Compare commits
2 Commits
6b714a8486
...
c44b1322cf
Author | SHA1 | Date | |
---|---|---|---|
c44b1322cf | |||
ea43f571ae |
@ -5,6 +5,8 @@
|
||||
## Требования
|
||||
|
||||
- [ansible](https://docs.ansible.com/ansible/latest/getting_started/index.html)
|
||||
- [invoke](https://www.pyinvoke.org/)
|
||||
- [task](https://taskfile.dev/)
|
||||
|
||||
## Установка
|
||||
|
||||
@ -18,7 +20,7 @@ $ ansible-galaxy install --role-file ansible/requirements.yml
|
||||
- Для каждого приложения создается свой пользователь.
|
||||
- Для доступа используется ssh-ключ.
|
||||
- Докер используется для запуска и изоляции приложений. Для загрузки образов настраивается Yandex Docker Registry.
|
||||
- Выход во внешнюю сеть через proxy-server Caddy.
|
||||
- Выход во внешнюю сеть через proxy server Caddy.
|
||||
- Чувствительные данные в `ansible/vars/vars.yaml` зашифрованы с помощью Ansible Vault.
|
||||
- Для мониторинга за сервером устанавливается [netdata](https://github.com/netdata/netdata).
|
||||
|
||||
|
13
Taskfile.yml
13
Taskfile.yml
@ -4,12 +4,13 @@ version: '3'
|
||||
|
||||
vars:
|
||||
USER_ID:
|
||||
sh: id -u
|
||||
sh: 'id -u'
|
||||
GROUP_ID:
|
||||
sh: id -g
|
||||
sh: 'id -g'
|
||||
HOSTS_FILE: 'ansible/hosts_prod'
|
||||
REMOTE_USER: 'major'
|
||||
REMOTE_HOST:
|
||||
sh: cat ./ansible/hosts_prod | xargs
|
||||
sh: 'cat {{.HOSTS_FILE}} | xargs'
|
||||
|
||||
tasks:
|
||||
ssh:
|
||||
@ -26,7 +27,7 @@ tasks:
|
||||
cmds:
|
||||
- >-
|
||||
ansible-playbook
|
||||
--inventory="ansible/hosts_prod"
|
||||
--inventory="{{.HOSTS_FILE}}"
|
||||
--list-tags
|
||||
ansible/configuration.yml
|
||||
|
||||
@ -37,9 +38,9 @@ tasks:
|
||||
cmds:
|
||||
- >-
|
||||
ansible-playbook
|
||||
--user="{{.REMOTE_USER}}"
|
||||
--become
|
||||
--inventory="ansible/hosts_prod"
|
||||
--user="{{.REMOTE_USER}}"
|
||||
--inventory="{{.HOSTS_FILE}}"
|
||||
--extra-vars="ansible_python_interpreter=/usr/bin/python3"
|
||||
{{.TAGS}}
|
||||
-vvv
|
||||
|
@ -1,23 +0,0 @@
|
||||
from fabric import Connection
|
||||
from invoke import task
|
||||
import shlex
|
||||
|
||||
# Run task with `invoke deploy`
|
||||
|
||||
APP_NAME = "gitea"
|
||||
SSH_HOST = f"{APP_NAME}@158.160.115.150"
|
||||
|
||||
|
||||
@task
|
||||
def deploy(c):
|
||||
print("Ready to setup remote host")
|
||||
with Connection(SSH_HOST) as c:
|
||||
c.put(
|
||||
local="docker-compose.yml",
|
||||
remote=f"/home/{APP_NAME}/docker-compose.yml",
|
||||
)
|
||||
c.run("cp .env .env.prod")
|
||||
c.run("mkdir -p data")
|
||||
c.run(
|
||||
f"docker-compose --project-name {shlex.quote(APP_NAME)} --env-file=.env.prod up --detach --remove-orphans"
|
||||
)
|
51
app/tasks.py
Normal file
51
app/tasks.py
Normal file
@ -0,0 +1,51 @@
|
||||
import os
|
||||
import shlex
|
||||
import fabric
|
||||
from invoke import task
|
||||
|
||||
SERVER_HOST_FILE = "../ansible/hosts_prod"
|
||||
DOKER_REGISTRY = "cr.yandex/crplfk0168i4o8kd7ade"
|
||||
|
||||
|
||||
@task(name="deploy:gitea")
|
||||
def deploy_gitea(context):
|
||||
deploy("gitea", dirs=["data"])
|
||||
|
||||
|
||||
@task(name="deploy:wiki")
|
||||
def deploy_wiki(context):
|
||||
deploy("wiki")
|
||||
|
||||
|
||||
def read_host():
|
||||
with open(SERVER_HOST_FILE) as f:
|
||||
return f.read().strip()
|
||||
|
||||
|
||||
def ssh_host(app_name):
|
||||
return f"{app_name}@{read_host()}"
|
||||
|
||||
|
||||
def deploy(app_name: str, dirs=None):
|
||||
docker_compose = os.path.join(app_name, "docker-compose.yml")
|
||||
assert os.path.exists(docker_compose)
|
||||
conn_str = ssh_host(app_name)
|
||||
dirs = dirs or []
|
||||
print("Deploy app from", docker_compose)
|
||||
print("Start setup remote host", conn_str)
|
||||
with fabric.Connection(conn_str) as c:
|
||||
print("Copy docker compose file to remote host")
|
||||
c.put(
|
||||
local=docker_compose,
|
||||
remote=f"/home/{app_name}/docker-compose.yml",
|
||||
)
|
||||
print("Copy environment file")
|
||||
c.run("cp .env .env.prod")
|
||||
for d in dirs:
|
||||
print("Create remote directory", d)
|
||||
c.run(f"mkdir -p {d}")
|
||||
print("Up services")
|
||||
c.run(
|
||||
f"docker-compose --project-name {shlex.quote(app_name)} --env-file=.env.prod up --detach --remove-orphans"
|
||||
)
|
||||
print("Done.")
|
@ -1,26 +0,0 @@
|
||||
from fabric import Connection
|
||||
from invoke import task
|
||||
import subprocess
|
||||
import shlex
|
||||
|
||||
APP_NAME = "wiki"
|
||||
SSH_HOST = f"{APP_NAME}@158.160.115.150"
|
||||
DOCKER_REGISTRY = "cr.yandex/crplfk0168i4o8kd7ade"
|
||||
|
||||
|
||||
def run(args):
|
||||
return subprocess.run(args, check=True, capture_output=True).stdout
|
||||
|
||||
|
||||
@task
|
||||
def deploy(c):
|
||||
print("Ready to setup remote host")
|
||||
with Connection(SSH_HOST) as c:
|
||||
c.put(
|
||||
"docker-compose.yml",
|
||||
remote=f"/home/{APP_NAME}/docker-compose.yml",
|
||||
)
|
||||
c.run("cp .env .env.prod")
|
||||
c.run(
|
||||
f"docker-compose --project-name {shlex.quote(APP_NAME)} --env-file=.env.prod up --detach --remove-orphans"
|
||||
)
|
Loading…
Reference in New Issue
Block a user