diff --git a/.dockerignore b/.dockerignore index 2d0d678..05e6e23 100644 --- a/.dockerignore +++ b/.dockerignore @@ -1,7 +1,6 @@ tmp npm-debug.log Dockerfile -node_modules .dockerignore /docker /devops diff --git a/apps/api/Dockerfile b/apps/api/Dockerfile index 6dd21b8..7ec6b4d 100644 --- a/apps/api/Dockerfile +++ b/apps/api/Dockerfile @@ -1,19 +1,19 @@ # Install dependencies only when needed FROM docker.io/node:lts-alpine as deps -# Check https://github.com/nodejs/docker-node/tree/b4117f9333da4138b03a546ec926ef50a31506c3#nodealpine to understand why libc6-compat might be needed. +# Check https://github.com/nodejs/docker-node/tree/b4117f9333da4138b03a546ec926ef50a31506c3#nodealpine +# to understand why libc6-compat might be needed. RUN apk add --no-cache libc6-compat WORKDIR /usr/src/app -COPY ./package*.json ./ -RUN npm install --prefer-offline +COPY ./node_modules ./node_modules # Production image, copy all the files and run nest + FROM docker.io/node:lts-alpine as runner RUN apk add --no-cache dumb-init ENV NODE_ENV production ENV PORT 3000 WORKDIR /usr/src/app COPY --from=deps /usr/src/app/node_modules ./node_modules -COPY --from=deps /usr/src/app/package.json ./package.json COPY dist/apps/api . EXPOSE 3000 CMD ["dumb-init", "node", "main.js"] diff --git a/devops/ansible/ansible.cfg b/devops/ansible/ansible.cfg new file mode 100644 index 0000000..8e4455b --- /dev/null +++ b/devops/ansible/ansible.cfg @@ -0,0 +1,4 @@ +[defaults] +inventory = inventory/hosts.yml +host_key_checking = False +timeout = 180 \ No newline at end of file diff --git a/devops/ansible/inventory/hosts.yml b/devops/ansible/inventory/hosts.yml new file mode 100755 index 0000000..1aa94d2 --- /dev/null +++ b/devops/ansible/inventory/hosts.yml @@ -0,0 +1,7 @@ +--- + +all: + hosts: + mcs_host: + ansible_host: 127.0.0.1 + ansible_connection: local \ No newline at end of file diff --git a/devops/ansible/prepare_environment.yml b/devops/ansible/prepare_environment.yml new file mode 100644 index 0000000..ffcb58e --- /dev/null +++ b/devops/ansible/prepare_environment.yml @@ -0,0 +1,10 @@ +--- +- name: prepare environment + hosts: all + gather_facts: false + become: true + roles: + - install_docker + - install_nvm + nvm_node_version: '16.20.0' + diff --git a/devops/ansible/roles/create_docker_network/defaults/main.yml b/devops/ansible/roles/create_docker_network/defaults/main.yml new file mode 100644 index 0000000..487642a --- /dev/null +++ b/devops/ansible/roles/create_docker_network/defaults/main.yml @@ -0,0 +1,2 @@ +--- +docker_network: default-network diff --git a/devops/ansible/roles/create_docker_network/tasks/main.yml b/devops/ansible/roles/create_docker_network/tasks/main.yml new file mode 100644 index 0000000..6617395 --- /dev/null +++ b/devops/ansible/roles/create_docker_network/tasks/main.yml @@ -0,0 +1,5 @@ +--- +- name: Create '{{ docker_network }}' network + docker_network: + name: "{{ docker_network }}" + diff --git a/devops/ansible/roles/install_docker/.ansible-lint b/devops/ansible/roles/install_docker/.ansible-lint new file mode 100644 index 0000000..2cd8c9f --- /dev/null +++ b/devops/ansible/roles/install_docker/.ansible-lint @@ -0,0 +1,4 @@ +skip_list: + - 'yaml' + - 'risky-shell-pipe' + - 'role-name' diff --git a/devops/ansible/roles/install_docker/.github/FUNDING.yml b/devops/ansible/roles/install_docker/.github/FUNDING.yml new file mode 100644 index 0000000..96b4938 --- /dev/null +++ b/devops/ansible/roles/install_docker/.github/FUNDING.yml @@ -0,0 +1,4 @@ +# These are supported funding model platforms +--- +github: geerlingguy +patreon: geerlingguy diff --git a/devops/ansible/roles/install_docker/.github/stale.yml b/devops/ansible/roles/install_docker/.github/stale.yml new file mode 100644 index 0000000..3e8d931 --- /dev/null +++ b/devops/ansible/roles/install_docker/.github/stale.yml @@ -0,0 +1,57 @@ +# Configuration for probot-stale - https://github.com/probot/stale +--- +# Number of days of inactivity before an Issue or Pull Request becomes stale +daysUntilStale: 90 + +# Number of days of inactivity before an Issue or Pull Request with the stale label is closed. +# Set to false to disable. If disabled, issues still need to be closed manually, but will remain marked as stale. +daysUntilClose: 30 + +# Only issues or pull requests with all of these labels are check if stale. Defaults to `[]` (disabled) +onlyLabels: [] + +# Issues or Pull Requests with these labels will never be considered stale. Set to `[]` to disable +exemptLabels: + - bug + - pinned + - security + - planned + +# Set to true to ignore issues in a project (defaults to false) +exemptProjects: false + +# Set to true to ignore issues in a milestone (defaults to false) +exemptMilestones: false + +# Set to true to ignore issues with an assignee (defaults to false) +exemptAssignees: false + +# Label to use when marking as stale +staleLabel: stale + +# Limit the number of actions per hour, from 1-30. Default is 30 +limitPerRun: 30 + +pulls: + markComment: |- + This pull request has been marked 'stale' due to lack of recent activity. If there is no further activity, the PR will be closed in another 30 days. Thank you for your contribution! + + Please read [this blog post](https://www.jeffgeerling.com/blog/2020/enabling-stale-issue-bot-on-my-github-repositories) to see the reasons why I mark pull requests as stale. + + unmarkComment: >- + This pull request is no longer marked for closure. + + closeComment: >- + This pull request has been closed due to inactivity. If you feel this is in error, please reopen the pull request or file a new PR with the relevant details. + +issues: + markComment: |- + This issue has been marked 'stale' due to lack of recent activity. If there is no further activity, the issue will be closed in another 30 days. Thank you for your contribution! + + Please read [this blog post](https://www.jeffgeerling.com/blog/2020/enabling-stale-issue-bot-on-my-github-repositories) to see the reasons why I mark issues as stale. + + unmarkComment: >- + This issue is no longer marked for closure. + + closeComment: >- + This issue has been closed due to inactivity. If you feel this is in error, please reopen the issue or file a new issue with the relevant details. diff --git a/devops/ansible/roles/install_docker/.github/workflows/ci.yml b/devops/ansible/roles/install_docker/.github/workflows/ci.yml new file mode 100644 index 0000000..1a22d23 --- /dev/null +++ b/devops/ansible/roles/install_docker/.github/workflows/ci.yml @@ -0,0 +1,71 @@ +--- +name: CI +'on': + pull_request: + push: + branches: + - master + schedule: + - cron: "0 7 * * 0" + +defaults: + run: + working-directory: 'geerlingguy.docker' + +jobs: + + lint: + name: Lint + runs-on: ubuntu-latest + steps: + - name: Check out the codebase. + uses: actions/checkout@v2 + with: + path: 'geerlingguy.docker' + + - name: Set up Python 3. + uses: actions/setup-python@v2 + with: + python-version: '3.x' + + - name: Install test dependencies. + run: pip3 install yamllint + + - name: Lint code. + run: | + yamllint . + + molecule: + name: Molecule + runs-on: ubuntu-latest + strategy: + matrix: + distro: + - rockylinux8 + - ubuntu2204 + - ubuntu2004 + - ubuntu1804 + - debian11 + - debian10 + - fedora34 + + steps: + - name: Check out the codebase. + uses: actions/checkout@v2 + with: + path: 'geerlingguy.docker' + + - name: Set up Python 3. + uses: actions/setup-python@v2 + with: + python-version: '3.x' + + - name: Install test dependencies. + run: pip3 install ansible molecule[docker] docker + + - name: Run Molecule tests. + run: molecule test + env: + PY_COLORS: '1' + ANSIBLE_FORCE_COLOR: '1' + MOLECULE_DISTRO: ${{ matrix.distro }} diff --git a/devops/ansible/roles/install_docker/.github/workflows/release.yml b/devops/ansible/roles/install_docker/.github/workflows/release.yml new file mode 100644 index 0000000..0b04d24 --- /dev/null +++ b/devops/ansible/roles/install_docker/.github/workflows/release.yml @@ -0,0 +1,40 @@ +--- +# This workflow requires a GALAXY_API_KEY secret present in the GitHub +# repository or organization. +# +# See: https://github.com/marketplace/actions/publish-ansible-role-to-galaxy +# See: https://github.com/ansible/galaxy/issues/46 + +name: Release +'on': + push: + tags: + - '*' + +defaults: + run: + working-directory: 'geerlingguy.docker' + +jobs: + + release: + name: Release + runs-on: ubuntu-latest + steps: + - name: Check out the codebase. + uses: actions/checkout@v2 + with: + path: 'geerlingguy.docker' + + - name: Set up Python 3. + uses: actions/setup-python@v2 + with: + python-version: '3.x' + + - name: Install Ansible. + run: pip3 install ansible-core + + - name: Trigger a new import on Galaxy. + run: >- + ansible-galaxy role import --api-key ${{ secrets.GALAXY_API_KEY }} + $(echo ${{ github.repository }} | cut -d/ -f1) $(echo ${{ github.repository }} | cut -d/ -f2) diff --git a/devops/ansible/roles/install_docker/.gitignore b/devops/ansible/roles/install_docker/.gitignore new file mode 100644 index 0000000..8840c8f --- /dev/null +++ b/devops/ansible/roles/install_docker/.gitignore @@ -0,0 +1,5 @@ +*.retry +*/__pycache__ +*.pyc +.cache + diff --git a/devops/ansible/roles/install_docker/.yamllint b/devops/ansible/roles/install_docker/.yamllint new file mode 100644 index 0000000..e6fc538 --- /dev/null +++ b/devops/ansible/roles/install_docker/.yamllint @@ -0,0 +1,11 @@ +--- +extends: default + +rules: + line-length: + max: 200 + level: warning + +ignore: | + .github/stale.yml + .travis.yml diff --git a/devops/ansible/roles/install_docker/LICENSE b/devops/ansible/roles/install_docker/LICENSE new file mode 100644 index 0000000..4275cf3 --- /dev/null +++ b/devops/ansible/roles/install_docker/LICENSE @@ -0,0 +1,20 @@ +The MIT License (MIT) + +Copyright (c) 2017 Jeff Geerling + +Permission is hereby granted, free of charge, to any person obtaining a copy of +this software and associated documentation files (the "Software"), to deal in +the Software without restriction, including without limitation the rights to +use, copy, modify, merge, publish, distribute, sublicense, and/or sell copies of +the Software, and to permit persons to whom the Software is furnished to do so, +subject to the following conditions: + +The above copyright notice and this permission notice shall be included in all +copies or substantial portions of the Software. + +THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR +IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, FITNESS +FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR +COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER +IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN +CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE. diff --git a/devops/ansible/roles/install_docker/README.md b/devops/ansible/roles/install_docker/README.md new file mode 100644 index 0000000..953b7dd --- /dev/null +++ b/devops/ansible/roles/install_docker/README.md @@ -0,0 +1,132 @@ +# Ansible Role: Docker + +[![CI](https://github.com/geerlingguy/ansible-role-docker/workflows/CI/badge.svg?event=push)](https://github.com/geerlingguy/ansible-role-docker/actions?query=workflow%3ACI) + +An Ansible Role that installs [Docker](https://www.docker.com) on Linux. + +## Requirements + +None. + +## Role Variables + +Available variables are listed below, along with default values (see `defaults/main.yml`): + + # Edition can be one of: 'ce' (Community Edition) or 'ee' (Enterprise Edition). + docker_edition: 'ce' + docker_packages: + - "docker-{{ docker_edition }}" + - "docker-{{ docker_edition }}-cli" + - "docker-{{ docker_edition }}-rootless-extras" + docker_packages_state: present + +The `docker_edition` should be either `ce` (Community Edition) or `ee` (Enterprise Edition). +You can also specify a specific version of Docker to install using the distribution-specific format: +Red Hat/CentOS: `docker-{{ docker_edition }}-` (Note: you have to add this to all packages); +Debian/Ubuntu: `docker-{{ docker_edition }}=` (Note: you have to add this to all packages). + +You can control whether the package is installed, uninstalled, or at the latest version by setting `docker_package_state` to `present`, `absent`, or `latest`, respectively. Note that the Docker daemon will be automatically restarted if the Docker package is updated. This is a side effect of flushing all handlers (running any of the handlers that have been notified by this and any other role up to this point in the play). + + docker_service_manage: true + docker_service_state: started + docker_service_enabled: true + docker_restart_handler_state: restarted + +Variables to control the state of the `docker` service, and whether it should start on boot. If you're installing Docker inside a Docker container without systemd or sysvinit, you should set `docker_service_manage` to `false`. + + docker_install_compose_plugin: false + docker_compose_package: docker-compose-plugin + docker_compose_package_state: present + +Docker Compose Plugin installation options. These differ from the below in that docker-compose is installed as a docker plugin (and used with `docker compose`) instead of a standalone binary. + + docker_install_compose: true + docker_compose_version: "1.26.0" + docker_compose_arch: "{{ ansible_architecture }}" + docker_compose_path: /usr/local/bin/docker-compose + +Docker Compose installation options. + + docker_add_repo: true + +Controls whether this role will add the official Docker repository. Set to `false` if you want to use the default docker packages for your system or manage the package repository on your own. + + docker_repo_url: https://download.docker.com/linux + +The main Docker repo URL, common between Debian and RHEL systems. + + docker_apt_release_channel: stable + docker_apt_arch: "{{ 'arm64' if ansible_architecture == 'aarch64' else 'amd64' }}" + docker_apt_repository: "deb [arch={{ docker_apt_arch }}] {{ docker_repo_url }}/{{ ansible_distribution | lower }} {{ ansible_distribution_release }} {{ docker_apt_release_channel }}" + docker_apt_ignore_key_error: True + docker_apt_gpg_key: "{{ docker_repo_url }}/{{ ansible_distribution | lower }}/gpg" + +(Used only for Debian/Ubuntu.) You can switch the channel to `nightly` if you want to use the Nightly release. + +You can change `docker_apt_gpg_key` to a different url if you are behind a firewall or provide a trustworthy mirror. +Usually in combination with changing `docker_apt_repository` as well. + + docker_yum_repo_url: "{{ docker_repo_url }}/{{ (ansible_distribution == 'Fedora') | ternary('fedora','centos') }}/docker-{{ docker_edition }}.repo"docker_edition }}.repo + docker_yum_repo_enable_nightly: '0' + docker_yum_repo_enable_test: '0' + docker_yum_gpg_key: "{{ docker_repo_url }}/centos/gpg" + +(Used only for RedHat/CentOS.) You can enable the Nightly or Test repo by setting the respective vars to `1`. + +You can change `docker_yum_gpg_key` to a different url if you are behind a firewall or provide a trustworthy mirror. +Usually in combination with changing `docker_yum_repository` as well. + + docker_users: + - user1 + - user2 + +A list of system users to be added to the `docker` group (so they can use Docker on the server). + + docker_daemon_options: + storage-driver: "devicemapper" + log-opts: + max-size: "100m" + +Custom `dockerd` options can be configured through this dictionary representing the json file `/etc/docker/daemon.json`. + +## Use with Ansible (and `docker` Python library) + +Many users of this role wish to also use Ansible to then _build_ Docker images and manage Docker containers on the server where Docker is installed. In this case, you can easily add in the `docker` Python library using the `geerlingguy.pip` role: + +```yaml +- hosts: all + + vars: + pip_install_packages: + - name: docker + + roles: + - geerlingguy.pip + - geerlingguy.docker +``` + +## Dependencies + +None. + +## Example Playbook + +```yaml +- hosts: all + roles: + - geerlingguy.docker +``` + +## License + +MIT / BSD + +## Sponsors + +* [We Manage](https://we-manage.de): Helping start-ups and grown-ups scaling their infrastructure in a sustainable way. + +The above sponsor(s) are supporting Jeff Geerling on [GitHub Sponsors](https://github.com/sponsors/geerlingguy). You can sponsor Jeff's work too, to help him continue improving these Ansible open source projects! + +## Author Information + +This role was created in 2017 by [Jeff Geerling](https://www.jeffgeerling.com/), author of [Ansible for DevOps](https://www.ansiblefordevops.com/). diff --git a/devops/ansible/roles/install_docker/defaults/main.yml b/devops/ansible/roles/install_docker/defaults/main.yml new file mode 100644 index 0000000..870a94c --- /dev/null +++ b/devops/ansible/roles/install_docker/defaults/main.yml @@ -0,0 +1,52 @@ +--- +# Edition can be one of: 'ce' (Community Edition) or 'ee' (Enterprise Edition). +docker_edition: 'ce' +docker_packages: + - "docker-{{ docker_edition }}" + - "docker-{{ docker_edition }}-cli" + - "docker-{{ docker_edition }}-rootless-extras" + - "containerd.io" +docker_packages_state: present + +# Service options. +docker_service_manage: true +docker_service_state: started +docker_service_enabled: true +docker_restart_handler_state: restarted + +# Docker Compose Plugin options. +docker_install_compose_plugin: false +docker_compose_package: docker-compose-plugin +docker_compose_package_state: present + +# Docker Compose options. +docker_install_compose: true +docker_compose_version: "v2.11.1" +docker_compose_arch: "{{ ansible_architecture }}" +docker_compose_url: "https://github.com/docker/compose/releases/download/{{ docker_compose_version }}/docker-compose-linux-{{ docker_compose_arch }}" +docker_compose_path: /usr/local/bin/docker-compose + +# Enable repo setup +docker_add_repo: true + +# Docker repo URL. +docker_repo_url: https://download.docker.com/linux + +# Used only for Debian/Ubuntu. Switch 'stable' to 'nightly' if needed. +docker_apt_release_channel: stable +docker_apt_arch: "{{ 'arm64' if ansible_architecture == 'aarch64' else 'amd64' }}" +docker_apt_repository: "deb [arch={{ docker_apt_arch }}] {{ docker_repo_url }}/{{ ansible_distribution | lower }} {{ ansible_distribution_release }} {{ docker_apt_release_channel }}" +docker_apt_ignore_key_error: true +docker_apt_gpg_key: "{{ docker_repo_url }}/{{ ansible_distribution | lower }}/gpg" + +# Used only for RedHat/CentOS/Fedora. +docker_yum_repo_url: "{{ docker_repo_url }}/{{ (ansible_distribution == 'Fedora') | ternary('fedora','centos') }}/docker-{{ docker_edition }}.repo" +docker_yum_repo_enable_nightly: '0' +docker_yum_repo_enable_test: '0' +docker_yum_gpg_key: "{{ docker_repo_url }}/centos/gpg" + +# A list of users who will be added to the docker group. +docker_users: [] + +# Docker daemon options as a dict +docker_daemon_options: {} diff --git a/devops/ansible/roles/install_docker/handlers/main.yml b/devops/ansible/roles/install_docker/handlers/main.yml new file mode 100644 index 0000000..72594c8 --- /dev/null +++ b/devops/ansible/roles/install_docker/handlers/main.yml @@ -0,0 +1,7 @@ +--- +- name: restart docker + service: + name: docker + state: "{{ docker_restart_handler_state }}" + ignore_errors: "{{ ansible_check_mode }}" + when: docker_service_manage | bool diff --git a/devops/ansible/roles/install_docker/meta/.galaxy_install_info b/devops/ansible/roles/install_docker/meta/.galaxy_install_info new file mode 100644 index 0000000..c7e702e --- /dev/null +++ b/devops/ansible/roles/install_docker/meta/.galaxy_install_info @@ -0,0 +1,2 @@ +install_date: "\u0421\u0440 12 \u0430\u043F\u0440 2023 09:28:08" +version: 6.1.0 diff --git a/devops/ansible/roles/install_docker/meta/main.yml b/devops/ansible/roles/install_docker/meta/main.yml new file mode 100644 index 0000000..edc5f8e --- /dev/null +++ b/devops/ansible/roles/install_docker/meta/main.yml @@ -0,0 +1,41 @@ +--- +dependencies: [] + +galaxy_info: + role_name: docker + author: geerlingguy + description: Docker for Linux. + company: "Midwestern Mac, LLC" + license: "license (BSD, MIT)" + min_ansible_version: 2.4 + platforms: + - name: EL + versions: + - 7 + - 8 + - name: Fedora + versions: + - all + - name: Debian + versions: + - buster + - bullseye + - name: Ubuntu + versions: + - bionic + - focal + - jammy + - name: Alpine + version: + - all + - name: ArchLinux + versions: + - all + galaxy_tags: + - web + - system + - containers + - docker + - orchestration + - compose + - server diff --git a/devops/ansible/roles/install_docker/molecule/default/converge.yml b/devops/ansible/roles/install_docker/molecule/default/converge.yml new file mode 100644 index 0000000..629095b --- /dev/null +++ b/devops/ansible/roles/install_docker/molecule/default/converge.yml @@ -0,0 +1,24 @@ +--- +- name: Converge + hosts: all + become: true + + pre_tasks: + - name: Update apt cache. + apt: update_cache=yes cache_valid_time=600 + when: ansible_os_family == 'Debian' + + - name: Wait for systemd to complete initialization. # noqa 303 + command: systemctl is-system-running + register: systemctl_status + until: > + 'running' in systemctl_status.stdout or + 'degraded' in systemctl_status.stdout + retries: 30 + delay: 5 + when: ansible_service_mgr == 'systemd' + changed_when: false + failed_when: systemctl_status.rc > 1 + + roles: + - role: geerlingguy.docker diff --git a/devops/ansible/roles/install_docker/molecule/default/molecule.yml b/devops/ansible/roles/install_docker/molecule/default/molecule.yml new file mode 100644 index 0000000..d291e5b --- /dev/null +++ b/devops/ansible/roles/install_docker/molecule/default/molecule.yml @@ -0,0 +1,19 @@ +--- +role_name_check: 1 +dependency: + name: galaxy +driver: + name: docker +platforms: + - name: instance + image: "geerlingguy/docker-${MOLECULE_DISTRO:-centos7}-ansible:latest" + command: ${MOLECULE_DOCKER_COMMAND:-""} + volumes: + - /sys/fs/cgroup:/sys/fs/cgroup:rw + cgroupns_mode: host + privileged: true + pre_build_image: true +provisioner: + name: ansible + playbooks: + converge: ${MOLECULE_PLAYBOOK:-converge.yml} diff --git a/devops/ansible/roles/install_docker/tasks/docker-compose.yml b/devops/ansible/roles/install_docker/tasks/docker-compose.yml new file mode 100644 index 0000000..53a4482 --- /dev/null +++ b/devops/ansible/roles/install_docker/tasks/docker-compose.yml @@ -0,0 +1,31 @@ +--- +- name: Check current docker-compose version. + command: "{{ docker_compose_path }} --version" + register: docker_compose_vsn + check_mode: false + changed_when: false + failed_when: false + +- set_fact: + docker_compose_current_version: "{{ docker_compose_vsn.stdout | regex_search('(\\d+(\\.\\d+)+)') }}" + when: > + docker_compose_vsn.stdout is defined + and (docker_compose_vsn.stdout | length > 0) + +- name: Delete existing docker-compose version if it's different. + file: + path: "{{ docker_compose_path }}" + state: absent + when: > + docker_compose_current_version is defined + and (docker_compose_version | regex_replace('v', '')) not in docker_compose_current_version + +- name: Install Docker Compose (if configured). + get_url: + url: "{{ docker_compose_url }}" + dest: "{{ docker_compose_path }}" + mode: 0755 + when: > + (docker_compose_current_version is not defined) + or (docker_compose_current_version | length == 0) + or (docker_compose_current_version is version((docker_compose_version | regex_replace('v', '')), '<')) diff --git a/devops/ansible/roles/install_docker/tasks/docker-users.yml b/devops/ansible/roles/install_docker/tasks/docker-users.yml new file mode 100644 index 0000000..6e387e6 --- /dev/null +++ b/devops/ansible/roles/install_docker/tasks/docker-users.yml @@ -0,0 +1,10 @@ +--- +- name: Ensure docker users are added to the docker group. + user: + name: "{{ item }}" + groups: docker + append: true + with_items: "{{ docker_users }}" + +- name: Reset ssh connection to apply user changes. + meta: reset_connection diff --git a/devops/ansible/roles/install_docker/tasks/main.yml b/devops/ansible/roles/install_docker/tasks/main.yml new file mode 100644 index 0000000..dcd47de --- /dev/null +++ b/devops/ansible/roles/install_docker/tasks/main.yml @@ -0,0 +1,98 @@ +--- +- name: Load OS-specific vars. + include_vars: "{{ lookup('first_found', params) }}" + vars: + params: + files: + - '{{ansible_distribution}}.yml' + - '{{ansible_os_family}}.yml' + - main.yml + paths: + - 'vars' + +- include_tasks: setup-RedHat.yml + when: ansible_os_family == 'RedHat' + +- include_tasks: setup-Debian.yml + when: ansible_os_family == 'Debian' + +- name: Install Docker packages. + package: + name: "{{ docker_packages }}" + state: "{{ docker_packages_state }}" + notify: restart docker + ignore_errors: "{{ ansible_check_mode }}" + when: "ansible_version.full is version_compare('2.12', '<') or ansible_os_family not in ['RedHat', 'Debian']" + +- name: Install Docker packages (with downgrade option). + package: + name: "{{ docker_packages }}" + state: "{{ docker_packages_state }}" + allow_downgrade: true + notify: restart docker + ignore_errors: "{{ ansible_check_mode }}" + when: "ansible_version.full is version_compare('2.12', '>=') and ansible_os_family in ['RedHat', 'Debian']" + +- name: Install docker-compose plugin. + package: + name: "{{ docker_compose_package }}" + state: "{{ docker_compose_package_state }}" + notify: restart docker + ignore_errors: "{{ ansible_check_mode }}" + when: "docker_install_compose_plugin | bool == true and (ansible_version.full is version_compare('2.12', '<') or ansible_os_family not in ['RedHat', 'Debian'])" + +- name: Install docker-compose-plugin (with downgrade option). + package: + name: "{{ docker_compose_package }}" + state: "{{ docker_compose_package_state }}" + allow_downgrade: true + notify: restart docker + ignore_errors: "{{ ansible_check_mode }}" + when: "docker_install_compose_plugin | bool == true and ansible_version.full is version_compare('2.12', '>=') and ansible_os_family in ['RedHat', 'Debian']" + +- name: Ensure /etc/docker/ directory exists. + file: + path: /etc/docker + state: directory + mode: 0755 + when: docker_daemon_options.keys() | length > 0 + +- name: Configure Docker daemon options. + copy: + content: "{{ docker_daemon_options | to_nice_json }}" + dest: /etc/docker/daemon.json + mode: 0644 + when: docker_daemon_options.keys() | length > 0 + notify: restart docker + +- name: Ensure Docker is started and enabled at boot. + service: + name: docker + state: "{{ docker_service_state }}" + enabled: "{{ docker_service_enabled }}" + ignore_errors: "{{ ansible_check_mode }}" + when: docker_service_manage | bool + +- name: Ensure handlers are notified now to avoid firewall conflicts. + meta: flush_handlers + +- include_tasks: docker-compose.yml + when: docker_install_compose | bool + +- name: Get docker group info using getent. + getent: + database: group + key: docker + split: ':' + when: docker_users | length > 0 + +- name: Check if there are any users to add to the docker group. + set_fact: + at_least_one_user_to_modify: true + when: + - docker_users | length > 0 + - item not in ansible_facts.getent_group["docker"][2] + with_items: "{{ docker_users }}" + +- include_tasks: docker-users.yml + when: at_least_one_user_to_modify is defined diff --git a/devops/ansible/roles/install_docker/tasks/setup-Debian.yml b/devops/ansible/roles/install_docker/tasks/setup-Debian.yml new file mode 100644 index 0000000..0abcd17 --- /dev/null +++ b/devops/ansible/roles/install_docker/tasks/setup-Debian.yml @@ -0,0 +1,53 @@ +--- +- name: Ensure old versions of Docker are not installed. + package: + name: + - docker + - docker-engine + state: absent + +- name: Ensure dependencies are installed. + apt: + name: + - apt-transport-https + - ca-certificates + state: present + when: docker_add_repo | bool + +- name: Ensure additional dependencies are installed (on Ubuntu < 20.04 and any other systems). + apt: + name: gnupg2 + state: present + when: ansible_distribution != 'Ubuntu' or ansible_distribution_version is version('20.04', '<') + +- name: Ensure additional dependencies are installed (on Ubuntu >= 20.04). + apt: + name: gnupg + state: present + when: ansible_distribution == 'Ubuntu' and ansible_distribution_version is version('20.04', '>=') + +- name: Add Docker apt key. + ansible.builtin.get_url: + url: "{{ docker_apt_gpg_key }}" + dest: /etc/apt/trusted.gpg.d/docker.asc + mode: '0644' + force: true + register: add_repository_key + ignore_errors: "{{ docker_apt_ignore_key_error }}" + when: docker_add_repo | bool + +- name: Ensure curl is present (on older systems without SNI). + package: name=curl state=present + when: add_repository_key is failed and docker_add_repo | bool + +- name: Add Docker apt key (alternative for older systems without SNI). + shell: > + curl -sSL {{ docker_apt_gpg_key }} | apt-key add - + when: add_repository_key is failed and docker_add_repo | bool + +- name: Add Docker repository. + apt_repository: + repo: "{{ docker_apt_repository }}" + state: present + update_cache: true + when: docker_add_repo | bool diff --git a/devops/ansible/roles/install_docker/tasks/setup-RedHat.yml b/devops/ansible/roles/install_docker/tasks/setup-RedHat.yml new file mode 100644 index 0000000..ad337c4 --- /dev/null +++ b/devops/ansible/roles/install_docker/tasks/setup-RedHat.yml @@ -0,0 +1,56 @@ +--- +- name: Ensure old versions of Docker are not installed. + package: + name: + - docker + - docker-common + - docker-engine + state: absent + +- name: Add Docker GPG key. + rpm_key: + key: "{{ docker_yum_gpg_key }}" + state: present + when: docker_add_repo | bool + +- name: Add Docker repository. + get_url: + url: "{{ docker_yum_repo_url }}" + dest: '/etc/yum.repos.d/docker-{{ docker_edition }}.repo' + owner: root + group: root + mode: 0644 + when: docker_add_repo | bool + +- name: Configure Docker Nightly repo. + ini_file: + dest: '/etc/yum.repos.d/docker-{{ docker_edition }}.repo' + section: 'docker-{{ docker_edition }}-nightly' + option: enabled + value: '{{ docker_yum_repo_enable_nightly }}' + mode: 0644 + no_extra_spaces: true + when: docker_add_repo | bool + +- name: Configure Docker Test repo. + ini_file: + dest: '/etc/yum.repos.d/docker-{{ docker_edition }}.repo' + section: 'docker-{{ docker_edition }}-test' + option: enabled + value: '{{ docker_yum_repo_enable_test }}' + mode: 0644 + no_extra_spaces: true + when: docker_add_repo | bool + +- name: Configure containerd on RHEL 8. + block: + - name: Ensure container-selinux is installed. + package: + name: container-selinux + state: present + + - name: Ensure containerd.io is installed. + package: + name: containerd.io + state: present + when: ansible_distribution_major_version | int == 8 diff --git a/devops/ansible/roles/install_docker/vars/Alpine.yml b/devops/ansible/roles/install_docker/vars/Alpine.yml new file mode 100755 index 0000000..b81917a --- /dev/null +++ b/devops/ansible/roles/install_docker/vars/Alpine.yml @@ -0,0 +1,2 @@ +--- +docker_packages: "docker" diff --git a/devops/ansible/roles/install_docker/vars/Archlinux.yml b/devops/ansible/roles/install_docker/vars/Archlinux.yml new file mode 100644 index 0000000..b81917a --- /dev/null +++ b/devops/ansible/roles/install_docker/vars/Archlinux.yml @@ -0,0 +1,2 @@ +--- +docker_packages: "docker" diff --git a/devops/ansible/roles/install_docker/vars/main.yml b/devops/ansible/roles/install_docker/vars/main.yml new file mode 100755 index 0000000..805232b --- /dev/null +++ b/devops/ansible/roles/install_docker/vars/main.yml @@ -0,0 +1,2 @@ +--- +# Empty file diff --git a/devops/ansible/roles/install_nvm/.github/stale.yml b/devops/ansible/roles/install_nvm/.github/stale.yml new file mode 100644 index 0000000..9a5a39b --- /dev/null +++ b/devops/ansible/roles/install_nvm/.github/stale.yml @@ -0,0 +1,3 @@ +daysUntilStale: 30 +daysUntilClose: 15 +staleLabel: stale diff --git a/devops/ansible/roles/install_nvm/.gitignore b/devops/ansible/roles/install_nvm/.gitignore new file mode 100644 index 0000000..9a750bb --- /dev/null +++ b/devops/ansible/roles/install_nvm/.gitignore @@ -0,0 +1,3 @@ +*.retry +.vagrant +.idea/ diff --git a/devops/ansible/roles/install_nvm/.travis.yml b/devops/ansible/roles/install_nvm/.travis.yml new file mode 100644 index 0000000..faa42cf --- /dev/null +++ b/devops/ansible/roles/install_nvm/.travis.yml @@ -0,0 +1,43 @@ +--- +language: python +python: "3.6" +os: linux + +notifications: + webhooks: https://galaxy.ansible.com/api/v1/notifications/ + +install: + - pip install ansible ansible-lint + +# I had to temporary disable this cleanup in 'before_script' +# as installation doesn't work as expected + +#before_script: + # Remove already installed nvm + #- nvm deactivate + #- nvm unload + #- rm -rf ~/.nvm + +script: + # Check syntax + - ansible-playbook -i "localhost," test.yml --syntax-check + - ansible-lint . + + # First run + - ansible-playbook -i "localhost," -c local test.yml --extra-vars "ansible_python_interpreter=auto nvm_install_path=~/.nvmbis" + + # Second run + - > + ansible-playbook -i "localhost," -c local test.yml --extra-vars "ansible_python_interpreter=auto nvm_install_path=~/.nvmbis" + | grep -q 'changed=0.