Configure devigo service in production environment
- Added devigo role to production playbook - Configured domains: devigo.no (apex), www.devigo.no, decap.jnss.me - Set OAuth trusted origins for multi-domain support - Integrated with existing Caddy and Podman infrastructure
This commit is contained in:
@@ -3,7 +3,7 @@
|
|||||||
# Production Configuration for mini-vps (Client Projects)
|
# Production Configuration for mini-vps (Client Projects)
|
||||||
# =================================================================
|
# =================================================================
|
||||||
# This host runs production services requiring high uptime
|
# This host runs production services requiring high uptime
|
||||||
# Currently hosting: Sigvild Gallery
|
# Currently hosting: Sigvild Gallery, Devigo
|
||||||
|
|
||||||
# =================================================================
|
# =================================================================
|
||||||
# TLS Configuration - Production Setup
|
# TLS Configuration - Production Setup
|
||||||
@@ -44,6 +44,25 @@ sigvild_gallery_pb_su_password: "{{ vault_pb_su_password}}"
|
|||||||
sigvild_gallery_host_password: "{{ vault_sigvild_host_password }}"
|
sigvild_gallery_host_password: "{{ vault_sigvild_host_password }}"
|
||||||
sigvild_gallery_guest_password: "{{ vault_sigvild_guest_password }}"
|
sigvild_gallery_guest_password: "{{ vault_sigvild_guest_password }}"
|
||||||
|
|
||||||
|
# =================================================================
|
||||||
|
# Devigo Configuration (Docker-based deployment)
|
||||||
|
# =================================================================
|
||||||
|
devigo_domain: "devigo.no"
|
||||||
|
devigo_www_domain: "www.devigo.no"
|
||||||
|
devigo_primary_domain: "devigo.no" # Apex is primary
|
||||||
|
devigo_docker_dir: "/opt/devigo"
|
||||||
|
devigo_ghcr_image: "ghcr.io/jnschaffer/rustan:prod"
|
||||||
|
github_username: "{{ vault_github_username }}"
|
||||||
|
github_token: "{{ vault_github_token }}"
|
||||||
|
|
||||||
|
# Decap OAuth (integrated service)
|
||||||
|
devigo_oauth_domain: "decap.jnss.me"
|
||||||
|
devigo_oauth_client_id: "{{ vault_devigo_oauth_client_id }}"
|
||||||
|
devigo_oauth_client_secret: "{{ vault_devigo_oauth_client_secret }}"
|
||||||
|
devigo_oauth_trusted_origins:
|
||||||
|
- "https://devigo.no"
|
||||||
|
- "https://www.devigo.no"
|
||||||
|
|
||||||
# =================================================================
|
# =================================================================
|
||||||
# Security & Logging
|
# Security & Logging
|
||||||
# =================================================================
|
# =================================================================
|
||||||
|
|||||||
@@ -4,9 +4,11 @@
|
|||||||
# Deploys production services requiring high uptime to mini-vps including:
|
# Deploys production services requiring high uptime to mini-vps including:
|
||||||
# - Caddy web server
|
# - Caddy web server
|
||||||
# - Sigvild Gallery (wedding photo gallery)
|
# - Sigvild Gallery (wedding photo gallery)
|
||||||
|
# - Devigo (sales training company website)
|
||||||
#
|
#
|
||||||
# Usage:
|
# Usage:
|
||||||
# ansible-playbook playbooks/production.yml
|
# ansible-playbook playbooks/production.yml
|
||||||
|
# ansible-playbook playbooks/production.yml --tags devigo
|
||||||
|
|
||||||
# - import_playbook: security.yml
|
# - import_playbook: security.yml
|
||||||
|
|
||||||
@@ -15,15 +17,17 @@
|
|||||||
become: true
|
become: true
|
||||||
gather_facts: true
|
gather_facts: true
|
||||||
|
|
||||||
tasks:
|
pre_tasks:
|
||||||
# Workaround: Manually load group_vars due to Ansible 2.20 variable loading issue
|
# Workaround: Manually load group_vars due to Ansible 2.20 variable loading issue
|
||||||
- name: Load production group variables
|
- name: Load production group variables
|
||||||
include_vars:
|
include_vars:
|
||||||
dir: "{{ playbook_dir }}/../group_vars/production"
|
dir: "{{ playbook_dir }}/../group_vars/production"
|
||||||
extensions: ['yml']
|
extensions: ['yml']
|
||||||
tags: always
|
tags: always
|
||||||
|
|
||||||
|
roles:
|
||||||
|
- role: devigo
|
||||||
|
tags: ['devigo', 'website', 'sales', 'oauth']
|
||||||
|
|
||||||
- name: Deploy Sigvild Gallery
|
- role: sigvild-gallery
|
||||||
include_role:
|
|
||||||
name: sigvild-gallery
|
|
||||||
tags: ['sigvild', 'gallery', 'wedding']
|
tags: ['sigvild', 'gallery', 'wedding']
|
||||||
|
|||||||
Reference in New Issue
Block a user