zware/JFrog-Cloud-Installers
1
0
Fork 0
mirror of https://github.com/ZwareBear/JFrog-Cloud-Installers.git synced 2026-01-21 02:06:56 -06:00
Code Issues Packages Projects Releases Wiki Activity

Added nginx roles.

Browse Source
This commit is contained in:
jefferyfry
2020-04-28 21:08:09 -07:00
parent 2a6ff2b5db
commit 38d2524ee1
20 changed files with 333 additions and 136 deletions
Download Patch File Download Diff File Expand all files Collapse all files

3
Ansible/artifactory7/jfrog/rt7ansible/README.md
View File

@@ -1,3 +0,0 @@
# Ansible Collection - jfrog.rt7ansible
Documentation for the collection.

1
Ansible/artifactory7/jfrog/rt7ansible/roles/artifactory-java/tasks/setup-Debian.yml
View File

@@ -12,6 +12,7 @@
- name: Ensure Java is installed.
apt:
update_cache: yes
name: "{{ java_packages }}"
state: present
become: true

29
Ansible/artifactory7/jfrog/rt7ansible/roles/artifactory-nginx-ssl/.travis.yml Normal file
View File

@@ -0,0 +1,29 @@
---
language: python
python: "2.7"
# Use the new container infrastructure
sudo: false
# Install ansible
addons:
apt:
packages:
- python-pip
install:
# Install ansible
- pip install ansible
# Check ansible version
- ansible --version
# Create ansible.cfg with correct roles_path
- printf '[defaults]\nroles_path=../' >ansible.cfg
script:
# Basic role syntax check
- ansible-playbook tests/test.yml -i tests/inventory --syntax-check
notifications:
webhooks: https://galaxy.ansible.com/api/v1/notifications/

2
Ansible/artifactory7/jfrog/rt7ansible/roles/artifactory-nginx-ssl/defaults/main.yml Normal file
View File

@@ -0,0 +1,2 @@
---
# defaults file for artifactory-nginx

2
Ansible/artifactory7/jfrog/rt7ansible/roles/artifactory-nginx-ssl/handlers/main.yml Normal file
View File

@@ -0,0 +1,2 @@
---
# handlers file for artifactory-nginx

53
Ansible/artifactory7/jfrog/rt7ansible/roles/artifactory-nginx-ssl/meta/main.yml Normal file
View File

@@ -0,0 +1,53 @@
galaxy_info:
author: your name
description: your role description
company: your company (optional)
# If the issue tracker for your role is not on github, uncomment the
# next line and provide a value
# issue_tracker_url: http://example.com/issue/tracker
# Choose a valid license ID from https://spdx.org - some suggested licenses:
# - BSD-3-Clause (default)
# - MIT
# - GPL-2.0-or-later
# - GPL-3.0-only
# - Apache-2.0
# - CC-BY-4.0
license: license (GPL-2.0-or-later, MIT, etc)
min_ansible_version: 2.9
# If this a Container Enabled role, provide the minimum Ansible Container version.
# min_ansible_container_version:
#
# Provide a list of supported platforms, and for each platform a list of versions.
# If you don't wish to enumerate all versions for a particular platform, use 'all'.
# To view available platforms and versions (or releases), visit:
# https://galaxy.ansible.com/api/v1/platforms/
#
# platforms:
# - name: Fedora
# versions:
# - all
# - 25
# - name: SomePlatform
# versions:
# - all
# - 1.0
# - 7
# - 99.99
galaxy_tags: []
# List tags for your role here, one per line. A tag is a keyword that describes
# and categorizes the role. Users find roles by searching for tags. Be sure to
# remove the '[]' above, if you add tags to this list.
#
# NOTE: A tag is limited to a single word comprised of alphanumeric characters.
# Maximum 20 tags per role.
dependencies: []
# List your role dependencies here, one per line. Be sure to remove the '[]' above,
# if you add dependencies to this list.

41
Ansible/artifactory7/jfrog/rt7ansible/roles/artifactory-nginx-ssl/tasks/main.yml Normal file
View File

@@ -0,0 +1,41 @@
---
# tasks file for artifactory-nginx
- name: configure the artifactory nginx conf
template:
src: artifactory.conf.j2
dest: /etc/nginx/conf.d/artifactory.conf
owner: root
group: root
mode: '0755'
become: true
- name: ensure nginx dir exists
file:
path: "/var/opt/jfrog/nginx/ssl"
state: directory
become: true
- name: configure certificate
template:
src: certificate.pem.j2
dest: "/var/opt/jfrog/nginx/ssl/cert.pem"
become: true
- name: ensure pki exists
file:
path: "/etc/pki/tls"
state: directory
become: true
- name: configure key
template:
src: certificate.key.j2
dest: "/etc/pki/tls/cert.key"
become: true
- name: restart nginx
service:
name: nginx
state: restarted
enabled: yes
become: true

11
Ansible/artifactory7/jfrog/rt7ansible/roles/artifactory-nginx/files/artifactory.conf.j2 → Ansible/artifactory7/jfrog/rt7ansible/roles/artifactory-nginx-ssl/templates/artifactory.conf.j2
View File

