2016-09-15 10:49:15 +00:00
|
|
|
global {
|
|
|
|
appname = "tusd"
|
|
|
|
approot = "/srv/tusd"
|
|
|
|
ssh {
|
|
|
|
key_dir = "./ssh"
|
|
|
|
}
|
|
|
|
ansiblecfg {
|
|
|
|
privilege_escalation {
|
|
|
|
become = true
|
|
|
|
}
|
|
|
|
defaults {
|
|
|
|
host_key_checking = false
|
|
|
|
}
|
|
|
|
}
|
|
|
|
}
|
|
|
|
|
|
|
|
infra provider aws {
|
|
|
|
access_key = "${var.FREY_AWS_ACCESS_KEY}"
|
|
|
|
region = "us-east-1"
|
|
|
|
secret_key = "${var.FREY_AWS_SECRET_KEY}"
|
|
|
|
}
|
|
|
|
|
|
|
|
infra variable {
|
|
|
|
amis {
|
|
|
|
type = "map"
|
|
|
|
default {
|
|
|
|
"us-east-1" = "ami-9bce7af0"
|
|
|
|
}
|
|
|
|
}
|
|
|
|
region {
|
|
|
|
default = "us-east-1"
|
|
|
|
}
|
|
|
|
}
|
|
|
|
|
|
|
|
infra output {
|
2016-09-28 14:00:15 +00:00
|
|
|
public_address {
|
|
|
|
value = "${aws_instance.tusd.0.public_dns}"
|
|
|
|
}
|
|
|
|
public_addresses {
|
|
|
|
value = "${join("\n", aws_instance.tusd.*.public_dns)}"
|
|
|
|
}
|
|
|
|
endpoint {
|
|
|
|
value = "http://${aws_route53_record.www.name}:80/"
|
|
|
|
}
|
2016-09-15 10:49:15 +00:00
|
|
|
}
|
|
|
|
|
2016-09-30 11:13:20 +00:00
|
|
|
infra resource aws_key_pair "infra-tusd-main" {
|
|
|
|
key_name = "infra-tusd-main"
|
|
|
|
public_key = "${file("{{{config.global.ssh.publickey_file}}}")}"
|
|
|
|
}
|
|
|
|
|
2016-09-15 10:49:15 +00:00
|
|
|
infra resource aws_instance tusd {
|
|
|
|
ami = "${lookup(var.amis, var.region)}"
|
|
|
|
instance_type = "c3.large"
|
2016-09-30 11:13:20 +00:00
|
|
|
key_name = "${aws_key_pair.infra-tusd-main.key_name}"
|
|
|
|
|
2016-09-15 10:49:15 +00:00
|
|
|
security_groups = ["fw-tusd-main"]
|
|
|
|
connection {
|
|
|
|
key_file = "{{{config.global.ssh.privatekey_file}}}"
|
|
|
|
user = "{{{config.global.ssh.user}}}"
|
|
|
|
}
|
2016-09-28 14:00:15 +00:00
|
|
|
tags {
|
|
|
|
"Name" = "${var.FREY_DOMAIN}"
|
|
|
|
}
|
2016-09-15 10:49:15 +00:00
|
|
|
}
|
|
|
|
|
|
|
|
infra resource "aws_route53_record" www {
|
2016-09-28 14:00:15 +00:00
|
|
|
name = "${var.FREY_DOMAIN}"
|
2016-09-15 10:49:15 +00:00
|
|
|
records = ["${aws_instance.tusd.public_dns}"]
|
|
|
|
ttl = "300"
|
|
|
|
type = "CNAME"
|
|
|
|
zone_id = "${var.FREY_AWS_ZONE_ID}"
|
|
|
|
}
|
|
|
|
|
|
|
|
infra resource aws_security_group "fw-tusd-main" {
|
|
|
|
description = "Infra tusd"
|
|
|
|
name = "fw-tusd-main"
|
|
|
|
ingress {
|
|
|
|
cidr_blocks = ["0.0.0.0/0"]
|
|
|
|
from_port = 8080
|
|
|
|
protocol = "tcp"
|
|
|
|
to_port = 8080
|
|
