8b35e2b6d2
Comptabilite (Super Admin) : - ComptabiliteController avec 7 exports CSV/JSON compatibles SAGE (journal ventes, grand livre, FEC, balance agee, reglements, commissions Stripe 1.5%+0.25E, couts services) - Export PDF via ComptaPdf (FPDF) avec bloc legal pre-rempli, tableau pagine, champ signature DocuSeal - Signature electronique DocuSeal + callback + envoi email signe avec template dedie (compta_export_signed.html.twig) - Rapport financier public (RapportFinancierPdf) : recettes par service, depenses (Stripe, infra, prestataires), bilan excedent/deficit - Codes comptables clients EC-XXXX (plus de 411xxx) Prestataires (Super Admin) : - Entite Prestataire (raisonSociale, siret, email, phone, adresse) - Entite FacturePrestataire (numFacture, montantHt, montantTtc, year, month, isPaid, PDF via Vich) - CRUD complet avec recherche SIRET via proxy API data.gouv.fr - Commande cron app:reminder:factures-prestataire (5 du mois) - Factures prestataires integrees dans export couts services - Sidebar Super Admin : entree Prestataires + Comptabilite Stats (/admin/stats) : - Cout prestataire dynamique depuis FacturePrestataire - Fusion Infra + Prestataire en "Cout de fonctionnement" - Commission Stripe corrigee (1.5% + 0.25E par transaction) Divers : - DocuSealService::sendComptaForSignature() + getApi() - Customer::generateCodeComptable() format EC-XXXX-XXXXX - Protection double prefixe EC- a la creation client - Bouton regenerer PDF cache quand advert state=accepted - Modals sans script inline (data-modal-open/close dans app.js) Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
336 lines
11 KiB
Plaintext
336 lines
11 KiB
Plaintext
---
|
|
# --- Server deployment ---
|
|
- name: Deploy crm-siteconseil to production
|
|
hosts: production
|
|
become: true
|
|
vars_files:
|
|
- vault.yml
|
|
|
|
pre_tasks:
|
|
- name: Enable maintenance mode
|
|
command: make maintenance_on
|
|
args:
|
|
chdir: /var/www/crm-siteconseil
|
|
|
|
- name: Get Docker socket GID
|
|
stat:
|
|
path: /var/run/docker.sock
|
|
register: docker_sock
|
|
|
|
- name: Set docker_gid fact
|
|
set_fact:
|
|
docker_gid: "{{ docker_sock.stat.gid }}"
|
|
|
|
- name: Generate analytics secret
|
|
set_fact:
|
|
analytics_secret: "{{ lookup('password', '/dev/null chars=ascii_lowercase,digits length=32') }}"
|
|
|
|
tasks:
|
|
- name: Deploy .env.local
|
|
template:
|
|
src: env.local.j2
|
|
dest: /var/www/crm-siteconseil/.env.local
|
|
owner: bot
|
|
group: bot
|
|
mode: "0600"
|
|
|
|
- name: Ensure cert directory exists
|
|
file:
|
|
path: /var/www/crm-siteconseil/config/cert
|
|
state: directory
|
|
owner: bot
|
|
group: bot
|
|
mode: "0700"
|
|
|
|
- name: Deploy S/MIME private key
|
|
copy:
|
|
content: "{{ smime_private_key }}"
|
|
dest: /var/www/crm-siteconseil/config/cert/private-key.pem
|
|
owner: bot
|
|
group: bot
|
|
mode: "0600"
|
|
|
|
- name: Pull latest code
|
|
command: git pull origin master
|
|
args:
|
|
chdir: /var/www/crm-siteconseil
|
|
become_user: bot
|
|
|
|
- name: Deploy PgBouncer config
|
