mattez02-infra/tasks/deployer.yml
Christer Warén 9ce638fc6b Update
2024-05-05 19:23:14 +03:00

241 lines
6.0 KiB
YAML

---
- name: "Deployer - Certbot - Renew Certificates"
command: "certbot renew"
register: task
changed_when: task.stdout.find("No renewals were attempted.") == -1
tags:
- certbot
- tls
- name: "Deployer - Certbot - Copy Certificates"
copy:
src: "/etc/letsencrypt/live/mpp/"
dest: "/root/certs/mpp/"
follow: true
register: task
tags:
- certbot
- tls
- name: "Deployer - MariaDB - Create Folder"
file:
path: "/root/mariadb"
state: directory
tags:
- mariadb
- name: "Deployer - MariaDB - Pull Image"
containers.podman.podman_image:
name: docker.io/mariadb
tag: latest
force: on
register: deployerTask101
- name: "Deployer - MariaDB - Run Container"
containers.podman.podman_container:
name: mariadb
image: docker.io/mariadb:latest
state: started
restart: on
network: host
volumes:
- "/root/mariadb:/var/lib/mysql"
restart_policy: always
env:
MYSQL_ROOT_PASSWORD: "{{ secrets.mariadb.users.root.password }}"
register: deployerTask102
when:
- (deployerTask101 is defined and deployerTask101.changed) or deployerTask101 is undefined
tags:
- mariadb
- name: "Deployer - MariaDB - Wait"
wait_for:
host: "127.0.0.1"
port: "3306"
delay: 10
when:
- (deployerTask102 is defined and deployerTask102.changed) or deployerTask102 is undefined
tags:
- mariadb
- name: "Deployer - MariaDB - Upgrade"
containers.podman.podman_container_exec:
name: mariadb
command: "mariadb-upgrade --host=127.0.0.1 --user=root --password={{ secrets.mariadb.users.root.password }}"
register: task
ignore_errors: yes
changed_when:
- task.stdout is defined
- task.stdout.find("This installation of MariaDB is already upgraded") == -1
when:
- (deployerTask102 is defined and deployerTask102.changed) or deployerTask102 is undefined
tags:
- mariadb
- name: "Deployer - MariaDB - Create Users"
mysql_user:
login_host: "127.0.0.1"
login_user: root
login_password: "{{ secrets.mariadb.users.root.password }}"
name: "mpp"
host: "%"
password: "{{ secrets.mariadb.users.mpp.password }}"
priv: "mpp.*:ALL"
vars:
ansible_python_interpreter: "/opt/ansible/bin/python3"
when:
- (deployerTask102 is defined and deployerTask102.changed) or deployerTask102 is undefined
tags:
- mariadb
- name: "Deployer - MariaDB - Create Database"
mysql_db:
login_host: "127.0.0.1"
login_user: "mpp"
login_password: "{{ secrets.mariadb.users.mpp.password }}"
name: "mpp"
vars:
ansible_python_interpreter: "/opt/ansible/bin/python3"
when:
- (deployerTask102 is defined and deployerTask102.changed) or deployerTask102 is undefined
tags:
- mariadb
- name: "Deployer - Nginx - Configure - Create Folder"
file:
path: "/root/nginx/"
state: directory
tags:
- nginx
- name: "Deployer - Nginx - Configure - Create Subfolders"
file:
dest: '/root/nginx/{{ item.path }}'
state: directory
with_filetree: './files/nginx/'
loop_control:
label: "{{ item.path }}"
when:
- item.state == 'directory'
tags:
- nginx
- name: "Deployer - Nginx - Configure - Generating & Transferring Files"
template:
src: '{{ item.src }}'
dest: '/root/nginx/{{ item.path }}'
with_filetree: './files/nginx/'
loop_control:
label: "{{ item.path }}"
when:
- item.state == 'file'
tags:
- nginx
- name: "Deployer - Nginx - Pull Image"
containers.podman.podman_image:
name: docker.io/nginx
tag: latest
force: on
register: deployerTask3
- name: "Deployer - Nginx - Run Container"
containers.podman.podman_container:
name: nginx
image: docker.io/nginx
state: started
recreate: on
network: host
volumes:
- "/root/nginx/html:/usr/share/nginx/html:ro"
- "/root/nginx/config.conf:/etc/nginx/nginx.conf:ro"
- "/root/nginx/conf/:/etc/nginx/conf.d/:ro"
- "/root/certs/:/etc/nginx/certs/:ro"
restart_policy: always
when:
- (deployerTask3 is defined and deployerTask3.changed) or deployerTask3 is undefined
tags:
- nginx
- name: "Deployer - Frontend - Git Operations"
git:
repo: https://github.com/MetroHege/MPP-Frontend.git
dest: /root/frontend
version: main
register: deployerTask531
- name: "Deployer - Frontend - Build Image"
containers.podman.podman_image:
name: mpp/frontend
tag: latest
path: /root/frontend
build:
file: Dockerfile
format: docker
cache: off
force: on
register: deployerTask532
when:
- (deployerTask531 is defined and deployerTask531.changed) or deployerTask531 is undefined
tags:
- frontend
- name: "Deployer - Frontend - Run Container"
containers.podman.podman_container:
name: frontend
image: mpp/frontend:latest
state: started
recreate: on
network: host
volumes:
- "/root/frontend/.env:/usr/src/app/.env"
restart_policy: always
command: "npm start"
when:
- deployerTask532 is defined
- deployerTask532.changed
tags:
- frontend
- name: "Deployer - Backend - Git Operations"
git:
repo: https://github.com/MetroHege/MPP-Backend.git
dest: /root/backend
version: main
register: deployerTask521
- name: "Deployer - Backend - Build Image"
containers.podman.podman_image:
name: mpp/backend
tag: latest
path: /root/backend
build:
file: Dockerfile
format: docker
cache: off
force: on
register: deployerTask522
when:
- (deployerTask521 is defined and deployerTask521.changed) or deployerTask521 is undefined
tags:
- backend
- name: "Deployer - Backend - Run Container"
containers.podman.podman_container:
name: backend
image: mpp/backend:latest
state: started
recreate: on
network: host
volumes:
- "/root/backend/uploads:/usr/src/app/uploads"
- "/root/backend/.env:/usr/src/app/.env:ro"
restart_policy: always
command: "npm start"
when:
- deployerTask522 is defined
- deployerTask522.changed
tags:
- backend