Compare commits
3 Commits
b77c81f754
...
9a02652d98
Author | SHA1 | Date | |
---|---|---|---|
9a02652d98 | |||
2c1b3cb47e | |||
114cf13871 |
@ -5,11 +5,6 @@
|
|||||||
This ansible collection provides various roles for installing
|
This ansible collection provides various roles for installing
|
||||||
and configuring basic system utilities like gnupg, ssh etc
|
and configuring basic system utilities like gnupg, ssh etc
|
||||||
|
|
||||||
- DEPRECATED: [`elasticsearch`](roles/elasticsearch/README.md): Deploy [elasticsearch](https://www.docker.elastic.co/r/elasticsearch/elasticsearch-oss),
|
|
||||||
a popular (distributed) search and analytics engine, mostly known by it's
|
|
||||||
letter "E" in the ELK-stack.
|
|
||||||
This role has been moved to the `finallycoffee.databases.elasticsearch` ansible collection.
|
|
||||||
|
|
||||||
- [`git`](roles/git/README.md): configures git on the target system
|
- [`git`](roles/git/README.md): configures git on the target system
|
||||||
|
|
||||||
- [`gnupg`](roles/gnupg/README.md): configures gnupg on the target system
|
- [`gnupg`](roles/gnupg/README.md): configures gnupg on the target system
|
||||||
@ -17,10 +12,6 @@ and configuring basic system utilities like gnupg, ssh etc
|
|||||||
- [`lego`](roles/lego/README.md): runs [lego (LetsEncrypt Go)](https://github.com/go-acme/lego),
|
- [`lego`](roles/lego/README.md): runs [lego (LetsEncrypt Go)](https://github.com/go-acme/lego),
|
||||||
a ACME client written in go, using systemd (timers). Multi-instance capable.
|
a ACME client written in go, using systemd (timers). Multi-instance capable.
|
||||||
|
|
||||||
- DEPRECATED: [`mariadb`](roles/mariadb/README.md): runs [MariaDB Server](https://mariadb.org/),
|
|
||||||
one of the world's most popular open source relational database.
|
|
||||||
Moved to `finallycoffee.databases.mariadb`.
|
|
||||||
|
|
||||||
- [`minio`](roles/minio/README.md): Deploy [min.io](https://min.io), an
|
- [`minio`](roles/minio/README.md): Deploy [min.io](https://min.io), an
|
||||||
s3-compatible object storage server, using docker containers.
|
s3-compatible object storage server, using docker containers.
|
||||||
|
|
||||||
|
@ -1,6 +1,6 @@
|
|||||||
namespace: finallycoffee
|
namespace: finallycoffee
|
||||||
name: base
|
name: base
|
||||||
version: 0.1.3
|
version: 0.2.0
|
||||||
readme: README.md
|
readme: README.md
|
||||||
authors:
|
authors:
|
||||||
- transcaffeine <transcaffeine@finally.coffee>
|
- transcaffeine <transcaffeine@finally.coffee>
|
||||||
|
@ -1,22 +0,0 @@
|
|||||||
# `finallycoffee.base.elastiscsearch`
|
|
||||||
|
|
||||||
A simple ansible role which deploys a single-node elastic container to provide
|
|
||||||
an easy way to do some indexing.
|
|
||||||
|
|
||||||
## Usage
|
|
||||||
|
|
||||||
Per default, `/opt/elasticsearch/data` is used to persist data, it is
|
|
||||||
customizable by using either `elasticsearch_base_path` or `elasticsearch_data_path`.
|
|
||||||
|
|
||||||
As elasticsearch be can be quite memory heavy, the maximum amount of allowed RAM
|
|
||||||
can be configured using `elasticsearch_allocated_ram_mb`, defaulting to 512 (mb).
|
|
||||||
|
|
||||||
The cluster name and discovery type can be overridden using
|
|
||||||
`elasticsearch_config_cluster_name` (default: elastic) and
|
|
||||||
`elasticsearch_config_discovery_type` (default: single-node), should one
|
|
||||||
need a multi-node elasticsearch deployment.