|
template:
|
|
src: pgbouncer.ini.j2
|
|
dest: /var/www/crm-siteconseil/docker/pgsql/pgbouncer.ini
|
|
owner: bot
|
|
group: bot
|
|
mode: "0644"
|
|
|
|
- name: Deploy PgBouncer userlist
|
|
template:
|
|
src: userlist.txt.j2
|
|
dest: /var/www/crm-siteconseil/docker/pgsql/userlist.txt
|
|
owner: bot
|
|
group: bot
|
|
mode: "0644"
|
|
|
|
- name: Deploy docker-compose-prod.yml
|
|
template:
|
|
src: docker-compose-prod.yml.j2
|
|
dest: /var/www/crm-siteconseil/docker-compose-prod.yml
|
|
owner: bot
|
|
group: bot
|
|
mode: "0600"
|
|
|
|
- name: Build Docker images
|
|
command: make build_prod
|
|
args:
|
|
chdir: /var/www/crm-siteconseil
|
|
|
|
- name: Pull Docker images
|
|
command: make pull_prod
|
|
args:
|
|
chdir: /var/www/crm-siteconseil
|
|
|
|
- name: Stop production containers
|
|
command: make stop_prod
|
|
args:
|
|
chdir: /var/www/crm-siteconseil
|
|
|
|
- name: Start production containers
|
|
command: make start_prod
|
|
args:
|
|
chdir: /var/www/crm-siteconseil
|
|
|
|
- name: Install PHP dependencies
|
|
command: composer install --no-dev --optimize-autoloader
|
|
args:
|
|
chdir: /var/www/crm-siteconseil
|
|
become_user: bot
|
|
|
|
- name: Install JS dependencies
|
|
command: bun install
|
|
args:
|
|
chdir: /var/www/crm-siteconseil
|
|
become_user: bot
|
|
|
|
- name: Build assets
|
|
command: bun run build
|
|
args:
|
|
chdir: /var/www/crm-siteconseil
|
|
become_user: bot
|
|
|
|
- name: Wait for database to be ready
|
|
shell: |
|
|
for i in $(seq 1 30); do
|
|
docker compose -f docker-compose-prod.yml exec -T php php -r "new PDO('pgsql:host=pgbouncer;port=6432;dbname=crm-siteconseil','crm-siteconseil','{{ db_password }}');" 2>/dev/null && exit 0
|
|
sleep 1
|
|
done
|
|
exit 1
|
|
args:
|
|
chdir: /var/www/crm-siteconseil
|
|
|
|
- name: Clear Symfony cache before migration
|
|
command: docker compose -f docker-compose-prod.yml exec -T php php bin/console cache:clear --env=prod
|
|
args:
|
|
chdir: /var/www/crm-siteconseil
|
|
|
|
- name: Clear Redis cache pool (Doctrine L2 + app cache)
|
|
command: docker compose -f docker-compose-prod.yml exec -T php php bin/console cache:pool:clear cache.app --env=prod
|
|
args:
|
|
chdir: /var/www/crm-siteconseil
|
|
|
|
- name: Run migrations
|
|
command: make migrate_prod
|
|
args:
|
|
chdir: /var/www/crm-siteconseil
|
|
|
|
- name: Clear cache after migration
|
|
command: make clear_prod
|
|
args:
|
|
chdir: /var/www/crm-siteconseil
|
|
|
|
- name: Compile PWA assets
|
|
command: make pwa_prod
|
|
args:
|
|
chdir: /var/www/crm-siteconseil
|
|
|
|
- name: Ensure uploads directories exist with correct permissions
|
|
file:
|
|
path: "/var/www/crm-siteconseil/public/uploads/{{ item }}"
|
|
state: directory
|
|
owner: "1000"
|
|
group: "1000"
|
|
mode: "0755"
|
|
recurse: true
|
|
loop:
|
|
- logos
|
|
|
|
- name: Ensure var/payouts directory exists
|
|
file:
|
|
path: /var/www/crm-siteconseil/var/payouts
|
|
state: directory
|
|
owner: "1000"
|
|
group: "1000"
|
|
mode: "0755"
|
|
|
|
- name: Ensure Caddy sites directory exists
