tweaks for upgrading phab in production

This commit is contained in:
Tim Flink 2016-12-15 18:43:38 +00:00
parent 6250c16625
commit 443df9b54b
4 changed files with 1 additions and 48 deletions

View file

@ -18,13 +18,6 @@ sshd_config: ssh/sshd_config.qa-prod
sshd_port: 222 sshd_port: 222
external_hostname: qa.fedoraproject.org external_hostname: qa.fedoraproject.org
# not needed with new setup
#sslcertfile: qa-stg.qa.fedoraproject.org.cert
#sslkeyfile: qa-stg.qa.fedoraproject.org.key
sslcertfile: ''
sslkeyfile: ''
sslintermediatecertfile: ''
################################################################################ ################################################################################
# Buildbot Settings # Buildbot Settings

View file

@ -17,13 +17,6 @@ sshd_config: ssh/sshd_config.qa-stg
sshd_port: 222 sshd_port: 222
external_hostname: qa.stg.fedoraproject.org external_hostname: qa.stg.fedoraproject.org
# not needed with new setup
#sslcertfile: qa-stg.qa.fedoraproject.org.cert
#sslkeyfile: qa-stg.qa.fedoraproject.org.key
sslcertfile: ''
sslkeyfile: ''
sslintermediatecertfile: ''
mariadb_host: localhost mariadb_host: localhost
mariadb_user: '{{ qa_stg_mariadb_user }}' mariadb_user: '{{ qa_stg_mariadb_user }}'
mariadb_password: '{{ qa_stg_mariadb_password }}' mariadb_password: '{{ qa_stg_mariadb_password }}'

View file

@ -151,39 +151,11 @@
- name: start and enable phabricator phd service - name: start and enable phabricator phd service
service: name=phd enabled=yes state=started service: name=phd enabled=yes state=started
- name: Install the SSL cert
copy:
src: "{{ private}}/files/httpd/{{ sslcertfile }}"
dest: /etc/pki/tls/certs/{{ sslcertfile }}
owner: root
group: root
mode: 0600
when: deployment_type == 'qadevel-prod'
- name: Install the SSL key
copy:
src: "{{ private}}/files/httpd/{{ sslkeyfile }}"
dest: /etc/pki/tls/private/{{ sslkeyfile }}
owner: root
group: root
mode: 0600
when: deployment_type == 'qadevel-prod'
- name: Install the SSL intermediate cert
copy:
src: "{{ private}}/files/httpd/{{ sslintermediatecertfile }}"
dest: /etc/pki/tls/certs/{{ sslintermediatecertfile }}
owner: root
group: root
mode: 0600
when: sslintermediatecertfile != '' and deployment_type == 'qadevel-prod'
- name: clone phabricator-extension-ipsilonoauth - name: clone phabricator-extension-ipsilonoauth
git: git:
repo: 'https://pagure.io/phabricator-extension-ipsilonoauth.git' repo: 'https://pagure.io/phabricator-extension-ipsilonoauth.git'
dest: /srv/phabricator-extension-ipsilonoauth dest: /srv/phabricator-extension-ipsilonoauth
version: bb099b7da76b9d9d87ef53d20ec0e0238da7a3bb version: c70333b0d2d4d348b429e82e39d634071accf939
when: deployment_type == 'qa-stg'
- name: copy phabricator httpd config - name: copy phabricator httpd config
template: src=phabricator.conf.j2 dest=/etc/httpd/conf.d/phabricator.conf owner=root group=root mode=0644 template: src=phabricator.conf.j2 dest=/etc/httpd/conf.d/phabricator.conf owner=root group=root mode=0644

View file

@ -32,13 +32,8 @@
"PhabricatorApplicationOAuthServer" : true, "PhabricatorApplicationOAuthServer" : true,
"PhabricatorApplicationPhortune" : true "PhabricatorApplicationPhortune" : true
}, },
{% if deployment_type == "qa-stg" %}
"load-libraries": { "load-libraries": {
"ipsilonoauth": "/srv/phabricator-extension-ipsilonoauth/src" "ipsilonoauth": "/srv/phabricator-extension-ipsilonoauth/src"
} }
{% else %}
"load-libraries" : [],
"auth.email-domains" : ["fedoraproject.org"]
{% endif %}
} }