ДЗ №7 Ansible 1

ansible/ansible.cfg

@@ -0,0 +1,10 @@
+[defaults]
+inventory = ./inventory
+remote_user = ubuntu
+private_key_file = ~/.ssh/id_rsa
+host_key_checking = False
+retry_files_enabled = False
+ansible_python_interpreter = /usr/local/bin/python3.10
+
+[inventory]
+#enable_plugins = script

ansible/clone.yml

@@ -0,0 +1,8 @@
+---
+- name: Clone
+  hosts: app
+  tasks:
+    - name: Clone repo
+      git:
+        repo: https://github.com/express42/reddit.git
+        dest: /home/ubuntu/reddit

ansible/inventory

@@ -0,0 +1,6 @@
+#ppserver ansible_python_interpreter=/usr/local/bin/python3.10
+#dbserver ansible_python_interpreter=/usr/local/bin/python3.10
+[app]
+appserver ansible_host=158.160.113.162 
+[db]
+dbserver  ansible_host=51.250.71.145 

ansible/inventory.json

@@ -0,0 +1,34 @@
+#!/bin/bash
+
+server1ip=$(yc compute instances list | awk '{print $10}' | sed '/^[[:space:]]*$/d' |  sed  '1d' | head -1)
+server1host=$(yc compute instances list | awk '{print $4}' | sed '/^[[:space:]]*$/d' |  sed  '1d' | head -1| tr - _)
+server2ip=$(yc compute instances list | awk '{print $10}' | sed '/^[[:space:]]*$/d' |  sed  '1d' | tail -1)
+server2host=$(yc compute instances list | awk '{print $4}' | sed '/^[[:space:]]*$/d' |  sed  '1d' | tail -1| tr - _)
+
+
+if [ "$1" == "--list" ] ; then
+cat<<EOF
+{
+  "$server1host": {
+	"hosts": ["$server1ip"]
+  },
+  "$server2host": {
+  	"hosts": ["$server2ip"]
+  },
+  "_meta": {
+	"hostvars": {
+	  "$server1ip": {
+		"host_specific_var": "$server1host"
+	  },
+	  "$server2ip": {
+		"host_specific_var": "$server2host"
+	  }
+	}
+  }
+}
+EOF
+elif [ "$1" == "--host" ]; then
+  echo '{"_meta": {"hostvars": {}}}'
+else
+  echo "{ }"
+fi

ansible/inventory.yml

@@ -0,0 +1,9 @@
+app:
+  hosts:
+    appserver:
+      ansible_host: 178.154.227.22
+
+db:
+  hosts:
+    dbserver:
+      ansible_host: 178.154.227.96

terraform/files/key.json

@@ -0,0 +1,8 @@
+{
+   "id": "ajegg8175h1q90thaise",
+   "service_account_id": "ajeo9k17dj25iuj6h5au",
+   "created_at": "2023-12-07T20:04:07.729402726Z",
+   "key_algorithm": "RSA_2048",
+   "public_key": "-----BEGIN PUBLIC KEY-----\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtQ6f1kCIJbJFcDeYXRnQ\n61/1j7RbT3OsFUaetHP3WEZUx4Tr2RzjnnOjLUVkRIjjU/0Y8VWGLQx2b3bmBZ4P\nbngq+WtySVei+jLVk8o+gpK4AriuX5J15G/CfuOBgrCaXZok/YSi7h8ni7TU1YF6\nkjmUV/3JRZPG08xuiZh5pvATcpTlLUMopWCdhhGoci4B0QjX2pPl1d27u/thdu0O\nLe5RZX0k9jhC6v3T/FMPNpMPxUxnctejxpz+OWGuOdW0MPJPKL50C5WlB58M2EPI\nMahfmnRLkLZV4Yr4fR6Si+cvZIYQNKWeUURTYRxlqLCcnf+9We6hf9MuylJP24rd\n/QIDAQAB\n-----END PUBLIC KEY-----\n",
+   "private_key": "PLEASE DO NOT REMOVE THIS LINE! Yandex.Cloud SA Key ID \u003cajegg8175h1q90thaise\u003e\n-----BEGIN PRIVATE KEY-----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\n5FeFGlxGhsg5Mmwd0eBaSPHu\n-----END PRIVATE KEY-----\n"
+}

