AWX (Ansible Tower)

services:
  awx-init:
    image: quay.io/ansible/awx:latest
    pull_policy: always
    restart: 'no'
    entrypoint:
    - sh
    command:
    - -c
    - cp -r /etc/nginx/. /init-nginx/ && echo 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
      | base64 -d > /init-tower/settings.py && cp /etc/tower/uwsgi.ini /init-tower/uwsgi.ini
      && echo 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
      | base64 -d > /init-nginx/nginx.conf
    volumes:
    - awx-tower:/init-tower:Z
    - awx-nginx:/init-nginx:Z
  awx-web:
    image: quay.io/ansible/awx:latest
    pull_policy: always
    restart: always
    environment:
    - DATABASE_USER=awx
    - DATABASE_PASSWORD=Bb3GfGNhP_tp2j7MeCUDUw
    - DATABASE_NAME=awx
    - DATABASE_HOST=127.0.0.1
    - DATABASE_PORT=5432
    - REDIS_HOST=127.0.0.1
    - REDIS_PORT=6379
    - SECRET_KEY=sH-5EVaeQo7PL4TV7xoudA
    - AWX_ADMIN_USER=admin
    - AWX_ADMIN_PASSWORD=Bb3GfGNhP_tp2j7MeCUDUw
    entrypoint:
    - /bin/sh
    command:
    - -c
    - until python3 -c "import socket;s=socket.create_connection(('$${DATABASE_HOST:-127.0.0.1}',$${DATABASE_PORT:-5432}),1);s.close()"
      2>/dev/null; do echo 'Waiting for postgres...'; sleep 3; done && awx-manage
      migrate && DJANGO_SUPERUSER_PASSWORD=$${AWX_ADMIN_PASSWORD:-Bb3GfGNhP_tp2j7MeCUDUw}
      awx-manage createsuperuser --noinput --username $${AWX_ADMIN_USER:-admin} --email
      admin@localhost 2>/dev/null || true && exec /usr/bin/launch_awx_web.sh
    depends_on:
      awx-init:
        condition: service_completed_successfully
      postgres:
        condition: service_started
      redis:
        condition: service_started
    volumes:
    - awx-tower:/etc/tower:Z
    - awx-nginx:/etc/nginx:Z
    - awx-projects:/var/lib/awx/projects:Z
    network_mode: service:postgres
  awx-task:
    image: quay.io/ansible/awx:latest
    pull_policy: always
    restart: always
    environment:
    - DATABASE_USER=awx
    - DATABASE_PASSWORD=Bb3GfGNhP_tp2j7MeCUDUw
    - DATABASE_NAME=awx
    - DATABASE_HOST=127.0.0.1
    - DATABASE_PORT=5432
    - REDIS_HOST=127.0.0.1
    - REDIS_PORT=6379
    - SECRET_KEY=sH-5EVaeQo7PL4TV7xoudA
    - AWX_ADMIN_USER=admin
    - AWX_ADMIN_PASSWORD=Bb3GfGNhP_tp2j7MeCUDUw
    entrypoint:
    - /usr/bin/launch_awx_task.sh
    depends_on:
      awx-init:
        condition: service_completed_successfully
      postgres:
        condition: service_started
      redis:
        condition: service_started
    volumes:
    - awx-tower:/etc/tower:Z
    - awx-projects:/var/lib/awx/projects:Z
    network_mode: service:postgres
  postgres:
    image: docker.io/postgres:15
    restart: always
    environment:
    - POSTGRES_USER=awx
    - POSTGRES_PASSWORD=Bb3GfGNhP_tp2j7MeCUDUw
    - POSTGRES_DB=awx
    user: 999:999
    depends_on:
      awx-init:
        condition: service_completed_successfully
    volumes:
    - awx-db:/var/lib/postgresql/data:Z
    ports:
    - 8052:8052
  redis:
    image: docker.io/redis:7-alpine
    restart: always
    command:
    - redis-server
    - --appendonly
    - 'yes'
    depends_on:
      awx-init:
        condition: service_completed_successfully
      postgres:
        condition: service_started
    volumes:
    - awx-redis:/data:Z
    network_mode: service:postgres
volumes:
  awx-tower: null
  awx-nginx: null
  awx-projects: null
  awx-db: null
  awx-redis: null

