Add: role to configure a host to run Qvisqve

2 files changed, 52 insertions, 0 deletions

diff --git a/roles/qvisqve/tasks/main.yml b/roles/qvisqve/tasks/main.yml
new file mode 100644
index 0000000..2b78dac
--- /dev/null
+++ b/roles/qvisqve/tasks/main.yml
@@ -0,0 +1,40 @@
+- name: "create Qvisqve user"
+  user:
+    name: _qvisqve
+    comment: Qvisqve
+    system: yes
+
+- name: "create Qvisqve group"
+  group:
+    name: _qvisqve
+    system: yes
+
+- name: "install Qvisqve"
+  apt:
+    name: "{{ item }}"
+  with_items:
+    - qvisqve
+
+- name: "create Qvisqve config dir"
+  file:
+    state: directory
+    path: /etc/qvisqve
+    owner: root
+    group: root
+    mode: 0755
+    
+- name: "install Qvisqve config"
+  template:
+    src: qvisqve.yaml.j2
+    dest: /etc/qvisqve/qvisqve.yaml
+    mode: 0600
+    owner: _qvisqve
+    group: _qvisqve
+
+- name: "enable and restart Qvisqve services"
+  service:
+    name: "{{ item }}"
+    enabled: yes
+    state: restarted
+  with_items:
+    - qvisqve
diff --git a/roles/qvisqve/templates/qvisqve.yaml.j2 b/roles/qvisqve/templates/qvisqve.yaml.j2
new file mode 100644
index 0000000..5d19a1d
--- /dev/null
+++ b/roles/qvisqve/templates/qvisqve.yaml.j2
@@ -0,0 +1,12 @@
+gunicorn: yes
+gunicorn-log: /var/log/qvisqve/gunicorn.log
+gunicorn-port: {{ qvisqve_port }}
+clients:
+{{ qvisqve_clients|to_nice_yaml|indent(4,true) }}
+log: 
+  - filename: /var/log/qvisqve/qvisqve.slog
+token-issuer: "https://{{ qvisqve_domain }}"
+token-lifetime: 3600
+token-public-key: "{{ qvisqve_token_public_key }}"
+token-private-key: |
+{{ qvisqve_token_private_key|indent(4,true) }}