|
|
file:
|
|
path: /etc/caddy/sites
|
|
state: directory
|
|
owner: root
|
|
group: root
|
|
mode: "0755"
|
|
|
|
- name: Deploy Caddy config
|
|
template:
|
|
src: caddy.j2
|
|
dest: /etc/caddy/sites/crm-siteconseil.conf
|
|
owner: root
|
|
group: root
|
|
mode: "0644"
|
|
notify: Reload Caddy
|
|
|
|
- name: Create backup directory
|
|
file:
|
|
path: /var/backups/crm-siteconseil
|
|
state: directory
|
|
owner: bot
|
|
group: bot
|
|
mode: "0750"
|
|
|
|
- name: Deploy backup script
|
|
template:
|
|
src: backup.sh.j2
|
|
dest: /var/backups/crm-siteconseil/backup.sh
|
|
owner: bot
|
|
group: bot
|
|
mode: "0750"
|
|
|
|
- name: Configure backup cron (every 30 minutes)
|
|
cron:
|
|
name: "crm-siteconseil database backup"
|
|
minute: "*/30"
|
|
job: "/var/backups/crm-siteconseil/backup.sh >> /var/log/crm-siteconseil-backup.log 2>&1"
|
|
user: bot
|
|
|
|
- name: Configure expire pending orders cron (every 5 minutes)
|
|
cron:
|
|
name: "crm-siteconseil expire pending orders"
|
|
minute: "*/5"
|
|
job: "docker compose -f /var/www/crm-siteconseil/docker-compose-prod.yml exec -T php php bin/console app:orders:expire-pending --env=prod >> /var/log/crm-siteconseil-expire-orders.log 2>&1"
|
|
user: bot
|
|
|
|
- name: Configure messenger monitor cron (every hour)
|
|
cron:
|
|
name: "crm-siteconseil messenger monitor"
|
|
minute: "0"
|
|
job: "docker compose -f /var/www/crm-siteconseil/docker-compose-prod.yml exec -T php php bin/console app:monitor:messenger --env=prod >> /var/log/crm-siteconseil-messenger.log 2>&1"
|
|
user: bot
|
|
|
|
- name: Configure Meilisearch consistency check cron (daily at 3am)
|
|
cron:
|
|
name: "crm-siteconseil meilisearch consistency"
|
|
minute: "0"
|
|
hour: "3"
|
|
job: "docker compose -f /var/www/crm-siteconseil/docker-compose-prod.yml exec -T php php bin/console app:meilisearch:check-consistency --fix --env=prod >> /var/log/crm-siteconseil-meilisearch.log 2>&1"
|
|
user: bot
|
|
|
|
- name: Configure Stripe sync cron (every 6 hours)
|
|
cron:
|
|
name: "crm-siteconseil stripe sync"
|
|
minute: "0"
|
|
hour: "*/6"
|
|
job: "docker compose -f /var/www/crm-siteconseil/docker-compose-prod.yml exec -T php php bin/console app:stripe:sync --env=prod >> /var/log/crm-siteconseil-stripe-sync.log 2>&1"
|
|
user: bot
|
|
|
|
- name: Configure infra snapshot cron (every 5 minutes)
|
|
cron:
|
|
name: "crm-siteconseil infra snapshot"
|
|
minute: "*/5"
|
|
job: "docker compose -f /var/www/crm-siteconseil/docker-compose-prod.yml exec -T php php bin/console app:infra:snapshot --env=prod >> /var/log/crm-siteconseil-infra.log 2>&1"
|
|
user: bot
|
|
|
|
- name: Configure attestations cleanup cron (daily at 4am)
|
|
cron:
|
|
name: "crm-siteconseil attestations clean"
|
|
minute: "0"
|
|
hour: "4"
|
|
job: "docker compose -f /var/www/crm-siteconseil/docker-compose-prod.yml exec -T php php bin/console app:attestations:clean --env=prod >> /var/log/crm-siteconseil-attestations.log 2>&1"
|
|
user: bot
|
|
|
|
- name: Configure services health check cron (every 15 minutes)
