Files
ansible-playbooks/.project-wiki/technical/modules/MOD-006-hawser-role.md
T
DerLinkman 30f3e9a4c6 rename dmc12 inventory to cloudlorean and vault admin_password
- replace inventory/dmc12.yml with cloudlorean.yml (+ group_vars) and update
  all README/AGENTS call examples and the inventory table
- move admin_password hash into encrypted vault.yml; remove plaintext copies
  from roles/bootstrap/defaults and group_vars/external.yml
- bootstrap.yml loads vault.yml via vars_files (same pattern as monitoring)
- monitoring: PSK config/registration updates, docker role defaults,
  os-updates logging/reboot refinements, ansible.cfg/execute.sh tweaks
- add .project-wiki knowledge base and .github agent instructions
2026-09-09 14:14:18 +02:00

1.5 KiB

id, type, status, title, created, updated, tags, related, source_paths, confidence
id type status title created updated tags related source_paths confidence
MOD-006 module active Hawser Role 2026-09-09 2026-09-09
module
hawser
docker
ansible
MOD-002
REQ-005
roles/hawser/
confirmed

Hawser Role

Responsibility

Update the Hawser Docker Compose stack on a host that already runs Docker.

Source Paths

  • roles/hawser/tasks/main.yml → update-stack.yml
  • Template: roles/hawser/templates/docker-compose.yml.j2
  • Handlers: roles/hawser/handlers/main.yml

Public Interfaces

  • Playbook: playbooks/upgrade-hawser.yml
  • Key variables: hawser_project_name (hawser), hawser_compose_dir (/opt/hawser), hawser_port (2376), hawser_stacks_volume (hawser_stacks), hawser_allow_insecure_no_auth (true - documented as requiring an otherwise secured network).

Important Flows

  1. Gather Docker host info (community.docker.docker_host_info, ignore_errors: true).
  2. Require existing compose file at <hawser_compose_dir>/docker-compose.yml; re-render it from the template.
  3. community.docker.docker_compose_v2 with state: present, pull: always to pull latest images and recreate the stack.

Dependencies

  • Requires Docker on the target (role skips gracefully when Docker is not reachable). Collection: community.docker.

Tests

  • None automated.

Notes For Agents

  • hawser_allow_insecure_no_auth: true allows token-less standard mode on non-loopback addresses; treat as a deliberate, documented trade-off.