Create install_whiteboard.yml
This commit is contained in:
jmdekker2
233
install_whiteboard.yml
Normal file
233
install_whiteboard.yml
Normal file
@@ -0,0 +1,233 @@
|
||||
- name: Voeg lokale host toe aan nextcloud groep
|
||||
hosts: localhost
|
||||
gather_facts: yes
|
||||
tasks:
|
||||
- name: Haal IP-adres op van huidige server
|
||||
debug:
|
||||
var: ansible_default_ipv4.address
|
||||
|
||||
- name: Voeg IP-adres toe aan 'nextcloud' groep
|
||||
add_host:
|
||||
name: "{{ ansible_default_ipv4.address }}"
|
||||
groups: nextcloud
|
||||
ansible_user: "{{ ansible_user }}"
|
||||
|
||||
- name: Setup Whiteboard server with Docker Compose v2, HTTPS/WSS, WebSocket fix, and healthcheck
|
||||
hosts: whiteboard
|
||||
become: true
|
||||
vars:
|
||||
ansible_python_interpreter: /usr/bin/python3
|
||||
|
||||
tasks:
|
||||
- name: Update and upgrade apt packages
|
||||
apt:
|
||||
update_cache: yes
|
||||
upgrade: dist
|
||||
|
||||
- name: Install required packages
|
||||
apt:
|
||||
name:
|
||||
- apt-transport-https
|
||||
- ca-certificates
|
||||
- curl
|
||||
- software-properties-common
|
||||
- jq
|
||||
- netcat
|
||||
state: present
|
||||
|
||||
- name: Add NodeSource Node.js 20.x repository
|
||||
shell: curl -fsSL https://deb.nodesource.com/setup_20.x | bash -
|
||||
args:
|
||||
executable: /bin/bash
|
||||
|
||||
- name: Install Node.js and npm (from NodeSource)
|
||||
apt:
|
||||
name:
|
||||
- nodejs
|
||||
state: present
|
||||
|
||||
- name: Add Docker GPG key
|
||||
apt_key:
|
||||
url: https://download.docker.com/linux/ubuntu/gpg
|
||||
state: present
|
||||
|
||||
- name: Add Docker repository
|
||||
apt_repository:
|
||||
repo: deb [arch=amd64] https://download.docker.com/linux/ubuntu jammy stable
|
||||
state: present
|
||||
|
||||
- name: Install Docker and Docker Compose v2
|
||||
apt:
|
||||
name:
|
||||
- docker-ce
|
||||
- docker-ce-cli
|
||||
- containerd.io
|
||||
state: present
|
||||
|
||||
- name: Ensure Docker Compose v2 plugin is present
|
||||
command: docker compose version
|
||||
register: docker_compose_version
|
||||
failed_when: docker_compose_version.rc != 0
|
||||
|
||||
- name: Clone Whiteboard repository (force overwrite)
|
||||
git:
|
||||
repo: https://github.com/nextcloud/whiteboard.git
|
||||
dest: /opt/whiteboard
|
||||
version: main
|
||||
force: yes
|
||||
|
||||
- name: Install npm packages (including dotenv)
|
||||
command: npm install
|
||||
args:
|
||||
chdir: /opt/whiteboard
|
||||
|
||||
- name: Create updated .env file for Whiteboard (matching Docker expectations)
|
||||
copy:
|
||||
dest: /opt/whiteboard/.env
|
||||
content: |
|
||||
NEXTCLOUD_URL={{ nc_url }}
|
||||
NEXTCLOUD_USER={{ nc_user }}
|
||||
NEXTCLOUD_PASSWORD={{ nc_password }}
|
||||
JWT_SECRET_KEY={{ jwt_secret }}
|
||||
FORCE_HTTPS=true
|
||||
TRUST_PROXY=true
|
||||
PORT=3002
|
||||
|
||||
- name: Update docker-compose.yml to use env_file
|
||||
copy:
|
||||
dest: /opt/whiteboard/docker-compose.yml
|
||||
content: |
|
||||
version: '3.7'
|
||||
services:
|
||||
nextcloud-whiteboard-server:
|
||||
build:
|
||||
context: .
