Install & Deployer Update

tasks/deployer.yml

@@ -14,8 +14,8 @@
   vars:
     paths:
       divarinet.northeurope.cloudapp.azure.com:
-        - github-MetroHege-MPP-Frontend
+        - github-metrohege-mpp-frontend
-        - github-metrohege-MPP-Backend
+        - github-metrohege-mpp-backend
   tags:
     - ssh
 
@@ -27,15 +27,15 @@
     - certbot
     - tls
 
-- name: "Deployer - Certbot - Copy Certificates"
+# - name: "Deployer - Certbot - Copy Certificates"
-  copy:
+#   copy:
-    src: "/etc/letsencrypt/live/mpp/"
+#     src: "/etc/letsencrypt/live/mpp/"
-    dest: "/root/certs/mpp/"
+#     dest: "/root/certs/mpp/"
-    follow: true
+#     follow: true
-  register: task
+#   register: task
-  tags:
+#   tags:
-    - certbot
+#     - certbot
-    - tls
+#     - tls
 
 - name: "Deployer - MariaDB - Pull Image"
   containers.podman.podman_image:
@@ -56,8 +56,7 @@
       - "/root/mariadb:/var/lib/mysql"
     restart_policy: always
     env:
-    # TODO
+      MYSQL_ROOT_PASSWORD: "y9ZmTmUKLaRrZ4SA"
-      MYSQL_ROOT_PASSWORD: "no password?"
   register: deployerTask102
   when:
     - ansible_facts.fqdn == "divarinet.northeurope.cloudapp.azure.com"
@@ -79,7 +78,7 @@
 - name: "Deployer - MariaDB - Upgrade"
   containers.podman.podman_container_exec:
     container: "mariadb"
-    command: "mariadb-upgrade --host=127.0.0.1 --user=root --password=wE7qVL67xJaaXkfo"
+    command: "mariadb-upgrade --host=127.0.0.1 --user=root --password=y9ZmTmUKLaRrZ4SA"
   register: task
   ignore_errors: yes
   changed_when: task.stdout.find("This installation of MariaDB is already upgraded") == -1
@@ -93,12 +92,12 @@
   mysql_user:
     login_host: "127.0.0.1"
     login_user: root
-    login_password: "wE7qVL67xJaaXkfo"
+    login_password: "y9ZmTmUKLaRrZ4SA"
     ca_cert: "/etc/letsencrypt/live/mpp/chain.pem"
     check_hostname: no
     name: "mpp"
     host: "%"
-    password: "UOzw4ijLaJQI13Ec"
+    password: "JRrnk4Gia9gn24y5"
     priv: "mpp.*:ALL"
   vars:
     ansible_python_interpreter: "/opt/ansible/bin/python3"
@@ -112,7 +111,7 @@
   mysql_db:
     login_host: "127.0.0.1"
     login_user: "mpp"
-    login_password: "UOzw4ijLaJQI13Ec"
+    login_password: "JRrnk4Gia9gn24y5"
     ca_cert: "/etc/letsencrypt/live/mpp/chain.pem"
     check_hostname: no
     name: "mpp"
@@ -173,7 +172,7 @@
 - name: "Deployer - Frontend - Git Operations"
   git:
     repo: git@github.com:MetroHege/MPP-Frontend.git
-    dest: /root/backend/client
+    dest: /root/frontend
     version: master
   register: deployerTask531
   when:
@@ -183,7 +182,7 @@
   containers.podman.podman_image:
     name: mpp/frontend
     tag: latest
-    path: /root/backend/client
+    path: /root/frontend
     build:
       file: Dockerfile
       format: docker
@@ -206,9 +205,9 @@
     recreate: on
     network: host
     volumes:
-      - "/root/backend/client/.env:/usr/src/app/.env:ro"
+      - "/root/frontend/:/usr/src/app/"
     restart_policy: always
-    command: "npm start"
+    command: "npm run build"
   when:
     - ansible_facts.fqdn == "divarinet.northeurope.cloudapp.azure.com"
     - deployerTask532 is defined

tasks/install.yml

@@ -111,28 +111,19 @@
   tags:
     - certbot
 
-- name: "Install - Certbot - Auth Hook"
+# - name: "Install - Certbot - Create Certificates"
-  get_url:
+#   command: "certbot certonly --cert-name {{ cert.name }} --manual --preferred-challenges dns-01 --email {{ cert.email }} --server https://acme-v02.api.letsencrypt.org/directory --agree-tos -n --manual-auth-hook /etc/letsencrypt/renewal-hooks/pre/acme-dns-auth.py --debug-challenges --preferred-chain='ISRG Root X1' --key-type rsa -d {{ cert.domains | join(' -d ') }}"
-    url: "https://git.waren.io/warengroup/acme-dns-auth/raw/branch/master/acme-dns-auth.py"
+#   register: task
-    dest: "/etc/letsencrypt/renewal-hooks/pre/acme-dns-auth.py"
+#   changed_when: task.stdout.find("Certificate not yet due for renewal; no action taken.") == -1
-    mode: '700'
+#   vars:
-    force: true
+#     cert:
-  tags:
+#       name: musix
-    - certbot
+#       email: musixdiscordbot@gmail.com
-
+#       domains:
-- name: "Install - Certbot - Create Certificates"
+#         - musix-org.com
-  command: "certbot certonly --cert-name {{ cert.name }} --manual --preferred-challenges dns-01 --email {{ cert.email }} --server https://acme-v02.api.letsencrypt.org/directory --agree-tos -n --manual-auth-hook /etc/letsencrypt/renewal-hooks/pre/acme-dns-auth.py --debug-challenges --preferred-chain='ISRG Root X1' --key-type rsa -d {{ cert.domains | join(' -d ') }}"
+#         - "*.musix-org.com"
-  register: task
+#   tags:
-  changed_when: task.stdout.find("Certificate not yet due for renewal; no action taken.") == -1
+#     - certbot
-  vars:
-    cert:
-      name: musix
-      email: musixdiscordbot@gmail.com
-      domains:
-        - musix-org.com
-        - "*.musix-org.com"
-  tags:
-    - certbot
 
 - name: "Install - MariaDB - Dependencies / Python Library : pymysql"
   pip:
@@ -156,8 +147,8 @@
     minute: "0"
     job: "/opt/ansible/bin/ansible-pull -U ssh://git@github.com/MatteZ02/mpp-ansible --accept-host-key --private-key ~/.ssh/id_rsa tasks.yml -t maintenance"
 
-- name: "Install - Schedule - Deployer"
+# - name: "Install - Schedule - Deployer"
-  cron:
+#   cron:
-    name: Deployer
+#     name: Deployer
-    minute: "*/5"
+#     minute: "*/5"
-    job: "/opt/ansible/bin/ansible-pull -U ssh://git@github.com/MatteZ02/mpp-ansible --accept-host-key --private-key ~/.ssh/id_rsa tasks.yml -t deployer"
+#     job: "/opt/ansible/bin/ansible-pull -U ssh://git@github.com/MatteZ02/mpp-ansible --accept-host-key --private-key ~/.ssh/id_rsa tasks.yml -t deployer"