*failed=0' + && (echo 'Idempotence test: pass' && exit 0) + || (echo 'Idempotence test: fail' && exit 1) + + # Source nvm + - . ~/.profile + + # Check nvm version + - nvm --version | grep 0.31.5 + + # Check Node.js version + - node --version | grep 6.9.1 diff --git a/devops/ansible/roles/install_nvm/README.md b/devops/ansible/roles/install_nvm/README.md new file mode 100644 index 0000000..556450e --- /dev/null +++ b/devops/ansible/roles/install_nvm/README.md @@ -0,0 +1,64 @@ +nvm +=== + +[![Build Status](https://travis-ci.org/stephdewit/ansible-nvm.svg?branch=master)](https://travis-ci.org/stephdewit/ansible-nvm) + +Install nvm and Node.js. + +Requirements +------------ + +git, curl, build-essential, libssl-dev. Requirements are installed by the role. + +Role Variables +-------------- + +* `nvm_version` nvm version tag, or `HEAD` | `master` | `latest`. Defaults to `0.37.2` +* `nvm_node_version` Node.js specific version `12.16.0` or use `lts` | `latest`. Defaults to `14.15.4` +* `nvm_install_path` nvm folder path, support absolute and relative path. Defaults to `~/.nvm` +* `nvm_shell_init_file` The Shell initialization file to add sourcing of NVM to. Defaults to `~/.profile` +* `nvm_force_install` **Boolean**. Force reinstall nvm from git, for example if you change some files in `nvm_install_path`. Defaults to `false` +* `nvm_install_deps` **Boolean**. Allow to skip dependencies setup and therefore run as a non-root user. Defaults to `true` + +Dependencies +------------ + +No dependencies. + +Example Playbook +---------------- + + - hosts: servers + roles: + - role: stephdewit.nvm + nvm_version: 0.4.0 + nvm_node_version: 0.10 + +Install latest version always + + - hosts: servers + roles: + - role: stephdewit.nvm + nvm_version: 'latest' + nvm_node_version: 'latest' + +When run with another user than the logged one, it may help to set `NVM_DIR` environment variable to an absolute path: + + - hosts: servers + roles: + - role: stephdewit.nvm + become: yes + become_user: vagrant + environment: + NVM_DIR: /home/vagrant/.nvm + +License +------- + +BSD + +Author Information +------------------ + +- Jarno Keskikangas +- [Stéphane de Wit](https://www.stephanedewit.be) diff --git a/devops/ansible/roles/install_nvm/Vagrantfile b/devops/ansible/roles/install_nvm/Vagrantfile new file mode 100644 index 0000000..218a33e --- /dev/null +++ b/devops/ansible/roles/install_nvm/Vagrantfile @@ -0,0 +1,12 @@ +# -*- mode: ruby -*- +# vi: set ft=ruby : + +VAGRANTFILE_API_VERSION = "2" + +Vagrant.configure(VAGRANTFILE_API_VERSION) do |config| + config.vm.box = "hashicorp/precise64" + + config.vm.provision "ansible" do |ansible| + ansible.playbook = "test.yml" + end +end diff --git a/devops/ansible/roles/install_nvm/ansible.cfg b/devops/ansible/roles/install_nvm/ansible.cfg new file mode 100644 index 0000000..613d83b --- /dev/null +++ b/devops/ansible/roles/install_nvm/ansible.cfg @@ -0,0 +1,2 @@ +[defaults] +roles_path = ../ diff --git a/devops/ansible/roles/install_nvm/defaults/main.yml b/devops/ansible/roles/install_nvm/defaults/main.yml new file mode 100644 index 0000000..fc2e7fa --- /dev/null +++ b/devops/ansible/roles/install_nvm/defaults/main.yml @@ -0,0 +1,19 @@ +--- +nvm_version: 0.37.2 +# nvm_version: 'master' +# nvm_version: 'latest' +# nvm_version: 'HEAD' + +nvm_node_version: 14.15.4 +# nvm_node_version: 'lts' +# nvm_node_version: 'latest' + +# path config +nvm_install_path: ~/.nvm +nvm_shell_init_file: ~/.profile + +# force rewrite nvm folder from remove git +nvm_force_install: false + +# allow to skip dependencies installation (for non-root user) +nvm_install_deps: true diff --git a/devops/ansible/roles/install_nvm/meta/.galaxy_install_info b/devops/ansible/roles/install_nvm/meta/.galaxy_install_info new file mode 100644 index 0000000..c34c575 --- /dev/null +++ b/devops/ansible/roles/install_nvm/meta/.galaxy_install_info @@ -0,0 +1,2 @@ +install_date: "\u0421\u0440 12 \u0430\u043F\u0440 2023 09:33:48" +version: v3.3.0 diff --git a/devops/ansible/roles/install_nvm/meta/main.yml b/devops/ansible/roles/install_nvm/meta/main.yml new file mode 100644 index 0000000..9d8b840 --- /dev/null +++ b/devops/ansible/roles/install_nvm/meta/main.yml @@ -0,0 +1,26 @@ +--- +galaxy_info: + role_name: nvm + author: Stephane de Wit (based on Jarno Keskikangas work) + description: Install nvm and Node.js. + company: stephanedewit.be + license: BSD + min_ansible_version: 2.0 + platforms: + - name: Ubuntu + versions: + - all + - name: Debian + versions: + - all + - name: Fedora + versions: + - all + galaxy_tags: + - nodejs + - node + - npm + - npx + - nvm + +dependencies: [] diff --git a/devops/ansible/roles/install_nvm/tasks/install_nodejs.yml b/devops/ansible/roles/install_nvm/tasks/install_nodejs.yml new file mode 100644 index 0000000..8f4884a --- /dev/null +++ b/devops/ansible/roles/install_nvm/tasks/install_nodejs.yml @@ -0,0 +1,24 @@ +--- +- name: Install Node.js lts + shell: ". ./nvm.sh && nvm install --lts" + args: + chdir: "{{ nvm_install_path }}" + register: nvm_install_result + changed_when: "'is already installed.' not in nvm_install_result.stderr" + when: nvm_node_version == 'lts' + +- name: Install Node.js latest + shell: ". ./nvm.sh && nvm install node" + args: + chdir: "{{ nvm_install_path }}" + register: nvm_install_result + changed_when: "'is already installed.' not in nvm_install_result.stderr" + when: nvm_node_version == 'latest' + +- name: Install Node.js {{ nvm_node_version }} + shell: ". ./nvm.sh && nvm install {{ nvm_node_version }}" + args: + chdir: "{{ nvm_install_path }}" + register: nvm_install_result + changed_when: "'is already installed.' not in nvm_install_result.stderr" + when: nvm_node_version != 'latest' and nvm_node_version != 'lts' diff --git a/devops/ansible/roles/install_nvm/tasks/install_nvm.yml b/devops/ansible/roles/install_nvm/tasks/install_nvm.yml new file mode 100644 index 0000000..0d03ce4 --- /dev/null +++ b/devops/ansible/roles/install_nvm/tasks/install_nvm.yml @@ -0,0 +1,23 @@ +--- +- name: Install nvm {{ nvm_version }} + git: + repo: https://github.com/creationix/nvm.git + dest: "{{ nvm_install_path }}" + version: "v{{ nvm_version }}" + force: "{{ nvm_force_install|bool }}" + when: nvm_version | regex_search('\\d.') + +- name: Install nvm latest + git: + repo: https://github.com/creationix/nvm.git + dest: "{{ nvm_install_path }}" + version: "{% if nvm_version=='latest' %}master{% else %}{{ nvm_version }}{% endif %}" + force: "{{ nvm_force_install|bool }}" + when: nvm_version | regex_search('master|HEAD|latest') + +- name: Update {{ nvm_shell_init_file }} to source nvm + blockinfile: + path: "{{ nvm_shell_init_file }}" + marker: "# NVM path management from ansible {mark}" + block: | + . {{ nvm_install_path }}/nvm.sh diff --git a/devops/ansible/roles/install_nvm/tasks/main.yml b/devops/ansible/roles/install_nvm/tasks/main.yml new file mode 100644 index 0000000..2fdc6d2 --- /dev/null +++ b/devops/ansible/roles/install_nvm/tasks/main.yml @@ -0,0 +1,17 @@ +--- +- include: setup-redhat.yml + when: ansible_os_family == "RedHat" and nvm_install_deps + tags: nvm + +- include: setup-debian.yml + when: ansible_os_family == "Debian" and nvm_install_deps + tags: nvm + +- include: install_nvm.yml + tags: nvm + +- include: install_nodejs.yml + tags: nvm + +- include: validate.yml + tags: nvm diff --git a/devops/ansible/roles/install_nvm/tasks/setup-debian.yml b/devops/ansible/roles/install_nvm/tasks/setup-debian.yml new file mode 100644 index 0000000..c68fe89 --- /dev/null +++ b/devops/ansible/roles/install_nvm/tasks/setup-debian.yml @@ -0,0 +1,14 @@ +--- +- name: Install dependencies + become: true + become_user: root + apt: + update_cache: yes + cache_valid_time: 3600 + name: "{{ packages }}" + vars: + packages: + - git + - curl + - build-essential + - libssl-dev diff --git a/devops/ansible/roles/install_nvm/tasks/setup-redhat.yml b/devops/ansible/roles/install_nvm/tasks/setup-redhat.yml new file mode 100644 index 0000000..e7b8fbf --- /dev/null +++ b/devops/ansible/roles/install_nvm/tasks/setup-redhat.yml @@ -0,0 +1,12 @@ +--- +- name: Install dependencies + become: true + become_user: root + yum: + name: "{{ packages }}" + vars: + packages: + - "@Development Tools" + - git + - curl + - openssl-devel diff --git a/devops/ansible/roles/install_nvm/tasks/validate.yml b/devops/ansible/roles/install_nvm/tasks/validate.yml new file mode 100644 index 0000000..c150b3c --- /dev/null +++ b/devops/ansible/roles/install_nvm/tasks/validate.yml @@ -0,0 +1,18 @@ +--- +- name: Check if {{ nvm_node_version }} is the default Node.js version + shell: > + set -o pipefail && \ + . ./nvm.sh && \ + nvm alias default --no-colors | grep '{{ nvm_node_version }}' + args: + executable: /bin/bash + chdir: "{{ nvm_install_path }}" + register: nvm_check_default + changed_when: False + failed_when: False + +- name: Set default Node.js version to {{ nvm_node_version }} + shell: ". ./nvm.sh && nvm alias default {{ nvm_node_version }}" + args: + chdir: "{{ nvm_install_path }}" + when: nvm_check_default.rc != 0 diff --git a/devops/ansible/roles/install_nvm/test.yml b/devops/ansible/roles/install_nvm/test.yml new file mode 100644 index 0000000..f41faf6 --- /dev/null +++ b/devops/ansible/roles/install_nvm/test.yml @@ -0,0 +1,8 @@ +--- +- name: Test playbook for nvm role + hosts: all + + roles: + - role: ansible-nvm + nvm_version: 0.31.5 + nvm_node_version: 6.9.1 diff --git a/devops/ansible/roles/start_app_api/defaults/main.yml b/devops/ansible/roles/start_app_api/defaults/main.yml new file mode 100644 index 0000000..4dd2e86 --- /dev/null +++ b/devops/ansible/roles/start_app_api/defaults/main.yml @@ -0,0 +1,15 @@ +--- +docker_app__name: nx-api +docker_app__image: nx/api:master +docker_app__port: 3000 +docker_app__network_mode: +docker_app__networks: [] +docker_app__remove_existing_container: yes + +docker_app__env: + PORT: "3000" + DATABASE_URL: "postgres://postgres:postgres@postgres:5432/postgres?schema=public" + +# Do not change +docker_postgres__ports: + - "{{ docker_app__port }}:3000" diff --git a/devops/ansible/roles/start_app_api/tasks/main.yml b/devops/ansible/roles/start_app_api/tasks/main.yml new file mode 100644 index 0000000..d1ca8e7 --- /dev/null +++ b/devops/ansible/roles/start_app_api/tasks/main.yml @@ -0,0 +1,27 @@ +--- +- name: Remove existing {{ docker_app__name }} container + docker_container: + name: "{{ docker_app__name }}" + state: absent + when: docker_postgres__remove_existing_container + +- name: Run postgres container + docker_container: + name: "{{ docker_app__name }}" + image: "{{ docker_app__image }}" + restart_policy: always + network_mode: "{{ docker_app__network_mode }}" + networks: "{{ docker_app__networks }}" + expose: + - "{{ docker_app__port }}" + ports: "{{ docker_app__port }}" + env: "{{ docker_app__env }}" +# - name: Wait for app to be started +# wait_for: +# host: "{{ docker_postgres__master_host }}" +# port: "{{ docker_postgres__port }}" +# state: started +# delay: 5 +# connect_timeout: 15 +# timeout: 30 +# when: not docker_postgres__slave or docker_postgres__wait_for_start diff --git a/devops/ansible/roles/start_postgres/defaults/main.yml b/devops/ansible/roles/start_postgres/defaults/main.yml new file mode 100644 index 0000000..e57e266 --- /dev/null +++ b/devops/ansible/roles/start_postgres/defaults/main.yml @@ -0,0 +1,72 @@ +--- +docker_postgres__name: postgres +docker_postgres__image: postgres:13.1 +docker_postgres__port: 5432 +docker_postgres__superuser_name: postgres +docker_postgres__superuser_password: postgres +docker_postgres__remove_existing_container: yes +docker_postgres__pull_image: yes +docker_postgres__file_volumes: [] +docker_postgres__network_mode: +docker_postgres__networks: [] +docker_postgres__env: {} +docker_postgres__log_driver: json-file +docker_postgres__log_options: +docker_postgres__slave: no +docker_postgres__master_host: localhost +docker_postgres__master_port: 5432 +docker_postgres__wait_for_start: no +docker_postgres__remove_existing_home_dir: no +docker_postgres__pg_hba_conf: | + # This file is managed by Ansible, all changes will be lost. + # TYPE DATABASE USER ADDRESS METHOD + local all all trust + host all all 127.0.0.1/32 trust + host all all ::1/128 trust + local replication all trust + host replication all 127.0.0.1/32 trust + host replication all ::1/128 trust + host all all all md5 + host replication {{ docker_postgres__superuser_name }} all md5 +docker_postgres__postgresql_conf: | + # This file is managed by Ansible, all changes will be lost. + listen_addresses = '*' + max_connections = 100 + shared_buffers = 128MB + dynamic_shared_memory_type = posix + max_wal_size = 1GB + min_wal_size = 80MB + log_timezone = 'UTC' + datestyle = 'iso, mdy' + timezone = 'UTC' + lc_messages = 'en_US.utf8' + lc_monetary = 'en_US.utf8' + lc_numeric = 'en_US.utf8' + lc_time = 'en_US.utf8' + default_text_search_config = 'pg_catalog.english' +docker_postgres__recovery_conf: | + # This file is managed by Ansible, all changes will be lost. + standby_mode = 'on' + primary_conninfo = 'host={{ docker_postgres__master_host }} port={{ docker_postgres__master_port }} user={{ docker_postgres__superuser_name }} password={{ docker_postgres__superuser_password }}' + trigger_file = '/var/lib/postgresql/data/promote_to_master' + recovery_target_timeline = 'latest' + +# Don't change +docker_postgres__home: "/var/lib/{{ docker_postgres__name }}" +docker_postgres__directories: +- path: "{{ docker_postgres__home }}" + mode: "0755" + owner: "root" + group: "root" +- path: "{{ docker_postgres__home }}/data" + owner: "root" + group: "root" +- path: "{{ docker_postgres__home }}/conf" +docker_postgres__ports: +- "{{ docker_postgres__port }}:5432" +docker_postgres__directory_volumes: +- "{{ docker_postgres__home }}/conf:/etc/postgresql" +- "{{ docker_postgres__home }}/data:/var/lib/postgresql/data" +docker_postgres__default_env: + POSTGRES_USER: "{{ docker_postgres__superuser_name }}" + POSTGRES_PASSWORD: "{{ docker_postgres__superuser_password }}" \ No newline at end of file diff --git a/devops/ansible/roles/start_postgres/tasks/main.yml b/devops/ansible/roles/start_postgres/tasks/main.yml new file mode 100644 index 0000000..e3b7fd2 --- /dev/null +++ b/devops/ansible/roles/start_postgres/tasks/main.yml @@ -0,0 +1,81 @@ +--- +- name: Remove existing {{ docker_postgres__name }} container + docker_container: + name: "{{ docker_postgres__name }}" + state: absent + when: docker_postgres__remove_existing_container + +- name: Remove home directory + file: + state: absent + path: "{{ docker_postgres__home }}" + when: docker_postgres__remove_existing_home_dir + +- name: Create directories + become: true + file: + state: directory + path: "{{ item.path }}" + mode: "{{ item.mode | default('0755') }}" + owner: "{{ item.owner | default('root') }}" + group: "{{ item.group | default('root') }}" + with_items: "{{ docker_postgres__directories }}" + +- name: Copy all the data from the master + docker_container: + name: "{{ docker_postgres__name }}-pg_basebackup" + image: "{{ docker_postgres__image }}" + detach: no + cleanup: yes + env: + PGHOST: "{{ docker_postgres__master_host }}" + PGPORT: "{{ docker_postgres__master_port }}" + PGUSER: "{{ docker_postgres__superuser_name }}" + PGPASSWORD: "{{ docker_postgres__superuser_password }}" + volumes: "{{ docker_postgres__directory_volumes }}" + user: postgres:postgres + command: "pg_basebackup -w -D /var/lib/postgresql/data" + when: docker_postgres__slave + +- name: Copy pg_hba config + copy: + content: "{{ docker_postgres__pg_hba_conf }}" + dest: "{{ docker_postgres__home }}/conf/pg_hba.conf" + +- name: Copy postgresql config + copy: + content: "{{ docker_postgres__postgresql_conf }}" + dest: "{{ docker_postgres__home }}/conf/postgresql.conf" + +- name: Copy recovery config + copy: + content: "{{ docker_postgres__recovery_conf }}" + dest: "{{ docker_postgres__home }}/data/recovery.conf" + when: docker_postgres__slave + +- name: Run postgres container + docker_container: + name: "{{ docker_postgres__name }}" + image: "{{ docker_postgres__image }}" + command: --config_file=/etc/postgresql/postgresql.conf --hba_file=/etc/postgresql/pg_hba.conf + pull: "{{ docker_postgres__pull_image }}" + restart_policy: always + network_mode: "{{ docker_postgres__network_mode }}" + networks: "{{ docker_postgres__networks }}" + expose: + - 5432 + ports: "{{ docker_postgres__ports }}" + env: "{{ docker_postgres__default_env | combine(docker_postgres__env) }}" + volumes: "{{ docker_postgres__directory_volumes + docker_postgres__file_volumes }}" + log_driver: "{{ docker_postgres__log_driver }}" + log_options: "{{ docker_postgres__log_options }}" + +- name: Wait for postgres to be started + wait_for: + host: "{{ docker_postgres__master_host }}" + port: "{{ docker_postgres__port }}" + state: started + delay: 5 + connect_timeout: 15 + timeout: 30 + when: not docker_postgres__slave or docker_postgres__wait_for_start \ No newline at end of file diff --git a/devops/ansible/start_app.yml b/devops/ansible/start_app.yml new file mode 100644 index 0000000..a5219c2 --- /dev/null +++ b/devops/ansible/start_app.yml @@ -0,0 +1,19 @@ +--- +- name: start app + hosts: all + gather_facts: false + become: true + vars: + docker_network: nx + roles: + - role: create_docker_network + - role: start_postgres + docker_postgres__name: postgres + docker_postgres__wait_for_start: yes + docker_postgres__superuser_name: postgres + docker_postgres__superuser_password: postgres + docker_postgres__networks: + - name: "{{ docker_network }}" + - role: start_app_api + docker_app__networks: + - name: "{{ docker_network }}" \ No newline at end of file diff --git a/devops/docker-compose.yaml b/devops/docker-compose.yaml deleted file mode 100644 index fcebcb3..0000000 --- a/devops/docker-compose.yaml +++ /dev/null @@ -1,60 +0,0 @@ -version: "3.7" - -networks: - nx-network: - ipam: - config: - - subnet: 172.6.0.0/16 - -volumes: - letsencrypt: - -services: - nx-api: - image: nx/api:master - container_name: nx-api - networks: - - nx-network - labels: - - traefik.enable=true - - traefik.http.routers.nxapi.rule=Host(`api.docker.localhost`) - - traefik.http.routers.nxapi.entrypoints=https - - traefik.http.routers.nxapi.tls=true - - traefik.http.routers.nxapi.tls.certresolver=letsEncrypt - ports: - - 3000:3000 - - whoami: - # A container that exposes an API to show its IP address - image: traefik/whoami - networks: - - nx-network - labels: - - "traefik.http.routers.whoami.rule=Host(`whoami.docker.localhost`)" - - reverse-proxy: - image: traefik:v2.9 - networks: - - nx-network - security_opt: - - no-new-privileges:true - labels: - - traefik.enable=true" - - traefik.http.routers.traefik.entrypoints=https - - traefik.http.routers.traefik.rule=Host(`traefik.example.com`) - - traefik.http.routers.traefik.tls=true - - traefik.http.routers.traefik.tls.certresolver=letsEncrypt - - traefik.http.routers.traefik.service=api@internal - - traefik.http.services.traefik-traefik.loadbalancer.server.port=888 - - traefik.http.middlewares.traefik-auth.basicauth.users=admin:$$apr1$$ZpxLMtGz$$DHvP2pHQl4PMYrtJ1whjT0 - - traefik.http.routers.traefik.middlewares=traefik-auth - ports: - - "81:80" - - "444:443" - - "8080:8080" - volumes: - - /etc/localtime:/etc/localtime:ro - - /var/run/docker.sock:/var/run/docker.sock:ro - - ./traefik/traefik.yaml:/traefik.yaml:ro - - ./traefik/acme.json:/acme.json - \ No newline at end of file diff --git a/devops/traefik/acme.json b/devops/traefik/acme.json deleted file mode 100644 index e69de29..0000000 diff --git a/devops/traefik/traefik.yaml b/devops/traefik/traefik.yaml deleted file mode 100644 index 1c50e51..0000000 --- a/devops/traefik/traefik.yaml +++ /dev/null @@ -1,11 +0,0 @@ -api: - dashboard: true - -certificatesResolvers: - letsEncrypt: - acme: - email: postmaster@example.com - storage: acme.json - caServer: "https://acme-staging-v02.api.letsencrypt.org/directory" - httpChallenge: - entryPoint: http \ No newline at end of file