1
0

Compare commits

...

2 Commits

5 changed files with 61 additions and 56 deletions

View File

@ -5,6 +5,8 @@
## Требования
- [ansible](https://docs.ansible.com/ansible/latest/getting_started/index.html)
- [invoke](https://www.pyinvoke.org/)
- [task](https://taskfile.dev/)
## Установка
@ -18,7 +20,7 @@ $ ansible-galaxy install --role-file ansible/requirements.yml
- Для каждого приложения создается свой пользователь.
- Для доступа используется ssh-ключ.
- Докер используется для запуска и изоляции приложений. Для загрузки образов настраивается Yandex Docker Registry.
- Выход во внешнюю сеть через proxy-server Caddy.
- Выход во внешнюю сеть через proxy server Caddy.
- Чувствительные данные в `ansible/vars/vars.yaml` зашифрованы с помощью Ansible Vault.
- Для мониторинга за сервером устанавливается [netdata](https://github.com/netdata/netdata).

View File

@ -4,12 +4,13 @@ version: '3'
vars:
USER_ID:
sh: id -u
sh: 'id -u'
GROUP_ID:
sh: id -g
sh: 'id -g'
HOSTS_FILE: 'ansible/hosts_prod'
REMOTE_USER: 'major'
REMOTE_HOST:
sh: cat ./ansible/hosts_prod | xargs
sh: 'cat {{.HOSTS_FILE}} | xargs'
tasks:
ssh:
@ -26,7 +27,7 @@ tasks:
cmds:
- >-
ansible-playbook
--inventory="ansible/hosts_prod"
--inventory="{{.HOSTS_FILE}}"
--list-tags
ansible/configuration.yml
@ -37,9 +38,9 @@ tasks:
cmds:
- >-
ansible-playbook
--user="{{.REMOTE_USER}}"
--become
--inventory="ansible/hosts_prod"
--user="{{.REMOTE_USER}}"
--inventory="{{.HOSTS_FILE}}"
--extra-vars="ansible_python_interpreter=/usr/bin/python3"
{{.TAGS}}
-vvv

View File

@ -1,23 +0,0 @@
from fabric import Connection
from invoke import task
import shlex
# Run task with `invoke deploy`
APP_NAME = "gitea"
SSH_HOST = f"{APP_NAME}@158.160.115.150"
@task
def deploy(c):
print("Ready to setup remote host")
with Connection(SSH_HOST) as c:
c.put(
local="docker-compose.yml",
remote=f"/home/{APP_NAME}/docker-compose.yml",
)
c.run("cp .env .env.prod")
c.run("mkdir -p data")
c.run(
f"docker-compose --project-name {shlex.quote(APP_NAME)} --env-file=.env.prod up --detach --remove-orphans"
)

51
app/tasks.py Normal file
View File

@ -0,0 +1,51 @@
import os
import shlex
import fabric
from invoke import task
SERVER_HOST_FILE = "../ansible/hosts_prod"
DOKER_REGISTRY = "cr.yandex/crplfk0168i4o8kd7ade"
@task(name="deploy:gitea")
def deploy_gitea(context):
deploy("gitea", dirs=["data"])
@task(name="deploy:wiki")
def deploy_wiki(context):
deploy("wiki")
def read_host():
with open(SERVER_HOST_FILE) as f:
return f.read().strip()
def ssh_host(app_name):
return f"{app_name}@{read_host()}"
def deploy(app_name: str, dirs=None):
docker_compose = os.path.join(app_name, "docker-compose.yml")
assert os.path.exists(docker_compose)
conn_str = ssh_host(app_name)
dirs = dirs or []
print("Deploy app from", docker_compose)
print("Start setup remote host", conn_str)
with fabric.Connection(conn_str) as c:
print("Copy docker compose file to remote host")
c.put(
local=docker_compose,
remote=f"/home/{app_name}/docker-compose.yml",
)
print("Copy environment file")
c.run("cp .env .env.prod")
for d in dirs:
print("Create remote directory", d)
c.run(f"mkdir -p {d}")
print("Up services")
c.run(
f"docker-compose --project-name {shlex.quote(app_name)} --env-file=.env.prod up --detach --remove-orphans"
)
print("Done.")

View File

@ -1,26 +0,0 @@
from fabric import Connection
from invoke import task
import subprocess
import shlex
APP_NAME = "wiki"
SSH_HOST = f"{APP_NAME}@158.160.115.150"
DOCKER_REGISTRY = "cr.yandex/crplfk0168i4o8kd7ade"
def run(args):
return subprocess.run(args, check=True, capture_output=True).stdout
@task
def deploy(c):
print("Ready to setup remote host")
with Connection(SSH_HOST) as c:
c.put(
"docker-compose.yml",
remote=f"/home/{APP_NAME}/docker-compose.yml",
)
c.run("cp .env .env.prod")
c.run(
f"docker-compose --project-name {shlex.quote(APP_NAME)} --env-file=.env.prod up --detach --remove-orphans"
)