mattez02-infra/tasks/deployer.yml

---
- name: "Deployer - SSH - Generate Keypairs"
  community.crypto.openssh_keypair:
    path: "/root/.ssh/keys/{{ path }}"
    type: rsa
    comment: "{{ ansible_facts.fqdn }}"
    owner: root
    group: root
    mode: '0600'
  loop: "{{ paths[ansible_facts.fqdn] }}"
  loop_control:
    label: "{{ path }}"
    loop_var: "path"
  vars:
    paths:
      divari.northeurope.cloudapp.azure.com:
        - github-metrohege-mpp-frontend
        - github-metrohege-mpp-backend
  tags:
    - ssh

- name: "Deployer - Certbot - Renew Certificates"
  command: "certbot renew"
  register: task
  changed_when: task.stdout.find("No renewals were attempted.") == -1
  tags:
    - certbot
    - tls

# - name: "Deployer - Certbot - Copy Certificates"
#   copy:
#     src: "/etc/letsencrypt/live/mpp/"
#     dest: "/root/certs/mpp/"
#     follow: true
#   register: task
#   tags:
#     - certbot
#     - tls

- name: "Deployer - MariaDB - Pull Image"
  containers.podman.podman_image:
    name: docker.io/mariadb
    tag: latest
  register: deployerTask101

- name: "Deployer - MariaDB - Run Container"
  containers.podman.podman_container:
    name: mariadb
    image: docker.io/mariadb:latest
    state: started
    restart: on
    network: host
    volumes:
      - "/root/mariadb:/var/lib/mysql"
    restart_policy: always
    env:
      MYSQL_ROOT_PASSWORD: "y9ZmTmUKLaRrZ4SA"
  register: deployerTask102
  when:
    - (deployerTask101 is defined and deployerTask101.changed) or deployerTask101 is undefined
  tags:
    - mariadb

- name: "Deployer - MariaDB - Wait"
  wait_for:
    host: "127.0.0.1"
    port: "3306"
    delay: 10
  when:
    - (deployerTask102 is defined and deployerTask102.changed) or deployerTask102 is undefined
  tags:
    - mariadb

# - name: "Deployer - MariaDB - Upgrade"
#   containers.podman.podman_container_exec:
#     container: "mariadb"
#     command: "mariadb-upgrade --host=127.0.0.1 --user=root --password=y9ZmTmUKLaRrZ4SA"
#   register: task
#   ignore_errors: yes
#   changed_when: task.stdout.find("This installation of MariaDB is already upgraded") == -1
#   when:
#     - (deployerTask102 is defined and deployerTask102.changed) or deployerTask102 is undefined
#   tags:
#     - mariadb

- name: "Deployer - MariaDB - Create Users"
  mysql_user:
    login_host: "127.0.0.1"
    login_user: root
    login_password: "y9ZmTmUKLaRrZ4SA"
    name: "mpp"
    host: "%"
    password: "JRrnk4Gia9gn24y5"
    priv: "mpp.*:ALL"
  vars:
    ansible_python_interpreter: "/opt/ansible/bin/python3"
  when:
    - (deployerTask102 is defined and deployerTask102.changed) or deployerTask102 is undefined
  tags:
    - mariadb

- name: "Deployer - MariaDB - Create Database"
  mysql_db:
    login_host: "127.0.0.1"
    login_user: "mpp"
    login_password: "JRrnk4Gia9gn24y5"
    name: "mpp"
  vars:
    ansible_python_interpreter: "/opt/ansible/bin/python3"
  when:
    - (deployerTask102 is defined and deployerTask102.changed) or deployerTask102 is undefined
  tags:
    - mariadb

- name: "Deployer - Nginx - Configure - Create Folder"
  file:
    path: "/root/nginx/"
    state: directory
  tags:
    - nginx

- name: "Deployer - Nginx - Configure - Create Subfolders"
  file:
    dest: '/root/nginx/{{ item.path }}'
    state: directory
  with_filetree: './files/nginx/'
  loop_control:
    label: "{{ item.path }}"
  when:
    - item.state == 'directory'
  tags:
    - nginx

- name: "Deployer - Nginx - Configure - Generating & Transferring Files"
  template:
    src: '{{ item.src }}'
    dest: '/root/nginx/{{ item.path }}'
  with_filetree: './files/nginx/'
  loop_control:
    label: "{{ item.path }}"
  when:
    - item.state == 'file'
  tags:
    - nginx

- name: "Deployer - Nginx - Pull Image"
  containers.podman.podman_image:
    name: docker.io/nginx
    tag: latest
  register: deployerTask3

- name: "Deployer - Nginx - Run Container"
  containers.podman.podman_container:
    name: nginx
    image: docker.io/nginx
    state: started
    recreate: on
    network: host
    volumes:
      - "/root/nginx/index.html:/usr/share/nginx/html/index.html:ro"
      - "/root/nginx/config.conf:/etc/nginx/nginx.conf:ro"
      - "/root/nginx/conf/:/etc/nginx/conf.d/:ro"
      - "/root/certs/:/etc/nginx/certs/:ro"
    restart_policy: always
  when:
    - (deployerTask3 is defined and deployerTask3.changed) or deployerTask3 is undefined
  tags:
    - nginx

- name: "Deployer - Backend - Git Operations"
  git:
    repo: git@github.com:MetroHege/MPP-Backend.git
    dest: /root/backend
    version: main
  register: deployerTask521

- name: "Deployer - Backend - Build Image"
  containers.podman.podman_image:
    name: mpp/backend
    tag: latest
    path: /root/backend
    build:
      file: Dockerfile
      format: docker
      cache: on
    force: on
  become: on
  become_user: root
  register: deployerTask522
  when:
    - (deployerTask521 is defined and deployerTask521.changed) or deployerTask521 is undefined
  tags:
    - backend

- name: "Deployer - Backend - Run Container"
  containers.podman.podman_container:
    name: backend
    image: mpp/backend:latest
    state: started
    recreate: on
    network: host
    volumes:
      - "/root/backend/uploads:/usr/src/app/uploads"
      - "/root/backend/.env:/usr/src/app/.env:ro"
    restart_policy: always
    command: "npm start"
  when:
    - deployerTask522 is defined
    - deployerTask522.changed
  tags:
    - backend

- name: "Deployer - Frontend - Git Operations"
  git:
    repo: git@github.com:MetroHege/MPP-Frontend.git
    dest: /root/frontend
    version: main
  register: deployerTask531

- name: "Deployer - Frontend - Build Image"
  containers.podman.podman_image:
    name: mpp/frontend
    tag: latest
    path: /root/frontend
    build:
      file: Dockerfile
      format: docker
      cache: on
    force: on
  become: on
  become_user: root
  register: deployerTask532
  when:
    - (deployerTask531 is defined and deployerTask531.changed) or deployerTask531 is undefined
  tags:
    - frontend

- name: "Deployer - Frontend - Run Container"
  containers.podman.podman_container:
    name: frontend
    image: mpp/frontend:latest
    state: started
    recreate: on
    network: host
    volumes:
      - "/root/frontend/dist/:/usr/src/app/dist/"
      - "/root/frontend/.env:/usr/src/app/.env"
    restart_policy: always
    command: "npm run build"
  when:
    - deployerTask532 is defined
    - deployerTask532.changed
  tags:
    - frontend