ipatuura01: make it an IPA client

Signed-off-by: Aurélien Bompard <aurelien@bompard.org>

playbooks/groups/ipatuura.yml

@@ -32,6 +32,7 @@
   #   service: HTTP
   #   #host: "ipatuura{{ env_suffix }}.fedoraproject.org"
   #   host: "{{ ansible_fqdn }}"
+  - ipa/client
   - ipatuura
 
   pre_tasks:

roles/ipatuura/tasks/main.yml

@@ -19,6 +19,14 @@
   tags:
   - ipatuura
 
+- name: Create the configuration directory
+  ansible.builtin.file:
+    path: /etc/ipatuura
+    state: directory
+    owner: root
+    group: root
+    mode: 0700
+
 - name: Copy the domain template file
   ansible.builtin.template:
     name: domain.json.j2

roles/ipatuura/templates/ipatuura.container.j2

@@ -16,6 +16,8 @@ Image=localhost/ipatuura
 HostName=ipatuura01{{env_suffix}}.{{datacenter}}.fedoraproject.org
 
 Environment=TZ=UTC
+Environment=PYTHONPATH=/etc/ipatuura
+Environment=DJANGO_SETTINGS_MODULE=settings.py
 PodmanArgs=--privileged
 
 # Ports
@@ -24,6 +26,9 @@ PublishPort=3500:3500
 PublishPort=81:81
 PublishPort=443:443
 
+# Volumes
+Volume=/etc/ipatuura:/etc/ipatuura:Z
+
 [Install]
 WantedBy=multi-user.target
 

roles/ipatuura/templates/settings.py.j2

@@ -0,0 +1 @@
+from root.settings import *