start
This commit is contained in:
parent
7b63e50022
commit
d5a41badcf
2
.gitignore
vendored
Normal file
2
.gitignore
vendored
Normal file
@ -0,0 +1,2 @@
|
||||
gitea-data
|
||||
jenkins-data
|
||||
80
ansible/Jenkinsfile
vendored
Normal file
80
ansible/Jenkinsfile
vendored
Normal file
@ -0,0 +1,80 @@
|
||||
pipeline {
|
||||
agent any
|
||||
|
||||
environment {
|
||||
VAULT_PASSWORD = credentials('vault_password')
|
||||
}
|
||||
|
||||
parameters {
|
||||
choice(name: 'SITE_OPTION', choices: ['SiteA', 'SiteB', 'SiteA&B'], description: 'Select which site to deploy')
|
||||
string(name: 'ADDITIONAL_CONTENT', defaultValue: 'Новое сообщение', description: 'Additional content to be included in the site')
|
||||
}
|
||||
|
||||
stages {
|
||||
stage('Decrypt SSH Key') {
|
||||
steps {
|
||||
script {
|
||||
def tempDir = '/tmp/' + UUID.randomUUID().toString()
|
||||
env.TEMP_DIR = tempDir
|
||||
sh "mkdir -p ${tempDir}"
|
||||
|
||||
def decryptedKeyFile = "${tempDir}/id_ed25519"
|
||||
def vaultPassFile = "${tempDir}/vault_pass"
|
||||
|
||||
writeFile file: vaultPassFile, text: VAULT_PASSWORD
|
||||
|
||||
sh """
|
||||
ansible-vault decrypt ./ansible/id_ed25519_vault --output=${decryptedKeyFile} --vault-password-file=${vaultPassFile}
|
||||
"""
|
||||
|
||||
def hostsFile = "${tempDir}/hosts.ini"
|
||||
def hostsFileContent = """
|
||||
[SiteA]
|
||||
192.168.0.61 ansible_user=ansible ansible_ssh_private_key_file=${decryptedKeyFile}
|
||||
|
||||
[SiteB]
|
||||
192.168.0.62 ansible_user=ansible ansible_ssh_private_key_file=${decryptedKeyFile}
|
||||
|
||||
[proxy]
|
||||
192.168.0.63 ansible_user=ansible ansible_ssh_private_key_file=${decryptedKeyFile}
|
||||
"""
|
||||
writeFile file: hostsFile, text: hostsFileContent
|
||||
|
||||
env.HOSTS_FILE = hostsFile
|
||||
}
|
||||
}
|
||||
}
|
||||
|
||||
stage('Deploy Site') {
|
||||
steps {
|
||||
script {
|
||||
def sanitized_content = params.ADDITIONAL_CONTENT.replaceAll("'", "\\'").replaceAll('"', '\\"')
|
||||
|
||||
if (params.SITE_OPTION == 'SiteA') {
|
||||
sh "export PATH=/usr/local/bin:\$PATH && ansible-playbook /coursework/ansible/playbook.yml -i ${env.HOSTS_FILE} -l SiteA -e \"additional_content='${sanitized_content}'\""
|
||||
} else if (params.SITE_OPTION == 'SiteB') {
|
||||
sh "export PATH=/usr/local/bin:\$PATH && ansible-playbook /coursework/ansible/playbook.yml -i ${env.HOSTS_FILE} -l SiteB -e \"additional_content='${sanitized_content}'\""
|
||||
} else if (params.SITE_OPTION == 'SiteA&B') {
|
||||
sh "export PATH=/usr/local/bin:\$PATH && ansible-playbook /coursework/ansible/playbook.yml -i ${env.HOSTS_FILE} -l SiteA,SiteB,proxy -e \"additional_content='${sanitized_content}'\""
|
||||
}
|
||||
}
|
||||
}
|
||||
}
|
||||
}
|
||||
|
||||
post {
|
||||
always {
|
||||
script {
|
||||
if (env.TEMP_DIR) {
|
||||
sh "rm -rf ${env.TEMP_DIR}"
|
||||
}
|
||||
}
|
||||
}
|
||||
success {
|
||||
echo 'Deployment completed successfully.'
|
||||
}
|
||||
failure {
|
||||
echo 'Deployment failed. Please check the logs for more details.'
|
||||
}
|
||||
}
|
||||
}
|
||||
6
ansible/hosts.ini
Normal file
6
ansible/hosts.ini
Normal file
@ -0,0 +1,6 @@
|
||||
[SiteA]
|
||||
192.168.0.61 ansible_user=ansible
|
||||
[SiteB]
|
||||
192.168.0.62 ansible_user=ansible
|
||||
[proxy]
|
||||
192.168.0.63 ansible_user=ansible
|
||||
26
ansible/id_ed25519_vault
Normal file
26
ansible/id_ed25519_vault
Normal file
@ -0,0 +1,26 @@
|
||||
$ANSIBLE_VAULT;1.1;AES256
|
||||
63306262646434323632386463373239336566633737636235653430333132386537366564666234
|
||||
6461393163343265306366313736313961373630313234340a323534616566666137616431386461
|
||||
65373333643664633833613431666531353935646562396661623163343464663262396264643537
|
||||
6261363038363062640a616431336162386465316639376662333066396535623735383032316538
|
||||
36613839386139363661636536306361373231623432663331623766346262366230353432373538
|
||||
34353032303461323533396438306561386332396266316565393930653038623361333163323736
|
||||
63663734333034336337373632333565333633306361633335663365336161636439386563393736
|
||||
33613262623862626161653466626339623861353566323864363231343365333666326163396538
|
||||
30353265613330626261363038633762373531623864333937366361616465313961363536636430
|
||||
37333739333661303865376137343931363563656362316339383033326539343135663936393931
|
||||
36653363656535656334613264653932666231663930353931306662333833366534343365386136
|
||||
61336538356164653433613930343137373534653732613830366439343061313166656533323230
|
||||
65353938383563646162373232613632313332643765313135653730383864643539333732623739
|
||||
32393239373735616463633830333136616438316361613336613336613766356538313534303939
|
||||
64646262323164643336653761663338613036376365613565373561626366643765396564383665
|
||||
38303135356639373762303139633862313833313063373737633336363939336438376239613536
|
||||
65636539653335396464653363613339383862653862336630353364636162663237383163666134
|
||||
30643865383533623461303630356631396135663265376264663637326136663161656638616332
|
||||
32626636613138313232396636343032343666343039353533626131663235393235343966303662
|
||||
30336364363361356339303466633165316330376336306130336536656134336130376137613663
|
||||
34333136306638306332356363616165343536666239366532333630306535626532656438613030
|
||||
37626535316532623134633238313733353566373630333834616132353061656530373763303531
|
||||
33366536363333303966663663353865613532353164623762636531366535393465623239643765
|
||||
39626662633164623734626433313132633532336161363036633434393432393934396663633531
|
||||
6333
|
||||
225
ansible/playbook.yml
Normal file
225
ansible/playbook.yml
Normal file
@ -0,0 +1,225 @@
|
||||
- hosts: SiteA
|
||||
become: true
|
||||
|
||||
tasks:
|
||||
- name: Refresh repositories
|
||||
command: 'zypper refresh'
|
||||
ignore_errors: yes
|
||||
|
||||
- name: Install Nginx
|
||||
zypper:
|
||||
name: nginx
|
||||
state: present
|
||||
force: yes
|
||||
update_cache: yes
|
||||
|
||||
- name: Create site directories
|
||||
file:
|
||||
path: /var/www/SiteA
|
||||
state: directory
|
||||
mode: '0755'
|
||||
|
||||
- name: Deploy site content
|
||||
copy:
|
||||
content: |
|
||||
<html>
|
||||
<head>
|
||||
<meta charset="UTF-8">
|
||||
<title>SiteA</title>
|
||||
</head>
|
||||
<body>
|
||||
<h1>SiteA</h1>
|
||||
<p>{{ additional_content | string }}</p>
|
||||
</body>
|
||||
</html>
|
||||
dest: /var/www/SiteA/index.html
|
||||
|
||||
- name: Configure Nginx for SiteA
|
||||
copy:
|
||||
content: |
|
||||
server {
|
||||
listen 80;
|
||||
server_name SiteA;
|
||||
|
||||
location / {
|
||||
root /var/www/SiteA;
|
||||
index index.html;
|
||||
}
|
||||
}
|
||||
dest: /etc/nginx/conf.d/SiteA.conf
|
||||
|
||||
- name: Restart Nginx
|
||||
service:
|
||||
name: nginx
|
||||
state: restarted
|
||||
|
||||
- name: Start and enable firewalld
|
||||
service:
|
||||
name: firewalld
|
||||
state: started
|
||||
enabled: true
|
||||
|
||||
- name: Open port 80 for HTTP
|
||||
ansible.builtin.firewalld:
|
||||
port: 80/tcp
|
||||
permanent: true
|
||||
state: enabled
|
||||
immediate: yes
|
||||
|
||||
- name: Open port 443 for HTTPS
|
||||
ansible.builtin.firewalld:
|
||||
port: 443/tcp
|
||||
permanent: true
|
||||
state: enabled
|
||||
immediate: yes
|
||||
|
||||
- name: Reload firewalld to apply changes
|
||||
ansible.builtin.service:
|
||||
name: firewalld
|
||||
state: reloaded
|
||||
|
||||
- hosts: SiteB
|
||||
become: true
|
||||
|
||||
tasks:
|
||||
- name: Refresh repositories
|
||||
command: 'zypper refresh'
|
||||
ignore_errors: yes
|
||||
|
||||
- name: Install Nginx
|
||||
zypper:
|
||||
name: nginx
|
||||
state: present
|
||||
force: yes
|
||||
update_cache: yes
|
||||
|
||||
- name: Create site directories
|
||||
file:
|
||||
path: /var/www/SiteB
|
||||
state: directory
|
||||
mode: '0755'
|
||||
|
||||
- name: Deploy site content
|
||||
copy:
|
||||
content: |
|
||||
<html>
|
||||
<head>
|
||||
<meta charset="UTF-8">
|
||||
<title>SiteB</title>
|
||||
</head>
|
||||
<body>
|
||||
<h1>SiteB</h1>
|
||||
<p>{{ additional_content | string }}</p>
|
||||
</body>
|
||||
</html>
|
||||
dest: /var/www/SiteB/index.html
|
||||
|
||||
- name: Configure Nginx for SiteB
|
||||
copy:
|
||||
content: |
|
||||
server {
|
||||
listen 80;
|
||||
server_name SiteB;
|
||||
|
||||
location / {
|
||||
root /var/www/SiteB;
|
||||
index index.html;
|
||||
}
|
||||
}
|
||||
dest: /etc/nginx/conf.d/SiteB.conf
|
||||
|
||||
- name: Restart Nginx
|
||||
service:
|
||||
name: nginx
|
||||
state: restarted
|
||||
|
||||
- name: Start and enable firewalld
|
||||
service:
|
||||
name: firewalld
|
||||
state: started
|
||||
enabled: true
|
||||
|
||||
- name: Open port 80 for HTTP
|
||||
ansible.builtin.firewalld:
|
||||
port: 80/tcp
|
||||
permanent: true
|
||||
state: enabled
|
||||
immediate: yes
|
||||
|
||||
- name: Open port 443 for HTTPS
|
||||
ansible.builtin.firewalld:
|
||||
port: 443/tcp
|
||||
permanent: true
|
||||
state: enabled
|
||||
immediate: yes
|
||||
|
||||
- name: Reload firewalld to apply changes
|
||||
ansible.builtin.service:
|
||||
name: firewalld
|
||||
state: reloaded
|
||||
|
||||
- hosts: proxy
|
||||
become: true
|
||||
|
||||
tasks:
|
||||
- name: Refresh repositories
|
||||
command: 'zypper refresh'
|
||||
ignore_errors: yes
|
||||
|
||||
- name: Install Nginx
|
||||
zypper:
|
||||
name: nginx
|
||||
state: present
|
||||
force: yes
|
||||
update_cache: yes
|
||||
|
||||
- name: Configure Nginx as proxy
|
||||
copy:
|
||||
content: |
|
||||
upstream backend_servers {
|
||||
server 192.168.0.61:80;
|
||||
server 192.168.0.62:80;
|
||||
}
|
||||
|
||||
server {
|
||||
listen 80;
|
||||
|
||||
location / {
|
||||
proxy_pass http://backend_servers;
|
||||
proxy_set_header Host $host;
|
||||
proxy_set_header X-Real-IP $remote_addr;
|
||||
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
|
||||
proxy_set_header X-Forwarded-Proto $scheme;
|
||||
}
|
||||
}
|
||||
dest: /etc/nginx/conf.d/proxy.conf
|
||||
|
||||
- name: Restart Nginx
|
||||
service:
|
||||
name: nginx
|
||||
state: restarted
|
||||
|
||||
- name: Start and enable firewalld
|
||||
service:
|
||||
name: firewalld
|
||||
state: started
|
||||
enabled: true
|
||||
|
||||
- name: Open port 80 for HTTP
|
||||
ansible.builtin.firewalld:
|
||||
port: 80/tcp
|
||||
permanent: true
|
||||
state: enabled
|
||||
immediate: yes
|
||||
|
||||
- name: Open port 443 for HTTPS
|
||||
ansible.builtin.firewalld:
|
||||
port: 443/tcp
|
||||
permanent: true
|
||||
state: enabled
|
||||
immediate: yes
|
||||
|
||||
- name: Reload firewalld to apply changes
|
||||
ansible.builtin.service:
|
||||
name: firewalld
|
||||
state: reloaded
|
||||
30
docker-compose.yml
Normal file
30
docker-compose.yml
Normal file
@ -0,0 +1,30 @@
|
||||
services:
|
||||
jenkins:
|
||||
image: jenkins/jenkins:latest
|
||||
container_name: jenkins
|
||||
privileged: true
|
||||
user: root
|
||||
volumes:
|
||||
- ./jenkins-data:/var/jenkins_home
|
||||
- ./ansible:/ansible
|
||||
ports:
|
||||
- "8080:8080"
|
||||
- "50000:50000"
|
||||
restart: always
|
||||
|
||||
gitea:
|
||||
image: gitea/gitea:latest
|
||||
container_name: gitea
|
||||
environment:
|
||||
- USER_UID=1000
|
||||
- USER_GID=1000
|
||||
volumes:
|
||||
- ./gitea-data:/data
|
||||
ports:
|
||||
- "3000:3000"
|
||||
- "222:22"
|
||||
restart: always
|
||||
|
||||
volumes:
|
||||
jenkins-data:
|
||||
gitea-data:
|
||||
Loading…
Reference in New Issue
Block a user