|
||||
dockerfile: Dockerfile
|
||||
ports:
|
||||
- 3002:3002
|
||||
env_file:
|
||||
- .env
|
||||
|
||||
- name: Run Docker Compose up
|
||||
command: docker compose up -d
|
||||
args:
|
||||
chdir: /opt/whiteboard
|
||||
|
||||
- name: Install Nginx and Certbot
|
||||
apt:
|
||||
name:
|
||||
- nginx
|
||||
- certbot
|
||||
- python3-certbot-nginx
|
||||
state: present
|
||||
|
||||
- name: Ensure nginx.conf has map for connection_upgrade
|
||||
blockinfile:
|
||||
path: /etc/nginx/nginx.conf
|
||||
block: |
|
||||
map $http_upgrade $connection_upgrade {
|
||||
default upgrade;
|
||||
'' close;
|
||||
}
|
||||
insertafter: '^http {'
|
||||
marker: "# {mark} ANSIBLE MANAGED CONNECTION UPGRADE MAP"
|
||||
|
||||
- name: Temporary Nginx HTTP config for certificate request
|
||||
copy:
|
||||
dest: /etc/nginx/sites-available/whiteboard
|
||||
content: |
|
||||
server {
|
||||
listen 80;
|
||||
server_name {{ domain }};
|
||||
|
||||
location / {
|
||||
proxy_pass http://localhost:3002;
|
||||
proxy_http_version 1.1;
|
||||
proxy_set_header Upgrade $http_upgrade;
|
||||
proxy_set_header Connection "upgrade";
|
||||
proxy_set_header Host $host;
|
||||
proxy_set_header X-Real-IP $remote_addr;
|
||||
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
|
||||
proxy_set_header X-Forwarded-Proto $scheme;
|
||||
proxy_set_header X-Forwarded-Port 80;
|
||||
}
|
||||
}
|
||||
|
||||
- name: Enable Nginx site and disable default
|
||||
file:
|
||||
src: /etc/nginx/sites-available/whiteboard
|
||||
dest: /etc/nginx/sites-enabled/whiteboard
|
||||
state: link
|
||||
force: true
|
||||
|
||||
- name: Remove default Nginx site
|
||||
file:
|
||||
path: /etc/nginx/sites-enabled/default
|
||||
state: absent
|
||||
|
||||
- name: Test Nginx configuration
|
||||
command: nginx -t
|
||||
|
||||
- name: Reload Nginx
|
||||
systemd:
|
||||
name: nginx
|
||||
state: reloaded
|
||||
|
||||
- name: Obtain Let’s Encrypt certificate
|
||||
command: >
|
||||
certbot --nginx -d {{ domain }} --non-interactive --agree-tos -m {{ email }}
|
||||
|
||||
- name: Replace Nginx config with SSL, WebSocket fix, and healthcheck support
|
||||
copy:
|
||||
dest: /etc/nginx/sites-available/whiteboard
|
||||
content: |
|
||||
server {
|
||||
listen 80;
|
||||
server_name {{ domain }};
|
||||
location / {
|
||||
return 301 https://$host$request_uri;
|
||||
}
|
||||
}
|
||||
|
||||
server {
|
||||
listen 443 ssl;
|
||||
server_name {{ domain }};
|
||||
|
||||
ssl_certificate /etc/letsencrypt/live/{{ domain }}/fullchain.pem;
|
||||
ssl_certificate_key /etc/letsencrypt/live/{{ domain }}/privkey.pem;
|
||||
|
||||
location / {
|
||||
proxy_pass http://localhost:3002;
|
||||
proxy_http_version 1.1;
|
||||
proxy_set_header Upgrade $http_upgrade;
|
||||
proxy_set_header Connection "upgrade";
|
||||
proxy_set_header Host $host;
|
||||
proxy_set_header X-Real-IP $remote_addr;
|
||||
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
|
||||
proxy_set_header X-Forwarded-Proto $scheme;
|
||||
proxy_set_header X-Forwarded-Port 443;
|
||||
proxy_read_timeout 86400;
|
||||
}
|
||||
}
|
||||
|
||||
- name: Test final Nginx configuration
|
||||
command: nginx -t
|
||||
|
||||
- name: Reload Nginx with final SSL config
|
||||
systemd:
|
||||
name: nginx
|
||||
state: reloaded
|
||||
|
||||
- name: Restart Docker Compose services
|
||||
command: docker compose restart
|
||||
args:
|
||||
chdir: /opt/whiteboard
|
||||
|
||||
- name: Check if backend port 3002 is open
|
||||
command: nc -zv localhost 3002
|
||||
register: portcheck_result
|
||||
failed_when: portcheck_result.rc != 0
|
||||
|
||||
- name: Show port 3002 check result
|
||||
debug:
|
||||
var: portcheck_result
|
||||
Reference in New Issue
Block a user