---
- name: 📂 Include dependencies
include_role:
name: sys-ctl-alm-compose
when: run_once_sys_ctl_alm_compose is not defined
- name: 📦 Install requests via pip
include_role:
name: sys-pip-install
vars:
package_name: requests
package_state: present
global_install: true
- name: ✅ Ensure Root CA exists for self-signed TLS
include_role:
name: sys-ca-selfsigned
when:
- (TLS_MODE | lower) == 'self_signed'
- run_once_sys_ca_selfsigned is not defined
- name: "🚿 Flush webserver handlers"
meta: flush_handlers
- include_role:
name: sys-service
vars:
system_service_on_calendar: "{{ SYS_SCHEDULE_HEALTH_NGINX }}"
system_service_timer_enabled: true
system_service_tpl_on_failure: "{{ SYS_SERVICE_ON_FAILURE_COMPOSE }}"
system_service_tpl_timeout_start_sec: "{{ CURRENT_PLAY_DOMAINS_ALL | timeout_start_sec_for_domains }}"
system_service_tpl_environment: "{{ CA_TRUST_SYSTEMD_ENV_SELFSIGNED }}"
system_service_tpl_exec_start: >
{{ system_service_script_exec }}
--targets '{{ lookup('applications') | web_health_expectations(www_enabled=WWW_REDIRECT_ENABLED | bool, group_names=lookup('deployment').deployed, primary_domain=DOMAIN_PRIMARY,
node_onion=lookup('config', 'svc-net-tor', 'services.tor.node', ''), served_domains=lookup('domains'))
| web_health_targets(lookup('applications'), lookup('domains'), TLS_ENABLED) | to_json }}'
system_service_force_flush_final: true
- include_tasks: utils/once/flag.yml
