REDIS_PORT=6379
+
+MAIL_MAILER=log
+
+PMA_ABSOLUTE_URI=https://{{ project_domain }}/pma/