mattez02-infra/tasks/deployer.yml

---
- name: "Deployer - Certbot - Renew Certificates"
  command: "certbot renew"
  register: task
  changed_when: task.stdout.find("No renewals were attempted.") == -1
  tags:
    - certbot
    - tls

- name: "Deployer - Certbot - Copy Certificates"
  copy:
    src: "/etc/letsencrypt/live/mpp/"
    dest: "/root/certs/mpp/"
    follow: true
  register: task
  tags:
    - certbot
    - tls

- name: "Deployer - MariaDB - Create Folder"
  file:
    path: "/root/mariadb"
    state: directory
  tags:
    - mariadb

- name: "Deployer - MariaDB - Pull Image"
  containers.podman.podman_image:
    name: docker.io/mariadb
    tag: latest
    force: on
  register: deployerTask101

- name: "Deployer - MariaDB - Run Container"
  containers.podman.podman_container:
    name: mariadb
    image: docker.io/mariadb:latest
    state: started
    restart: on
    network: host
    volumes:
      - "/root/mariadb:/var/lib/mysql"
    restart_policy: always
    env:
      MYSQL_ROOT_PASSWORD: "{{ secrets.mariadb.users.root.password }}"
  register: deployerTask102
  when:
    - (deployerTask101 is defined and deployerTask101.changed) or deployerTask101 is undefined
  tags:
    - mariadb

- name: "Deployer - MariaDB - Wait"
  wait_for:
    host: "127.0.0.1"
    port: "3306"
    delay: 10
  when:
    - (deployerTask102 is defined and deployerTask102.changed) or deployerTask102 is undefined
  tags:
    - mariadb

- name: "Deployer - MariaDB - Upgrade"
  containers.podman.podman_container_exec:
    name: mariadb
    command: "mariadb-upgrade --host=127.0.0.1 --user=root --password={{ secrets.mariadb.users.root.password }}"
  register: task
  ignore_errors: yes
  changed_when:
    - task.stdout is defined
    - task.stdout.find("This installation of MariaDB is already upgraded") == -1
  when:
    - (deployerTask102 is defined and deployerTask102.changed) or deployerTask102 is undefined
  tags:
    - mariadb

- name: "Deployer - MariaDB - Create Users"
  mysql_user:
    login_host: "127.0.0.1"
    login_user: root
    login_password: "{{ secrets.mariadb.users.root.password }}"
    name: "mpp"
    host: "%"
    password: "{{ secrets.mariadb.users.mpp.password }}"
    priv: "mpp.*:ALL"
  vars:
    ansible_python_interpreter: "/opt/ansible/bin/python3"
  when:
    - (deployerTask102 is defined and deployerTask102.changed) or deployerTask102 is undefined
  tags:
    - mariadb

- name: "Deployer - MariaDB - Create Database"
  mysql_db:
    login_host: "127.0.0.1"
    login_user: "mpp"
    login_password: "{{ secrets.mariadb.users.mpp.password }}"
    name: "mpp"
  vars:
    ansible_python_interpreter: "/opt/ansible/bin/python3"
  when:
    - (deployerTask102 is defined and deployerTask102.changed) or deployerTask102 is undefined
  tags:
    - mariadb

- name: "Deployer - Nginx - Configure - Create Folder"
  file:
    path: "/root/nginx/"
    state: directory
  tags:
    - nginx

- name: "Deployer - Nginx - Configure - Create Subfolders"
  file:
    dest: '/root/nginx/{{ item.path }}'
    state: directory
  with_filetree: './files/nginx/'
  loop_control:
    label: "{{ item.path }}"
  when:
    - item.state == 'directory'
  tags:
    - nginx

- name: "Deployer - Nginx - Configure - Generating & Transferring Files"
  template:
    src: '{{ item.src }}'
    dest: '/root/nginx/{{ item.path }}'
  with_filetree: './files/nginx/'
  loop_control:
    label: "{{ item.path }}"
  when:
    - item.state == 'file'
  tags:
    - nginx

- name: "Deployer - Nginx - Pull Image"
  containers.podman.podman_image:
    name: docker.io/nginx
    tag: latest
    force: on
  register: deployerTask3

- name: "Deployer - Nginx - Run Container"
  containers.podman.podman_container:
    name: nginx
    image: docker.io/nginx
    state: started
    recreate: on
    network: host
    volumes:
      - "/root/nginx/html:/usr/share/nginx/html:ro"
      - "/root/nginx/config.conf:/etc/nginx/nginx.conf:ro"
      - "/root/nginx/conf/:/etc/nginx/conf.d/:ro"
      - "/root/certs/:/etc/nginx/certs/:ro"
    restart_policy: always
  when:
    - (deployerTask3 is defined and deployerTask3.changed) or deployerTask3 is undefined
  tags:
    - nginx

- name: "Deployer - Frontend - Git Operations"
  git:
    repo: https://github.com/MetroHege/MPP-Frontend.git
    dest: /root/frontend
    version: main
  register: deployerTask531

- name: "Deployer - Frontend - Build Image"
  containers.podman.podman_image:
    name: mpp/frontend
    tag: latest
    path: /root/frontend
    build:
      file: Dockerfile
      format: docker
      cache: off
    force: on
  register: deployerTask532
  when:
    - (deployerTask531 is defined and deployerTask531.changed) or deployerTask531 is undefined
  tags:
    - frontend

- name: "Deployer - Frontend - Run Container"
  containers.podman.podman_container:
    name: frontend
    image: mpp/frontend:latest
    state: started
    recreate: on
    network: host
    volumes:
      - "/root/frontend/.env:/usr/src/app/.env"
    restart_policy: always
    command: "npm start"
  when:
    - deployerTask532 is defined
    - deployerTask532.changed
  tags:
    - frontend

- name: "Deployer - Backend - Git Operations"
  git:
    repo: https://github.com/MetroHege/MPP-Backend.git
    dest: /root/backend
    version: main
  register: deployerTask521

- name: "Deployer - Backend - Build Image"
  containers.podman.podman_image:
    name: mpp/backend
    tag: latest
    path: /root/backend
    build:
      file: Dockerfile
      format: docker
      cache: off
    force: on
  register: deployerTask522
  when:
    - (deployerTask521 is defined and deployerTask521.changed) or deployerTask521 is undefined
  tags:
    - backend

- name: "Deployer - Backend - Run Container"
  containers.podman.podman_container:
    name: backend
    image: mpp/backend:latest
    state: started
    recreate: on
    network: host
    volumes:
      - "/root/backend/uploads:/usr/src/app/uploads"
      - "/root/backend/.env:/usr/src/app/.env:ro"
    restart_policy: always
    command: "npm start"
  when:
    - deployerTask522 is defined
    - deployerTask522.changed
  tags:
    - backend