|
|
cron:
|
|
name: "crm-siteconseil services check"
|
|
minute: "*/15"
|
|
job: "docker compose -f /var/www/crm-siteconseil/docker-compose-prod.yml exec -T php php bin/console app:services:check --env=prod >> /var/log/crm-siteconseil-services.log 2>&1"
|
|
user: bot
|
|
|
|
- name: Configure DNS check cron (every 2 hours)
|
|
cron:
|
|
name: "crm-siteconseil dns check"
|
|
minute: "0"
|
|
hour: "*/2"
|
|
job: "docker compose -f /var/www/crm-siteconseil/docker-compose-prod.yml exec -T php php bin/console app:dns:check --env=prod >> /var/log/crm-siteconseil-dns-check.log 2>&1"
|
|
user: bot
|
|
|
|
- name: Configure email tracking purge cron (daily at 5am)
|
|
cron:
|
|
name: "crm-siteconseil email-tracking purge"
|
|
minute: "0"
|
|
hour: "5"
|
|
job: "docker compose -f /var/www/crm-siteconseil/docker-compose-prod.yml exec -T php php bin/console app:email-tracking:purge --env=prod >> /var/log/crm-siteconseil-email-purge.log 2>&1"
|
|
user: bot
|
|
|
|
- name: Configure Cloudflare acme-challenge cleanup cron (daily at 6am)
|
|
cron:
|
|
name: "crm-siteconseil cloudflare clean"
|
|
minute: "0"
|
|
hour: "6"
|
|
job: "docker compose -f /var/www/crm-siteconseil/docker-compose-prod.yml exec -T php php bin/console app:cloudflare:clean --env=prod >> /var/log/crm-siteconseil-cloudflare-clean.log 2>&1"
|
|
user: bot
|
|
|
|
- name: Configure pending delete cleanup cron (daily at 2am)
|
|
cron:
|
|
name: "crm-siteconseil clean pending delete"
|
|
minute: "0"
|
|
hour: "2"
|
|
job: "docker compose -f /var/www/crm-siteconseil/docker-compose-prod.yml exec -T php php bin/console app:clean:pending-delete --env=prod >> /var/log/crm-siteconseil-clean-pending.log 2>&1"
|
|
user: bot
|
|
|
|
- name: Configure NDD expiration check cron (daily at 8am)
|
|
cron:
|
|
name: "crm-siteconseil ndd check"
|
|
minute: "0"
|
|
hour: "8"
|
|
job: "docker compose -f /var/www/crm-siteconseil/docker-compose-prod.yml exec -T php php bin/console app:ndd:check --env=prod >> /var/log/crm-siteconseil-ndd-check.log 2>&1"
|
|
user: bot
|
|
|
|
- name: Configure payment reminder cron (daily at 9am)
|
|
cron:
|
|
name: "crm-siteconseil payment reminder"
|
|
minute: "0"
|
|
hour: "9"
|
|
job: "docker compose -f /var/www/crm-siteconseil/docker-compose-prod.yml exec -T php php bin/console app:payment:reminder --env=prod >> /var/log/crm-siteconseil-payment-reminder.log 2>&1"
|
|
user: bot
|
|
|
|
- name: Configure Meilisearch full reindex cron (weekly Sunday at 4am)
|
|
cron:
|
|
name: "crm-siteconseil meilisearch reindex"
|
|
minute: "0"
|
|
hour: "4"
|
|
weekday: "0"
|
|
job: "docker compose -f /var/www/crm-siteconseil/docker-compose-prod.yml exec -T php php bin/console app:meilisearch:setup --env=prod >> /var/log/crm-siteconseil-meilisearch-reindex.log 2>&1"
|
|
user: bot
|
|
|
|
post_tasks:
|
|
- name: Disable maintenance mode
|
|
command: make maintenance_off
|
|
args:
|
|
chdir: /var/www/crm-siteconseil
|
|
|
|
handlers:
|
|
- name: Reload Caddy
|
|
systemd:
|
|
name: caddy
|
|
state: reloaded
|
|
|