Logan
33700448bf
Provisions e2-micro VM (us-east1-b, free tier) with static IP, SSH and web firewall rules, Docker + Caddy startup script, and IAM bindings for Firestore and GCS access via ADC. Imports existing drb-calls bucket and c2-server Firestore database into state. Ansible roles handle first-time setup (swap, docker group) and all subsequent deploys via rsync + docker compose, with secrets managed via Ansible Vault. DNS stays on AWS Route 53.
87 lines
2.1 KiB
YAML
87 lines
2.1 KiB
YAML
---
|
|
# Sync code, write secrets, bring the stack up.
|
|
|
|
- name: Sync app code from local machine
|
|
synchronize:
|
|
src: "{{ local_repo_path }}"
|
|
dest: "{{ app_dir }}/"
|
|
delete: true
|
|
recursive: true
|
|
rsync_opts:
|
|
- "--exclude=.git"
|
|
- "--exclude=**/__pycache__"
|
|
- "--exclude=**/.env"
|
|
- "--exclude=**/gcp-key.json"
|
|
- "--exclude=**/node_modules"
|
|
- "--exclude=drb-c2-core/gcp-key.json"
|
|
- "--exclude=infra/"
|
|
become: false # rsync runs as the SSH user, not root
|
|
|
|
- name: Set ownership of app directory
|
|
file:
|
|
path: "{{ app_dir }}"
|
|
state: directory
|
|
owner: "{{ ssh_user }}"
|
|
group: "{{ ssh_user }}"
|
|
recurse: true
|
|
|
|
# No gcp-key.json needed — the VM authenticates to GCS/Firestore via ADC
|
|
# (GCE metadata server). IAM roles are granted by Terraform.
|
|
|
|
- name: Template top-level .env (docker-compose MQTT creds)
|
|
template:
|
|
src: root.env.j2
|
|
dest: "{{ app_dir }}/.env"
|
|
owner: "{{ ssh_user }}"
|
|
group: "{{ ssh_user }}"
|
|
mode: "0600"
|
|
|
|
- name: Template c2-core .env
|
|
template:
|
|
src: c2-core.env.j2
|
|
dest: "{{ app_dir }}/drb-c2-core/.env"
|
|
owner: "{{ ssh_user }}"
|
|
group: "{{ ssh_user }}"
|
|
mode: "0600"
|
|
|
|
- name: Template discord-bot .env
|
|
template:
|
|
src: discord-bot.env.j2
|
|
dest: "{{ app_dir }}/drb-server-discord-bot/.env"
|
|
owner: "{{ ssh_user }}"
|
|
group: "{{ ssh_user }}"
|
|
mode: "0600"
|
|
|
|
- name: Template frontend .env
|
|
template:
|
|
src: frontend.env.j2
|
|
dest: "{{ app_dir }}/drb-frontend/.env"
|
|
owner: "{{ ssh_user }}"
|
|
group: "{{ ssh_user }}"
|
|
mode: "0600"
|
|
|
|
- name: Deploy Caddyfile
|
|
template:
|
|
src: Caddyfile.j2
|
|
dest: /etc/caddy/Caddyfile
|
|
owner: root
|
|
group: root
|
|
mode: "0644"
|
|
notify: Reload Caddy
|
|
|
|
- name: Bring the stack up (builds images if changed)
|
|
community.docker.docker_compose_v2:
|
|
project_src: "{{ app_dir }}"
|
|
build: always
|
|
state: present
|
|
pull: never
|
|
become: true
|
|
environment:
|
|
DOCKER_BUILDKIT: "1"
|
|
|
|
- name: Prune unused Docker images
|
|
community.docker.docker_prune:
|
|
images: true
|
|
images_filters:
|
|
dangling: true
|