4 files changed, 35 insertions, 20 deletions

diff --git a/jinwei.me/config/roles/wordpress/build.sh b/jinwei.me/config/roles/wordpress/build.sh
new file mode 100755
index 0000000..55d7c0e
--- /dev/null
+++ b/jinwei.me/config/roles/wordpress/build.sh
@@ -0,0 +1,5 @@
+docker_repo=docker.io/clarkzjw
+docker_image=wordpress
+docker_image_tag=$(date -u +%Y%m%d)
+sudo docker build -t $docker_repo/$docker_image:"$docker_image_tag" .
+sudo docker push $docker_repo/$docker_image:"$docker_image_tag"
diff --git a/jinwei.me/config/roles/wordpress/defaults/main.yaml b/jinwei.me/config/roles/wordpress/defaults/main.yaml
new file mode 100644
index 0000000..250e0a5
--- /dev/null
+++ b/jinwei.me/config/roles/wordpress/defaults/main.yaml
@@ -0,0 +1,4 @@
+wordpress_image: clarkzjw/wordpress
+wordpress_image_tag: 20221211
+wordpress_port: 30080
+wordpress_home: /opt/wordpress
diff --git a/jinwei.me/config/roles/wordpress/tasks/main.yaml b/jinwei.me/config/roles/wordpress/tasks/main.yaml
index 51e1a2b..3835145 100644
--- a/jinwei.me/config/roles/wordpress/tasks/main.yaml
+++ b/jinwei.me/config/roles/wordpress/tasks/main.yaml
@@ -3,27 +3,14 @@
     name: "{{ wordpress_image }}:{{ wordpress_image_tag }}"
     source: pull
 
+- name: render config file
+  template:
+    src: docker-compose.yaml.j2
+    dest: "{{ wordpress_home }}/docker-compose.yaml"
+    mode: 0644
+
 - name: Start wordpress container using docker-compose
   community.docker.docker_compose:
     project_name: wordpress
-    definition:
-      version: '3'
-      services:
-        cloudflared:
-          image: cloudflare/cloudflared
-          container_name: cloudflare-tunnel
-          restart: always
-          command: tunnel run
-          environment:
-            - TUNNEL_TOKEN={{ cloudflared_tunnel_token }}
-        wordpress:
-          image: "{{ wordpress_image }}:{{ wordpress_image_tag }}"
-          volumes:
-            - "{{ wordpress_home }}/wp-content:/var/www/html/wp-content"
-          restart: always
-          environment:
-            - WORDPRESS_DB_HOST={{ wordpress_db_host }}
-            - WORDPRESS_DB_USER={{ wordpress_db_user }}
-            - WORDPRESS_DB_PASSWORD={{ wordpress_db_password }}
-            - WORDPRESS_DB_NAME={{ wordpress_db_name }}
+    project_src: "{{ wordpress_home }}"
   register: output
diff --git a/jinwei.me/config/roles/wordpress/templates/docker-compose.yaml.j2 b/jinwei.me/config/roles/wordpress/templates/docker-compose.yaml.j2
new file mode 100644
index 0000000..be85fb4
--- /dev/null
+++ b/jinwei.me/config/roles/wordpress/templates/docker-compose.yaml.j2
@@ -0,0 +1,19 @@
+version: '3'
+services:
+    cloudflared:
+        image: cloudflare/cloudflared
+        container_name: cloudflare-tunnel
+        restart: always
+        command: tunnel run
+        environment:
+        - TUNNEL_TOKEN={{ lookup('aws_ssm', '/jinwei-me/cloudflare/tunnel_token') }}
+    wordpress:
+        image: "{{ wordpress_image }}:{{ wordpress_image_tag }}"
+        volumes:
+        - "{{ wordpress_home }}/wp-content:/var/www/html/wp-content"
+        restart: always
+        environment:
+        - WORDPRESS_DB_HOST={{ lookup('aws_ssm', '/jinwei-me/mysql/host') }}:{{ lookup('aws_ssm', '/jinwei-me/mysql/port') }}
+        - WORDPRESS_DB_USER={{ lookup('aws_ssm', '/jinwei-me/mysql/username') }}
+        - WORDPRESS_DB_PASSWORD={{ lookup('aws_ssm', '/jinwei-me/mysql/password') }}
+        - WORDPRESS_DB_NAME={{ lookup('aws_ssm', '/jinwei-me/mysql/name') }}