add new role docker/registry (WIP)

1 files changed, 31 insertions, 0 deletions

diff --git a/roles/docker/registry/tasks/main.yml b/roles/docker/registry/tasks/main.yml
new file mode 100644
index 00000000..70f0196c
--- /dev/null
+++ b/roles/docker/registry/tasks/main.yml
@@ -0,0 +1,31 @@
+---
+- name: prepare storage volume for /var/lib/docker-registry
+  when: docker_registry_storage is defined
+  vars:
+    storage_volume: "{{ docker_registry_storage | combine({'dest': '/var/lib/docker-registry'}) }}"
+  include_role:
+    name: "storage/{{ docker_registry_storage.type }}/volume"
+
+- name: install registry package
+  apt:
+    name: docker-registry
+    state: present
+
+- name: set up tls config
+  when: docker_registry_http_tls is defined
+  vars:
+    x509_certificate_name: "docker-registry"
+    x509_certificate_hostnames: "{{ docker_registry_http_hostnames }}"
+    x509_certificate_config: "{{ docker_registry_http_tls.certificate_config }}"
+    x509_certificate_reload_services:
+    - docker-registry
+  include_role:
+    name: "x509/{{ docker_registry_http_tls.certificate_provider }}/cert"
+
+- name: install config
+  template:
+    src: config.yml.j2
+    dest: /etc/docker/registry/config.yml
+    mode: 0640
+    group: docker-registry
+  notify: restart docker-registry