|
|
}
|
|
|
|
ingress {
|
|
|
|
cidr_blocks = ["0.0.0.0/0"]
|
|
|
|
from_port = 80
|
|
|
|
protocol = "tcp"
|
|
|
|
to_port = 80
|
|
|
|
}
|
|
|
|
ingress {
|
|
|
|
cidr_blocks = ["0.0.0.0/0"]
|
|
|
|
from_port = 22
|
|
|
|
protocol = "tcp"
|
|
|
|
to_port = 22
|
|
|
|
}
|
|
|
|
}
|
|
|
|
|
|
|
|
install {
|
|
|
|
playbooks {
|
|
|
|
hosts = "tusd"
|
|
|
|
name = "Install tusd"
|
|
|
|
roles {
|
|
|
|
role = "{{{init.paths.roles_dir}}}/apt/v1.0.0"
|
|
|
|
apt_packages = ["apg", "build-essential", "curl", "git-core", "htop", "iotop", "libpcre3", "logtail", "mlocate", "mtr", "psmisc", "telnet", "vim", "wget"]
|
|
|
|
}
|
|
|
|
roles {
|
|
|
|
role = "{{{init.paths.roles_dir}}}/unattended-upgrades/v1.2.0"
|
|
|
|
}
|
|
|
|
tasks {
|
|
|
|
lineinfile = "dest=/home/{{{config.global.ssh.user}}}/.bashrc line=\"alias wtf='sudo tail -f /var/log/*{log,err} /var/log/{dmesg,messages,*{,/*}{log,err}}'\" owner={{{config.global.ssh.user}}} group={{{config.global.ssh.user}}} mode=0644 backup=yes"
|
|
|
|
name = "Common | Add convenience shortcut wtf"
|
|
|
|
}
|
|
|
|
tasks {
|
|
|
|
lineinfile = "dest=/home/{{{config.global.ssh.user}}}/.bashrc line=\"cd {{{config.global.approot}}}/current || true\" owner={{{config.global.ssh.user}}} group={{{config.global.ssh.user}}} mode=0644 backup=yes"
|
|
|
|
name = "Common | Install login"
|
|
|
|
}
|
|
|
|
tasks {
|
|
|
|
name = "Common | Set motd"
|
2016-09-28 14:00:15 +00:00
|
|
|
copy = "content='Welcome to {{lookup('env', 'FREY_DOMAIN')}}' dest=/etc/motd owner=root group=root mode=0644 backup=yes"
|
2016-09-15 10:49:15 +00:00
|
|
|
}
|
|
|
|
tasks {
|
|
|
|
name = "Common | Set timezone variables"
|
|
|
|
copy = "content='Etc/UTC' dest=/etc/timezone owner=root group=root mode=0644 backup=yes"
|
|
|
|
notify = ["Common | Update timezone"]
|
|
|
|
}
|
|
|
|
handlers {
|
|
|
|
name = "Common | Update timezone"
|
|
|
|
command = "dpkg-reconfigure --frontend noninteractive tzdata"
|
|
|
|
}
|
|
|
|
}
|
|
|
|
}
|
|
|
|
|
|
|
|
setup {
|
|
|
|
playbooks {
|
|
|
|
hosts = "tusd"
|
|
|
|
name = "Setup tusd"
|
|
|
|
roles {
|
|
|
|
role = "{{{init.paths.roles_dir}}}/upstart/v1.0.0"
|
|
|
|
upstart_command = "./tusd -port=8080 -dir=/mnt/tusd-data -store-size=10737418240"
|
|
|
|
upstart_description = "tusd server"
|
|
|
|
upstart_name = "{{{config.global.appname}}}"
|
|
|
|
upstart_pidfile_path = "{{{config.global.approot}}}/shared/{{{config.global.appname}}}.pid"
|
|
|
|
