infrastructure/galaxy-media_playbook.yml at master · neoformit/infrastructure · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
---
# Deploy the Galaxy Media Site
- hosts: gms_webservers
  remote_user: ubuntu
  become: true
  vars_files:
    - group_vars/all.yml
    - group_vars/VAULT
    - secret_group_vars/ssh_keys
    - secret_group_vars/gms_vault
    - group_vars/gms.yml
    - host_vars/site.usegalaxy.org.au.yml

  pre_tasks:
    - name: update apt cache
      ansible.builtin.apt:
        update_cache: yes
      tags: always
    - name: install systems dependencies
      ansible.builtin.package:
        name:
          - software-properties-common
          - libpq-dev
    - name: Install pip dependencies
      ansible.builtin.pip:
        name:
          - psycopg2-binary
    - name: Create postgres socket directory
      ansible.builtin.file:
        path: /var/run/postgresql
        state: directory
        owner: postgres
        group: postgres
        mode: '0755'
      tags: postgresql

  post_tasks:
    - name: Add GitHub SI pub key to authorized_keys
      authorized_key:
        user: ubuntu
        key: "{{ lookup('file', 'keys/gms-labs-ci.pub') }}"

  roles:
    - role: common
      become: true
      become_user: root
    - dj-wasabi.telegraf
    - role: geerlingguy.nginx
    - role: geerlingguy.postgresql
      become: true
      tags: postgresql
    - role: galaxy_media_site
      tags: gms