salt/ansible
1
0
Fork 0
Code Issues Pull Requests Releases Wiki Activity
37150bf7d1
ansible/playbooks/prod_web.yml

284 lines
9.9 KiB
YAML
Raw Normal View History

Add game1.thefuck.how, separate playbooks out
2020-12-21 01:18:32 -06:00
#!/usr/bin/env ansible-playbook
# vim:ft=ansible:
# Webservers
---
- hosts: web1.desu.ltd
Use module_defaults on web1
2021-06-18 12:39:21 -05:00
module_defaults:
docker_container:
state: started
restart_policy: unless-stopped
pull: yes
Deploy 9iron container to production
2021-03-25 12:59:40 -05:00
tasks:
Move web1 over to a containerized setup, containerize Nextcloud
2021-08-24 00:31:11 -05:00
- name: ensure docker network
docker_network: name=web
tags: [ docker ]
- name: ensure docker nginx config
copy:
dest: /data/nginx-certbot/user_conf.d/vhosts.conf
mode: "0750"
content: |
server {
listen 443 ssl default_server;
server_name desu.ltd;
ssl_certificate /etc/letsencrypt/live/desu.ltd/fullchain.pem;
ssl_certificate_key /etc/letsencrypt/live/desu.ltd/privkey.pem;
ssl_trusted_certificate /etc/letsencrypt/live/desu.ltd/chain.pem;
ssl_dhparam /etc/letsencrypt/dhparams/dhparam.pem;
location / {
proxy_set_header Host $host;
proxy_set_header X-Real-IP $remote_addr;
proxy_pass http://desultd:80;
}
}
Add rewrite for www.9iron.club to nginx config
2021-08-24 00:32:33 -05:00
server {
listen 443 ssl;
server_name www.9iron.club;
ssl_certificate /etc/letsencrypt/live/desu.ltd/fullchain.pem;
ssl_certificate_key /etc/letsencrypt/live/desu.ltd/privkey.pem;
ssl_trusted_certificate /etc/letsencrypt/live/desu.ltd/chain.pem;
ssl_dhparam /etc/letsencrypt/dhparams/dhparam.pem;
God damn can I stop forgetting random small shit please
2021-08-24 00:35:41 -05:00
return 301 $scheme://9iron.club$request_uri;
Add rewrite for www.9iron.club to nginx config
2021-08-24 00:32:33 -05:00
}
Move web1 over to a containerized setup, containerize Nextcloud
2021-08-24 00:31:11 -05:00
server {
listen 443 ssl;
server_name 9iron.club;
ssl_certificate /etc/letsencrypt/live/desu.ltd/fullchain.pem;
ssl_certificate_key /etc/letsencrypt/live/desu.ltd/privkey.pem;
ssl_trusted_certificate /etc/letsencrypt/live/desu.ltd/chain.pem;
ssl_dhparam /etc/letsencrypt/dhparams/dhparam.pem;
location / {
proxy_set_header Host $host;
proxy_set_header X-Real-IP $remote_addr;
proxy_pass http://9iron:80;
}
}
server {
listen 443 ssl;
server_name git.desu.ltd;
ssl_certificate /etc/letsencrypt/live/desu.ltd/fullchain.pem;
ssl_certificate_key /etc/letsencrypt/live/desu.ltd/privkey.pem;
ssl_trusted_certificate /etc/letsencrypt/live/desu.ltd/chain.pem;
ssl_dhparam /etc/letsencrypt/dhparams/dhparam.pem;
location / {
proxy_set_header Host $host;
proxy_set_header X-Real-IP $remote_addr;
proxy_pass http://gitea:3000;
}
}
server {
listen 443 ssl;
server_name nc.desu.ltd;
ssl_certificate /etc/letsencrypt/live/desu.ltd/fullchain.pem;
ssl_certificate_key /etc/letsencrypt/live/desu.ltd/privkey.pem;
ssl_trusted_certificate /etc/letsencrypt/live/desu.ltd/chain.pem;
ssl_dhparam /etc/letsencrypt/dhparams/dhparam.pem;
Add Redis for Nextcloud, plus some config tuning
2021-08-24 01:12:12 -05:00
add_header Strict-Transport-Security "max-age=31536000";
Add some directives to make Nextcloud stop throwing 413s
2021-09-11 10:36:22 -05:00
client_max_body_size 0;
Move web1 over to a containerized setup, containerize Nextcloud
2021-08-24 00:31:11 -05:00
location / {
proxy_set_header Host $host;
proxy_set_header X-Real-IP $remote_addr;
proxy_pass http://nextcloud:80;
}
Add Redis for Nextcloud, plus some config tuning
2021-08-24 01:12:12 -05:00
location ^~ /.well-known {
location = /.well-known/carddav { return 301 /remote.php/dav/; }
location = /.well-known/caldav { return 301 /remote.php/dav/; }
location ^~ /.well-known { return 301 /index.php$uri; }
try_files $uri $uri/ =404;
}
Move web1 over to a containerized setup, containerize Nextcloud
