ilia
3415340e26
All checks were successful
CI / skip-ci-check (pull_request) Successful in 1m18s
CI / lint-and-test (pull_request) Successful in 1m21s
CI / ansible-validation (pull_request) Successful in 2m43s
CI / secret-scanning (pull_request) Successful in 1m19s
CI / dependency-scan (pull_request) Successful in 1m23s
CI / sast-scan (pull_request) Successful in 2m28s
CI / license-check (pull_request) Successful in 1m20s
CI / vault-check (pull_request) Successful in 2m21s
CI / playbook-test (pull_request) Successful in 2m19s
CI / container-scan (pull_request) Successful in 1m48s
CI / sonar-analysis (pull_request) Successful in 1m26s
CI / workflow-summary (pull_request) Successful in 1m17s
83 lines
2.0 KiB
YAML
83 lines
2.0 KiB
YAML
---
|
|
# Role: app_setup
|
|
# Purpose: create app layout, env file, deploy script, and systemd units.
|
|
|
|
- name: Ensure app root directory exists
|
|
ansible.builtin.file:
|
|
path: "{{ app_root }}"
|
|
state: directory
|
|
owner: "{{ app_owner }}"
|
|
group: "{{ app_group }}"
|
|
mode: "0755"
|
|
|
|
- name: Ensure backend directory exists
|
|
ansible.builtin.file:
|
|
path: "{{ app_backend_dir }}"
|
|
state: directory
|
|
owner: "{{ app_owner }}"
|
|
group: "{{ app_group }}"
|
|
mode: "0755"
|
|
when: app_enable_backend | bool
|
|
|
|
- name: Ensure frontend directory exists
|
|
ansible.builtin.file:
|
|
path: "{{ app_frontend_dir }}"
|
|
state: directory
|
|
owner: "{{ app_owner }}"
|
|
group: "{{ app_group }}"
|
|
mode: "0755"
|
|
when: app_enable_frontend | bool
|
|
|
|
- name: Deploy environment file for this env
|
|
ansible.builtin.template:
|
|
src: env.j2
|
|
dest: "{{ app_root }}/.env.{{ app_env }}"
|
|
owner: "{{ app_owner }}"
|
|
group: "{{ app_group }}"
|
|
mode: "0640"
|
|
|
|
- name: Deploy deploy script
|
|
ansible.builtin.template:
|
|
src: deploy_app.sh.j2
|
|
dest: /usr/local/bin/deploy_app.sh
|
|
owner: root
|
|
group: root
|
|
mode: "0755"
|
|
|
|
- name: Deploy systemd unit for backend
|
|
ansible.builtin.template:
|
|
src: app-backend.service.j2
|
|
dest: /etc/systemd/system/app-backend.service
|
|
owner: root
|
|
group: root
|
|
mode: "0644"
|
|
notify: Reload systemd
|
|
when: app_enable_backend | bool
|
|
|
|
- name: Deploy systemd unit for frontend
|
|
ansible.builtin.template:
|
|
src: app-frontend.service.j2
|
|
dest: /etc/systemd/system/app-frontend.service
|
|
owner: root
|
|
group: root
|
|
mode: "0644"
|
|
notify: Reload systemd
|
|
when: app_enable_frontend | bool
|
|
|
|
- name: Ensure systemd is reloaded before enabling services
|
|
ansible.builtin.meta: flush_handlers
|
|
|
|
- name: Enable and start backend service
|
|
ansible.builtin.systemd:
|
|
name: app-backend.service
|
|
enabled: true
|
|
state: started
|
|
when: app_enable_backend | bool
|
|
|
|
- name: Enable and start frontend service
|
|
ansible.builtin.systemd:
|
|
name: app-frontend.service
|
|
enabled: true
|
|
state: started
|
|
when: app_enable_frontend | bool
|