|
|
||||||
|
|
||||||
Per default, no ports or networks are mapped, and explizit mapping using
|
|
||||||
either ports (`elasticsearch_container_ports`) or networks
|
|
||||||
(`elasticsearch_container_networks`) is required in order for other services
|
|
||||||
to use elastic.
|
|
@ -1,35 +0,0 @@
|
|||||||
---
|
|
||||||
|
|
||||||
elasticsearch_version: 7.17.7
|
|
||||||
|
|
||||||
elasticsearch_base_path: /opt/elasticsearch
|
|
||||||
elasticsearch_data_path: "{{ elasticsearch_base_path }}/data"
|
|
||||||
|
|
||||||
elasticsearch_config_cluster_name: elastic
|
|
||||||
elasticsearch_config_discovery_type: single-node
|
|
||||||
elasticsearch_config_boostrap_memory_lock: true
|
|
||||||
elasticsearch_allocated_ram_mb: 512
|
|
||||||
|
|
||||||
elasticsearch_container_image_name: docker.elastic.co/elasticsearch/elasticsearch-oss
|
|
||||||
elasticsearch_container_image_tag: ~
|
|
||||||
elasticsearch_container_image: >-
|
|
||||||
{{ elasticsearch_container_image_name }}:{{ elasticsearch_container_image_tag | default(elasticsearch_version, true) }}
|
|
||||||
|
|
||||||
elasticsearch_container_name: elasticsearch
|
|
||||||
elasticsearch_container_env:
|
|
||||||
"ES_JAVA_OPTS": "-Xms{{ elasticsearch_allocated_ram_mb }}m -Xmx{{ elasticsearch_allocated_ram_mb }}m"
|
|
||||||
"cluster.name": "{{ elasticsearch_config_cluster_name }}"
|
|
||||||
"discovery.type": "{{ elasticsearch_config_discovery_type }}"
|
|
||||||
"bootstrap.memory_lock": "{{ 'true' if elasticsearch_config_boostrap_memory_lock else 'false' }}"
|
|
||||||
elasticsearch_container_user: ~
|
|
||||||
elasticsearch_container_ports: ~
|
|
||||||
elasticsearch_container_labels:
|
|
||||||
version: "{{ elasticsearch_version }}"
|
|
||||||
elasticsearch_container_ulimits:
|
|
||||||
# - "memlock:{{ (1.5 * 1024 * elasticsearch_allocated_ram_mb) | int }}:{{ (1.5 * 1024 * elasticsearch_allocated_ram_mb) | int }}"
|
|
||||||
- "memlock:-1:-1"
|
|
||||||
elasticsearch_container_volumes:
|
|
||||||
- "{{ elasticsearch_data_path }}:/usr/share/elasticsearch/data:z"
|
|
||||||
elasticsearch_container_networks: ~
|
|
||||||
elasticsearch_container_purge_networks: ~
|
|
||||||
elasticsearch_container_restart_policy: unless-stopped
|
|
@ -1,37 +0,0 @@
|
|||||||
---
|
|
||||||
- name: Warn about deprecation and move of role
|
|
||||||
ansible.builtin.debug:
|
|
||||||
msg: >-2
|
|
||||||
This ansible role has been moved to the finallycoffee.databases
|
|
||||||
ansible collection and will no longer be maintained here!
