diff --git a/inventory/hosts.yml b/inventory/hosts.yml index 6ee09c7..e3512c9 100644 --- a/inventory/hosts.yml +++ b/inventory/hosts.yml @@ -19,6 +19,7 @@ all: psql1.desu.ltd: web: hosts: + web1.9iron.club: web1.desu.ltd: game: hosts: diff --git a/playbooks/web.yml b/playbooks/web.yml index 359fb7e..5d99367 100755 --- a/playbooks/web.yml +++ b/playbooks/web.yml @@ -70,6 +70,64 @@ gitea_start_ssh: no gitea_user: git tags: [ web, gitea ] +- hosts: web1.9iron.club + tasks: + - name: configure nextcloud cronjob + cron: user=www-data name=nextcloud minute=*/5 job="php -f /var/www/nextcloud/cron.php" + tags: [ nextcloud, cron ] + - name: register nextcloud efs + efs: + name: 9iron-gitea + region: us-east-2 + targets: + - subnet_id: subnet-852935ed + security_groups: [ "sg-4f4b692c" ] + register: ncefs + tags: [ nextcloud, efs ] + - name: mount nextcloud efs + mount: path=/var/nextcloud src={{ ncefs.efs.filesystem_address }} fstype=nfs4 opts="nfsvers=4.1,rsize=1048576,wsize=1048576,hard,timeo=600,retrans=2,noresvport" state=mounted + tags: [ nextcloud, efs ] + - name: register gitea efs + efs: + name: 9iron-gitea + region: us-east-2 + targets: + - subnet_id: subnet-852935ed + security_groups: [ "sg-4f4b692c" ] + register: gitefs + tags: [ gitea, efs ] + - name: mount gitea efs + mount: path=/var/gitea src={{ gitefs.efs.filesystem_address }} fstype=nfs4 opts="nfsvers=4.1,rsize=1048576,wsize=1048576,hard,timeo=600,retrans=2,noresvport" state=mounted + tags: [ gitea, efs ] + vars_files: + - vars/apache.yml + - vars/php-fpm.yml + - vars/9iron-apache.yml + - vars/9iron-certbot.yml + roles: + - role: backup + vars: + backup_s3backup_list_extra: + - /var/gitea + - /var/lib/gitea + - /var/nextcloud + - /var/www/nextcloud + backup_s3backup_exclude_list_extra: + - /var/lib/gitea/log + tags: [ backup ] + - role: motd + vars: + motd_watch_services_extra: + - apache2 + - gitea + - php7.4-fpm + tags: [ motd ] + - role: certbot + tags: [ web, certbot ] + - role: php + tags: [ web, php ] + - role: apache + tags: [ web, apache ] - hosts: game1.thefuck.how roles: - role: certbot