Some work on converting to *EL and updating to newer install instructions

roles/taiga-front/tasks/gulp.yml

 ---
-- name: install required packages
-  become: true
-  become_user: root
-  apt:
-    name:
-      - ruby
-      - ruby-dev
-    state: "{{ taiga_upgrade | bool | ternary('latest', 'present') }}"
-  tags:
-    - install
-    - front-install
-
-- name: install required gems
-  become: true
-  become_user: "{{ taiga_user }}"
-  gem:
-    user_install: true
-    name: "{{ item }}"
-  with_items:
-    - sass
-    - scss_lint
-  tags:
-    - install
-    - front-install
-
-- name: install global NPM modules
-  become: true
-  become_user: root
-  npm:
-    name: "{{ item }}"
-    global: true
-    state: "{{ taiga_upgrade | bool | ternary('latest', 'present') }}"
-  with_items:
-    - gulp
-  tags:
-    - install
-    - front-install
-
-- name: install local NPM modules
-  become: true
-  become_user: "{{ taiga_user }}"
-  npm:
-    path: "{{ taiga_user_home }}/{{ taiga_front_checkout_dir }}"
-    state: "{{ taiga_upgrade | bool | ternary('latest', 'present') }}"
-  tags:
-    - install
-    - front-install
-
-- name: run gulp deploy
-  become: true
-  become_user: "{{ taiga_user }}"
-  command: gulp deploy
-  args:
-    chdir: "{{ taiga_user_home }}/{{ taiga_front_checkout_dir }}"
-    creates: "{{ taiga_user_home }}/{{ taiga_front_checkout_dir }}/dist/conf.example.json"
-  tags:
-    - config
-    - front-config

roles/taiga-node/tasks/CentOS.yml

+---
+
+- name: install nodejs
+  become: true
+  package:
+    name: "nodejs:12"
+    state: "{{ taiga_upgrade | bool | ternary('latest', 'present') }}"
+  tags:
+    - install
+    - front-install
+    - events-install

roles/taiga-node/tasks/Ubuntu.yml

+---
+- name: install apt-transport-https
+  become: true
+  become_user: root
+  apt:
+    name: apt-transport-https
+  tags:
+    - install
+    - front-install
+    - events-install
+
+- name: add NodeSource repository key
+  become: true
+  become_user: root
+  apt_key:
+    url: https://deb.nodesource.com/gpgkey/nodesource.gpg.key
+  tags:
+    - install
+    - front-install
+    - events-install
+
+- name: add NodeSource repository
+  become: true
+  become_user: root
+  apt_repository:
+    repo: "deb https://deb.nodesource.com/node_8.x {{ ansible_distribution_release }} main"
+  register: nodesource_repo
+  tags:
+    - install
+    - front-install
+    - events-install
+
+- name: update apt cache if NodeSource repository was added or updated
+  become: true
+  become_user: root
+  apt:
+    update_cache: true
+  when: nodesource_repo.changed
+  tags:
+    - install
+    - front-install
+    - events-install
+    - skip_ansible_lint
+
+- name: install nodejs
+  become: true
+  become_user: root
+  apt:
+    name: nodejs
+    state: "{{ taiga_upgrade | bool | ternary('latest', 'present') }}"
+  tags:
+    - install
+    - front-install
+    - events-install

roles/taiga-node/tasks/main.yml

 ---
-- name: install apt-transport-https
-  become: true
-  become_user: root
-  apt:
-    name: apt-transport-https
+- include: Ubuntu.yml
+  when: ansible_distribution == "Ubuntu"
   tags:
     - install
     - front-install
     - events-install
 
