Logan
9fdcad1c46
- Terraform: e2-micro VM (us-east1-b, free tier), static IP, SSH/web
firewall rules, IAM bindings for Firestore + GCS; imports existing
drb-calls bucket and c2-server Firestore database into state
- Gitea CI: build c2-core, discord-bot, frontend images and push to
git.vpn.cusano.net registry; SSH deploy pulls pre-built images (no
build on VM)
- Ansible: first-time setup only — git clone, env files from vault,
Caddyfile, docker login + compose pull + up; no rsync or on-VM builds
- docker-compose: add image: ${REGISTRY}/name:latest alongside build:
so local dev and CI registry both work
- gitignore: add Terraform state, lock, tfvars, ansible secrets
80 lines
1.8 KiB
YAML
80 lines
1.8 KiB
YAML
---
|
|
# Full first-time setup: waits for the VM's startup.sh to finish installing
|
|
# Docker, then deploys the stack. Safe to re-run — all tasks are idempotent.
|
|
#
|
|
# Usage:
|
|
# ansible-playbook -i inventory.ini site.yml --ask-vault-pass
|
|
|
|
- name: Bootstrap + deploy DRB server
|
|
hosts: drb
|
|
become: true
|
|
vars_files:
|
|
- vault.yml
|
|
|
|
pre_tasks:
|
|
- name: Install rsync
|
|
apt:
|
|
name: rsync
|
|
state: present
|
|
update_cache: false
|
|
|
|
- name: Wait for Docker (startup.sh runs async on first boot)
|
|
command: docker info
|
|
register: _docker
|
|
until: _docker.rc == 0
|
|
retries: 30
|
|
delay: 10
|
|
changed_when: false
|
|
|
|
- name: Create 2 GB swap file
|
|
command: fallocate -l 2G /swapfile
|
|
args:
|
|
creates: /swapfile
|
|
|
|
- name: Set swap file permissions
|
|
file:
|
|
path: /swapfile
|
|
mode: "0600"
|
|
|
|
- name: Format swap file
|
|
command: mkswap /swapfile
|
|
register: _mkswap
|
|
changed_when: _mkswap.rc == 0
|
|
|
|
- name: Enable swap
|
|
command: swapon /swapfile
|
|
register: _swapon
|
|
failed_when: _swapon.rc != 0 and 'already' not in _swapon.stderr
|
|
changed_when: _swapon.rc == 0
|
|
|
|
- name: Persist swap in fstab
|
|
lineinfile:
|
|
path: /etc/fstab
|
|
line: "/swapfile none swap sw 0 0"
|
|
state: present
|
|
|
|
- name: Set swappiness to 10 (use swap only under pressure)
|
|
sysctl:
|
|
name: vm.swappiness
|
|
value: "10"
|
|
sysctl_set: true
|
|
state: present
|
|
reload: true
|
|
|
|
- name: Add deploy user to docker group
|
|
user:
|
|
name: "{{ ssh_user }}"
|
|
groups: docker
|
|
append: true
|
|
|
|
- name: Create app directory
|
|
file:
|
|
path: "{{ app_dir }}"
|
|
state: directory
|
|
owner: "{{ ssh_user }}"
|
|
group: "{{ ssh_user }}"
|
|
mode: "0755"
|
|
|
|
roles:
|
|
- deploy
|