Infrastructure/ansible
3
0
Fork 0
Code Issues Pull requests 6 Projects Releases Packages Wiki Activity Actions

SELinux won't let systemd start binaries in homedirs

Browse source
This commit is contained in:
Aurélien Bompard 2018-10-24 17:27:44 +00:00
parent f8c422ceb2
commit 712b78a67c
3 changed files with 38 additions and 38 deletions
Download patch file Download diff file Expand all files Collapse all files

4
roles/taiga/files/taiga-back.service
View file

@ -4,8 +4,8 @@ After=network.target
Documentation=https://github.com/taigaio/taiga-back Documentation=https://github.com/taigaio/taiga-back
[Service] [Service]
ExecStart=/home/taiga/venv/bin/gunicorn -w 3 -t 60 --pythonpath=. -b 127.0.0.1:8001 taiga.wsgi ExecStart=/srv/taiga/venv/bin/python /usr/bin/gunicorn-3 -w 3 -t 60 --pythonpath=. -b 127.0.0.1:8001 taiga.wsgi
WorkingDirectory=/home/taiga/taiga-back/ WorkingDirectory=/srv/taiga/taiga-back/
Type=simple Type=simple
User=taiga User=taiga
Group=taiga Group=taiga

66
roles/taiga/tasks/main.yml
View file

@ -110,69 +110,69 @@
pip: pip:
name: pip name: pip
state: latest state: latest
chdir: /home/taiga chdir: /srv/taiga
virtualenv: /home/taiga/venv virtualenv: /srv/taiga/venv
virtualenv_command: pyvenv virtualenv_command: pyvenv
virtualenv_site_packages: yes virtualenv_site_packages: yes
- name: install Gunicorn - name: install Gunicorn
pip: pip:
name: gunicorn name: gunicorn
virtualenv: /home/taiga/venv virtualenv: /srv/taiga/venv
# Install our plugin for the backend first # Install our plugin for the backend first
- name: install the OIDC auth plugin - name: install the OIDC auth plugin
git: git:
dest: /home/taiga/taiga-contrib-oidc-auth dest: /srv/taiga/taiga-contrib-oidc-auth
repo: https://github.com/fedora-infra/taiga-contrib-oidc-auth.git repo: https://github.com/fedora-infra/taiga-contrib-oidc-auth.git
tags: taiga tags: taiga
- pip: - pip:
name: . name: .
editable: yes editable: yes
chdir: /home/taiga/taiga-contrib-oidc-auth/back chdir: /srv/taiga/taiga-contrib-oidc-auth/back
virtualenv: /home/taiga/venv virtualenv: /srv/taiga/venv
tags: taiga tags: taiga
# setup taiga-back from git # setup taiga-back from git
- git: - git:
repo: https://github.com/taigaio/taiga-back.git repo: https://github.com/taigaio/taiga-back.git
dest: /home/taiga/taiga-back dest: /srv/taiga/taiga-back
version: "{{taiga_back_version}}" version: "{{taiga_back_version}}"
# We modify the requirements.txt, we need to force here. # We modify the requirements.txt, we need to force here.
force: yes force: yes
- name: remove some versionned dependencies - name: remove some versionned dependencies
replace: replace:
path: /home/taiga/taiga-back/requirements.txt path: /srv/taiga/taiga-back/requirements.txt
regexp: '^(CairoSVG|cryptography)==.*$' regexp: '^(CairoSVG|cryptography)==.*$'
replace: '\1' replace: '\1'
- name: install taiga-back dependencies - name: install taiga-back dependencies
pip: pip:
requirements: /home/taiga/taiga-back/requirements.txt requirements: /srv/taiga/taiga-back/requirements.txt
virtualenv: /home/taiga/venv virtualenv: /srv/taiga/venv
tags: taiga tags: taiga
- name: copy in our taiga backend config - name: copy in our taiga backend config
template: src=local.py dest=/home/taiga/taiga-back/settings/local.py template: src=local.py dest=/srv/taiga/taiga-back/settings/local.py
mode=0640 owner=taiga group=taiga mode=0640 owner=taiga group=taiga
notify: restart taiga-back notify: restart taiga-back
tags: taiga tags: taiga
- name: copy in our taiga backend URLs config - name: copy in our taiga backend URLs config
copy: src=urls.py dest=/home/taiga/taiga-back/settings/urls.py copy: src=urls.py dest=/srv/taiga/taiga-back/settings/urls.py
mode=0640 owner=taiga group=taiga mode=0640 owner=taiga group=taiga
notify: restart taiga-back notify: restart taiga-back
tags: taiga tags: taiga
- file: dest=/home/taiga/taiga-back/locale state=directory - file: dest=/srv/taiga/taiga-back/locale state=directory
owner=taiga group=taiga owner=taiga group=taiga
tags: taiga tags: taiga
# change default admin password # change default admin password
- name: copy in our initial_user fixture - name: copy in our initial_user fixture
