onlyoffice: enable jwt auth

1 files changed, 63 insertions, 40 deletions

diff --git a/roles/apps/onlyoffice/tasks/main.yml b/roles/apps/onlyoffice/tasks/main.yml
index dd16a8de..da253a77 100644
--- a/roles/apps/onlyoffice/tasks/main.yml
+++ b/roles/apps/onlyoffice/tasks/main.yml
@@ -30,26 +30,26 @@
     state: directory
 
 
-
-- name: add group for onlyoffice app
-  group:
-    name: oo-app
-    gid: "{{ onlyoffice_app_gid }}"
-
-- name: add user for onlyoffice app
-  user:
-    name: oo-app
-    uid: "{{ onlyoffice_app_uid }}"
-    group: oo-app
-    password: "!"
-
-- name: create onlyoffice app subdirectory
-  loop: "{{ onlyoffice_instances | list }}"
-  file:
-    path: "{{ onlyoffice_base_path }}/{{ item }}/onlyoffice"
-    owner: "{{ onlyoffice_app_uid }}"
-    group: "{{ onlyoffice_app_gid }}"
-    state: directory
+# TODO: run documentserver components as non-root
+# - name: add group for onlyoffice app
+#   group:
+#     name: oo-app
+#     gid: "{{ onlyoffice_app_gid }}"
+
+# - name: add user for onlyoffice app
+#   user:
+#     name: oo-app
+#     uid: "{{ onlyoffice_app_uid }}"
+#     group: oo-app
+#     password: "!"
+
+# - name: create onlyoffice app subdirectory
+#   loop: "{{ onlyoffice_instances | list }}"
+#   file:
+#     path: "{{ onlyoffice_base_path }}/{{ item }}/onlyoffice"
+#     owner: "{{ onlyoffice_app_uid }}"
+#     group: "{{ onlyoffice_app_gid }}"
+#     state: directory
 
 
 - name: add group for onlyoffice db
@@ -75,22 +75,44 @@
     state: directory
 
 
-- name: create onlyoffice rabbitmq subdirectory
-  loop: "{{ onlyoffice_instances | dict2items}}"
-  loop_control:
-    label: "{{ item.key }}"
-  file:
-    path: "{{ onlyoffice_base_path }}/{{ item.key }}/rabbitmq"
-    state: directory
-
-- name: install rabbitmq config snipped
-  loop: "{{ onlyoffice_instances | dict2items}}"
-  loop_control:
-    label: "{{ item.key }}"
-  copy:
-    dest: "{{ onlyoffice_base_path }}/{{ item.key }}/rabbitmq/config"
-    content: |
-      management.tcp.ip = 127.0.0.1
+# TODO: run documentserver components as non-root
+# - name: add group for onlyoffice aqmp
+#   group:
+#     name: oo-aqmp
+#     gid: "{{ onlyoffice_aqmp_gid }}"
+
+# - name: add user for onlyoffice aqmp
+#   user:
+#     name: oo-aqmp
+#     uid: "{{ onlyoffice_aqmp_uid }}"
+#     group: oo-aqmp
+#     password: "!"
+
+# - name: create onlyoffice aqmp subdirectory
+#   loop: "{{ onlyoffice_instances | list }}"
+#   file:
+#     path: "{{ onlyoffice_base_path }}/{{ item }}/onlyoffice"
+#     owner: "{{ onlyoffice_aqmp_uid }}"
+#     group: "{{ onlyoffice_aqmp_gid }}"
+#     state: directory
+
+# TODO: AQMP config?
+# - name: create onlyoffice rabbitmq subdirectory
+#   loop: "{{ onlyoffice_instances | dict2items}}"
+#   loop_control:
+#     label: "{{ item.key }}"
+#   file:
+#     path: "{{ onlyoffice_base_path }}/{{ item.key }}/rabbitmq"
+#     state: directory
+
+# - name: install rabbitmq config snipped
+#   loop: "{{ onlyoffice_instances | dict2items}}"
+#   loop_control:
+#     label: "{{ item.key }}"
+#   copy:
+#     dest: "{{ onlyoffice_base_path }}/{{ item.key }}/rabbitmq/config"
+#     content: |
+#       management.tcp.ip = 127.0.0.1
 
 
 - name: install pod manifest
@@ -102,10 +124,11 @@
       name: "onlyoffice-{{ item.key }}"
       spec: "{{ lookup('template', 'pod-spec.yml.j2') }}"
       mode: "0600"
-      config_hash_items:
-      - path: "{{ onlyoffice_base_path }}/{{ item.key }}/rabbitmq/config"
-        properties:
-        - checksum
+# TODO: AQMP config?
+#       config_hash_items:
+#       - path: "{{ onlyoffice_base_path }}/{{ item.key }}/rabbitmq/config"
+#         properties:
+#         - checksum
   include_role:
     name: kubernetes/standalone/pod