ansible init

.ansible/inventory

@@ -0,0 +1,10 @@
+[all:vars]
+ansible_user='debian'
+ansible_become=yes
+ansible_become_method=sudo
+ansible_python_interpreter='/usr/bin/env python3'
+project='CyfroweAukcje'
+main_packages="vim, vim-common, curl, wget"
+
+[servers]
+# example1 ansible_host=ip ansible_port=65522

.ansible/playbook.yml

@@ -0,0 +1,39 @@
+---
+- name: System preconfiguration
+  hosts: all
+  tasks:
+    - name: Prepare motd
+      template:
+        src: templates/motd.jinja
+        dest: /etc/motd
+    - name: Trusted ca
+      template:
+        src: templates/trusted-user-ca-keys.pem
+        dest: /etc/ssh/trusted-user-ca-keys.pem
+    - name: Configure sshd
+      template:
+        src: templates/sshd_config
+        dest: /etc/ssh/sshd_config
+    - name: Restart sshd service
+      systemd: 
+        name: sshd
+        state: reloaded
+
+- name: Upgrade system
+  hosts: all
+  tasks:
+    - name: Update apt-get repo and cache
+      apt: update_cache=yes force_apt_get=yes cache_valid_time=3600
+    - name: Upgrade all apt packages
+      apt: upgrade=dist force_apt_get=yes
+    - name: Remove dependencies that are no longer required
+      apt:
+        autoremove: yes
+
+- name: Install my packages
+  hosts: all
+  tasks:
+    - name: Install main packages
+      apt:
+        name: "{{ main_packages }}"
+        state: present

.ansible/templates/motd.jinja

@@ -0,0 +1,14 @@
+               _____
+              /     \
+              vvvvvvv  /|__/|
+                 I   /O,O   |
+                 I /_____   |      /|/|
+                J|/^ ^ ^ \  |    /00  |    _//|
+                 |^ ^ ^ ^ |W|   |/^^\ |   /oo |
+                  \m___m__|_|    \m_m_|   \mm_|
+
+======================================:  cynarski.dev
+
+Development by ansible for {{project}}
+
+====================================================:

.ansible/templates/sshd_config

@@ -0,0 +1,9 @@
+Port 65522
+PasswordAuthentication no
+ChallengeResponseAuthentication yes
+UsePAM yes
+X11Forwarding yes
+PrintMotd no
+AcceptEnv LANG LC_*
+Subsystem	sftp	/usr/lib/openssh/sftp-server
+TrustedUserCAKeys /etc/ssh/trusted-user-ca-keys.pem

.ansible/templates/trusted-user-ca-keys.pem

@@ -0,0 +1 @@
+ssh-rsa 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

.drone.yml

@@ -1,33 +1,29 @@
----
 kind: pipeline
-type: docker
 name: default
-trigger:
-  branch:
-    - master
 
 steps:
-- name: Budowanie dokcumentacji 
+- name: check ansible syntax
-  image: paramah/hugo-deploy
+  image: paramah/drone-ansible
-  commands:
+  settings:
-  - npm install -g postcss-cli 
+    playbook: .ansible/playbook.yml
-  - npm install postcss autoprefixer
+    inventory: .ansible/inventory
-  - git submodule update --init --recursive
+    syntax_check: true
-  - hugo --destination /drone/src/build
+  when:
-  - minify -r -o /drone/src/build /drone/src/build
+    event:
+    - pull_request
+    - push
 
-- name: Deploy dokumentacji
+- name: apply ansible playbook
-  image: paramah/hugo-deploy
+  image: paramah/drone-ansible
-  commands:
-  - eval `ssh-agent -s`
-  - echo "$SSH_KEY" | ssh-add -
-  - mkdir -p ~/.ssh
-  - echo -e "Host *\n\tStrictHostKeyChecking no\n\n" > ~/.ssh/config
-  - rsync -rv -e "ssh -p 65522" /drone/src/build/ $SSH_URI:$DEST --checksum
   environment:
-    SSH_KEY:
+    ANSIBLE_STRATEGY_PLUGINS: /usr/lib/python3.8/site-packages/ansible_mitogen/plugins/strategy
-      from_secret: drone_ssh_key
+    ANSIBLE_STRATEGY: mitogen_linear
-    SSH_URI:
+  settings:
-      from_secret: ssh_uri
+    playbook: .ansible/playbook.yml
-    DEST:
+    inventory: .ansible/inventory
-      from_secret: destination
+    private_key:
+      from_secret: ansible_private_key
+    verbose: 1
+  when:
+    event:
+    - tag

.gitignore

@@ -1,6 +0,0 @@
-/public/
-/resources/_gen/
-hugo_stats.json
-public/
-resources/
-node_modules/

DOCSY_DEPLOY.md

@@ -1,34 +0,0 @@
-# Docsy hugo deploy
-
-Skrypt umożliwia szybki automatyczny deploy dokumentacji opartej o [docsy](https://www.docsy.dev/docs/).
-
-# Zawiera
-
-`.gitignore` dla hugo 
-`init.sh` skrypt inicjujący repozytorium dla docsy (subrepo dla tematu)
-`.drone.yml` skrypt do automatycznego deploymentu
-
-# Wymagania
-
-- [drone.io cli](https://docs.drone.io/cli/install/)
-- [hugo](https://gohugo.io/getting-started/installing/)
-
-# Użycie
-
-Musimy aktywować repozytorium na naszym drone.io
-
-```
-cat ${args[0]} |awk -F\= '{system("drone secret add --repository='${args[1]}' --name="$1 "  --data="$2)}'
-```
-
-Wymagane zmienne:
-
-```
-domain=
-site_path=
-ssh_host=
-ssh_username=
-ssh_password=
-ssh_port=
-```
-

init_docsy.sh

@@ -1,34 +0,0 @@
-#!/bin/bash
-
-#
-# Helper functions
-#
-declare -i term_width=120
-
-h1() {
-    declare border padding text
-    border='\e[1;34m'"$(printf '=%.0s' $(seq 1 "$term_width"))"'\e[0m'
-    padding="$(printf ' %.0s' $(seq 1 $(((term_width - $(wc -m <<<"$*")) / 2))))"
-    text="\\e[1m$*\\e[0m"
-    echo -e "$border"
-    echo -e "${padding}${text}${padding}"
-    echo -e "$border"
-}
-
-h2() {
-    printf '\e[1;33m==>\e[37;1m %s\e[0m\n' "$*"
-}
-
-h1 "Inicjalizacja struktury hugo"
-hugo new site --force ./
-h1 "Inicjalizacja repozytorium git"
-git init
-h2 "Inicjalizacja submodułu z docsy"
-git submodule add https://github.com/google/docsy.git themes/docsy
-echo 'theme = "docsy"' >> config.toml
-git submodule update --init --recursive
-h1 "Obsłga mermaid"
-mv tmp_layouts layouts
-h1 "Czyszczenie repozytorium"
-rm init_docsy.sh
-

tmp_layouts/shortcodes/mermaid.html

@@ -1,9 +0,0 @@
-<!-- MermaidJS support -->
-<script async src="https://unpkg.com/mermaid@8.7.0/dist/mermaid.min.js"></script>
-
-
-<div class="mermaid">
-  {{.Inner}}
-</div>
-
-