feat(repo): IaaS baseline

ansible/roles/app/tasks/services/set_memos.yaml

@@ -4,7 +4,7 @@
     path: "{{ node['home_path'] }}/{{ item }}"
     state: "directory"
     owner: "{{ services['memos']['subuid'] }}"
-    group: "svadmins"
+    group: "{{ node['group'] }}"
     mode: "0770"
   loop:
     - "data/containers/memos"
@@ -19,7 +19,7 @@
       {{ hostvars['console']['ca']['root']['crt'] }}
     dest: "{{ node['home_path'] }}/containers/memos/ssl/{{ root_cert_filename }}"
     owner: "{{ services['memos']['subuid'] }}"
-    group: "svadmins"
+    group: "{{ node['group'] }}"
     mode: "0440"
   become: true
   notify: "notification_restart_memos"
@@ -33,6 +33,7 @@
         sslrootcert=/etc/ssl/memos/{{ root_cert_filename }}"
     state: "present"
     force: true
+  no_log: true
   notify: "notification_restart_memos"
 
 - name: Deploy memos.container file
@@ -40,7 +41,7 @@
     src: "{{ hostvars['console']['node']['config_path'] }}/services/containers/app/memos/memos.container.j2"
     dest: "{{ node['home_path'] }}/.config/containers/systemd/memos.container"
     owner: "{{ ansible_user }}"
-    group: "svadmins"
+    group: "{{ node['group'] }}"
     mode: "0644"
   notify: "notification_restart_memos"