ea48ffc596
This got copied from another command that also had this typo. Also, don't bother backing up the on-disk backups, as we backup directly via the stream dumps. Change-Id: Ie200a29eec2b1a0725a8872ab548bcb0f26980e6
155 lines
3.4 KiB
YAML
155 lines
3.4 KiB
YAML
- name: Ensure docker-compose directory exists
|
|
file:
|
|
state: directory
|
|
path: /etc/refstack-docker
|
|
mode: 0700
|
|
|
|
- name: Write docker-compose file
|
|
template:
|
|
src: docker-compose.yaml.j2
|
|
dest: /etc/refstack-docker/docker-compose.yaml
|
|
mode: 0600
|
|
|
|
- name: Install apache2
|
|
apt:
|
|
name:
|
|
- apache2
|
|
- apache2-utils
|
|
state: present
|
|
|
|
- name: Apache modules
|
|
apache2_module:
|
|
state: present
|
|
name: "{{ item }}"
|
|
loop:
|
|
- rewrite
|
|
- proxy
|
|
- proxy_http
|
|
- ssl
|
|
- headers
|
|
- proxy_wstunnel
|
|
|
|
- name: Copy apache config
|
|
template:
|
|
src: refstack.vhost.j2
|
|
dest: /etc/apache2/sites-enabled/000-default.conf
|
|
owner: root
|
|
group: root
|
|
mode: 0644
|
|
notify: refstack Reload apache2
|
|
|
|
- name: Create refstack storage
|
|
file:
|
|
state: directory
|
|
path: /var/lib/refstack/
|
|
owner: root
|
|
group: root
|
|
mode: 0755
|
|
|
|
- name: Create refstack config storage area
|
|
file:
|
|
state: directory
|
|
path: /var/lib/refstack/etc
|
|
owner: root
|
|
group: root
|
|
mode: 0755
|
|
|
|
- name: Create refstack data storage area
|
|
file:
|
|
state: directory
|
|
path: /var/lib/refstack/data
|
|
owner: root
|
|
group: root
|
|
mode: 0755
|
|
|
|
- name: Create refstack www storage area
|
|
file:
|
|
state: directory
|
|
path: /var/lib/refstack/www
|
|
owner: root
|
|
group: root
|
|
mode: 0755
|
|
|
|
- name: Create refstack db storage area
|
|
file:
|
|
state: directory
|
|
path: /var/lib/refstack/db
|
|
owner: root
|
|
group: root
|
|
mode: 0755
|
|
|
|
- name: Copy hound robots.txt
|
|
copy:
|
|
src: robots.txt
|
|
dest: /var/lib/refstack/www/robots.txt
|
|
|
|
- name: Write refstack.conf
|
|
template:
|
|
src: refstack.conf.j2
|
|
dest: /var/lib/refstack/etc/refstack.conf
|
|
|
|
- name: Write config.json
|
|
template:
|
|
src: config.json.j2
|
|
dest: /var/lib/refstack/etc/config.json
|
|
|
|
- name: Install distro packages
|
|
package:
|
|
name:
|
|
- docker-compose
|
|
state: present
|
|
|
|
- name: Run docker-compose pull
|
|
shell:
|
|
cmd: docker-compose pull
|
|
chdir: /etc/refstack-docker/
|
|
|
|
- name: Run docker-compose up
|
|
shell:
|
|
cmd: docker-compose up -d --timeout 60
|
|
chdir: /etc/refstack-docker/
|
|
|
|
- name: Run docker prune to cleanup unneeded images
|
|
shell:
|
|
cmd: docker image prune -f
|
|
|
|
- name: Create db backup dest
|
|
file:
|
|
state: directory
|
|
path: /var/backups/refstack-mariadb
|
|
mode: 0700
|
|
owner: root
|
|
group: root
|
|
|
|
- name: Set up cron job to backup the database
|
|
cron:
|
|
name: refstack-db-backup
|
|
state: present
|
|
user: root
|
|
job: >
|
|
/usr/bin/docker-compose -f /etc/refstack-docker/docker-compose.yaml exec -T mariadb
|
|
bash -c '/usr/bin/mysqldump --opt --databases refstack --single-transaction -uroot -p"$MYSQL_ROOT_PASSWORD"' |
|
|
gzip -9 > /var/backups/refstack-mariadb/refstack-mariadb.sql.gz
|
|
minute: "42"
|
|
hour: "4"
|
|
|
|
- name: Rotate db backups
|
|
include_role:
|
|
name: logrotate
|
|
vars:
|
|
logrotate_file_name: /var/backups/refstack-mariadb/refstack-mariadb.sql.gz
|
|
|
|
- name: Setup db backup streaming job
|
|
block:
|
|
- name: Create backup streaming config dir
|
|
file:
|
|
path: /etc/borg-streams
|
|
state: directory
|
|
|
|
- name: Create db streaming file
|
|
copy:
|
|
content: >-
|
|
/usr/local/bin/docker-compose -f /etc/refstack-docker/docker-compose.yaml exec -T mariadb
|
|
bash -c '/usr/bin/mysqldump --skip-extended-insert --databases refstack --single-transaction -uroot -p"$MYSQL_ROOT_PASSWORD"'
|
|
dest: /etc/borg-streams/mysql
|