terraform/prod/files/deploy.sh

@@ -0,0 +1,12 @@
+#!/bin/bash
+set -e
+APP_DIR=${1:-$HOME}
+a=1; while [ -n "$(pgrep apt-get)" ]; do echo $a; sleep 1s; a=$(expr $a + 1); done
+sleep 30
+sudo apt-get install -y git
+git clone -b monolith https://github.com/express42/reddit.git $APP_DIR/reddit
+cd $APP_DIR/reddit
+bundle install
+sudo mv /tmp/puma.service /etc/systemd/system/puma.service
+sudo systemctl start puma
+sudo systemctl enable puma

terraform/prod/files/key.json

@@ -0,0 +1,8 @@
+{
+   "id": "ajegg8175h1q90thaise",
+   "service_account_id": "ajeo9k17dj25iuj6h5au",
+   "created_at": "2023-12-07T20:04:07.729402726Z",
+   "key_algorithm": "RSA_2048",
+   "public_key": "-----BEGIN PUBLIC KEY-----\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtQ6f1kCIJbJFcDeYXRnQ\n61/1j7RbT3OsFUaetHP3WEZUx4Tr2RzjnnOjLUVkRIjjU/0Y8VWGLQx2b3bmBZ4P\nbngq+WtySVei+jLVk8o+gpK4AriuX5J15G/CfuOBgrCaXZok/YSi7h8ni7TU1YF6\nkjmUV/3JRZPG08xuiZh5pvATcpTlLUMopWCdhhGoci4B0QjX2pPl1d27u/thdu0O\nLe5RZX0k9jhC6v3T/FMPNpMPxUxnctejxpz+OWGuOdW0MPJPKL50C5WlB58M2EPI\nMahfmnRLkLZV4Yr4fR6Si+cvZIYQNKWeUURTYRxlqLCcnf+9We6hf9MuylJP24rd\n/QIDAQAB\n-----END PUBLIC KEY-----\n",
+   "private_key": "PLEASE DO NOT REMOVE THIS LINE! Yandex.Cloud SA Key ID \u003cajegg8175h1q90thaise\u003e\n-----BEGIN PRIVATE KEY-----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\n5FeFGlxGhsg5Mmwd0eBaSPHu\n-----END PRIVATE KEY-----\n"
+}

terraform/prod/files/puma.service

@@ -0,0 +1,14 @@
+
+[Unit]
+Description=Puma HTTP Server
+After=network.target
+
+[Service]
+Type=simple
+User=ubuntu
+WorkingDirectory=/home/ubuntu/reddit
+ExecStart=/bin/bash -lc 'puma'
+Restart=always
+
+[Install]
+WantedBy=multi-user.target

terraform/stage/backend.tf

@@ -1,6 +1,6 @@
 terraform {
   backend "s3" {
-    endpoint = "https://storage.yandexcloud.net"
+    endpoint = "storage.yandexcloud.net"
     bucket   = "test-aeivanov"
     region   = "ru-central1"
     key      = "terraform.tfstate"

terraform/stage/files/deploy.sh

@@ -0,0 +1,12 @@
+#!/bin/bash
+set -e
+APP_DIR=${1:-$HOME}
+a=1; while [ -n "$(pgrep apt-get)" ]; do echo $a; sleep 1s; a=$(expr $a + 1); done
+sleep 30
+sudo apt-get install -y git
+git clone -b monolith https://github.com/express42/reddit.git $APP_DIR/reddit
+cd $APP_DIR/reddit
+bundle install
+sudo mv /tmp/puma.service /etc/systemd/system/puma.service
+sudo systemctl start puma
+sudo systemctl enable puma

