Commit Graph

51 Commits

Author SHA1 Message Date
clime
d3a7276de4 copr-frontend: user dnf ansible module instead of yum-deprecated shell command 2017-01-19 16:01:52 +01:00
clime
cede7a1977 copr-frontend: do not install python2-modulemd from COPR, use fedora official repos 2017-01-19 14:52:54 +01:00
clime
179c651e8c pre-install python2-modulemd for copr-backend and also copr-frontend 2016-09-20 06:50:17 +02:00
clime
b6eefb046a install modulemd repo on copr-frontend 2016-09-20 06:15:59 +02:00
clime
59605d064c remove db setup from copr-frontend main.yml for incompatibility with alembic upgrade head 2016-09-09 10:30:04 +02:00
Patrick Uiterwijk
f1dd7a7432 Unify all ssl cipher suite configurations
Signed-off-by: Patrick Uiterwijk <puiterwijk@redhat.com>
2016-08-31 19:28:26 +00:00
Miroslav Suchý
2b61d726d4 remove vgologuz from acl
it has been more than 1/2 year since he was active and it does not look he will be active anymore
2016-06-23 20:13:20 +02:00
Kevin Fenzi
ef8a705432 Don't do updates in playbooks (for a number of reasons).
1. We want all playbooks to be idempotent. If we add things like this
it means the playbook will change every single time we run it.

2. Things like this mean that if we need to change one config or
something to get the service working we may have to wait a long time
for it to apply tons of pending updates, which may break more things.

3. On all Fedora machines (that have base role anyhow) we already run
dnf-automatic to apply all security updates. We could expand that to
apply all updates if you like. Doing them daily is much better for
finding regressions

4. We expect updates are applied normally by dnf-automatic or by
sysadmins so we can know whats in the updates and be ready for issues
or restarting things.
2016-03-30 14:57:54 +00:00
Miroslav Suchý
d079dda2e3 copr: upgrade to latest packages 2016-03-24 10:06:27 +01:00
Miroslav Suchý
a7366fb951 rebuild fulltext indexes after reprovision 2016-02-11 15:19:16 +01:00
Miroslav Suchý
208aec7f4b fix indetation 2016-02-11 10:47:00 +01:00
Miroslav Suchý
9fd4c695ce workaround bz 1241507 on copr-fe 2016-02-11 10:46:20 +01:00
Miroslav Suchý
cc2a71b4b2 install logstash on copr-fe 2016-02-11 10:19:51 +01:00
Miroslav Suchý
f110e77e1e install redis 2016-02-11 10:05:05 +01:00
Kevin Fenzi
9006a36832 Update all calls to sudo to use 'become' and sudo_user to 'become_user' 2016-02-02 21:24:45 +00:00
Miroslav Suchý
b3b9c1fd48 copr: disallow robots on dev instance 2016-01-29 11:16:55 +01:00
Patrick Uiterwijk
0cc702f5d1 Install new certs to copr-fe
Signed-off-by: Patrick Uiterwijk <puiterwijk@redhat.com>
2016-01-22 01:12:03 +00:00
Kevin Fenzi
f0c80375b5 Remove action: in all roles. 2016-01-06 21:58:31 +00:00
Kevin Fenzi
c61eca14c1 Use dnf here on copr-fe. 2016-01-05 00:28:32 +00:00
Miroslav Suchý
8e809b0cc4 use latest copr 2015-11-30 08:15:10 +01:00
Kevin Fenzi
ee4be5e92f Drop this disable firewalld since it's not installed. 2015-11-21 19:16:22 +00:00
Patrick Uiterwijk
08568865fe Replace all restart httpd with reload httpd
Signed-off-by: Patrick Uiterwijk <puiterwijk@redhat.com>
2015-11-04 23:40:01 +00:00
Kevin Fenzi
2873cdd427 Move all puppet_private stuff to ansible private so we can stop using puppet private. 2015-09-25 18:16:23 +00:00
Valentin Gologuzov
0fc3a4e281 [copr][frontend] enable logstash daemon 2015-06-09 17:43:58 +02:00
Miroslav Suchý
fdd80f3ad0 override vars/Fedora.yml as we want to keep firewalld
it is required for fail2ban, but the service should be disabled
2015-05-18 15:53:48 +02:00
Miroslav Suchý
bc25068db1 make this work with --check 2015-05-18 15:37:47 +02:00
Valentin Gologuzov
f671aa0331 [copr] do restorecon immediately after the mount_fs 2015-04-09 14:03:18 +02:00
Valentin Gologuzov
0bc692d60a [copr] restorecon for pgsql data dir if it has wrong selinux context 2015-04-09 13:38:53 +02:00
Valentin Gologuzov
1ca04d928d [copr] mount fs for copr-fe-dev also 2015-04-08 20:55:06 +02:00
Valentin Gologuzov
4cbc4e76c9 [copr] add PEERDNS=no to keep /etc/resolv.conf in place; fix init frontend playbook 2015-04-08 15:14:36 +02:00
Miroslav Suchý
0289142ba8 fix typo 2015-04-03 13:41:06 +00:00
Miroslav Suchý
fe4b3ed2bc pass alembic option 2015-04-03 13:38:58 +00:00
Miroslav Suchý
07dd697263 try to execute this as postgres user 2015-04-03 13:36:21 +00:00
Miroslav Suchý
6529c7c370 try to execute this as postgres user 2015-04-03 13:34:49 +00:00
Miroslav Suchý
0c622ca464 start pg before we create db 2015-04-03 13:26:17 +00:00
Miroslav Suchý
4d303d0875 start pg before we create db 2015-04-03 13:23:30 +00:00
Valentin Gologuzov
7e414cced0 [copr] put banner at dev instance of copr-front 2015-04-03 10:46:15 +02:00
Miroslav Suchý
754e2e2844 make some users admin
but ignore errors, because those users may not exists untill they log in for the first time
2015-04-02 14:33:31 +00:00
Miroslav Suchý
16667f23dc create db and user for coprdb 2015-04-01 08:05:02 +00:00
Valentin Gologuzov
73165d103e [copr] frontend: add statistic related stuff 2015-03-13 13:36:03 +01:00
Valentin Gologuzov
17d8dce934 [copr] acl's for logstash 2015-02-24 01:07:05 +01:00
Kevin Fenzi
dfb4783661 Stop copr-fe from installing a file, then modifying it every time. 2015-02-23 17:08:06 +00:00
Valentin Gologuzov
e039d762f8 [copr] frontend: set acl on /var/log/httpd to be accesable by logstash 2015-02-03 10:57:14 +01:00
Valentin Gologuzov
2991ab5f2b [copr] [backend] update default timeout in config 2015-01-16 16:11:39 +01:00
Miroslav Suchý
cc4988d956 update path to copr ssl files 2015-01-05 13:38:42 +00:00
Miroslav Suchý
e8edab7f96 update path to copr ssl files 2015-01-05 13:35:41 +00:00
Kevin Fenzi
1d74094bba Fix path to digicert ca 2014-12-18 20:23:27 +00:00
Miroslav Suchý
ae9a9136e8 copr: fixing path to cron-backup-database 2014-12-08 12:35:48 +00:00
Valentin Gologuzov
b9cf8da7ec [copr] fix typo 2014-10-16 11:31:54 +02:00
Kevin Fenzi
983435138d Name copr-fe by its name, not ip. Add database backup dir, script and cron. 2014-10-13 17:35:52 +00:00