inecs
ca22c0f39d
Preserve passwords from server-info.yml and vault; generate only for new users; remove deleted users from output; re-export URL/QR only when password, domain, port, obfs or files changed.
124 lines
3.4 KiB
YAML
124 lines
3.4 KiB
YAML
---
|
|
- name: Check for saved passwords from previous install
|
|
ansible.builtin.stat:
|
|
path: "{{ hysteria2_output_dir }}/{{ hysteria2_output_name }}/server-info.yml"
|
|
register: _hysteria2_saved_info
|
|
delegate_to: localhost
|
|
become: false
|
|
tags:
|
|
- install
|
|
- update
|
|
- export
|
|
|
|
- name: Initialize empty saved export metadata
|
|
ansible.builtin.set_fact:
|
|
_hysteria2_saved_passwords: {}
|
|
_hysteria2_saved_server_info: {}
|
|
when: not _hysteria2_saved_info.stat.exists
|
|
tags:
|
|
- install
|
|
- update
|
|
- export
|
|
|
|
- name: Load saved user passwords from local export
|
|
when: _hysteria2_saved_info.stat.exists
|
|
block:
|
|
- name: Read server-info.yml
|
|
ansible.builtin.slurp:
|
|
path: "{{ hysteria2_output_dir }}/{{ hysteria2_output_name }}/server-info.yml"
|
|
register: _hysteria2_saved_info_raw
|
|
delegate_to: localhost
|
|
become: false
|
|
|
|
- name: Parse saved export metadata
|
|
ansible.builtin.set_fact:
|
|
_hysteria2_saved_server_info: "{{ _hysteria2_saved_info_raw.content | b64decode | from_yaml }}"
|
|
_hysteria2_saved_passwords: >-
|
|
{{
|
|
dict(
|
|
(_hysteria2_saved_info_raw.content | b64decode | from_yaml).users
|
|
| map(attribute='name')
|
|
| zip(
|
|
(_hysteria2_saved_info_raw.content | b64decode | from_yaml).users
|
|
| map(attribute='password')
|
|
)
|
|
)
|
|
}}
|
|
delegate_to: localhost
|
|
become: false
|
|
tags:
|
|
- install
|
|
- update
|
|
- export
|
|
|
|
- name: Resolve user list with passwords from inventory, vault and previous export
|
|
ansible.builtin.set_fact:
|
|
hysteria2_resolved_users: "{{ hysteria2_resolved_users | default([]) + [ _entry ] }}"
|
|
vars:
|
|
_username: "{{ item if item is string else item.name }}"
|
|
_password: >-
|
|
{{
|
|
(
|
|
item.password
|
|
if item is mapping and (item.password | default('') | length > 0)
|
|
else none
|
|
)
|
|
| default(
|
|
hysteria2_user_passwords[_username]
|
|
if (
|
|
hysteria2_user_passwords is defined
|
|
and (hysteria2_user_passwords[_username] | default('') | length > 0)
|
|
)
|
|
else none,
|
|
true
|
|
)
|
|
| default(
|
|
_hysteria2_saved_passwords[_username]
|
|
if (_hysteria2_saved_passwords[_username] | default('') | length > 0)
|
|
else none,
|
|
true
|
|
)
|
|
| default('', true)
|
|
}}
|
|
_entry:
|
|
name: "{{ _username }}"
|
|
password: "{{ _password }}"
|
|
loop: "{{ hysteria2_users }}"
|
|
loop_control:
|
|
label: "{{ item if item is string else item.name }}"
|
|
tags:
|
|
- install
|
|
- update
|
|
- export
|
|
|
|
- name: Generate missing user passwords
|
|
ansible.builtin.set_fact:
|
|
_hysteria2_users_with_passwords: "{{ _hysteria2_users_with_passwords | default([]) + [ _entry ] }}"
|
|
vars:
|
|
_entry:
|
|
name: "{{ item.name }}"
|
|
password: >-
|
|
{{
|
|
lookup(
|
|
'password',
|
|
'/dev/null chars=ascii_letters,digits length=' ~ (hysteria2_password_length | string)
|
|
)
|
|
if item.password | length == 0
|
|
else item.password
|
|
}}
|
|
loop: "{{ hysteria2_resolved_users }}"
|
|
loop_control:
|
|
label: "{{ item.name }}"
|
|
tags:
|
|
- install
|
|
- update
|
|
- export
|
|
|
|
- name: Apply generated passwords
|
|
ansible.builtin.set_fact:
|
|
hysteria2_resolved_users: "{{ _hysteria2_users_with_passwords }}"
|
|
tags:
|
|
- install
|
|
- update
|
|
- export
|