pebbles-deploy/roles/frontend/tasks/main.yml at c2992a530e28a8c24548f07982525905ed204844 · CSCfi/pebbles-deploy · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
- name: Install package to get add-apt-repository command
  apt:
    name: "{{ item }}"
    state: present
  with_items:
    - software-properties-common

- name: Add nginx ppa
  apt_repository:
    repo: "{{ item }}"
  with_items:
    - ppa:nginx/stable

- name: Install Nginx and inotify-tools
  apt:
    name: "{{ item }}"
    update_cache: yes
    state: present
  with_items:
    - nginx
    - inotify-tools

- name: Ensure that the default site is disabled
  command: rm /etc/nginx/sites-enabled/default
           removes=/etc/nginx/sites-enabled/default
  notify: restart nginx

- name: Create ssl dir
  file:
    dest: /etc/nginx/ssl
    owner: root
    group: root
    mode: 0600
    state: directory
  when: server_type == "devel"

- name: Create self-signed SSL cert
  command:
    openssl req -new -nodes -x509 -subj "/C=FI/ST=SouthernFinland/L=Helsinki/O=IT/CN={{ domain_name }}" -days 3650 -keyout {{ nginx_ssl_key }} -out {{ nginx_ssl_crt }} -extensions v3_ca
    creates=/etc/nginx/ssl/server.crt
  notify: restart nginx
  when: server_type == "devel"

- name: Ensure Nginx service is stopped and disabled on boot - supervisord takes care of running it
  service: name=nginx state=stopped enabled=no

- name: Disable Nginx running as daemon
  lineinfile:
    dest: /etc/nginx/nginx.conf
    state: present
    line: 'daemon off;'
  notify: restart nginx

- name: Copy application config
  template:
    src: etc/nginx/conf.d/pebbles.conf.j2
    dest: /etc/nginx/conf.d/pebbles.conf
    backup: yes
    mode: "0755"
  notify: restart nginx

- name: Make sure Nginx proxy config directory exists
  file:
    name: "{{ frontend_proxy_config_dir }}"
    state: directory
    owner: "{{ application_user }}"

- name: Make sure Nginx proxy config file exists
  file:
    name: "{{ frontend_proxy_config_dir }}/proxy.conf"
    state: touch
    owner: "{{ application_user }}"

- name: Copy nginx reloading script into place
  template:
    src: usr/local/sbin/wait_and_reload_nginx.sh
    dest: /usr/local/sbin/wait_and_reload_nginx.sh
    backup: yes
    mode: "0755"

- name: Create the Supervisor config file
  template:
    src: etc/supervisor/conf.d/nginx_proxy.conf.j2
    dest: /etc/supervisor/conf.d/nginx_proxy.conf
    backup: yes

- name: Re-read the Supervisor config files
  command: supervisorctl reread

- name: Update Supervisor to add the app in the process group
  command: supervisorctl update