|
|
||||||
|
|
||||||
- name: Ensure host directories are present
|
|
||||||
file:
|
|
||||||
path: "{{ item }}"
|
|
||||||
state: directory
|
|
||||||
mode: "0777"
|
|
||||||
loop:
|
|
||||||
- "{{ elasticsearch_base_path }}"
|
|
||||||
- "{{ elasticsearch_data_path }}"
|
|
||||||
|
|
||||||
- name: Ensure elastic container image is present
|
|
||||||
docker_image:
|
|
||||||
name: "{{ elasticsearch_container_image }}"
|
|
||||||
state: present
|
|
||||||
source: pull
|
|
||||||
force_source: "{{ elasticsearch_container_image_tag|default(false, true)|bool }}"
|
|
||||||
|
|
||||||
- name: Ensure elastic container is running
|
|
||||||
docker_container:
|
|
||||||
name: "{{ elasticsearch_container_name }}"
|
|
||||||
image: "{{ elasticsearch_container_image }}"
|
|
||||||
env: "{{ elasticsearch_container_env | default(omit, True) }}"
|
|
||||||
user: "{{ elasticsearch_container_user | default(omit, True) }}"
|
|
||||||
ports: "{{ elasticsearch_container_ports | default(omit, True) }}"
|
|
||||||
labels: "{{ elasticsearch_container_labels | default(omit, True) }}"
|
|
||||||
volumes: "{{ elasticsearch_container_volumes }}"
|
|
||||||
ulimits: "{{ elasticsearch_container_ulimits }}"
|
|
||||||
networks: "{{ elasticsearch_container_networks | default(omit, True) }}"
|
|
||||||
purge_networks: "{{ elasticsearch_container_purge_networks | default(omit, True) }}"
|
|
||||||
restart_policy: "{{ elasticsearch_container_restart_policy }}"
|
|
||||||
state: started
|
|
@ -1,19 +0,0 @@
|
|||||||
# `finallycoffee.base.mariadb` ansible role
|
|
||||||
|
|
||||||
This role deploys a MariaDB instance in a docker container.
|
|
||||||
|
|
||||||
## Usage
|
|
||||||
|
|
||||||
The role expects the following variables to be populated with values and/or secrets:
|
|
||||||
|
|
||||||
```yaml
|
|
||||||
mariadb_root_password: #mariadb root password
|
|
||||||
mariadb_database: # name of the database to create
|
|
||||||
mariadb_username: # name of a user to auto-create and assign permission on the mariadb_database
|
|
||||||
mariadb_password: # password of the user in mariadb_username
|
|
||||||
```
|
|
||||||
|
|
||||||
## Requirements
|
|
||||||
|
|
||||||
- Docker installed
|
|
||||||
- python-docker present on target system for ansible to be able to talk with the docker API.
|
|
@ -1,49 +0,0 @@
|
|||||||
---
|
|
||||||
mariadb_version: "10.11.9"
|
|
||||||
mariadb_base_path: /var/lib/mariadb
|
|
||||||
mariadb_data_path: >-2
|
|
||||||
{{ mariadb_base_path }}/{{ mariadb_version | split('.') | first }}
|
|
||||||
mariadb_state: present
|
|
||||||
|
|
||||||
mariadb_root_password: ~
|
|
||||||
mariadb_database: ~
|
|
||||||
mariadb_username: ~
|
|
||||||
mariadb_password: ~
|
|
||||||
|
|
||||||
mariadb_container_base_environment:
|
|
||||||
MARIADB_ROOT_PASSWORD: "{{ mariadb_root_password }}"
|
|
||||||
mariadb_container_extra_environment: {}
|
|
||||||
|
|
||||||
mariadb_container_image_registry: docker.io
|
|
||||||
mariadb_container_image_namespace: ~
|
|
||||||
mariadb_container_image_name: mariadb
|
|
||||||
mariadb_container_image_tag: ~
|
|
||||||
mariadb_container_image: >-2
|
|
||||||
{{
|
|
||||||
([
|
|
||||||
mariadb_container_image_registry | default([], true),
|
|
||||||
mariadb_container_image_namespace | default([], true),
|
|
||||||
