Compare commits
3 Commits
b77c81f754
...
9a02652d98
Author | SHA1 | Date | |
---|---|---|---|
9a02652d98 | |||
2c1b3cb47e | |||
114cf13871 |
@ -5,11 +5,6 @@
|
||||
This ansible collection provides various roles for installing
|
||||
and configuring basic system utilities like gnupg, ssh etc
|
||||
|
||||
- DEPRECATED: [`elasticsearch`](roles/elasticsearch/README.md): Deploy [elasticsearch](https://www.docker.elastic.co/r/elasticsearch/elasticsearch-oss),
|
||||
a popular (distributed) search and analytics engine, mostly known by it's
|
||||
letter "E" in the ELK-stack.
|
||||
This role has been moved to the `finallycoffee.databases.elasticsearch` ansible collection.
|
||||
|
||||
- [`git`](roles/git/README.md): configures git on the target system
|
||||
|
||||
- [`gnupg`](roles/gnupg/README.md): configures gnupg on the target system
|
||||
@ -17,10 +12,6 @@ and configuring basic system utilities like gnupg, ssh etc
|
||||
- [`lego`](roles/lego/README.md): runs [lego (LetsEncrypt Go)](https://github.com/go-acme/lego),
|
||||
a ACME client written in go, using systemd (timers). Multi-instance capable.
|
||||
|
||||
- DEPRECATED: [`mariadb`](roles/mariadb/README.md): runs [MariaDB Server](https://mariadb.org/),
|
||||
one of the world's most popular open source relational database.
|
||||
Moved to `finallycoffee.databases.mariadb`.
|
||||
|
||||
- [`minio`](roles/minio/README.md): Deploy [min.io](https://min.io), an
|
||||
s3-compatible object storage server, using docker containers.
|
||||
|
||||
|
@ -1,6 +1,6 @@
|
||||
namespace: finallycoffee
|
||||
name: base
|
||||
version: 0.1.3
|
||||
version: 0.2.0
|
||||
readme: README.md
|
||||
authors:
|
||||
- transcaffeine <transcaffeine@finally.coffee>
|
||||
|
@ -1,22 +0,0 @@
|
||||
# `finallycoffee.base.elastiscsearch`
|
||||
|
||||
A simple ansible role which deploys a single-node elastic container to provide
|
||||
an easy way to do some indexing.
|
||||
|
||||
## Usage
|
||||
|
||||
Per default, `/opt/elasticsearch/data` is used to persist data, it is
|
||||
customizable by using either `elasticsearch_base_path` or `elasticsearch_data_path`.
|
||||
|
||||
As elasticsearch be can be quite memory heavy, the maximum amount of allowed RAM
|
||||
can be configured using `elasticsearch_allocated_ram_mb`, defaulting to 512 (mb).
|
||||
|
||||
The cluster name and discovery type can be overridden using
|
||||
`elasticsearch_config_cluster_name` (default: elastic) and
|
||||
`elasticsearch_config_discovery_type` (default: single-node), should one
|
||||
need a multi-node elasticsearch deployment.
|
||||
|
||||
Per default, no ports or networks are mapped, and explizit mapping using
|
||||
either ports (`elasticsearch_container_ports`) or networks
|
||||
(`elasticsearch_container_networks`) is required in order for other services
|
||||
to use elastic.
