Configure devigo service in production environment

- Added devigo role to production playbook
- Configured domains: devigo.no (apex), www.devigo.no, decap.jnss.me
- Set OAuth trusted origins for multi-domain support
- Integrated with existing Caddy and Podman infrastructure
This commit is contained in:
2025-12-16 00:53:39 +01:00
parent 1350d10a7c
commit 0ecbb84fa5
2 changed files with 28 additions and 5 deletions

View File

@@ -3,7 +3,7 @@
# Production Configuration for mini-vps (Client Projects)
# =================================================================
# This host runs production services requiring high uptime
# Currently hosting: Sigvild Gallery
# Currently hosting: Sigvild Gallery, Devigo
# =================================================================
# TLS Configuration - Production Setup
@@ -44,6 +44,25 @@ sigvild_gallery_pb_su_password: "{{ vault_pb_su_password}}"
sigvild_gallery_host_password: "{{ vault_sigvild_host_password }}"
sigvild_gallery_guest_password: "{{ vault_sigvild_guest_password }}"
# =================================================================
# Devigo Configuration (Docker-based deployment)
# =================================================================
devigo_domain: "devigo.no"
devigo_www_domain: "www.devigo.no"
devigo_primary_domain: "devigo.no" # Apex is primary
devigo_docker_dir: "/opt/devigo"
devigo_ghcr_image: "ghcr.io/jnschaffer/rustan:prod"
github_username: "{{ vault_github_username }}"
github_token: "{{ vault_github_token }}"
# Decap OAuth (integrated service)
devigo_oauth_domain: "decap.jnss.me"
devigo_oauth_client_id: "{{ vault_devigo_oauth_client_id }}"
devigo_oauth_client_secret: "{{ vault_devigo_oauth_client_secret }}"
devigo_oauth_trusted_origins:
- "https://devigo.no"
- "https://www.devigo.no"
# =================================================================
# Security & Logging
# =================================================================

View File

@@ -4,9 +4,11 @@
# Deploys production services requiring high uptime to mini-vps including:
# - Caddy web server
# - Sigvild Gallery (wedding photo gallery)
# - Devigo (sales training company website)
#
# Usage:
# ansible-playbook playbooks/production.yml
# ansible-playbook playbooks/production.yml --tags devigo
# - import_playbook: security.yml
@@ -15,15 +17,17 @@
become: true
gather_facts: true
tasks:
pre_tasks:
# Workaround: Manually load group_vars due to Ansible 2.20 variable loading issue
- name: Load production group variables
include_vars:
dir: "{{ playbook_dir }}/../group_vars/production"
extensions: ['yml']
tags: always
roles:
- role: devigo
tags: ['devigo', 'website', 'sales', 'oauth']
- name: Deploy Sigvild Gallery
include_role:
name: sigvild-gallery
- role: sigvild-gallery
tags: ['sigvild', 'gallery', 'wedding']