start
This commit is contained in:
parent
7b63e50022
commit
d5a41badcf
2
.gitignore
vendored
Normal file
2
.gitignore
vendored
Normal file
@ -0,0 +1,2 @@
|
|||||||
|
gitea-data
|
||||||
|
jenkins-data
|
||||||
80
ansible/Jenkinsfile
vendored
Normal file
80
ansible/Jenkinsfile
vendored
Normal file
@ -0,0 +1,80 @@
|
|||||||
|
pipeline {
|
||||||
|
agent any
|
||||||
|
|
||||||
|
environment {
|
||||||
|
VAULT_PASSWORD = credentials('vault_password')
|
||||||
|
}
|
||||||
|
|
||||||
|
parameters {
|
||||||
|
choice(name: 'SITE_OPTION', choices: ['SiteA', 'SiteB', 'SiteA&B'], description: 'Select which site to deploy')
|
||||||
|
string(name: 'ADDITIONAL_CONTENT', defaultValue: 'Новое сообщение', description: 'Additional content to be included in the site')
|
||||||
|
}
|
||||||
|
|
||||||
|
stages {
|
||||||
|
stage('Decrypt SSH Key') {
|
||||||
|
steps {
|
||||||
|
script {
|
||||||
|
def tempDir = '/tmp/' + UUID.randomUUID().toString()
|
||||||
|
env.TEMP_DIR = tempDir
|
||||||
|
sh "mkdir -p ${tempDir}"
|
||||||
|
|
||||||
|
def decryptedKeyFile = "${tempDir}/id_ed25519"
|
||||||
|
def vaultPassFile = "${tempDir}/vault_pass"
|
||||||
|
|
||||||
|
writeFile file: vaultPassFile, text: VAULT_PASSWORD
|
||||||
|
|
||||||
|
sh """
|
||||||
|
ansible-vault decrypt ./ansible/id_ed25519_vault --output=${decryptedKeyFile} --vault-password-file=${vaultPassFile}
|
||||||
|
"""
|
||||||
|
|
||||||
|
def hostsFile = "${tempDir}/hosts.ini"
|
||||||
|
def hostsFileContent = """
|
||||||
|
[SiteA]
|
||||||
|
192.168.0.61 ansible_user=ansible ansible_ssh_private_key_file=${decryptedKeyFile}
|
||||||
|
|
||||||
|
[SiteB]
|
||||||
|
192.168.0.62 ansible_user=ansible ansible_ssh_private_key_file=${decryptedKeyFile}
|
||||||
|
|
||||||
|
[proxy]
|
||||||
|
192.168.0.63 ansible_user=ansible ansible_ssh_private_key_file=${decryptedKeyFile}
|
||||||
|
"""
|
||||||
|
writeFile file: hostsFile, text: hostsFileContent
|
||||||
|
|
||||||
|
env.HOSTS_FILE = hostsFile
|
||||||
|
}
|
||||||
|
}
|
||||||
|
}
|
||||||
|
|
||||||
|
stage('Deploy Site') {
|
||||||
|
steps {
|
||||||
|
script {
|
||||||
|
def sanitized_content = params.ADDITIONAL_CONTENT.replaceAll("'", "\\'").replaceAll('"', '\\"')
|
||||||
|
|
||||||
|
if (params.SITE_OPTION == 'SiteA') {
|
||||||
|
sh "export PATH=/usr/local/bin:\$PATH && ansible-playbook /coursework/ansible/playbook.yml -i ${env.HOSTS_FILE} -l SiteA -e \"additional_content='${sanitized_content}'\""
|
||||||
|
} else if (params.SITE_OPTION == 'SiteB') {
|
||||||
|
sh "export PATH=/usr/local/bin:\$PATH && ansible-playbook /coursework/ansible/playbook.yml -i ${env.HOSTS_FILE} -l SiteB -e \"additional_content='${sanitized_content}'\""
|
||||||
|
} else if (params.SITE_OPTION == 'SiteA&B') {
|
||||||
|
sh "export PATH=/usr/local/bin:\$PATH && ansible-playbook /coursework/ansible/playbook.yml -i ${env.HOSTS_FILE} -l SiteA,SiteB,proxy -e \"additional_content='${sanitized_content}'\""
|
||||||
|
}
|
||||||
|
}
|
||||||
|
}
|
||||||
|
}
|
||||||
|
}
|
||||||
|
|
||||||
|
post {
|
||||||
|
always {
|
||||||
|
script {
|
||||||
|
if (env.TEMP_DIR) {
|
||||||
|
sh "rm -rf ${env.TEMP_DIR}"
|
||||||
|
}
|
||||||
|
}
|
||||||
|
}
|
||||||
|
success {
|
||||||
|
echo 'Deployment completed successfully.'
|
||||||
|
}
|
||||||
|
failure {
|
||||||
|
echo 'Deployment failed. Please check the logs for more details.'
|
||||||
|
}
|
||||||
|
}
|
||||||
|
}
|
||||||
6
ansible/hosts.ini
Normal file
6
ansible/hosts.ini
Normal file
@ -0,0 +1,6 @@
|
|||||||
|
[SiteA]
|
||||||
|
192.168.0.61 ansible_user=ansible
|
||||||
|
[SiteB]
|
||||||
|
192.168.0.62 ansible_user=ansible
|
||||||
|
[proxy]
|
||||||
|
192.168.0.63 ansible_user=ansible
|
||||||
26
ansible/id_ed25519_vault
Normal file
26
ansible/id_ed25519_vault
Normal file
@ -0,0 +1,26 @@
|
|||||||
|
$ANSIBLE_VAULT;1.1;AES256
|
||||||
|
63306262646434323632386463373239336566633737636235653430333132386537366564666234
|
||||||
|
6461393163343265306366313736313961373630313234340a323534616566666137616431386461
|
||||||
|
65373333643664633833613431666531353935646562396661623163343464663262396264643537
|
||||||
|
6261363038363062640a616431336162386465316639376662333066396535623735383032316538
|
||||||
|
36613839386139363661636536306361373231623432663331623766346262366230353432373538
|
||||||
|
34353032303461323533396438306561386332396266316565393930653038623361333163323736
|
||||||
|
63663734333034336337373632333565333633306361633335663365336161636439386563393736
|
||||||
|
33613262623862626161653466626339623861353566323864363231343365333666326163396538
|
||||||
|
30353265613330626261363038633762373531623864333937366361616465313961363536636430
|
||||||
|
37333739333661303865376137343931363563656362316339383033326539343135663936393931
|
||||||
|
36653363656535656334613264653932666231663930353931306662333833366534343365386136
|
||||||
|
61336538356164653433613930343137373534653732613830366439343061313166656533323230
|
||||||
|
65353938383563646162373232613632313332643765313135653730383864643539333732623739
|
||||||
|
32393239373735616463633830333136616438316361613336613336613766356538313534303939
|
||||||
|
64646262323164643336653761663338613036376365613565373561626366643765396564383665
|
||||||
|
38303135356639373762303139633862313833313063373737633336363939336438376239613536
|
||||||
|
65636539653335396464653363613339383862653862336630353364636162663237383163666134
|
||||||
|
30643865383533623461303630356631396135663265376264663637326136663161656638616332
|
||||||
|
32626636613138313232396636343032343666343039353533626131663235393235343966303662
|
||||||
|
30336364363361356339303466633165316330376336306130336536656134336130376137613663
|
||||||
|
34333136306638306332356363616165343536666239366532333630306535626532656438613030
|
||||||
|
37626535316532623134633238313733353566373630333834616132353061656530373763303531
|
||||||
|
33366536363333303966663663353865613532353164623762636531366535393465623239643765
|
||||||
|
39626662633164623734626433313132633532336161363036633434393432393934396663633531
|
||||||
|
6333
|
||||||
225
ansible/playbook.yml
Normal file
225
ansible/playbook.yml
Normal file
@ -0,0 +1,225 @@
|
|||||||
|
- hosts: SiteA
|
||||||
|
become: true
|
||||||
|
|
||||||
|
tasks:
|
||||||
|
- name: Refresh repositories
|
||||||
|
command: 'zypper refresh'
|
||||||
|
ignore_errors: yes
|
||||||
|
|
||||||
|
- name: Install Nginx
|
||||||
|
zypper:
|
||||||
|
name: nginx
|
||||||
|
state: present
|
||||||
|
force: yes
|
||||||
|
update_cache: yes
|
||||||
|
|
||||||
|
- name: Create site directories
|
||||||
|
file:
|
||||||
|
path: /var/www/SiteA
|
||||||
|
state: directory
|
||||||
|
mode: '0755'
|
||||||
|
|
||||||
|
- name: Deploy site content
|
||||||
|
copy:
|
||||||
|
content: |
|
||||||
|
<html>
|
||||||
|
<head>
|
||||||
|
<meta charset="UTF-8">
|
||||||
|
<title>SiteA</title>
|
||||||
|
</head>
|
||||||
|
<body>
|
||||||
|
<h1>SiteA</h1>
|
||||||
|
<p>{{ additional_content | string }}</p>
|
||||||
|
</body>
|
||||||
|
</html>
|
||||||
|
dest: /var/www/SiteA/index.html
|
||||||
|
|
||||||
|
- name: Configure Nginx for SiteA
|
||||||
|
copy:
|
||||||
|
content: |
|
||||||
|
server {
|
||||||
|
listen 80;
|
||||||
|
server_name SiteA;
|
||||||
|
|
||||||
|
location / {
|
||||||
|
root /var/www/SiteA;
|
||||||
|
index index.html;
|
||||||
|
}
|
||||||
|
}
|
||||||
|
dest: /etc/nginx/conf.d/SiteA.conf
|
||||||
|
|
||||||
|
- name: Restart Nginx
|
||||||
|
service:
|
||||||
|
name: nginx
|
||||||
|
state: restarted
|
||||||
|
|
||||||
|
- name: Start and enable firewalld
|
||||||
|
service:
|
||||||
|
name: firewalld
|
||||||
|
state: started
|
||||||
|
enabled: true
|
||||||
|
|
||||||
|
- name: Open port 80 for HTTP
|
||||||
|
ansible.builtin.firewalld:
|
||||||
|
port: 80/tcp
|
||||||
|
permanent: true
|
||||||
|
state: enabled
|
||||||
|
immediate: yes
|
||||||
|
|
||||||
|
- name: Open port 443 for HTTPS
|
||||||
|
ansible.builtin.firewalld:
|
||||||
|
port: 443/tcp
|
||||||
|
permanent: true
|
||||||
|
state: enabled
|
||||||
|
immediate: yes
|
||||||
|
|
||||||
|
- name: Reload firewalld to apply changes
|
||||||
|
ansible.builtin.service:
|
||||||
|
name: firewalld
|
||||||
|
state: reloaded
|
||||||
|
|
||||||
|
- hosts: SiteB
|
||||||
|
become: true
|
||||||
|
|
||||||
|
tasks:
|
||||||
|
- name: Refresh repositories
|
||||||
|
command: 'zypper refresh'
|
||||||
|
ignore_errors: yes
|
||||||
|
|
||||||
|
- name: Install Nginx
|
||||||
|
zypper:
|
||||||
|
name: nginx
|
||||||
|
state: present
|
||||||
|
force: yes
|
||||||
|
update_cache: yes
|
||||||
|
|
||||||
|
- name: Create site directories
|
||||||
|
file:
|
||||||
|
path: /var/www/SiteB
|
||||||
|
state: directory
|
||||||
|
mode: '0755'
|
||||||
|
|
||||||
|
- name: Deploy site content
|
||||||
|
copy:
|
||||||
|
content: |
|
||||||
|
<html>
|
||||||
|
<head>
|
||||||
|
<meta charset="UTF-8">
|
||||||
|
<title>SiteB</title>
|
||||||
|
</head>
|
||||||
|
<body>
|
||||||
|
<h1>SiteB</h1>
|
||||||
|
<p>{{ additional_content | string }}</p>
|
||||||
|
</body>
|
||||||
|
</html>
|
||||||
|
dest: /var/www/SiteB/index.html
|
||||||
|
|
||||||
|
- name: Configure Nginx for SiteB
|
||||||
|
copy:
|
||||||
|
content: |
|
||||||
|
server {
|
||||||
|
listen 80;
|
||||||
|
server_name SiteB;
|
||||||
|
|
||||||
|
location / {
|
||||||
|
root /var/www/SiteB;
|
||||||
|
index index.html;
|
||||||
|
}
|
||||||
|
}
|
||||||
|
dest: /etc/nginx/conf.d/SiteB.conf
|
||||||
|
|
||||||
|
- name: Restart Nginx
|
||||||
|
service:
|
||||||
|
name: nginx
|
||||||
|
state: restarted
|
||||||
|
|
||||||
|
- name: Start and enable firewalld
|
||||||
|
service:
|
||||||
|
name: firewalld
|
||||||
|
state: started
|
||||||
|
enabled: true
|
||||||
|
|
||||||
|