-- name: add NodeSource repository key
-  become: true
-  become_user: root
-  apt_key:
-    url: https://deb.nodesource.com/gpgkey/nodesource.gpg.key
-  tags:
-    - install
-    - front-install
-    - events-install
-
-- name: add NodeSource repository
-  become: true
-  become_user: root
-  apt_repository:
-    repo: "deb https://deb.nodesource.com/node_8.x {{ ansible_distribution_release }} main"
-  register: nodesource_repo
-  tags:
-    - install
-    - front-install
-    - events-install
-
-- name: update apt cache if NodeSource repository was added or updated
-  become: true
-  become_user: root
-  apt:
-    update_cache: true
-  when: nodesource_repo.changed
-  tags:
-    - install
-    - front-install
-    - events-install
-    - skip_ansible_lint
-
-- name: install nodejs
-  become: true
-  become_user: root
-  apt:
-    name: nodejs
-    state: "{{ taiga_upgrade | bool | ternary('latest', 'present') }}"
+- include: CentOS.yml
+  when: ansible_distribution == "CentOS"
   tags:
     - install
     - front-install

roles/taiga-webserver/tasks/nginx.yml

@@ -2,7 +2,7 @@
 - name: install nginx
   become: true
   become_user: root
-  apt:
+  package:
     name:
       - nginx
     state: "{{ taiga_upgrade | bool | ternary('latest', 'present') }}"
@@ -11,20 +11,6 @@
     - nginx-install
     - front-install
 
-- name: "make nginx configuration directory writeable for user {{ taiga_user }}"
-  become: true
-  become_user: root
-  file:
-    path: /etc/nginx/conf.d
-    owner: root
-    group: taiga
-    mode: '0775'
-  tags:
-    - config
-    - nginx-config
-    - front-config
-    - offline
-
 - name: "remove nginx default site"
   become: true
   become_user: root
@@ -44,7 +30,10 @@
   become_user: root
   template:
     mode: '0644'
-    owner: "{{ taiga_user }}"
+    owner: root
+    seuser: system_u
+    serole: object_r
+    setype: httpd_config_t
     src: taiga.conf.j2
     dest: "/etc/nginx/conf.d/taiga.conf"
   notify:

roles/taiga-webserver/tasks/ssl.yml

@@ -11,3 +11,4 @@
     - offline
 
 - include: "ssl-{{ 'signed' if taiga_ssl_key else 'selfsign'}}.yml"
+  when: taiga_ssl_selfsign

roles/taiga/defaults/main.yml

@@ -76,6 +76,9 @@ taiga_enable_public_register: false
 # WebSockets (WSS)?
 taiga_enable_ssl: false
 
+# Should the module self-sign a certificate, or will you provide it?
+taiga_ssl_selfsign: true
+
 # The common name in the X.509 certificate used for SSL (and SAML, if
 # configured).
 taiga_ssl_common_name: "{{ taiga_frontend_host or ansible_fqdn }}"
@@ -316,3 +319,8 @@ taiga_saml_contact_person: {}
 #     lang:      SAML_ATTRIBUTE_NAME_LANG
 #     timezone:  SAML_ATTRIBUTE_NAME_TIMEZONE
 taiga_saml_mapping: {}
+
+# What packages should be installed for ruby
+taiga_ruby_packages:
+  - ruby
+  - ruby-dev

roles/taiga/tasks/main.yml

@@ -49,31 +49,12 @@
   tags:
     - always
 
-- name: populate hosts file
-  become: true
-  become_user: root
-  lineinfile:
-    dest: /etc/hosts
-    regexp: '{{ hostvars[item].ansible_default_ipv4.address }}.*{{ hostvars[item].ansible_hostname }}$'
-    line: "{{ hostvars[item].ansible_default_ipv4.address }} {{ hostvars[item].ansible_fqdn }} {{ hostvars[item].ansible_hostname }}"
-    state: present
-  with_items: "{{ groups.all }}"
-  when: >
-    taiga_populate_hosts
-    and (hostvars[item].ansible_default_ipv4 is defined)
-  tags:
-    - config
-    - front-config
-    - back-config
-    - events-config
-    - offline
-
 - name: "create user {{ taiga_user }}"
   become: true
   become_user: root
   user:
     name: "{{ taiga_user }}"
-    groups: sudo
+    #groups: sudo
     home: "{{ taiga_user_home }}"
   tags:
     - install
@@ -103,6 +84,7 @@
   become_user: root
   apt:
     update_cache: true
+  when: ansible_distribution == "Ubuntu"
   tags:
     - install
     - front-install
@@ -112,7 +94,7 @@
 - name: optionally upgrade installed packages
   become: true
   become_user: root
-  apt:
+  package:
     upgrade: true
   when: "taiga_upgrade | bool"
   tags: