ansible-taler-exchange

commit 8f5121873865699f85d2ada73574b94985f3de0e
parent f228915444d59bfd31c59558af59a6816389f05a
Author: Florian Dold <dold@taler.net>
Date:   Fri, 31 Jul 2026 15:42:59 +0200

gather the challenger local facts correctly, fix disabled passwords

A bare "password: !" is a YAML null, so no password was set at all;
quote it as everywhere else in the repo.

Diffstat:
M
roles/challenger/tasks/pre-exchange.yml
 | 
22
+++++++---------------
D
roles/database/files/postgres-backup.sql.gz
 | 
2
--
M
roles/pixel_borg/tasks/main.yml
 | 
2
+-

3 files changed, 8 insertions(+), 18 deletions(-)
diff --git a/roles/challenger/tasks/pre-exchange.yml b/roles/challenger/tasks/pre-exchange.yml
@@ -49,7 +49,7 @@
   ansible.builtin.user:
     name: challenger-sms
     group: challenger-sms
-    password: !
+    password: "!"
     system: true
     state: present
 
@@ -62,7 +62,7 @@
   ansible.builtin.user:
     name: challenger-postal
     group: challenger-postal
-    password: !
+    password: "!"
     system: true
     state: present
 
@@ -75,7 +75,7 @@
   ansible.builtin.user:
     name: challenger-email
     group: challenger-email
-    password: !
+    password: "!"
     system: true
     state: present
 
@@ -96,7 +96,6 @@
     mode: "0755"
 
 - name: Secret setup for sms-challenger
-  when: not local_facts['sms-challenger-client-secret'] is defined
   ansible.builtin.command:
     argv:
       - setup-secret-fact
@@ -122,10 +121,6 @@
 
 - name: Force ansible to regather just created fact(s) about challenger
   ansible.builtin.setup:
-    filter:
-      - 'sms-challenger-client-secret'
-      - 'email-challenger-client-secret'
-      - 'postal-challenger-client-secret'
 
 - name: Place SMS challenger config
   ansible.builtin.template:
@@ -169,22 +164,19 @@
 
 - name: Setup SMS Challenger database
   ansible.builtin.command:
-    cmd: challenger-dbconfig -c /etc/challenger/challenger-sms.conf -u challenger-sms 
+    cmd: challenger-dbconfig -c /etc/challenger/challenger-sms.conf -u challenger-sms
     chdir: /tmp
 
 - name: Setup Postal Challenger database
   ansible.builtin.command:
-    cmd: challenger-dbconfig -c /etc/challenger/challenger-postal.conf -u challenger-postal 
+    cmd: challenger-dbconfig -c /etc/challenger/challenger-postal.conf -u challenger-postal
     chdir: /tmp
 
 - name: Setup email Challenger database
   ansible.builtin.command:
-    cmd: challenger-dbconfig -c /etc/challenger/challenger-email.conf -u challenger-email 
+    cmd: challenger-dbconfig -c /etc/challenger/challenger-email.conf -u challenger-email
     chdir: /tmp
 
-- name: Force ansible to regather newly created fact(s) about sms-challenger
-  ansible.builtin.setup:
-
 - name: Setup SMS Challenger exchange account
   ansible.builtin.command:
     argv:
@@ -218,7 +210,7 @@
       - "{{ EXCHANGE_BASE_URL }}kyc-proof/postal-challenger"
     creates: /etc/ansible/facts.d/postal-challenger-client-id.fact
 
-- name: Force ansible to regather fact(s) just created about sms-challenger
+- name: Force ansible to regather the challenger client IDs
   ansible.builtin.setup:
 
 - name: Place sms-challenger systemd service file
diff --git a/roles/database/files/postgres-backup.sql.gz b/roles/database/files/postgres-backup.sql.gz
@@ -1 +0,0 @@
-../../../root/postgres-backup.sql.gz
-\ No newline at end of file
diff --git a/roles/pixel_borg/tasks/main.yml b/roles/pixel_borg/tasks/main.yml
@@ -16,7 +16,7 @@
   ansible.builtin.user:
     name: borg
     group: borg
-    password: !
+    password: "!"
     system: false
     create_home: true
     state: present