- name: Open port 80 for HTTP
|
||||||
|
ansible.builtin.firewalld:
|
||||||
|
port: 80/tcp
|
||||||
|
permanent: true
|
||||||
|
state: enabled
|
||||||
|
immediate: yes
|
||||||
|
|
||||||
|
- name: Open port 443 for HTTPS
|
||||||
|
ansible.builtin.firewalld:
|
||||||
|
port: 443/tcp
|
||||||
|
permanent: true
|
||||||
|
state: enabled
|
||||||
|
immediate: yes
|
||||||
|
|
||||||
|
- name: Reload firewalld to apply changes
|
||||||
|
ansible.builtin.service:
|
||||||
|
name: firewalld
|
||||||
|
state: reloaded
|
||||||
|
|
||||||
|
- hosts: proxy
|
||||||
|
become: true
|
||||||
|
|
||||||
|
tasks:
|
||||||
|
- name: Refresh repositories
|
||||||
|
command: 'zypper refresh'
|
||||||
|
ignore_errors: yes
|
||||||
|
|
||||||
|
- name: Install Nginx
|
||||||
|
zypper:
|
||||||
|
name: nginx
|
||||||
|
state: present
|
||||||
|
force: yes
|
||||||
|
update_cache: yes
|
||||||
|
|
||||||
|
- name: Configure Nginx as proxy
|
||||||
|
copy:
|
||||||
|
content: |
|
||||||
|
upstream backend_servers {
|
||||||
|
server 192.168.0.61:80;
|
||||||
|
server 192.168.0.62:80;
|
||||||
|
}
|
||||||
|
|
||||||
|
server {
|
||||||
|
listen 80;
|
||||||
|
|
||||||
|
location / {
|
||||||
|
proxy_pass http://backend_servers;
|
||||||
|
proxy_set_header Host $host;
|
||||||
|
proxy_set_header X-Real-IP $remote_addr;
|
||||||
|
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
|
||||||
|
proxy_set_header X-Forwarded-Proto $scheme;
|
||||||
|
}
|
||||||
|
}
|
||||||
|
dest: /etc/nginx/conf.d/proxy.conf
|
||||||
|
|
||||||
|
- name: Restart Nginx
|
||||||
|
service:
|
||||||
|
name: nginx
|
||||||
|
state: restarted
|
||||||
|
|
||||||
|
- name: Start and enable firewalld
|
||||||
|
service:
|
||||||
|
name: firewalld
|
||||||
|
state: started
|
||||||
|
enabled: true
|
||||||
|
|
||||||
|
- name: Open port 80 for HTTP
|
||||||
|
ansible.builtin.firewalld:
|
||||||
|
port: 80/tcp
|
||||||
|
permanent: true
|
||||||
|
state: enabled
|
||||||
|
immediate: yes
|
||||||
|
|
||||||
|
- name: Open port 443 for HTTPS
|
||||||
|
ansible.builtin.firewalld:
|
||||||
|
port: 443/tcp
|
||||||
|
permanent: true
|
||||||
|
state: enabled
|
||||||
|
immediate: yes
|
||||||
|
|
||||||
|
- name: Reload firewalld to apply changes
|
||||||
|
ansible.builtin.service:
|
||||||
|
name: firewalld
|
||||||
|
state: reloaded
|
||||||
30
docker-compose.yml
Normal file
30
docker-compose.yml
Normal file
@ -0,0 +1,30 @@
|
|||||||
|
services:
|
||||||
|
jenkins:
|
||||||
|
image: jenkins/jenkins:latest
|
||||||
|
container_name: jenkins
|
||||||
|
privileged: true
|
||||||
|
user: root
|
||||||
|
volumes:
|
||||||
|
- ./jenkins-data:/var/jenkins_home
|
||||||
|
- ./ansible:/ansible
|
||||||
|
ports:
|
||||||
|
- "8080:8080"
|
||||||
|
- "50000:50000"
|
||||||
|
restart: always
|
||||||
|
|
||||||
|
gitea:
|
||||||
|
image: gitea/gitea:latest
|
||||||
|
container_name: gitea
|
||||||
|
environment:
|
||||||
|
- USER_UID=1000
|
||||||
|
- USER_GID=1000
|
||||||
|
volumes:
|
||||||
|
- ./gitea-data:/data
|
||||||
|
ports:
|
||||||
|
- "3000:3000"
|
||||||
|
- "222:22"
|
||||||
|
restart: always
|
||||||
|
|
||||||
|
volumes:
|
||||||
|
jenkins-data:
|
||||||
|
gitea-data:
|
||||||
Loading…
Reference in New Issue
Block a user