synchronize.yaml

---
- name: Synchronize Ops repository with server
  become: true
  hosts: all
  tasks:
    - name: Install continuous deployment tools
      ansible.builtin.apt:
        name: [git, python3-pip]
        state: present
    - name: Install ansible on host
      ansible.builtin.pip:
        name: ansible
    - name: Clone application repository
      ansible.builtin.git:
        repo: "{{ ops.repository }}"
        dest: /opt/mes-aides/
        update: true
        clone: true
        single_branch: true
        version: "{{ ops.branch }}"
      when: ops.repository is defined
    - name: Set deployment variables
      ansible.builtin.set_fact:
        deploy_command: /opt/mes-aides/scripts/update_ops.sh {{ inventory_file | basename | splitext | first }}
        deploy_access_rules: no-pty,no-port-forwarding,no-agent-forwarding
    - name: Add SSH deployment key
      ansible.posix.authorized_key:
        user: "{{ ansible_ssh_user }}"
        state: present
        comment: "# Key for deployment"
        exclusive: true
        key: "{{ ops.update_key }}"
        key_options: command="{{ deploy_command }}",{{ deploy_access_rules }}"
      when: ops.update_key is defined
    - name: Set authorized_keys for listed github users
      ansible.posix.authorized_key:
        user: "{{ ansible_ssh_user }}"
        state: present
        comment: "# User key for {{ item }}"
        key: https://github.com/{{ item }}.keys
      with_items: "{{ github_users }}"