Playbooks for sandbox & geotaste #145
Conversation
| [geotaste] | ||
| cdh-dev-sandbox1.princeton.edu |
There was a problem hiding this comment.
Noting for myself that we still have to figure out how to split out host from app; we may need to add app-specific group vars. I think it's fine if we tackle this when we write a second playbook for the sandbox (probably / hopefully for simrisk)
| # # Restart apache on Ubuntu systems when apache role is in use | ||
| # - name: restart apache | ||
| # become: true | ||
| # service: | ||
| # name: apache2 | ||
| # enabled: true | ||
| # state: restarted | ||
| # when: ansible_distribution == 'Ubuntu' and apache_app_path is defined | ||
| # listen: "restart web server" |
There was a problem hiding this comment.
I'd like to get rid of the apache2 bits as part of the VM upgrade that Francis is helping us with; I'm not sure we can merge this change into main until we resolve that, though.
| @@ -0,0 +1,12 @@ | |||
| server { | |||
There was a problem hiding this comment.
is this proxy template no longer needed?
| auth_basic "Restricted Content"; | ||
| auth_basic_user_file /etc/nginx/.htpasswd; |
There was a problem hiding this comment.
If we were doing auth, we'd want the password file to be stored in ansible vault and put on the server as part of the playbook. I'd also want to figure out a way that it would only prompt for the password when you aren't on vpn, but that doesn't matter now.
let's remove these lines.
| @@ -0,0 +1,16 @@ | |||
| --- | |||
There was a problem hiding this comment.
it doesn't look like you have any app-specific setup needed? so this role can be removed
| @@ -0,0 +1,106 @@ | |||
| server { | |||
There was a problem hiding this comment.
what did you have to configure from the base template? it's hard to tell what you changed. Do you still need a custom passenger conf if you aren't doing the proxying?
|
Iceboxing the sandbox 🤣 for geotaste for now. Its nginx and related configs will be continued into/superceded by #149 |
This PR adds a playbook for geotaste, which is our first playbook deploying to the sandbox server; future apps will want to refactor this a bit.