2021-08-24 00:31:11 -05:00
}
server {
listen 443 ssl;
server_name srv.9iron.club;
ssl_certificate /etc/letsencrypt/live/desu.ltd/fullchain.pem;
ssl_certificate_key /etc/letsencrypt/live/desu.ltd/privkey.pem;
ssl_trusted_certificate /etc/letsencrypt/live/desu.ltd/chain.pem;
ssl_dhparam /etc/letsencrypt/dhparams/dhparam.pem;
location / {
proxy_set_header Host $host;
proxy_set_header X-Real-IP $remote_addr;
proxy_pass http://srv:80;
}
}
tags: [ docker, ingress ]
Divide webservices into task files
2021-08-07 16:49:24 -05:00
- name: include tasks for apps
include_tasks: tasks/app/{{ task }}
with_items:
- gulagbot.yml
Add Redis for Nextcloud, plus some config tuning
2021-08-24 01:12:12 -05:00
- redis.yml
Divide webservices into task files
2021-08-07 16:49:24 -05:00
loop_control:
loop_var: task
tags: [ always ]
- name: include tasks for web services
include_tasks: tasks/web/{{ task }}
with_items:
- 9iron.yml
- desultd.yml
- gitea.yml
Move web1 over to a containerized setup, containerize Nextcloud
2021-08-24 00:31:11 -05:00
- nextcloud.yml
- srv.yml
- ingress-generic.yml
Divide webservices into task files
2021-08-07 16:49:24 -05:00
loop_control:
loop_var: task
tags: [ always ]
Add game1.thefuck.how, separate playbooks out
2020-12-21 01:18:32 -06:00
roles:
Define machine-specific backups
2020-12-24 09:19:12 -06:00
- role: backup
vars:
backup_s3backup_list_extra:
Back up our jank shell script ew
2021-06-14 17:16:48 -05:00
- /app/gitea/gitea
Deploy docker to web1.desu.ltd Also adds docker libs to all hosts
2021-03-25 12:46:53 -05:00
- /data
Fix incorrect backup dir for nextcloud
2020-12-30 15:32:44 -06:00
- /var/www/nc.desu.ltd
Build like everything to set up a Minecraft server
2021-05-11 22:28:19 -05:00
- /var/www/srv.9iron.club
Move data directories for NC and Gitea to /srv Allows for mountpoints yadda yadda
2020-12-30 18:05:57 -06:00
- /srv/desu.ltd
Exclude gitea logs in web1 backups
2021-01-14 18:06:13 -06:00
backup_s3backup_exclude_list_extra:
- /var/lib/gitea/log
Move Gitea to a container Getting there
2021-06-14 17:16:26 -05:00
- /data/gitea/data/gitea/log
Define machine-specific backups
2020-12-24 09:19:12 -06:00
tags: [ backup ]
Move a bunch of webhead variables to their own vars files
2021-01-18 05:03:46 -06:00
- role: git
vars:
git_repos:
- repo: https://git.desu.ltd/salt/gitea-custom
Move Gitea to a container Getting there
2021-06-14 17:16:26 -05:00
dest: /data/gitea/data/gitea/custom
Move a bunch of webhead variables to their own vars files
2021-01-18 05:03:46 -06:00
tags: [ web, git ]
Move Pleroma to a desu.ltd box WEW
2021-01-26 04:25:27 -06:00
- hosts: web2.desu.ltd
Employ defaults on web2
2021-06-07 00:45:52 -05:00
module_defaults:
docker_container:
state: started
restart_policy: unless-stopped
pull: yes
Migrate Pleroma into a Docker container This greatly simplifies configuration on web2, oddly enough
2021-06-03 20:34:48 -05:00
tasks:
- name: ensure docker network
docker_network: name=web
tags: [ docker ]
- name: ensure docker nginx config
copy:
dest: /data/nginx-certbot/user_conf.d/vhosts.conf
mode: "0750"
content: |
server {
listen 443 ssl default_server;
server_name cowfee.moe;
ssl_certificate /etc/letsencrypt/live/cowfee.moe/fullchain.pem;
ssl_certificate_key /etc/letsencrypt/live/cowfee.moe/privkey.pem;
ssl_trusted_certificate /etc/letsencrypt/live/cowfee.moe/chain.pem;
ssl_dhparam /etc/letsencrypt/dhparams/dhparam.pem;
location / {
proxy_set_header Host $host;
proxy_set_header X-Real-IP $remote_addr;
proxy_pass http://pleroma:4000;
}
}
Deploy Peertube
2021-06-07 02:52:11 -05:00
server {
listen 443 ssl;
server_name tube.cowfee.moe;
ssl_certificate /etc/letsencrypt/live/cowfee.moe/fullchain.pem;
ssl_certificate_key /etc/letsencrypt/live/cowfee.moe/privkey.pem;
ssl_trusted_certificate /etc/letsencrypt/live/cowfee.moe/chain.pem;
