---
- name: Jenkins in Docker (with JCasC & baked plugins)
  hosts: jenkins
  become: true
  vars:
    nginx_conf_path: /etc/nginx/sites-available/jenkins.conf
    nginx_conf_link: /etc/nginx/sites-enabled/jenkins.conf
    jenkins_version: "lts-jdk17"     # можно weekly, но lts стабильнее
    jenkins_image_name: "jenkins-custom-casc:1.0.0"
    jenkins_root: "/srv/jenkins"
    jenkins_data_dir: "{{ jenkins_root }}/data"
    jenkins_build_dir: "{{ jenkins_root }}/build"
    jenkins_http_port: 8080
    jenkins_agent_port: 50000
    jenkins_admin_user: "admin"
    # jenkins_admin_password: "ChangeMe_UseVault!"  # Хранить в Ansible Vault! - поставил на хосте
    jenkins_url: "http://{{ ansible_default_ipv4.address }}:{{ jenkins_http_port }}"
    jenkins_plugins:
      - configuration-as-code
      - job-dsl
      - workflow-aggregator
      - credentials
      - credentials-binding
      - git
      - github
      - ssh-credentials
      - matrix-auth
      - timestamper
      - email-ext
      - ws-cleanup
      - pipeline-utility-steps
  roles:
    - jenkins