initial commit of scripts

Author: davidpesce

Vagrantfile

@@ -0,0 +1,71 @@
+# -*- mode: ruby -*-
+# vi: set ft=ruby :
+
+VAGRANTFILE_API_VERSION = "2"
+
+machines_file = ENV['MACHINES']
+machines_file ||= './vagrant/one_machine'
+require machines_file
+
+
+# Assign machines to their Ansible groups
+def generate_ansible_groups(machines)
+	require 'set'
+	ansible_groups = {}
+	all = Set.new
+	machines.each do |m|
+	  m["ansible_groups"].each do |group|
+	    if not ansible_groups.has_key?(group)
+	      ansible_groups[group] = []
+	    end
+	    if not ansible_groups.has_key?("proxy:vars")
+	      ansible_groups["proxy:vars"] = []
+	    end
+	    ansible_groups[group].push(m["hostname"])
+	    all = all.add(group)
+	  end
+	end
+	ansible_groups["proxy:children"] = all.to_a
+	return ansible_groups
+end
+
+
+
+Vagrant.configure(VAGRANTFILE_API_VERSION) do |config|
+
+	config.vm.provision "ansible" do |ansible|
+		ansible.groups = generate_ansible_groups(MACHINES)
+		ansible.playbook = "main.yml"
+		ansible.extra_vars = { mongodb_host: MONGO_HOST }
+		# Useful during testing 
+		ansible.host_key_checking = false
+		# ansible.verbose = "vvvv"
+		# ansible.inventory_path = "path"  # In this case we directly generate it
+		# ansible.limit = "local"
+		# ansible.raw_arguments = "--ask-vault-pass"
+	end
+
+
+	# Disabling the default /vagrant share.
+	#   http://docs.vagrantup.com/v2/synced-folders/
+	#   (Reason to disable it: In MacOS GuestAdditions trend to fail screwing the "up" or "reload".
+	config.vm.synced_folder ".", "/vagrant", disabled: true
+
+	MACHINES.each do |m|
+		config.vm.define m["hostname"] do |node|
+			node.vm.box = m["box"]
+			node.vm.hostname = m["hostname"]
+			node.vm.network :private_network, ip: m["ip"]
+
+			m["ports"].each do |port|
+				node.vm.network :forwarded_port, guest: port[0], host: port[1]
+			end
+
+			node.vm.provider :virtualbox do |vb|
+				vb.cpus = m["cpus"]
+				vb.memory = m["memory"]
+			end
+		end
+	end
+end
+

database.yml

@@ -0,0 +1,13 @@
+---
+
+# file: database.yml
+
+- name: Install and configure MongoDB
+  hosts: database
+  roles:
+    - mongodb
+  vars_files:
+    - vars.secret.yml
+  tags:
+    - mongodb
+    - database

group_vars/learninglocker

@@ -0,0 +1,8 @@
+ll_path: "/var/www/learninglocker"
+ll_repo: "https://github.com/LearningLocker/learninglocker.git"
+ll_repo_version: "HEAD"
+
+# MongoDB's public configuration
+mongodb:
+  database: learninglocker
+  host: "{{ mongodb_host | default('localhost')}}"

group_vars/proxy

@@ -0,0 +1,10 @@
+
+
+# Proxy environments. They can be empty.
+proxy_env:
+  #  http_proxy: http://wwwcache.open.ac.uk:80
+  #  https_proxy: http://wwwcache.open.ac.uk:80
+  #  ftp_proxy: http://wwwcache.open.ac.uk:80
+    http_proxy:
+    https_proxy:
+    ftp_proxy:

learninglocker.yml

@@ -0,0 +1,14 @@
+---
+
+# file: learninglocker.yml
+
+- name: Install and configure LearningLocker
+  hosts: learninglocker
+  roles:
+    - apache
+    - learninglocker
+  vars_files:
+    - vars.secret.yml
+  tags:
+    - learninglocker
+    - apache

main.yml

@@ -0,0 +1,6 @@
+---
+
+
+# file: main.yml
+- include: database.yml
+- include: learninglocker.yml

roles/apache/meta/main.yml

@@ -0,0 +1,4 @@
+---
+
+dependencies:
+  - { role: proxy }

roles/apache/tasks/configure.yml

@@ -0,0 +1,41 @@
+---
+
+- name: Start the Firewall Daemon and enable automatic startup
+  shell: "systemctl {{ item }} firewalld.service"
+  ignore_errors: True
+  with_items:
+    - start
+    - enable
+  tags:
+   - start
+   - enable
+   - firewall
+   - daemon
+   - systemctl
+
+
+- name: Allow HTTP Access through Firewall
+  shell: "{{ item }}"
+  ignore_errors: True
+  with_items:
+    - "firewall-cmd --permanent --zone=public --add-service=http"
+    - "systemctl restart firewalld.service"
+  tags:
+   - allow
+   - http
+   - firewall
+   - daemon
+   - systemctl
+
+
+- name: Start Apache HTTP Daemon and enable automatic startup
+  shell: "systemctl {{ item }} httpd.service"
+  with_items:
+    - start
+    - enable
+  tags:
+   - start
+   - enable
+   - http
+   - daemon
+   - systemctl

roles/apache/tasks/dependencies.yml

@@ -0,0 +1,41 @@
+---
+
+- name: Install yum-config-manager
+  yum: 
+    name: yum-utils
+    state: latest
+
+- name: Install Remi Collet Repository
+  yum: name="http://rpms.famillecollet.com/enterprise/remi-release-7.rpm" state=present
+  tags:
+   - install
+   - repository
+   - remi collet
+
+
+- name: Enable Remi Collet Repository for future updates
+  shell: yum-config-manager --enable remi remi-php56
+  tags:
+   - enable
+   - repository
+   - remi collet
+
+
+- name: Install Apache, PHP and its dependencies
+  yum: name="{{ item }}" enablerepo=remi,remi-php56 state=present
+  with_items:
+    - httpd
+    - php
+    - php-common
+    - php-cli
+    - php-pear
+    - php-mysqlnd
+    - php-pecl-mongo
+    - php-gd
+    - php-mbstring
+    - php-mcrypt
+    - php-xml
+  tags:
+   - install
+   - apache
+   - php

roles/apache/tasks/main.yml

@@ -0,0 +1,10 @@
+---
+
+- name: Install dependencies
+  include: dependencies.yml
+  become: True
+
+
+- name: Configure firewall and Apache
+  include: configure.yml
+  become: True