157 lines
3.5 KiB
YAML
157 lines
3.5 KiB
YAML
---
|
|
# Configuration for the fedora-packages webapp
|
|
|
|
- name: install needed packages
|
|
yum: pkg={{ item }} state=present
|
|
with_items:
|
|
- fedora-packages
|
|
- python-psycopg2
|
|
- python-memcached
|
|
- python-sqlalchemy0.8
|
|
tags:
|
|
- packages
|
|
- packages/web
|
|
|
|
- name: Create some directories
|
|
file: path={{ item }} state=directory owner=apache group=apache mode=755
|
|
with_items:
|
|
- /etc/fedoracommunity
|
|
- /var/cache/fedoracommunity # the gluster role usually creates this one
|
|
- /var/tmp/fedoracommunity
|
|
- /var/log/fedoracommunity
|
|
tags:
|
|
- packages
|
|
- packages/web
|
|
|
|
- name: Create some more locked down directories
|
|
file: path={{ item }} state=directory owner=apache group=apache mode=700
|
|
with_items:
|
|
- /etc/pki/fedoracommunity
|
|
tags:
|
|
- packages
|
|
- packages/web
|
|
|
|
- name: Copy over the app config
|
|
template: >
|
|
src=packages-app.ini.j2
|
|
dest=/etc/fedoracommunity/production.ini
|
|
owner=apache group=fedmsg mode=0440
|
|
notify:
|
|
- reload httpd
|
|
- restart fedmsg-hub
|
|
tags:
|
|
- packages
|
|
- packages/web
|
|
|
|
- name: Copy over the httpd config
|
|
copy: >
|
|
src=packages-httpd.conf
|
|
dest=/etc/httpd/conf.d/fedora-packages.conf
|
|
owner=root group=root mode=644
|
|
notify:
|
|
- reload httpd
|
|
tags:
|
|
- packages
|
|
- packages/web
|
|
|
|
- name: Copy over the fedmsg consumer config
|
|
template: >
|
|
src=fedoracommunity.py
|
|
dest=/etc/fedmsg.d/fedoracommunity.py
|
|
owner=root group=root mode=644
|
|
notify:
|
|
- restart fedmsg-hub
|
|
tags:
|
|
- packages
|
|
- packages/web
|
|
|
|
- name: Copy over certs/public-keys, probably for talking with koji.
|
|
copy: >
|
|
src="{{private}}/files/packages/fedora-ca.cert"
|
|
dest="/etc/pki/fedoracommunity/{{item}}"
|
|
owner=apache
|
|
group=apache
|
|
mode=0644
|
|
with_items:
|
|
- fedora-server-ca.cert
|
|
- fedora-upload-ca.cert
|
|
tags:
|
|
- packages
|
|
- packages/web
|
|
|
|
- name: permanently hotfix the distmappings file
|
|
copy: >
|
|
src=distmappings.py
|
|
dest="{{pythonsitelib}}/fedoracommunity/search/distmappings.py"
|
|
owner=root group=root mode=0644
|
|
notify:
|
|
- reload httpd
|
|
- restart fedmsg-hub
|
|
tags:
|
|
- packages
|
|
- packages/web
|
|
|
|
# Here's the indexer stuff
|
|
- name: Create cache structure
|
|
file: >
|
|
dest="/var/cache/fedoracommunity/{{item}}"
|
|
state=directory
|
|
owner=apache
|
|
group=apache
|
|
mode=0755
|
|
with_items:
|
|
- packages
|
|
- rpm_cache
|
|
- git.fedoraproject.org
|
|
- packages/icons
|
|
- packages/xapian
|
|
- packages/xapian/search
|
|
- packages/tmp
|
|
- packages/tmp/icons
|
|
- packages/tmp/search
|
|
- packages/tmp/var
|
|
when: install_packages_indexer
|
|
tags:
|
|
- packages
|
|
- packages/web
|
|
|
|
- name: Copy over the default icon
|
|
copy: >
|
|
src=package_128x128.png
|
|
dest=/var/cache/fedoracommunity/packages/icons/package_128x128.png
|
|
owner=root mode=644 setype=fusefs_t
|
|
when: install_packages_indexer
|
|
tags:
|
|
- packages
|
|
- packages/web
|
|
- icon
|
|
|
|
- name: hotfix the fedmsg-hub executable to pick up forward compat packages
|
|
copy: src=fedmsg-hub-forward-compat dest=/usr/bin/fedmsg-hub
|
|
tags:
|
|
- packages
|
|
- packages/web
|
|
- hotfix
|
|
|
|
# Our fedmsg updater should handle everything, no more need for cron.
|
|
#- name: Copy the indexer cronjobs
|
|
# copy: src="{{item}}" dest="/etc/cron.d/{{item}}"
|
|
# with_items:
|
|
# - cron-sync-package-index
|
|
# when: install_packages_indexer
|
|
# tags:
|
|
# - packages
|
|
# - packages/web
|
|
|
|
# Lastly, here's some selinux stuff.
|
|
- name: set some selinux booleans
|
|
seboolean: name={{item}} persistent=yes state=yes
|
|
with_items:
|
|
- httpd_tmp_exec
|
|
- httpd_can_network_memcache
|
|
- httpd_can_network_connect
|
|
- httpd_use_fusefs
|
|
tags:
|
|
- packages
|
|
- packages/web
|
|
- selinux
|