Erich Blume
df5d1bae4d
- New `flake-lock` Dagger function: runs `nix flake lock` in a nixos/nix container, returns the updated flake.lock file. - provision-ringtail now: updates flake.lock via Dagger before deploy, verifies current commit is pushed to forge, and passes the exact commit SHA to the ansible playbook. - Playbook accepts `ringtail_commit` var to deploy a specific ref. Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
26 lines
819 B
YAML
26 lines
819 B
YAML
---
|
|
- name: Configure ringtail (NixOS)
|
|
hosts: ringtail
|
|
become: true
|
|
|
|
tasks:
|
|
- name: Ensure blumeops repo is present
|
|
ansible.builtin.git:
|
|
repo: "https://forge.ops.eblu.me/eblume/blumeops.git"
|
|
dest: /etc/blumeops
|
|
version: "{{ ringtail_commit | default('main') }}"
|
|
force: true
|
|
register: _repo
|
|
|
|
- name: Rebuild NixOS
|
|
ansible.builtin.command:
|
|
cmd: nixos-rebuild switch --flake /etc/blumeops/nixos/ringtail#ringtail
|
|
register: _rebuild
|
|
changed_when: "'activating the configuration' in _rebuild.stdout"
|
|
when: _repo.changed
|
|
|
|
- name: Verify tailscale is connected
|
|
ansible.builtin.command: tailscale status --self --json
|
|
register: _ts_status
|
|
changed_when: false
|
|
failed_when: "'Running' not in _ts_status.stdout"
|