|
@ -1,35 +0,0 @@
|
||||
---
|
||||
|
||||
elasticsearch_version: 7.17.7
|
||||
|
||||
elasticsearch_base_path: /opt/elasticsearch
|
||||
elasticsearch_data_path: "{{ elasticsearch_base_path }}/data"
|
||||
|
||||
elasticsearch_config_cluster_name: elastic
|
||||
elasticsearch_config_discovery_type: single-node
|
||||
elasticsearch_config_boostrap_memory_lock: true
|
||||
elasticsearch_allocated_ram_mb: 512
|
||||
|
||||
elasticsearch_container_image_name: docker.elastic.co/elasticsearch/elasticsearch-oss
|
||||
elasticsearch_container_image_tag: ~
|
||||
elasticsearch_container_image: >-
|
||||
{{ elasticsearch_container_image_name }}:{{ elasticsearch_container_image_tag | default(elasticsearch_version, true) }}
|
||||
|
||||
elasticsearch_container_name: elasticsearch
|
||||
elasticsearch_container_env:
|
||||
"ES_JAVA_OPTS": "-Xms{{ elasticsearch_allocated_ram_mb }}m -Xmx{{ elasticsearch_allocated_ram_mb }}m"
|
||||
"cluster.name": "{{ elasticsearch_config_cluster_name }}"
|
||||
"discovery.type": "{{ elasticsearch_config_discovery_type }}"
|
||||
"bootstrap.memory_lock": "{{ 'true' if elasticsearch_config_boostrap_memory_lock else 'false' }}"
|
||||
elasticsearch_container_user: ~
|
||||
elasticsearch_container_ports: ~
|
||||
elasticsearch_container_labels:
|
||||
version: "{{ elasticsearch_version }}"
|
||||
elasticsearch_container_ulimits:
|
||||
# - "memlock:{{ (1.5 * 1024 * elasticsearch_allocated_ram_mb) | int }}:{{ (1.5 * 1024 * elasticsearch_allocated_ram_mb) | int }}"
|
||||
- "memlock:-1:-1"
|
||||
elasticsearch_container_volumes:
|
||||
- "{{ elasticsearch_data_path }}:/usr/share/elasticsearch/data:z"
|
||||
elasticsearch_container_networks: ~
|
||||
elasticsearch_container_purge_networks: ~
|
||||
elasticsearch_container_restart_policy: unless-stopped
|
@ -1,37 +0,0 @@
|
||||
---
|
||||
- name: Warn about deprecation and move of role
|
||||
ansible.builtin.debug:
|
||||
msg: >-2
|
||||
This ansible role has been moved to the finallycoffee.databases
|
||||
ansible collection and will no longer be maintained here!
|
||||
|
||||
- name: Ensure host directories are present
|
||||
file:
|
||||
path: "{{ item }}"
|
||||
state: directory
|
||||
mode: "0777"
|
||||
loop:
|
||||
- "{{ elasticsearch_base_path }}"
|
||||
- "{{ elasticsearch_data_path }}"
|
||||
|
||||
- name: Ensure elastic container image is present
|
||||
docker_image:
|
||||
name: "{{ elasticsearch_container_image }}"
|
||||
state: present
|
||||
source: pull
|
||||
force_source: "{{ elasticsearch_container_image_tag|default(false, true)|bool }}"
|
||||
|
||||
- name: Ensure elastic container is running
|
||||
docker_container:
|
||||
name: "{{ elasticsearch_container_name }}"
|
||||
image: "{{ elasticsearch_container_image }}"
|
||||
env: "{{ elasticsearch_container_env | default(omit, True) }}"
|
||||
user: "{{ elasticsearch_container_user | default(omit, True) }}"
|
||||
ports: "{{ elasticsearch_container_ports | default(omit, True) }}"
|
||||
labels: "{{ elasticsearch_container_labels | default(omit, True) }}"
|
||||
volumes: "{{ elasticsearch_container_volumes }}"
|
||||
ulimits: "{{ elasticsearch_container_ulimits }}"
|
||||
networks: "{{ elasticsearch_container_networks | default(omit, True) }}"
|
||||
purge_networks: "{{ elasticsearch_container_purge_networks | default(omit, True) }}"
|
||||
restart_policy: "{{ elasticsearch_container_restart_policy }}"
|
||||
state: started
|
@ -1,19 +0,0 @@
|
||||
# `finallycoffee.base.mariadb` ansible role
|
||||
|
||||
This role deploys a MariaDB instance in a docker container.
|
||||
|
||||
## Usage
|
||||
|
||||
The role expects the following variables to be populated with values and/or secrets:
|
||||
|
||||
```yaml
|
||||
mariadb_root_password: #mariadb root password
|
||||
mariadb_database: # name of the database to create
|
||||
mariadb_username: # name of a user to auto-create and assign permission on the mariadb_database
|
||||
mariadb_password: # password of the user in mariadb_username
|
||||
```
|
||||
|
||||
## Requirements
|
||||
|
||||
- Docker installed
|
||||
- python-docker present on target system for ansible to be able to talk with the docker API.
