multica deployment

ansible/roles/multica_docker/tasks/caddy.yml

@@ -0,0 +1,51 @@
+---
+- name: Create Caddy directories
+  ansible.builtin.file:
+    path: "{{ item }}"
+    state: directory
+    mode: "0755"
+  loop:
+    - "{{ caddy_install_dir }}"
+    - "{{ caddy_install_dir }}/conf"
+
+# Mount the conf *directory* (not the file): atomic template writes swap the inode,
+# which a single-file bind mount would not see.
+- name: Render Caddyfile
+  ansible.builtin.template:
+    src: Caddyfile.j2
+    dest: "{{ caddy_install_dir }}/conf/Caddyfile"
+    mode: "0644"
+  notify: Reload caddy
+
+- name: Render Dockerfile for Cloudflare DNS module
+  ansible.builtin.template:
+    src: Dockerfile.caddy.j2
+    dest: "{{ caddy_install_dir }}/Dockerfile"
+    mode: "0644"
+  when: caddy_tls_mode == 'cloudflare_dns'
+
+- name: Render Caddy environment file (Cloudflare token)
+  ansible.builtin.template:
+    src: caddy.env.j2
+    dest: "{{ caddy_install_dir }}/caddy.env"
+    mode: "0600"
+  when: caddy_tls_mode == 'cloudflare_dns'
+  no_log: "{{ multica_no_log }}"
+
+- name: Render Caddy compose file
+  ansible.builtin.template:
+    src: docker-compose.caddy.yml.j2
+    dest: "{{ caddy_install_dir }}/docker-compose.yml"
+    mode: "0644"
+
+- name: Start / update Caddy
+  community.docker.docker_compose_v2:
+    project_name: caddy
+    project_src: "{{ caddy_install_dir }}"
+    state: present
+    build: "{{ 'always' if caddy_force_rebuild | bool else 'policy' }}"
+    recreate: auto
+  register: _caddy_up
+
+- name: Apply pending Caddy reloads now
+  ansible.builtin.meta: flush_handlers