mariadb_container_image_name,
|
|
||||||
] | flatten | join('/'))
|
|
||||||
+ ':' + mariadb_container_image_tag | default(mariadb_version, true)
|
|
||||||
}}
|
|
||||||
mariadb_container_image_source: pull
|
|
||||||
mariadb_container_image_force_source: >-2
|
|
||||||
{{ mariadb_container_image_tag | default(false, true) | bool }}
|
|
||||||
|
|
||||||
mariadb_container_name: mariadb
|
|
||||||
mariadb_container_base_volumes:
|
|
||||||
- "{{ mariadb_data_path }}:{{ mariadb_container_data_path }}:z"
|
|
||||||
mariadb_container_extra_volumes: []
|
|
||||||
mariadb_container_base_labels:
|
|
||||||
version: "{{ mariadb_version }}"
|
|
||||||
mariadb_container_extra_labels: {}
|
|
||||||
mariadb_container_restart_policy: "unless-stopped"
|
|
||||||
mariadb_container_environment: >-2
|
|
||||||
{{ mariadb_container_base_environment
|
|
||||||
| combine(mariadb_container_database_environment
|
|
||||||
if (mariadb_database and mariadb_username and mariadb_password)
|
|
||||||
else {}, recursive=True)
|
|
||||||
| combine(mariadb_container_extra_environment) }}
|
|
||||||
mariadb_container_state: >-2
|
|
||||||
{{ (mariadb_state == 'present') | ternary('started', 'absent') }}
|
|
@ -1,27 +0,0 @@
|
|||||||
---
|
|
||||||
- name: Warn about deprecation
|
|
||||||
ansible.builtin.debug:
|
|
||||||
msg: >-2
|
|
||||||
This ansible role is moved to the finallycoffee.databases collection
|
|
||||||
and will be removed soon!
|
|
||||||
|
|
||||||
- name: Ensure mariadb container image '{{ mariadb_container_image }}' is {{ mariadb_state }}
|
|
||||||
community.docker.docker_image:
|
|
||||||
name: "{{ mariadb_container_image }}"
|
|
||||||
state: "{{ mariadb_state }}"
|
|
||||||
source: "{{ mariadb_container_image_source }}"
|
|
||||||
force_source: "{{ mariadb_container_image_force_source }}"
|
|
||||||
|
|
||||||
- name: Ensure mariadb container '{{ mariadb_container_name }}' is {{ mariadb_container_state }}
|
|
||||||
community.docker.docker_container:
|
|
||||||
name: "{{ mariadb_container_name }}"
|
|
||||||
image: "{{ mariadb_container_image }}"
|
|
||||||
env: "{{ mariadb_container_environment }}"
|
|
||||||
ports: "{{ mariadb_container_ports | default(omit, true) }}"
|
|
||||||
labels: "{{ mariadb_container_labels | default(omit, true) }}"
|
|
||||||
volumes: "{{ mariadb_container_volumes }}"
|
|
||||||
networks: "{{ mariadb_container_networks | default(omit, true) }}"
|
|
||||||
etc_hosts: "{{ mariadb_container_etc_hosts | default(omit, true) }}"
|
|
||||||
purge_networks: "{{ mariadb_container_purge_networks | default(omit, true) }}"
|
|
||||||
restart_policy: "{{ mariadb_container_restart_policy }}"
|
|
||||||
state: "{{ mariadb_container_state }}"
|
|
@ -1,10 +0,0 @@
|
|||||||
---
|
|
||||||
|
|
||||||
mariadb_container_database_environment:
|
|
||||||
MARIADB_DATABASE: "{{ mariadb_database }}"
|
|
||||||
MARIADB_USER: "{{ mariadb_username }}"
|
|
||||||
MARIADB_PASSWORD: "{{ mariadb_password }}"
|
|
||||||
|
|
||||||
mariadb_container_data_path: /var/lib/mysql
|
|
||||||
mariadb_container_volumes: "{{ mariadb_container_base_volumes + mariadb_container_extra_volumes }}"
|
|
||||||
mariadb_container_labels: "{{ mariadb_container_base_labels | combine(mariadb_container_extra_labels, recursive=True) }}"
|
|
Loading…
Reference in New Issue
Block a user