#!/bin/bash
set -e

# ── Create named volumes ───────────────────────────────────────────
# Named volumes are created automatically — no UID/GID permission adjustment needed.
podman volume exists awx-tower || podman volume create awx-tower
podman volume exists awx-nginx || podman volume create awx-nginx
podman volume exists awx-projects || podman volume create awx-projects
podman volume exists awx-db || podman volume create awx-db
podman volume exists awx-redis || podman volume create awx-redis

# ── Create pod ─────────────────────────────────────────────────────
podman pod create \
  --name awx \
  -p 8052:8052

# ── Init container: awx-awx-init ────────────────────────────────────────
podman create \
  --pod awx \
  --name awx-awx-init \
  --init-ctr=once \
  --pull always \
  -v awx-tower:/init-tower:Z \
  -v awx-nginx:/init-nginx:Z \
  --entrypoint sh \
  quay.io/ansible/awx:latest \
  -c 'cp -r /etc/nginx/. /init-nginx/ && echo aW1wb3J0IG9zCgpEQVRBQkFTRVMgPSB7CiAgICAnZGVmYXVsdCc6IHsKICAgICAgICAnQVRPTUlDX1JFUVVFU1RTJzogVHJ1ZSwKICAgICAgICAnRU5HSU5FJzogJ2F3eC5tYWluLmRiLnByb2ZpbGVkX3BnJywKICAgICAgICAnTkFNRSc6IG9zLmVudmlyb24uZ2V0KCdEQVRBQkFTRV9OQU1FJywgJ2F3eCcpLAogICAgICAgICdVU0VSJzogb3MuZW52aXJvbi5nZXQoJ0RBVEFCQVNFX1VTRVInLCAnYXd4JyksCiAgICAgICAgJ1BBU1NXT1JEJzogb3MuZW52aXJvbi5nZXQoJ0RBVEFCQVNFX1BBU1NXT1JEJywgJ2NoYW5nZW1lJyksCiAgICAgICAgJ0hPU1QnOiBvcy5lbnZpcm9uLmdldCgnREFUQUJBU0VfSE9TVCcsICcxMjcuMC4wLjEnKSwKICAgICAgICAnUE9SVCc6IG9zLmVudmlyb24uZ2V0KCdEQVRBQkFTRV9QT1JUJywgJzU0MzInKSwKICAgIH0KfQpBTExPV0VEX0hPU1RTID0gWycqJ10KU0VDUkVUX0tFWSA9IG9zLmVudmlyb24uZ2V0KCdTRUNSRVRfS0VZJywgJ2NoYW5nZW1lJykKREpBTkdPX1JFRElTX0lHTk9SRV9FWENFUFRJT05TID0gVHJ1ZQoKX3JlZGlzX2hvc3QgPSBvcy5lbnZpcm9uLmdldCgnUkVESVNfSE9TVCcsICcxMjcuMC4wLjEnKQpfcmVkaXNfcG9ydCA9IG9zLmVudmlyb24uZ2V0KCdSRURJU19QT1JUJywgJzYzNzknKQpfcmVkaXNfdXJsID0gJ3JlZGlzOi8ve306e30nLmZvcm1hdChfcmVkaXNfaG9zdCwgX3JlZGlzX3BvcnQpCgpDQUNIRVMgPSB7CiAgICAnZGVmYXVsdCc6IHsKICAgICAgICAnQkFDS0VORCc6ICdhd3gubWFpbi5jYWNoZS5BV1hSZWRpc0NhY2hlJywKICAgICAgICAnTE9DQVRJT04nOiAne30vMScuZm9ybWF0KF9yZWRpc191cmwpLAogICAgfQp9CkNIQU5ORUxfTEFZRVJTID0gewogICAgJ2RlZmF1bHQnOiB7CiAgICAgICAgJ0JBQ0tFTkQnOiAnY2hhbm5lbHNfcmVkaXMuY29yZS5SZWRpc0NoYW5uZWxMYXllcicsCiAgICAgICAgJ0NPTkZJRyc6IHsKICAgICAgICAgICAgJ2hvc3RzJzogWyhfcmVkaXNfaG9zdCwgaW50KF9yZWRpc19wb3J0KSldLAogICAgICAgICAgICAnY2FwYWNpdHknOiAxMDAwMCwKICAgICAgICAgICAgJ2dyb3VwX2V4cGlyeSc6IDE1Nzc4NDc2MCwKICAgICAgICB9CiAgICB9Cn0KQlJPS0VSX1VSTCA9IF9yZWRpc191cmwK | base64 -d > /init-tower/settings.py && cp /etc/tower/uwsgi.ini /init-tower/uwsgi.ini && echo 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 | base64 -d > /init-nginx/nginx.conf'

