Add role for static website deployment

host_vars/gabriel.c3heaven.de

@@ -11,12 +11,13 @@ acmetool_cert_domains:
  - www.c3heaven.de
 
 angelguide_deployment_path: "/var/www/angelguide"
+website_deployment_path: "/var/www/static"
 
 nginx_https_sites:
  - name: "c3heaven.de"
    locations:
     - location: "/"
-      config: "root /var/www/html;"
+      config: "root {{ website_deployment_path }};"
     - location: "~ /wiki(.*)$"
       config: "return 301 https://wiki.c3heaven.de$1?$args;"
     - location: "~ /kanboard(.*)$"

roles/website-deployment/defaults/main.yml

+website_deployment_user: website
+website_deployment_path: /var/www/static
+website_deployment_keys:
+ - ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIMW+8/hse/foM2TWgM5MA6LuT4A/eb0/biFUQwLt85nN

roles/website-deployment/tasks/main.yml

+- name: create website deployment user
+  user:
+    name: "{{ website_deployment_user }}"
+    home: "{{ website_deployment_path }}"
+    system: yes
+    shell: /bin/sh
+
+- name: create .ssh directory for the website user
+  file:
+    path: "{{ website_deployment_path }}/.ssh"
+    state: directory
+
+- name: copy website deployment ssh keys
+  template:
+    src: authorized_keys.j2
+    dest: "{{ website_deployment_path }}/.ssh/authorized_keys"

roles/website-deployment/templates/authorized_keys.j2

+{% for key in website_deployment_keys %}
+command="/usr/local/bin/rrsync {{ website_deployment_path }}",no-agent-forwarding,no-port-forwarding,no-pty,no-user-rc,no-X11-forwarding {{ key }}
+{% endfor %}

web-ci-deployment.yml

 # Add directories, users, SSH keys etc. needed for automatic web deployment
 # of e.g. the angel guide via Gitlab CI
 
-- name: allow angelguide deployment
+- name: allow website and angelguide deployment
   hosts: gabriel.c3heaven.de
   become: yes
   roles:
    - angelguide-deployment
+   - website-deployment