ssl_dhparam /etc/letsencrypt/dhparams/dhparam.pem;
location / {
proxy_set_header Host $host;
proxy_set_header X-Real-IP $remote_addr;
proxy_pass http://peertube:9000;
}
}
Migrate Pleroma into a Docker container This greatly simplifies configuration on web2, oddly enough
2021-06-03 20:34:48 -05:00
tags: [ docker, ingress ]
Divide webservices into task files
2021-08-07 16:49:24 -05:00
- name: include tasks for apps
include_tasks: tasks/app/{{ task }}
with_items:
- redis.yml
loop_control:
loop_var: task
tags: [ always ]
- name: include tasks for web services
include_tasks: tasks/web/{{ task }}
with_items:
- peertube.yml
- pleroma.yml
- ingress-generic.yml
loop_control:
loop_var: task
tags: [ always ]
Move fedi1 over, add Pleroma role
2021-01-25 22:19:31 -06:00
roles:
- role: backup
vars:
backup_s3backup_list_extra:
Migrate Pleroma into a Docker container This greatly simplifies configuration on web2, oddly enough
2021-06-03 20:34:48 -05:00
- /data
Move fedi1 over, add Pleroma role
2021-01-25 22:19:31 -06:00
tags: [ backup ]
Provision (read: move) Netbox to desu.ltd
2021-08-01 21:35:41 -05:00
- hosts: web3.desu.ltd
module_defaults:
docker_container:
state: started
restart_policy: unless-stopped
pull: yes
tasks:
- name: ensure docker network
docker_network: name=web
tags: [ docker ]
- name: ensure docker nginx config
copy:
dest: /data/nginx-certbot/user_conf.d/vhosts.conf
mode: "0750"
content: |
server {
listen 443 ssl default_server;
server_name netbox.desu.ltd;
ssl_certificate /etc/letsencrypt/live/netbox.desu.ltd/fullchain.pem;
ssl_certificate_key /etc/letsencrypt/live/netbox.desu.ltd/privkey.pem;
ssl_trusted_certificate /etc/letsencrypt/live/netbox.desu.ltd/chain.pem;
ssl_dhparam /etc/letsencrypt/dhparams/dhparam.pem;
location / {
proxy_set_header Host $host;
proxy_set_header X-Real-IP $remote_addr;
proxy_pass http://netbox:8080;
}
}
Add Nagios and some dysfunctional templating code
2021-08-08 00:28:18 -05:00
server {
listen 443 ssl;
server_name nagios.desu.ltd;
ssl_certificate /etc/letsencrypt/live/netbox.desu.ltd/fullchain.pem;
ssl_certificate_key /etc/letsencrypt/live/netbox.desu.ltd/privkey.pem;
ssl_trusted_certificate /etc/letsencrypt/live/netbox.desu.ltd/chain.pem;
ssl_dhparam /etc/letsencrypt/dhparams/dhparam.pem;
location / {
proxy_set_header Host $host;
proxy_set_header X-Real-IP $remote_addr;
proxy_pass http://nagios:80;
}
}
Add some stuff for MOVIE NIGHT WIT DA BOIS
2021-08-24 16:58:45 -05:00
server {
listen 443 ssl;
server_name movie.desu.ltd;
ssl_certificate /etc/letsencrypt/live/netbox.desu.ltd/fullchain.pem;
ssl_certificate_key /etc/letsencrypt/live/netbox.desu.ltd/privkey.pem;
ssl_trusted_certificate /etc/letsencrypt/live/netbox.desu.ltd/chain.pem;
ssl_dhparam /etc/letsencrypt/dhparams/dhparam.pem;
location / {
proxy_set_header Host $host;
proxy_set_header X-Real-IP $remote_addr;
proxy_pass http://movienight:8089;
}
}
Provision (read: move) Netbox to desu.ltd
2021-08-01 21:35:41 -05:00
tags: [ docker, ingress ]
Divide webservices into task files
2021-08-07 16:49:24 -05:00
- name: include tasks for apps
include_tasks: tasks/app/{{ task }}
with_items:
- redis.yml
loop_control:
loop_var: task
tags: [ always ]
- name: include tasks for web services
include_tasks: tasks/web/{{ task }}
with_items:
Add some stuff for MOVIE NIGHT WIT DA BOIS
2021-08-24 16:58:45 -05:00
- movienight.yml
Divide webservices into task files
2021-08-07 16:49:24 -05:00
- netbox.yml
Add Nagios and some dysfunctional templating code
2021-08-08 00:28:18 -05:00
- nagios.yml
- ingress-generic.yml
Divide webservices into task files
2021-08-07 16:49:24 -05:00
loop_control:
loop_var: task
tags: [ always ]
Provision (read: move) Netbox to desu.ltd
2021-08-01 21:35:41 -05:00
roles:
- role: backup
vars:
backup_s3backup_list_extra:
- /data
tags: [ backup ]
Reference in New Issue Copy Permalink