---

additional_nginx_config: {}

packages: []

rewrites: []

static_locations: []

virtualenv_packages: []

environment_variables: {}

https_tls_certificate: "{{ lookup('file', tls_certificate_dir + '/' + fqdn + '_https.pem') }}"

---

dependencies:

  - common

- name: Create

  hosts: localhost

  connection: local

  no_log: "{{ not lookup('env', 'MOLECULE_DEBUG') | bool }}"

  vars:

    molecule_file: "{{ lookup('env', 'MOLECULE_FILE') }}"

- name: Destroy

  hosts: localhost

  connection: local

  no_log: "{{ not lookup('env', 'MOLECULE_DEBUG') | bool }}"

  vars:

    molecule_file: "{{ lookup('env', 'MOLECULE_FILE') }}"

lint:

  name: yamllint

platforms:

---

- hosts: wsgi-website

  vars:

    # common

    ca_certificates:

        - comment: Custom missing page.

          value: error_page 404 /my/own/error/page;

      admin_uid: 5000

      environment_indicator:

        background_colour: "#ff0000"

        text_colour: "#00ff00"

        - /static/

        - /media/

      uid: 5001

      virtualenv_packages:

        - dnspython==1.15.0,<1.20.0

        - ptpython==0.41

    - role: wsgi_website

      fqdn: parameters-paste-req

      virtualenv_packages:

        - click==6.7

        - Flask==0.12.2

      https_tls_key: "{{ lookup('file', 'tests/data/x509/parameters-paste-req_https.key.pem') }}"

- hosts: wsgi-website

  tasks:

    # parameters-mandatory application

    - name: Set-up directories where application files are hosted at

- name: Prepare

  hosts: all

  tasks:

    - name: Install python for Ansible

      raw: test -e /usr/bin/python || (apt -y update && apt install -y python-minimal)

- hosts: wsgi-website

  tasks:

    - name: Update all caches to avoid errors due to missing remote archives

      apt:

    - name: Set-up /etc/hosts entries

      lineinfile:

    - name: Install curl for testing redirects and webpage content

      apt:

        name: curl

    - name: Install swaks for testing mail forwarding

      apt:

        name: swaks

    - name: Install Postfix for testing mail forwarding (Exim4 not covered)

      apt:

        name: postfix

    - name: Set-up group for an additional user

      group:

        name: user

        group: user

        shell: /bin/bash

import testinfra.utils.ansible_runner

testinfra_hosts = testinfra.utils.ansible_runner.AnsibleRunner(

def test_hosts_file(host):

import re

import time

testinfra_hosts = testinfra.utils.ansible_runner.AnsibleRunner(

def test_website_group(host):

import re

import time

testinfra_hosts = testinfra.utils.ansible_runner.AnsibleRunner(

def test_website_group(host):

import re

import time

testinfra_hosts = testinfra.utils.ansible_runner.AnsibleRunner(

def test_website_group(host):

    uid: "{{ admin_uid | default(omit) }}"

    group: "{{ user }}"

    shell: /bin/bash

    home: "{{ home }}"

    state: present

    uid: "{{ uid | default(omit) }}"

    group: "{{ user }}"

    comment: "umask=0007"

    state: present

    home: "{{ home }}"

  user:

    name: www-data

    groups: "{{ user }}"

  notify:

    - Restart nginx

  command: '/usr/bin/virtualenv --prompt "({{ fqdn }})" "{{ home }}/virtualenv"'

  args:

    creates: "{{ home }}/virtualenv/bin/activate"

  become_user: "{{ admin }}"

  tags:

    # [ANSIBLE0012] Commands should not change things if nothing needs doing

    mode: 0750

- name: Install WSGI server

  become_user: "{{ admin }}"

  pip:

    name: "{{ item.package }}"

  when: "wsgi_requirements"

- name: Install additional packages in Python virtual environment

  become_user: "{{ admin }}"

  pip:

    name: "{{ virtualenv_packages }}"

- name: Enable the website service

  service:

    name: "{{ fqdn }}"

    state: started

- name: Create directory where static files can be served from

    - wsgi_requirements.txt

- name: Deploy Gunicorn requirements file for installation purposes

  become_user: "{{ admin }}"

  template:

    src: "wsgi_requirements.txt.j2"

    mode: 0640

- name: Install Gunicorn via requirements file

  become_user: "{{ admin }}"

  pip:

    requirements: "{{ home }}/.wsgi_requirements.txt"