de945add75
- Create pgbouncer.ini.j2 with auth_type plain (no MD5 hash needed) - Create userlist.txt.j2 with vault db_password - Add Ansible tasks to deploy both files before docker-compose - Mount pgbouncer files as read-only in compose template Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
161 lines
3.6 KiB
YAML
161 lines
3.6 KiB
YAML
---
|
|
# --- Server deployment ---
|
|
- name: Deploy e-ticket to production
|
|
hosts: production
|
|
become: true
|
|
vars_files:
|
|
- vault.yml
|
|
|
|
pre_tasks:
|
|
- name: Enable maintenance mode
|
|
command: make maintenance_on
|
|
args:
|
|
chdir: /var/www/e-ticket
|
|
|
|
tasks:
|
|
- name: Deploy .env.local
|
|
template:
|
|
src: env.local.j2
|
|
dest: /var/www/e-ticket/.env.local
|
|
owner: bot
|
|
group: bot
|
|
mode: "0600"
|
|
|
|
- name: Pull latest code
|
|
command: git pull origin master
|
|
args:
|
|
chdir: /var/www/e-ticket
|
|
become_user: bot
|
|
|
|
- name: Install PHP dependencies
|
|
command: composer install --no-dev --optimize-autoloader
|
|
args:
|
|
chdir: /var/www/e-ticket
|
|
become_user: bot
|
|
|
|
- name: Install JS dependencies
|
|
command: bun install
|
|
args:
|
|
chdir: /var/www/e-ticket
|
|
become_user: bot
|
|
|
|
- name: Build assets
|
|
command: bun run build
|
|
args:
|
|
chdir: /var/www/e-ticket
|
|
become_user: bot
|
|
|
|
- name: Deploy PgBouncer config
|
|
template:
|
|
src: pgbouncer.ini.j2
|
|
dest: /var/www/e-ticket/docker/pgsql/pgbouncer.ini
|
|
owner: bot
|
|
group: bot
|
|
mode: "0600"
|
|
|
|
- name: Deploy PgBouncer userlist
|
|
template:
|
|
src: userlist.txt.j2
|
|
dest: /var/www/e-ticket/docker/pgsql/userlist.txt
|
|
owner: bot
|
|
group: bot
|
|
mode: "0600"
|
|
|
|
- name: Deploy docker-compose-prod.yml
|
|
template:
|
|
src: docker-compose-prod.yml.j2
|
|
dest: /var/www/e-ticket/docker-compose-prod.yml
|
|
owner: bot
|
|
group: bot
|
|
mode: "0600"
|
|
|
|
- name: Build Docker images
|
|
command: make build_prod
|
|
args:
|
|
chdir: /var/www/e-ticket
|
|
|
|
- name: Pull Docker images
|
|
command: make pull_prod
|
|
args:
|
|
chdir: /var/www/e-ticket
|
|
|
|
- name: Stop production containers
|
|
command: make stop_prod
|
|
args:
|
|
chdir: /var/www/e-ticket
|
|
|
|
- name: Start production containers
|
|
command: make start_prod
|
|
args:
|
|
chdir: /var/www/e-ticket
|
|
|
|
- name: Run migrations
|
|
command: make migrate_prod
|
|
args:
|
|
chdir: /var/www/e-ticket
|
|
|
|
- name: Clear cache
|
|
command: make clear_prod
|
|
args:
|
|
chdir: /var/www/e-ticket
|
|
|
|
- name: Ensure uploads directories exist with correct permissions
|
|
file:
|
|
path: "/var/www/e-ticket/public/uploads/{{ item }}"
|
|
state: directory
|
|
owner: "1000"
|
|
group: "1000"
|
|
mode: "0755"
|
|
recurse: true
|
|
loop:
|
|
- logos
|
|
|
|
- name: Ensure var/payouts directory exists
|
|
file:
|
|
path: /var/www/e-ticket/var/payouts
|
|
state: directory
|
|
owner: "1000"
|
|
group: "1000"
|
|
mode: "0755"
|
|
|
|
- name: Ensure Caddy sites directory exists
|
|
file:
|
|
path: /etc/caddy/sites
|
|
state: directory
|
|
owner: root
|
|
group: root
|
|
mode: "0755"
|
|
|
|
- name: Deploy Caddy config
|
|
template:
|
|
src: caddy.j2
|
|
dest: /etc/caddy/sites/e-ticket.conf
|
|
owner: root
|
|
group: root
|
|
mode: "0644"
|
|
notify: Reload Caddy
|
|
|
|
- name: Deploy Messenger supervisor config
|
|
template:
|
|
src: messenger.j2
|
|
dest: /etc/supervisor/conf.d/e-ticket.conf
|
|
owner: root
|
|
group: root
|
|
mode: "0644"
|
|
notify: Reload Supervisor
|
|
|
|
post_tasks:
|
|
- name: Disable maintenance mode
|
|
command: make maintenance_off
|
|
args:
|
|
chdir: /var/www/e-ticket
|
|
|
|
handlers:
|
|
- name: Reload Caddy
|
|
systemd:
|
|
name: caddy
|
|
state: reloaded
|
|
|
|
- name: Reload Supervisor
|
|
command: supervisorctl reread && supervisorctl update
|