# ── Container: awx-awx-web ─────────────────────────────────────────────
podman create \
  --pod awx \
  --name awx-awx-web \
  --restart always \
  --pull always \
  -e DATABASE_USER='awx' \
  -e DATABASE_PASSWORD='Bb3GfGNhP_tp2j7MeCUDUw' \
  -e DATABASE_NAME='awx' \
  -e DATABASE_HOST='127.0.0.1' \
  -e DATABASE_PORT='5432' \
  -e REDIS_HOST='127.0.0.1' \
  -e REDIS_PORT='6379' \
  -e SECRET_KEY='sH-5EVaeQo7PL4TV7xoudA' \
  -e AWX_ADMIN_USER='admin' \
  -e AWX_ADMIN_PASSWORD='Bb3GfGNhP_tp2j7MeCUDUw' \
  -v awx-tower:/etc/tower:Z \
  -v awx-nginx:/etc/nginx:Z \
  -v awx-projects:/var/lib/awx/projects:Z \
  --entrypoint /bin/sh \
  quay.io/ansible/awx:latest \
  -c 'until python3 -c "import socket;s=socket.create_connection(('"'"'${DATABASE_HOST:-127.0.0.1}'"'"',${DATABASE_PORT:-5432}),1);s.close()" 2>/dev/null; do echo '"'"'Waiting for postgres...'"'"'; sleep 3; done && awx-manage migrate && DJANGO_SUPERUSER_PASSWORD=${AWX_ADMIN_PASSWORD:-Bb3GfGNhP_tp2j7MeCUDUw} awx-manage createsuperuser --noinput --username ${AWX_ADMIN_USER:-admin} --email admin@localhost 2>/dev/null || true && exec /usr/bin/launch_awx_web.sh'

# ── Container: awx-awx-task ─────────────────────────────────────────────
podman create \
  --pod awx \
  --name awx-awx-task \
  --restart always \
  --pull always \
  -e DATABASE_USER='awx' \
  -e DATABASE_PASSWORD='Bb3GfGNhP_tp2j7MeCUDUw' \
  -e DATABASE_NAME='awx' \
  -e DATABASE_HOST='127.0.0.1' \
  -e DATABASE_PORT='5432' \
  -e REDIS_HOST='127.0.0.1' \
  -e REDIS_PORT='6379' \
  -e SECRET_KEY='sH-5EVaeQo7PL4TV7xoudA' \
  -e AWX_ADMIN_USER='admin' \
  -e AWX_ADMIN_PASSWORD='Bb3GfGNhP_tp2j7MeCUDUw' \
  -v awx-tower:/etc/tower:Z \
  -v awx-projects:/var/lib/awx/projects:Z \
  --entrypoint /usr/bin/launch_awx_task.sh \
  quay.io/ansible/awx:latest

# ── Container: awx-postgres ─────────────────────────────────────────────
podman create \
  --pod awx \
  --name awx-postgres \
  --restart always \
  -e POSTGRES_USER='awx' \
  -e POSTGRES_PASSWORD='Bb3GfGNhP_tp2j7MeCUDUw' \
  -e POSTGRES_DB='awx' \
  -v awx-db:/var/lib/postgresql/data:Z \
  --user 999:999 \
  docker.io/postgres:15

# ── Container: awx-redis ─────────────────────────────────────────────
podman create \
  --pod awx \
  --name awx-redis \
  --restart always \
  -v awx-redis:/data:Z \
  docker.io/redis:7-alpine \
  redis-server --appendonly yes

# ── Start pod ──────────────────────────────────────────────────────
podman pod start awx

# ── Stop & clean up ───────────────────────────────────────────────
# podman pod stop awx
# podman pod rm awx