42 lines
1.5 KiB
YAML
42 lines
1.5 KiB
YAML
---
|
|
- name: Ensure policy engine directory exists
|
|
become: true
|
|
ansible.builtin.file:
|
|
path: /opt/activitywatch/dlp-policy-engine
|
|
state: directory
|
|
owner: activitywatch
|
|
group: activitywatch
|
|
mode: "0755"
|
|
|
|
- name: Deploy policy engine files
|
|
become: true
|
|
ansible.builtin.copy:
|
|
src: "{{ item.src }}"
|
|
dest: "{{ item.dest }}"
|
|
owner: activitywatch
|
|
group: activitywatch
|
|
mode: "{{ item.mode | default('0644') }}"
|
|
loop:
|
|
- { src: "{{ playbook_dir }}/../aw-server/dlp-policy-engine/policy_service.py", dest: "/opt/activitywatch/dlp-policy-engine/policy_service.py" }
|
|
- { src: "{{ playbook_dir }}/../aw-server/dlp-policy-engine/policy_schema.py", dest: "/opt/activitywatch/dlp-policy-engine/policy_schema.py" }
|
|
- { src: "{{ playbook_dir }}/../aw-server/dlp-policy-engine/policy_storage.py", dest: "/opt/activitywatch/dlp-policy-engine/policy_storage.py" }
|
|
- { src: "{{ playbook_dir }}/../aw-server/dlp-policy-engine/policy_distributor.py", dest: "/opt/activitywatch/dlp-policy-engine/policy_distributor.py" }
|
|
- { src: "{{ playbook_dir }}/../aw-server/dlp-policy-engine/dlp-policy-engine.service", dest: "/etc/systemd/system/dlp-policy-engine.service" }
|
|
|
|
- name: Install python deps for policy engine
|
|
become: true
|
|
ansible.builtin.pip:
|
|
name:
|
|
- fastapi
|
|
- uvicorn
|
|
- pydantic
|
|
executable: pip3
|
|
|
|
- name: Enable and restart policy engine
|
|
become: true
|
|
ansible.builtin.systemd:
|
|
daemon_reload: true
|
|
name: dlp-policy-engine.service
|
|
enabled: true
|
|
state: restarted
|