refacto: split creation of config files from general update of hydra sp

defaults/main.yml

@@ -228,6 +228,7 @@ oidc_test_app_public_base_url: "{{ haproxy_public_base_url }}{{ haproxy_oidc_tes
 
 enable_hydra_oidc: no
 hydra_oidc_debug: no
+hydra_oidc_internal_port: 8080
 hydra_oidc_hydra_url_error:
 hydra_oidc_base_url:
 hydra_oidc_cookie_path: "{{ haproxy_hydra_oidc_base_path }}"

handlers/main.yml

@@ -46,6 +46,7 @@
     name: cadoles-pod-hydra-oidc-v1
     state: restarted
   become: true
+  when: not install_only
 
 - name: Restart cadoles-pod-hydra-ldap-v1
   service:

tasks/configure-hydra-sp.yml

@@ -0,0 +1,21 @@
+---
+# Simple task to update the config files of cadoles-pod-shibboleth-sp only.
+
+- name: Configure cadoles-pod-shibboleth-sp-v3
+  ansible.builtin.template:
+    src: "{{ item.src }}"
+    dest: "{{ item.dest }}"
+    mode: "{{ item.mode }}"
+  with_items:
+    - src:  cadoles-pod-shibboleth-sp-v3.conf.j2
+      dest: /etc/cadoles-pod-shibboleth-sp-v3.conf
+      mode: u=rw,g=r
+    - src:  shibboleth-attribute-map.inc.xml.j2
+      dest: /etc/shibboleth/attribute-map.inc.xml
+      mode: u=rw,g=r,o=r
+    - src:  shibboleth-attribute-policy.inc.xml.j2
+      dest: /etc/shibboleth/attribute-policy.inc.xml
+      mode: u=rw,g=r,o=r
+  notify:
+    - Restart cadoles-pod-shibboleth-sp-v3
+  become: true

tasks/update-hydra-sp.yml

@@ -8,21 +8,5 @@
     state: present
   become: true
 
-- name: Configure cadoles-pod-shibboleth-sp-v3
-  template:
-    src: "{{ item.src }}"
-    dest: "{{ item.dest }}"
-    mode: "{{ item.mode }}"
-  with_items:
-    - src:  cadoles-pod-shibboleth-sp-v3.conf.j2
-      dest: /etc/cadoles-pod-shibboleth-sp-v3.conf
-      mode: u=rw,g=r
-    - src:  shibboleth-attribute-map.inc.xml.j2
-      dest: /etc/shibboleth/attribute-map.inc.xml
-      mode: u=rw,g=r,o=r
-    - src:  shibboleth-attribute-policy.inc.xml.j2
-      dest: /etc/shibboleth/attribute-policy.inc.xml
-      mode: u=rw,g=r,o=r
-  notify:
-    - Restart cadoles-pod-shibboleth-sp-v3
-  become: true
+- name: Configure hydra SP
+  ansible.builtin.include_tasks: configure-hydra-sp.yml

templates/cadoles-pod-hydra-dispatcher-v1.conf.j2

@@ -4,7 +4,7 @@ PODMAN_ARGS="\
     --replace \
     --network=slirp4netns:allow_host_loopback=true \
     --tz=local \
-    -p 127.0.0.1:3000:80 \
+    -p 127.0.0.1:3000:8080 \
     -e APP_ENV=prod \
     -e 'APP_DEBUG={{ hydra_dispatcher_debug }}' \
     -e HYDRA_ADMIN_BASE_URL=http://10.0.2.2:4445 \
@@ -21,7 +21,8 @@ PODMAN_ARGS="\
     -e 'SENTRY_DSN={{ hydra_dispatcher_sentry_dsn }}' \
     -e 'SENTRY_ENVIRONMENT={{ hydra_dispatcher_sentry_environment }}' \
     -e 'DISABLE_APP_AUTO_SELECT={{ hydra_dispatcher_disable_app_auto_select }}' \
-    -v /etc/hydra-dispatcher/conf.d:/var/www/config/hydra \
+    -e 'PHP_FPM_MEMORY_LIMIT=128m' \
+    -v /etc/hydra-dispatcher/conf.d:/app/config/hydra \
     {% for item in hydra_dispatcher_mounts %}
     -v {{ item.host }}:{{ item.container }} \
     {% endfor %}

templates/cadoles-pod-hydra-oidc-v1.conf.j2

@@ -4,7 +4,7 @@ PODMAN_ARGS="\
     --replace \
     --network=slirp4netns:allow_host_loopback=true \
     --tz=local \
-    -p 127.0.0.1:3004:80 \
+    -p 127.0.0.1:3004:{{ hydra_oidc_internal_port | default(8080) }} \
     -e APP_ENV=prod \
     -e 'APP_DEBUG={{ hydra_oidc_debug }}' \
     -e 'HYDRA_ADMIN_BASE_URL=http://10.0.2.2:3000' \