playbook.yml

##
# HubDrop Server
#

---
- hosts: webserver
  user: root

  vars_files:
    - vars.yml

  tasks:

    - hostname: name={{ server_hostname }}

    - name: Setup | Message of the day.
      action: template src=templates/motd.j2 dest=/etc/update-motd.d/95-ansible mode=755
    
    - name: Set timezone variables
      copy: content='America/New_York'
            dest=/etc/timezone
            owner=root
            group=root
            mode=0644
            backup=yes
      notify:
        - update timezone
        
    - name: Setup | Install required packages.
      action: apt pkg={{ item }} state=installed
      with_items:
        - php5
        - apache2
        - php-apc
        - php5-xmlrpc
        - php5-curl
        - php5-gd
        - sendmail
        - vim
        - git
        - apache2
        - acl
        - python-pycurl

    ##
    # HubDrop App
    #

    - name: HubDrop | Create HubDrop User
      user:
        name=hubdrop
        shell=/bin/bash
        groups=www-data
        append=yes
        home=/var/hubdrop
        generate_ssh_key=yes
        uid=1010

    - name: HubDrop | Save SSH config file.
      template:
        src=templates/ssh-config.j2
        dest=/var/hubdrop/.ssh/config
        owner=hubdrop
        group=hubdrop
        mode=0600

    - name: HubDrop | Clone app source code.
      git:
        repo={{ app_repo }}
        dest={{ app_root }}
        version={{ app_version }}

    - name: HubDrop | Grant ownership of app source code to hubdrop user.
      file:
        path={{ app_root }}
        owner=hubdrop group=hubdrop
        recurse=yes
        state=directory

    - name: HubDrop | Grant ownership of app.php to www-data
      file:
        path={{ app_root }}/web/app.php
        owner=www-data group=hubdrop

    - name: HubDrop | Create repos folder
      file:
        path=/var/hubdrop/repos
        owner=hubdrop
        group=www-data
        state=directory
        mode=0774

    - name: HubDrop | Create cache folder
      file:
        path={{ app_root }}/app/cache
        owner=hubdrop
        group=www-data
        state=directory
        mode=0774

    - name: HubDrop | Create logs folder
      file:
        path={{ app_root }}/app/logs
        owner=hubdrop
        group=www-data
        state=directory
        mode=0774

    - name: HubDrop | Setup ACL for logs and cache.
      command: setfacl -R -m u:www-data:rwX -m u:hubdrop:rwX {{ app_root }}/app/cache {{ app_root }}/app/logs
      command: setfacl -dR -m u:www-data:rwx -m u:hubdrop:rwx {{ app_root }}/app/cache {{ app_root }}/app/logs


    - name: HubDrop | Set up `hubdrop` executable
      template:
        src=templates/usr-bin-hubdrop.j2
        dest=/usr/bin/hubdrop
        mode=0755

    - name: HubDrop | Set up `hubdrop-jenkins` executable
      template:
        src=templates/usr-bin-hubdrop-jenkins.j2
        dest=/usr/bin/hubdrop-jenkins
        mode=0755

    - name: HubDrop | Set global environment variables
      template:
        src=templates/etc-profile-d-hubdrop-environment.sh.j2
        dest=/etc/profile.d/hubdrop-environment.sh
        mode=0644

    ##
    # APACHE
    #

    - name: Apache | Enable rewrite and vhost_alias modules.
      action: command a2enmod rewrite vhost_alias

    # @TODO: Should we just remove it to speed up provisioning?
    - name: Apache | Disable the default site.
      action: command a2dissite default
        removes=/etc/apache2/sites-enabled/default.conf

    - name: Apache | Save virtualhost configuration file.
      action: template src=templates/apache-vhost.j2 dest=/etc/apache2/sites-available/{{ server_hostname }}

    # @TODO: Should we just create the symlink ourselves to speed up provisioning?
    - name: Apache | Enable hubdrop.org site.
      action: command a2ensite {{ server_hostname }}
      notify:
        - restart apache

    - name: Apache | Add www-data to hubdrop group
      action: user name=www-data groups=hubdrop append=true

    ##
    # JENKINS
    #

    - name: Jenkins | Add apt key
      apt_key:
        url=https://jenkins-ci.org/debian/jenkins-ci.org.key
        state=present
        validate_certs=no

    - name: Jenkins | Add apt repo
      apt_repository:
        repo='deb http://pkg.jenkins-ci.org/debian binary/'
        state=present

    - name: Jenkins | Install jenkins apt package
      apt: pkg={{ item }} state=installed
      with_items:
        - jenkins


    - name: Jenkins | Create jobs directory.
      file: path=/var/lib/jenkins/jobs owner=jenkins group=jenkins recurse=yes state=directory

    - name: Jenkins | Setup jenkins jobs folders.
      file:
        path=/var/lib/jenkins/jobs/{{ item }}
        owner=jenkins
        group=jenkins
        recurse=yes
        state=directory
      with_items: jenkins_jobs

    - name: Jenkins | Setup jenkins jobs.
      template:
        src=templates/jenkins-{{ item }}-config.xml.j2
        dest=/var/lib/jenkins/jobs/{{ item }}/config.xml
        mode=0644
      with_items: jenkins_jobs
      notify:
        - restart jenkins

    - name: Jenkins | Setup jenkins cli conf.
      template:
        src=templates/etc-jenkins-cli.conf.j2
        dest=/etc/jenkins/cli.conf
        mode=0644

    - name: Jenkins | Setup jenkins sudo perms.
      template:
        src=templates/etc-sudoers-d-jenkins.j2
        dest=/etc/sudoers.d/jenkins
        mode=0440

    # @TODO Setup github authorization by running hubdrop:github

    - name: ensure apache is running
      service: name=apache2 state=started

  handlers:
    - name: restart apache
      service: name=apache2 state=restarted

    - name: restart jenkins
      action: service name=jenkins state=restarted

    - name: update timezone
      command: dpkg-reconfigure --frontend noninteractive tzdata