From 9850f73a17d07a07c031a790ef8c8a5625529d29 Mon Sep 17 00:00:00 2001
From: Jake Howard <git@theorangeone.net>
Date: Sun, 17 May 2020 18:04:44 +0100
Subject: [PATCH] Deploy web-rng

https://github.com/RealOrangeOne/web-rng
---
 .../files/web-rng/docker-compose.yml          | 11 +++++++
 ansible/roles/intersect-docker/tasks/main.yml |  3 ++
 .../roles/intersect-docker/tasks/web-rng.yml  | 29 +++++++++++++++++++
 terraform/theorangeone.net.tf                 |  8 +++++
 4 files changed, 51 insertions(+)
 create mode 100644 ansible/roles/intersect-docker/files/web-rng/docker-compose.yml
 create mode 100644 ansible/roles/intersect-docker/tasks/web-rng.yml

diff --git a/ansible/roles/intersect-docker/files/web-rng/docker-compose.yml b/ansible/roles/intersect-docker/files/web-rng/docker-compose.yml
new file mode 100644
index 0000000..33e8526
--- /dev/null
+++ b/ansible/roles/intersect-docker/files/web-rng/docker-compose.yml
@@ -0,0 +1,11 @@
+version: "2.3"
+
+services:
+  web-rng:
+    image: docker.pkg.github.com/realorangeone/web-rng/web-rng:latest
+    container_name: web-rng
+    restart: unless-stopped
+    labels:
+      - "traefik.enable=true"
+      - "traefik.http.routers.web-rng.rule=Host(`rng.theorangeone.net`)"
+      - "traefik.http.routers.web-rng.tls.certresolver=le"
diff --git a/ansible/roles/intersect-docker/tasks/main.yml b/ansible/roles/intersect-docker/tasks/main.yml
index 5916393..23f215c 100644
--- a/ansible/roles/intersect-docker/tasks/main.yml
+++ b/ansible/roles/intersect-docker/tasks/main.yml
@@ -43,5 +43,8 @@
 - name: Install wallabag
   include: wallabag.yml
 
+- name: Install web-rng
+  include: web-rng.yml
+
 - name: Install whoami
   include: whoami.yml
diff --git a/ansible/roles/intersect-docker/tasks/web-rng.yml b/ansible/roles/intersect-docker/tasks/web-rng.yml
new file mode 100644
index 0000000..1361696
--- /dev/null
+++ b/ansible/roles/intersect-docker/tasks/web-rng.yml
@@ -0,0 +1,29 @@
+- name: Create web-rng directory
+  file:
+    path: /opt/web-rng
+    state: directory
+    owner: "{{ docker_user.name }}"
+    mode: "{{ docker_compose_directory_mask }}"
+  become: true
+
+- name: Install web-rng compose file
+  template:
+    src: files/web-rng/docker-compose.yml
+    dest: /opt/web-rng/docker-compose.yml
+    mode: "{{ docker_compose_file_mask }}"
+    owner: "{{ docker_user.name }}"
+    validate: /usr/bin/docker-compose -f %s config
+  register: compose_file
+  become: true
+
+- name: Cycle web-rng container
+  docker_compose:
+    project_src: /opt/web-rng
+    pull: true
+    remove_orphans: true
+    remove_volumes: true
+    state: "{{ item }}"
+  when: compose_file.changed
+  loop:
+    - absent
+    - present
diff --git a/terraform/theorangeone.net.tf b/terraform/theorangeone.net.tf
index 76860c2..e5f516d 100644
--- a/terraform/theorangeone.net.tf
+++ b/terraform/theorangeone.net.tf
@@ -148,3 +148,11 @@ resource "cloudflare_record" "theorangeonenet_upload" {
   type    = "A"
   ttl     = 1
 }
+
+resource "cloudflare_record" "theorangeonenet_rng" {
+  zone_id = cloudflare_zone.theorangeonenet.id
+  name    = "rng"
+  value   = vultr_server.casey.main_ip
+  type    = "A"
+  ttl     = 1
+}