Change: use haproxy role from debian-ansible, add ickweb, etc

1 files changed, 72 insertions, 0 deletions

diff --git a/roles/ickweb/tasks/main.yml b/roles/ickweb/tasks/main.yml
new file mode 100644
index 0000000..163e436
--- /dev/null
+++ b/roles/ickweb/tasks/main.yml
@@ -0,0 +1,72 @@
+- name: "install packages"
+  apt:
+    name: "{{ item }}"
+  with_items:
+    - git
+    - haproxy
+    - python3-bottle
+    - python3-requests
+
+- name: "create ickweb user"
+  user:
+    name: _ickweb
+    comment: Ickweb user
+    system: yes
+
+- name: "create ickweb group"
+  group:
+    name: _ickweb
+    system: yes
+
+- name: "install ickweb code"
+  shell: |
+    rm -rf /var/lib/ickweb
+    git clone git://git.liw.fi/ickweb /var/lib/ickweb
+    chown -R root:root /var/lib/ickweb
+    chmod -R ugo=rX /var/lib/ickweb
+
+- name: "create /etc/ickweb"
+  file:
+    state: directory
+    path: /etc/ickweb
+    owner: _ickweb
+    group: _ickweb
+    mode: 0755
+
+- name: "install ickweb config"
+  copy:
+    content: "{{ ickweb_secret }}"
+    dest: /etc/ickweb/secret
+    owner: _ickweb
+    group: _ickweb
+    mode: 0700
+
+- name: "install ickweb script"
+  template:
+    src: start_ickweb
+    dest: /usr/local/bin
+    owner: root
+    group: root
+    mode: 0755
+
+- name: "install ickweb systemd unit"
+  template:
+    src: ickweb.service
+    dest: /lib/systemd/system/ickweb.service
+    owner: root
+    group: root
+    mode: 0755
+
+- name: "reload systemd"
+  systemd:
+    name: haproxy
+    state: reloaded
+
+- name: "enable and restart services"
+  systemd:
+    name: "{{ item }}"
+    enabled: yes
+    state: restarted
+  with_items:
+    - haproxy
+    - ickweb