Add hosting for new website

Top sneaky
This commit is contained in:
Jake Howard 2022-10-29 18:09:30 +01:00
parent 8dd1f6cddf
commit 08afdd951e
Signed by: jake
GPG key ID: 57AFB45680EDD477
6 changed files with 124 additions and 0 deletions

View file

@ -105,6 +105,7 @@
- pages - pages
- restic - restic
- commento - commento
- website
- hosts: jellyfin - hosts: jellyfin
roles: roles:

View file

@ -0,0 +1,65 @@
version: "2.3"
x-website: &website
image: registry.git.theorangeone.net/repos/website:latest
user: "{{ docker_user.id }}"
restart: unless-stopped
init: true
environment:
- TZ={{ timezone }}
- DEBUG=false
- SECRET_KEY={{ website_secret_key }}
- DATABASE_URL=postgres://website:website@db/website?conn_max_age=600
- CACHE_URL=redis://redis/0
- QUEUE_STORE_URL=redis://redis/1
- RENDITION_CACHE_URL=redis://redis/2
- SPOTIFY_PROXY_HOST={{ spotify_proxy_host }}
- UNSPLASH_CLIENT_ID={{ unsplash_client_id }}
- SENTRY_DSN={{ website_sentry_dsn }}
- BASE_HOSTNAME=staging.theorangeone.net
- WEB_CONCURRENCY=4
- SEO_INDEX=true
volumes:
- ./media:/app/media
depends_on:
- db
- redis
services:
website:
<<: *website
labels:
- traefik.enable=true
- traefik.http.routers.website.rule=Host(`staging.theorangeone.net`)
- traefik.http.middlewares.website-auth.basicauth.users={{ website_basic_auth }}
- traefik.http.routers.website.middlewares=website-auth
networks:
- default
- traefik
worker:
<<: *website
command: python manage.py rqworker
cron:
<<: *website
command: supercronic etc/crontab
db:
image: postgres:14-alpine
restart: unless-stopped
volumes:
- ./postgres:/var/lib/postgresql/data
environment:
- POSTGRES_PASSWORD=website
- POSTGRES_USER=website
redis:
image: redis:6.0-alpine
restart: unless-stopped
volumes:
- ./redis:/data
networks:
traefik:
external: true

View file

@ -0,0 +1,4 @@
- name: restart website
shell:
chdir: /opt/website
cmd: "{{ docker_update_command }}"

View file

@ -0,0 +1,20 @@
- name: Include vault
include_vars: vault.yml
- name: Create install directory
file:
path: /opt/website
state: directory
owner: "{{ docker_user.name }}"
mode: "{{ docker_compose_directory_mask }}"
become: true
- name: Install compose file
template:
src: files/docker-compose.yml
dest: /opt/website/docker-compose.yml
mode: "{{ docker_compose_file_mask }}"
owner: "{{ docker_user.name }}"
validate: docker-compose -f %s config
notify: restart website
become: true

View file

@ -0,0 +1,5 @@
spotify_proxy_host: "{{ vault_spotify_proxy_host }}"
website_secret_key: "{{ vault_website_secret_key }}"
website_sentry_dsn: "{{ vault_website_sentry_dsn }}"
unsplash_client_id: "{{ vault_unsplash_client_id }}"
website_basic_auth: "{{ vault_website_basic_auth }}"

View file

@ -0,0 +1,29 @@
$ANSIBLE_VAULT;1.1;AES256
36303635376432353532636330353063656433363436663336373063653362396238316462333062
6365643764353136373064623662653731343135343036310a333864386563623934316532633234
66643232343936383134316265336237306364346335313163323465393265633239383763346636
6638616635373531630a376534663138343963613530636265323731663132626265383538343065
66343932333632643632313563343163393832363633383032643330323434323438393333643230
31653362653761313938333437616638363665323463656264353265653137323537306665616331
61613437393131383735313034326237663230643834356463356637626431353561663635613962
31336537306537383437623939396636613131383061383434373436333931633039313130613237
34663935613165626236323238646264346530323339303633626261393338363965653861323134
33373833663737623939666366373962313935363161383564313435373138666534666330346334
35623032636362646635363361616537626362626262333437373932646439386562643832343535
61646532643134656638323130613236393138376363373437343232353231326131636232356636
30396262313439616533346230356339376134653939303138313831333935616238313035613432
65633935646136613538633466306362643535346538383534383761363937373332333739656363
65643338336234643238643035393663346431306137393462636430653932333363303764306634
61643335383235356262653864666266666535393233396162366630613261326666653835386339
64313066303537623163333937626231623063653831386338303338656263313266396637646331
39333839363764366235336230326432373732383433393766343765346531633565383635343235
37316631396464366235323034356161343263376461393533633061643736333365376562306130
66326165613939626136306430306637626139343166626333343139633863633164326238643863
39636534653166646666373034643439366461636530663239633864633737666265356666383137
39356437303964656634326435326232316265366564373537333538313163373132316438323064
30333130343965396265323663363765336366366637366163396663376265376431623839373363
61393065326433393235633338333638333631633136356462333637373739343432623834636238
39393465353538653233316334623337373662656331643330613565613333633865663962346137
32333235303331623432306265386437613061613438373366306235396539663464383835613930
37343864336630666439356164663061373066313063313933643062326239326131383531653366
39363136623861386637