refactor(ldap): fix ldap binding range

ansible/roles/auth/tasks/services/set_authelia.yaml

@@ -54,7 +54,7 @@
     - name: "AUTHELIA_JWKS_ES256"
       value: "{{ hostvars['console']['authelia']['jwk_es256'] }}"
     - name: "AUTHELIA_LDAP_PASSWORD"
-      value: "{{ hostvars['console']['ldap']['password']['authelia'] }}"
+      value: "{{ hostvars['console']['ldap']['password']['services']['authelia'] }}"
     - name: "POSTGRES_AUTHELIA_PASSWORD"
       value: "{{ hostvars['console']['postgresql']['password']['authelia'] }}"
   notify: "notification_restart_authelia"

ansible/roles/common/tasks/services/set_podman.yaml

@@ -15,14 +15,14 @@
     state: "directory"
     mode: "0700"
 
-- name: Create container data directory for app
+- name: Create container data directory
   ansible.builtin.file:
     path: "{{ node['home_path'] }}/data/containers"
     owner: "{{ ansible_user }}"
     group: "{{ node['group'] }}"
     state: "directory"
     mode: "0770"
-  when: node['name'] == "app"
+  when: node['name'] in ["infra", "app"]
 
 - name: Create container image archive directory
   ansible.builtin.file:
@@ -35,23 +35,23 @@
     - "{{ node['home_path'] }}/archives"
     - "{{ node['home_path'] }}/archives/containers"
 
-- name: Install podman and reset ssh connection for initiating
-  when: is_podman_installed.rc != 0
+- name: Set subid scope (Overwrite)
+  ansible.builtin.copy:
+    content: |
+      {{ ansible_user }}:100000:65536
+    dest: "/etc/sub{{ item }}"
+    owner: "root"
+    group: "root"
+    mode: "0644"
+  loop:
+    - "uid"
+    - "gid"
   become: true
-  block:
-    - name: Set subid scope (Overwrite)
-      ansible.builtin.copy:
-        content: |
-          {{ ansible_user }}:100000:65536
-        dest: "/etc/sub{{ item }}"
-        owner: "root"
-        group: "root"
-        mode: "0644"
-      loop:
-        - "uid"
-        - "gid"
-    - name: Install podman
-      ansible.builtin.apt:
-        name:
-          - "podman"
-        state: "present"
+
+- name: Install podman
+  ansible.builtin.apt:
+    name:
+      - "podman"
+    state: "present"
+  become: true
+  when: is_podman_installed.rc != 0

ansible/roles/infra/tasks/services/set_grafana.yaml

@@ -36,10 +36,10 @@
     state: "present"
     force: true
   loop:
+    - name: "LDAP_BIND_PASSWORD"
+      value: "{{ hostvars['console']['ldap']['password']['services']['grafana'] }}"
     - name: "GF_DB_PASSWORD"
       value: "{{ hostvars['console']['postgresql']['password']['grafana'] }}"
-    - name: "LDAP_BIND_PASSWORD"
-      value: "{{ hostvars['console']['ldap']['password']['grafana'] }}"
     - name: "GF_ADMIN_PASSWORD"
       value: "{{ hostvars['console']['grafana']['admin']['password'] }}"
   notify: "notification_restart_grafana"

ansible/roles/infra/tasks/services/set_ldap.yaml

@@ -65,7 +65,7 @@
     - name: Register extra secret value to podman secret
       containers.podman.podman_secret:
         name: "LLDAP_LDAP_USER_PASSWORD"
-        data: "{{ hostvars['console']['ldap']['password']['user'] }}"
+        data: "{{ hostvars['console']['ldap']['password']['services']['admin'] }}"
         state: "present"
         force: true
     # You must check the image version first (following container file on data/config/containers/infra/ldap/ldap.container)