upstart_respawn = true
|
|
|
|
upstart_respawn_limit = true
|
|
|
|
upstart_runtime_root = "{{{config.global.approot}}}/current/tusd_linux_amd64"
|
|
|
|
upstart_user = "www-data"
|
|
|
|
}
|
|
|
|
roles {
|
|
|
|
role = "{{{init.paths.roles_dir}}}/rsyslog/v3.0.1"
|
|
|
|
rsyslog_rsyslog_d_files "49-tusd" {
|
|
|
|
directives = ["& stop"]
|
|
|
|
rules {
|
|
|
|
rule = ":programname, startswith, \"{{{config.global.appname}}}\""
|
|
|
|
logpath = "{{{config.global.approot}}}/shared/logs/{{{config.global.appname}}}.log"
|
|
|
|
}
|
|
|
|
}
|
|
|
|
}
|
|
|
|
roles {
|
|
|
|
role = "{{{init.paths.roles_dir}}}/fqdn/v1.0.0"
|
2016-09-28 14:00:15 +00:00
|
|
|
fqdn = "{{lookup('env', 'FREY_DOMAIN')}}"
|
2016-09-15 10:49:15 +00:00
|
|
|
}
|
|
|
|
tasks {
|
2016-09-28 07:48:46 +00:00
|
|
|
file = "path=/mnt/tusd-data state=directory owner=www-data group=ubuntu mode=ug+rwX,o= recurse=yes"
|
2016-09-15 10:49:15 +00:00
|
|
|
name = "tusd | Create tusd data dir"
|
|
|
|
}
|
2016-09-28 07:48:46 +00:00
|
|
|
tasks {
|
|
|
|
name = "tusd | Create purger crontab (clean up >24h (1400minutes) files)"
|
|
|
|
cron {
|
|
|
|
name = "purger"
|
|
|
|
special_time = "hourly"
|
|
|
|
job = "find /mnt/tusd-data -type f -mmin +1440 -print0 | xargs -n 200 -r -0 rm || true"
|
|
|
|
}
|
|
|
|
}
|
2016-09-15 10:49:15 +00:00
|
|
|
}
|
|
|
|
}
|
|
|
|
|
|
|
|
deploy {
|
|
|
|
playbooks {
|
|
|
|
hosts = "tusd"
|
|
|
|
name = "Deploy tusd"
|
|
|
|
roles {
|
|
|
|
role = "{{{init.paths.roles_dir}}}/deploy/v1.4.0"
|
2016-09-15 21:04:49 +00:00
|
|
|
ansistrano_get_url = "https://github.com/tus/tusd/releases/download/0.5.2/tusd_linux_amd64.tar.gz"
|
2016-09-15 10:49:15 +00:00
|
|
|
ansistrano_deploy_to = "{{{config.global.approot}}}"
|
|
|
|
ansistrano_deploy_via = "download_unarchive"
|
|
|
|
ansistrano_group = "ubuntu"
|
|
|
|
}
|
|
|
|
tasks {
|
|
|
|
name = "tusd | Set file attributes"
|
|
|
|
file = "path={{{config.global.approot}}}/current/tusd_linux_amd64/tusd mode=0755 owner=www-data group=www-data"
|
|
|
|
}
|
|
|
|
}
|
|
|
|
}
|
|
|
|
|
|
|
|
restart {
|
|
|
|
playbooks {
|
|
|
|
hosts = "tusd"
|
|
|
|
name = "Restart tusd"
|
|
|
|
tasks {
|
|
|
|
shell = "iptables -t nat -A PREROUTING -i eth0 -p tcp --dport 80 -j REDIRECT --to-port 8080"
|
|
|
|
name = "tusd | Redirect HTTP traffic to tusd"
|
|
|
|
}
|
|
|
|
tasks {
|
|
|
|
action = "service name=tusd state=restarted"
|
|
|
|
name = "tusd | Restart"
|
|
|
|
}
|
|
|
|
}
|
|
|
|
}
|