template: src=initial_user.json dest=/home/taiga/initial_user.json template: src=initial_user.json dest=/srv/taiga/initial_user.json
mode=0640 owner=taiga group=taiga mode=0640 owner=taiga group=taiga
tags: taiga tags: taiga
@ -182,41 +182,41 @@
block: block:
- django_manage: - django_manage:
app_path: /home/taiga/taiga-back app_path: /srv/taiga/taiga-back
virtualenv: /home/taiga/venv virtualenv: /srv/taiga/venv
command: migrate command: migrate
- django_manage: - django_manage:
app_path: /home/taiga/taiga-back app_path: /srv/taiga/taiga-back
virtualenv: /home/taiga/venv virtualenv: /srv/taiga/venv
command: loaddata command: loaddata
fixtures: /home/taiga/initial_user.json initial_project_templates fixtures: /srv/taiga/initial_user.json initial_project_templates
- django_manage: - django_manage:
app_path: /home/taiga/taiga-back app_path: /srv/taiga/taiga-back
virtualenv: /home/taiga/venv virtualenv: /srv/taiga/venv
command: compilemessages command: compilemessages
- django_manage: - django_manage:
app_path: /home/taiga/taiga-back app_path: /srv/taiga/taiga-back
virtualenv: /home/taiga/venv virtualenv: /srv/taiga/venv
command: collectstatic command: collectstatic
### DONE with taiga-back ### DONE with taiga-back
### Setup taiga-front-dist from git ### Setup taiga-front-dist from git
- git: - git:
repo: https://github.com/taigaio/taiga-front-dist.git repo: https://github.com/taigaio/taiga-front-dist.git
dest: /home/taiga/taiga-front-dist dest: /srv/taiga/taiga-front-dist
version: "{{taiga_front_version}}" version: "{{taiga_front_version}}"
- template: - template:
src=conf.json src=conf.json
dest=/home/taiga/taiga-front-dist/dist/conf.json dest=/srv/taiga/taiga-front-dist/dist/conf.json
mode=0644 owner=taiga group=taiga mode=0644 owner=taiga group=taiga
tags: taiga tags: taiga
# create plugins directory - new in taiga 3.0.0 # create plugins directory - new in taiga 3.0.0
- file: dest=/home/taiga/taiga-front-dist/dist/plugins state=directory owner=taiga group=taiga - file: dest=/srv/taiga/taiga-front-dist/dist/plugins state=directory owner=taiga group=taiga
tags: taiga tags: taiga
# Build the frontend # Build the frontend
@ -232,18 +232,18 @@
# Build our plugin # Build our plugin
- npm: - npm:
path: /home/taiga/taiga-contrib-oidc-auth/front path: /srv/taiga/taiga-contrib-oidc-auth/front
- npm: - npm:
path: /home/taiga/taiga-contrib-oidc-auth/front path: /srv/taiga/taiga-contrib-oidc-auth/front
name: gulp name: gulp
- command: ./node_modules/.bin/gulp build - command: ./node_modules/.bin/gulp build
args: args:
chdir: /home/taiga/taiga-contrib-oidc-auth/front chdir: /srv/taiga/taiga-contrib-oidc-auth/front
creates: /home/taiga/taiga-contrib-oidc-auth/front/dist/oidc_auth.js creates: /srv/taiga/taiga-contrib-oidc-auth/front/dist/oidc_auth.js
# Link our plugin pieces in place # Link our plugin pieces in place
- file: src=/home/taiga/taiga-contrib-oidc-auth/front/dist - file: src=/srv/taiga/taiga-contrib-oidc-auth/front/dist
dest=/home/taiga/taiga-front-dist/dist/plugins/oidc-auth dest=/srv/taiga/taiga-front-dist/dist/plugins/oidc-auth
state=link state=link
owner=taiga owner=taiga
group=taiga group=taiga
@ -303,7 +303,7 @@
# Add nginx to the taiga group so it gets rights to read all our static stuff # Add nginx to the taiga group so it gets rights to read all our static stuff
- user: name=nginx groups=taiga append=yes - user: name=nginx groups=taiga append=yes
tags: taiga tags: taiga
- file: dest=/home/taiga mode=0750 - file: dest=/srv/taiga mode=0750
tags: taiga tags: taiga
- seboolean: name="{{item}}" state=true persistent=true - seboolean: name="{{item}}" state=true persistent=true
with_items: with_items:

6
roles/taiga/templates/taiga-ssl.nginx
View file

@ -21,7 +21,7 @@ server {
# Frontend # Frontend
location / { location / {
root /home/taiga/taiga-front-dist/dist/; root /srv/taiga/taiga-front-dist/dist/;
try_files $uri $uri/ /index.html; try_files $uri $uri/ /index.html;
disable_symlinks off; disable_symlinks off;
@ -52,11 +52,11 @@ server {
# Static files # Static files
location /static { location /static {
alias /home/taiga/taiga-back/static; alias /srv/taiga/taiga-back/static;
} }
# Media files # Media files
location /media { location /media {
alias /home/taiga/taiga-back/media; alias /srv/taiga/taiga-back/media;
} }
} }