Modul Esensial & Troubleshooting Ansible

- name: Buat user deployer dengan akses sudo
  user:
    name: deployer
    groups: sudo
    append: yes
    shell: /bin/bash

- name: Pasang SSH public key untuk deployer
  authorized_key:
    user: deployer
    state: present
    key: "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIG..."

- name: Pastikan direktori aplikasi ada dengan permission yang benar
  file:
    path: /opt/myapp/data
    state: directory
    owner: deployer
    group: deployer
    mode: '0755'

- name: Matikan password authentication pada SSH server
  lineinfile:
    path: /etc/ssh/sshd_config
    regexp: '^#?PasswordAuthentication'
    line: 'PasswordAuthentication no'
    state: present
  notify: Restart SSH Service

- name: Kloning repositori kode produksi
  git:
    repo: 'https://github.com/company/web-backend.git'
    dest: /var/www/myapp
    version: main
    force: yes

- name: Jalankan kontainer Redis cache
  community.docker.docker_container:
    name: redis-cache
    image: redis:alpine
    state: started
    restart_policy: always
    ports:
      - "6379:6379"

- name: Tampilkan fakta IP address server target
  debug:
    msg: "Alamat IP privat server ini adalah {{ ansible_default_ipv4.address }}"

- name: Jalankan perintah shell khusus
  command: docker ps
  register: docker_output

- name: Cetak output perintah docker tadi ke terminal
  debug:
    var: docker_output.stdout_lines

# Level verbose standar
ansible-playbook -i hosts.ini site.yml -v

# Level connection debug (melihat perintah SSH mentah yang dikirim)
ansible-playbook -i hosts.ini site.yml -vvv

- name: Konfigurasi Virtual Host Nginx
  template:
    src: vhost.j2
    dest: /etc/nginx/sites-available/default
  tags: [nginx-config]

ansible-playbook -i hosts.ini site.yml --tags "nginx-config"