terraform/stage/files/key.json

@@ -0,0 +1,8 @@
+{
+   "id": "ajegg8175h1q90thaise",
+   "service_account_id": "ajeo9k17dj25iuj6h5au",
+   "created_at": "2023-12-07T20:04:07.729402726Z",
+   "key_algorithm": "RSA_2048",
+   "public_key": "-----BEGIN PUBLIC KEY-----\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtQ6f1kCIJbJFcDeYXRnQ\n61/1j7RbT3OsFUaetHP3WEZUx4Tr2RzjnnOjLUVkRIjjU/0Y8VWGLQx2b3bmBZ4P\nbngq+WtySVei+jLVk8o+gpK4AriuX5J15G/CfuOBgrCaXZok/YSi7h8ni7TU1YF6\nkjmUV/3JRZPG08xuiZh5pvATcpTlLUMopWCdhhGoci4B0QjX2pPl1d27u/thdu0O\nLe5RZX0k9jhC6v3T/FMPNpMPxUxnctejxpz+OWGuOdW0MPJPKL50C5WlB58M2EPI\nMahfmnRLkLZV4Yr4fR6Si+cvZIYQNKWeUURTYRxlqLCcnf+9We6hf9MuylJP24rd\n/QIDAQAB\n-----END PUBLIC KEY-----\n",
+   "private_key": "PLEASE DO NOT REMOVE THIS LINE! Yandex.Cloud SA Key ID \u003cajegg8175h1q90thaise\u003e\n-----BEGIN PRIVATE KEY-----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\n5FeFGlxGhsg5Mmwd0eBaSPHu\n-----END PRIVATE KEY-----\n"
+}

terraform/stage/files/puma.service

@@ -0,0 +1,14 @@
+
+[Unit]
+Description=Puma HTTP Server
+After=network.target
+
+[Service]
+Type=simple
+User=ubuntu
+WorkingDirectory=/home/ubuntu/reddit
+ExecStart=/bin/bash -lc 'puma'
+Restart=always
+
+[Install]
+WantedBy=multi-user.target

terraform/storage-bucket.tf

@@ -7,12 +7,12 @@
 #   required_version = ">= 0.13"
 #}
 
-#provider "yandex" {
-#  service_account_key_file = var.service_account_key_file
-#  cloud_id                 = var.cloud_id
-#  folder_id                = var.folder_id
-#  zone                     = var.zone
-#}
+provider "yandex" {
+  service_account_key_file = var.service_account_key_file
+  cloud_id                 = var.cloud_id
+  folder_id                = var.folder_id
+  zone                     = var.zone
+}
 
 resource "yandex_storage_bucket" "test-aeivanov" {
   access_key    = var.access_key

terraform/variables.tf

@@ -1,50 +1,56 @@
-variable cloud_id {
+variable "cloud_id" {
   description = "Cloud"
 }
-variable folder_id {
+variable "folder_id" {
   description = "Folder"
 }
-variable zone {
+variable "zone" {
   description = "Zone"
-  default = "ru-central1-a"
+  default     = "ru-central1-a"
 }
-variable region_id {
-  description = "region"
-  default     = "ru-central1"
-}
-variable public_key_path {
+variable "public_key_path" {
   description = "Path to the public key used for ssh access"
 }
-variable image_id {
+variable "private_key_path" {
+  description = "Path to the private key used for ssh access"
+}
+variable "image_id" {
   description = "Disk image"
 }
-variable subnet_id {
+variable "subnet_id" {
   description = "Subnet"
 }
-variable service_account_key_file {
+variable "service_account_key_file" {
   description = "key .json"
 }
-variable private_key_path {
-  description = "path to private key"
+variable "service_account_id" {
+  description = "SA id"
 }
-variable instances {
-  description = "count instances"
+variable "instances_count" {
+  description = "Default count of instances"
+  type        = number
   default     = 1
 }
-variable app_disk_image {
-  description = "disk image for reddit app"
+variable "app_disk_image" {
+  description = "Disk image for reddit app"
   default     = "reddit-app-base"
 }
-variable db_disk_image {
-  description = "disk image for mongodb"
+variable "db_disk_image" {
+  description = "Disk image for reddit db"
   default     = "reddit-db-base"
 }
-variable access_key {
-  description = "key id"
+variable "bucket_name" {
+  description = "Name of S3 bucket"
+}
+variable "db_id" {
+  description = "YC dynamodb Database ID"
+}
+variable "access_key" {
+  description = "S3 access key"
 }
-variable secret_key {
-  description = "secret key"
+variable "secret_key" {
+  description = "S3 secret key"
 }
-variable bucket_name {
-  description = "bucket name"
+variable "env" {
+  description = "Environment stage, prod"
 }