Add playbook and role for angelguide deployment via CI

host_vars/gabriel.c3heaven.de

@@ -10,6 +10,8 @@ acmetool_cert_domains:
  - wiki.c3heaven.de
  - www.c3heaven.de
 
+angelguide_deployment_path: "/var/www/angelguide"
+
 nginx_https_sites:
  - name: "c3heaven.de"
    locations:
@@ -21,7 +23,8 @@ nginx_https_sites:
       config: "return 301 https://kanboard.c3heaven.de$1?$args;"
     - location: "~ /guide/(.*).pdf$"
       config: |-
-          root /var/www/html;
+          root {{ angelguide_deployment_path }};
+          rewrite ^/guide(.*)$ $1;
           add_header Access-Control-Allow-Origin *;
     - location: "/angelguide.pdf"
       config: "rewrite .* /guide/angelguide_$lang.pdf;"

roles/angelguide-deployment/defaults/main.yml

+angelguide_deployment_user: angelguide
+angelguide_deployment_path: /var/www/angelguide
+angelguide_deployment_keys:
+ - ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIHf5VFP0+QmV+yzWDw+VHkJtORwJzM5dUtHV/grdRbcb

roles/angelguide-deployment/tasks/main.yml

+- name: create angelguide deployment user
+  user:
+    name: "{{ angelguide_deployment_user }}"
+    home: "{{ angelguide_deployment_path }}"
+    system: yes
+    shell: /bin/sh
+
+- name: create .ssh directory for the angelguide user
+  file:
+    path: "{{ angelguide_deployment_path }}/.ssh"
+    state: directory
+
+- name: copy angelguide deployment ssh keys
+  template:
+    src: authorized_keys.j2
+    dest: "{{ angelguide_deployment_path }}/.ssh/authorized_keys"

roles/angelguide-deployment/templates/authorized_keys.j2

+{% for key in angelguide_deployment_keys %}
+command="/usr/local/bin/rrsync {{ angelguide_deployment_path }}",no-agent-forwarding,no-port-forwarding,no-pty,no-user-rc,no-X11-forwarding {{ key }}
+{% endfor %}

web-ci-deployment.yml

+# Add directories, users, SSH keys etc. needed for automatic web deployment
+# of e.g. the angel guide via Gitlab CI
+
+- name: allow angelguide deployment
+  hosts: gabriel.c3heaven.de
+  become: yes
+  roles:
+   - angelguide-deployment