---
- name: "🔍 Resolve the node that holds the Penpot backend and its local id"
ansible.builtin.include_tasks: "{{ lookup('path_absolute', 'roles/sys-svc-compose/tasks/utils/swarm/resolve_host_cid.yml') }}"
vars:
resolve_service_key: "{{ PENPOT_BACKEND_SERVICE }}"
resolve_output_prefix: PENPOT_BACKEND
resolve_compose_cid: "{{ PENPOT_BACKEND_CONTAINER_ADDRESS }}"
- name: "🥾 Bootstrap the Penpot administrator's local account (idempotent)"
ansible.builtin.shell:
cmd: >- # nocheck: container-exec-resolver runtime-resolved CID, delegated to the hosting node
container exec -i {{ PENPOT_BACKEND_LOCAL_CID | quote }}
python3 manage.py create-profile
-n {{ PENPOT_ADMIN_FULLNAME | quote }}
-e {{ PENPOT_ADMIN_EMAIL | quote }}
stdin: "{{ PENPOT_ADMIN_PASSWORD }}"
register: penpot_admin_create
retries: 30
delay: 5
until: >-
penpot_admin_create.rc == 0 or
('already exists' in (penpot_admin_create.stdout | default('') ~ penpot_admin_create.stderr | default('')))
changed_when: "'Created' in penpot_admin_create.stdout"
failed_when:
- penpot_admin_create.rc != 0
- "'already exists' not in (penpot_admin_create.stdout | default('') ~ penpot_admin_create.stderr | default(''))"
no_log: "{{ MASK_CREDENTIALS_IN_LOGS | bool }}"
delegate_to: "{{ PENPOT_BACKEND_HOST_NODE }}"
- name: "🔧 Set the Penpot administrator's local password when the profile already exists"
ansible.builtin.shell:
cmd: >- # nocheck: container-exec-resolver runtime-resolved CID, delegated to the hosting node
container exec -i {{ PENPOT_BACKEND_LOCAL_CID | quote }}
python3 manage.py update-profile
-e {{ PENPOT_ADMIN_EMAIL | quote }}
stdin: "{{ PENPOT_ADMIN_PASSWORD }}"
when: "'already exists' in (penpot_admin_create.stdout | default('') ~ penpot_admin_create.stderr | default(''))"
register: penpot_admin_update
changed_when: "'Updated' in penpot_admin_update.stdout"
no_log: "{{ MASK_CREDENTIALS_IN_LOGS | bool }}"
delegate_to: "{{ PENPOT_BACKEND_HOST_NODE }}"