|
@ -1,49 +0,0 @@
|
||||
---
|
||||
mariadb_version: "10.11.9"
|
||||
mariadb_base_path: /var/lib/mariadb
|
||||
mariadb_data_path: >-2
|
||||
{{ mariadb_base_path }}/{{ mariadb_version | split('.') | first }}
|
||||
mariadb_state: present
|
||||
|
||||
mariadb_root_password: ~
|
||||
mariadb_database: ~
|
||||
mariadb_username: ~
|
||||
mariadb_password: ~
|
||||
|
||||
mariadb_container_base_environment:
|
||||
MARIADB_ROOT_PASSWORD: "{{ mariadb_root_password }}"
|
||||
mariadb_container_extra_environment: {}
|
||||
|
||||
mariadb_container_image_registry: docker.io
|
||||
mariadb_container_image_namespace: ~
|
||||
mariadb_container_image_name: mariadb
|
||||
mariadb_container_image_tag: ~
|
||||
mariadb_container_image: >-2
|
||||
{{
|
||||
([
|
||||
mariadb_container_image_registry | default([], true),
|
||||
mariadb_container_image_namespace | default([], true),
|
||||
mariadb_container_image_name,
|
||||
] | flatten | join('/'))
|
||||
+ ':' + mariadb_container_image_tag | default(mariadb_version, true)
|
||||
}}
|
||||
mariadb_container_image_source: pull
|
||||
mariadb_container_image_force_source: >-2
|
||||
{{ mariadb_container_image_tag | default(false, true) | bool }}
|
||||
|
||||
mariadb_container_name: mariadb
|
||||
mariadb_container_base_volumes:
|
||||
- "{{ mariadb_data_path }}:{{ mariadb_container_data_path }}:z"
|
||||
mariadb_container_extra_volumes: []
|
||||
mariadb_container_base_labels:
|
||||
version: "{{ mariadb_version }}"
|
||||
mariadb_container_extra_labels: {}
|
||||
mariadb_container_restart_policy: "unless-stopped"
|
||||
mariadb_container_environment: >-2
|
||||
{{ mariadb_container_base_environment
|
||||
| combine(mariadb_container_database_environment
|
||||
if (mariadb_database and mariadb_username and mariadb_password)
|
||||
else {}, recursive=True)
|
||||
| combine(mariadb_container_extra_environment) }}
|
||||
mariadb_container_state: >-2
|
||||
{{ (mariadb_state == 'present') | ternary('started', 'absent') }}
|
@ -1,27 +0,0 @@
|
||||
---
|
||||
- name: Warn about deprecation
|
||||
ansible.builtin.debug:
|
||||
msg: >-2
|
||||
This ansible role is moved to the finallycoffee.databases collection
|
||||
and will be removed soon!
|
||||
|
||||
- name: Ensure mariadb container image '{{ mariadb_container_image }}' is {{ mariadb_state }}
|
||||
community.docker.docker_image:
|
||||
name: "{{ mariadb_container_image }}"
|
||||
state: "{{ mariadb_state }}"
|
||||
source: "{{ mariadb_container_image_source }}"
|
||||
force_source: "{{ mariadb_container_image_force_source }}"
|
||||
|
||||
- name: Ensure mariadb container '{{ mariadb_container_name }}' is {{ mariadb_container_state }}
|
||||
community.docker.docker_container:
|
||||
name: "{{ mariadb_container_name }}"
|
||||
image: "{{ mariadb_container_image }}"
|
||||
env: "{{ mariadb_container_environment }}"
|
||||
ports: "{{ mariadb_container_ports | default(omit, true) }}"
|
||||
labels: "{{ mariadb_container_labels | default(omit, true) }}"
|
||||
volumes: "{{ mariadb_container_volumes }}"
|
||||
networks: "{{ mariadb_container_networks | default(omit, true) }}"
|
||||
etc_hosts: "{{ mariadb_container_etc_hosts | default(omit, true) }}"
|
||||
purge_networks: "{{ mariadb_container_purge_networks | default(omit, true) }}"
|
||||
restart_policy: "{{ mariadb_container_restart_policy }}"
|
||||
state: "{{ mariadb_container_state }}"
|
@ -1,10 +0,0 @@
|
||||
---
|
||||
|
||||
mariadb_container_database_environment:
|
||||
MARIADB_DATABASE: "{{ mariadb_database }}"
|
||||
MARIADB_USER: "{{ mariadb_username }}"
|
||||
MARIADB_PASSWORD: "{{ mariadb_password }}"
|
||||
|
||||
mariadb_container_data_path: /var/lib/mysql
|
||||
mariadb_container_volumes: "{{ mariadb_container_base_volumes + mariadb_container_extra_volumes }}"
|
||||
mariadb_container_labels: "{{ mariadb_container_base_labels | combine(mariadb_container_extra_labels, recursive=True) }}"
|
Loading…
Reference in New Issue
Block a user