@@ -9,22 +9,21 @@
upstream artifactory-direct {
server 127.0.0.1:8081;
}
ssl_protocols TLSv1 TLSv1.1 TLSv1.2 TLSv1.3;
ssl_protocols TLSv1.1 TLSv1.2;
ssl_certificate /var/opt/jfrog/nginx/ssl/cert.pem;
ssl_certificate_key /etc/pki/tls/cert.key;
ssl_session_cache shared:SSL:1m;
ssl_prefer_server_ciphers on;
## server configuration
server {
listen 443 ssl;
listen 80 ;
listen 443 ssl http2;
server_name {{ server_name }};
if ($http_x_forwarded_proto = '') {
set $http_x_forwarded_proto $scheme;
}
## Application specific logs
## access_log /var/log/nginx/artifactory-access.log timing;
## error_log /var/log/nginx/artifactory-error.log;
access_log /var/log/nginx/artifactory-access.log;
error_log /var/log/nginx/artifactory-error.log;
rewrite ^/$ /ui/ redirect;
rewrite ^/ui$ /ui/ redirect;
chunked_transfer_encoding on;
@@ -33,7 +32,7 @@
proxy_read_timeout 2400s;
proxy_pass_header Server;
proxy_cookie_path ~*^/.* /;
proxy_pass http://artifactory;
proxy_pass "http://artifactory";
proxy_next_upstream error timeout non_idempotent;
proxy_next_upstream_tries 1;
proxy_set_header X-JFrog-Override-Base-Url $http_x_forwarded_proto://$host:$server_port;

0
Ansible/artifactory7/jfrog/rt7ansible/roles/artifactory/templates/certificate.key.j2 → Ansible/artifactory7/jfrog/rt7ansible/roles/artifactory-nginx-ssl/templates/certificate.key.j2
View File

0
Ansible/artifactory7/jfrog/rt7ansible/roles/artifactory/templates/certificate.pem.j2 → Ansible/artifactory7/jfrog/rt7ansible/roles/artifactory-nginx-ssl/templates/certificate.pem.j2
View File

2
Ansible/artifactory7/jfrog/rt7ansible/roles/artifactory-nginx-ssl/tests/inventory Normal file
View File

@@ -0,0 +1,2 @@
localhost

5
Ansible/artifactory7/jfrog/rt7ansible/roles/artifactory-nginx-ssl/tests/test.yml Normal file
View File

@@ -0,0 +1,5 @@
---
- hosts: localhost
remote_user: root
roles:
- artifactory-nginx

2
Ansible/artifactory7/jfrog/rt7ansible/roles/artifactory-nginx-ssl/vars/main.yml Normal file
View File

@@ -0,0 +1,2 @@
---
# vars file for artifactory-nginx

38
Ansible/artifactory7/jfrog/rt7ansible/roles/artifactory-nginx/README.md
View File

@@ -1,38 +0,0 @@
Role Name
=========
A brief description of the role goes here.
Requirements
------------
Any pre-requisites that may not be covered by Ansible itself or the role should be mentioned here. For instance, if the role uses the EC2 module, it may be a good idea to mention in this section that the boto package is required.
Role Variables
--------------
A description of the settable variables for this role should go here, including any variables that are in defaults/main.yml, vars/main.yml, and any variables that can/should be set via parameters to the role. Any variables that are read from other roles and/or the global scope (ie. hostvars, group vars, etc.) should be mentioned here as well.
Dependencies
------------
A list of other roles hosted on Galaxy should go here, plus any details in regards to parameters that may need to be set for other roles, or variables that are used from other roles.
Example Playbook
----------------
Including an example of how to use your role (for instance, with variables passed in as parameters) is always nice for users too:
- hosts: servers
roles:
- { role: username.rolename, x: 42 }
License
-------
BSD
Author Information
------------------
An optional section for the role authors to include contact information, or a website (HTML is not allowed).

32
Ansible/artifactory7/jfrog/rt7ansible/roles/artifactory-nginx/tasks/main.yml
View File

@@ -1,2 +1,32 @@
---
# tasks file for artifactory-nginx
# tasks file for artifactory-nginx
- name: install nginx
package:
name: nginx
state: present
become: true
- name: configure main nginx conf file.
copy:
src: nginx.conf
dest: /etc/nginx/nginx.conf
owner: root
group: root
mode: '0755'
become: true
- name: configure the artifactory nginx conf
template:
src: artifactory.conf.j2
dest: /etc/nginx/conf.d/artifactory.conf
owner: root
group: root
mode: '0755'
become: true
- name: restart nginx
service:
name: nginx
state: restarted
enabled: yes
become: true

43
Ansible/artifactory7/jfrog/rt7ansible/roles/artifactory-nginx/templates/artifactory.conf.j2 Normal file
View File

@@ -0,0 +1,43 @@
###########################################################
## this configuration was generated by JFrog Artifactory ##
###########################################################
## add HA entries when ha is configure
upstream artifactory {
server 127.0.0.1:8082;
}
upstream artifactory-direct {
server 127.0.0.1:8081;
}
## server configuration
server {
listen 80 ;
server_name {{ server_name }};
if ($http_x_forwarded_proto = '') {
set $http_x_forwarded_proto $scheme;
}
## Application specific logs
access_log /var/log/nginx/artifactory-access.log;
error_log /var/log/nginx/artifactory-error.log;
rewrite ^/$ /ui/ redirect;
rewrite ^/ui$ /ui/ redirect;
chunked_transfer_encoding on;
client_max_body_size 0;
location / {
proxy_read_timeout 2400s;
proxy_pass_header Server;
proxy_cookie_path ~*^/.* /;
proxy_pass "http://artifactory";
proxy_next_upstream error timeout non_idempotent;
proxy_next_upstream_tries 1;
proxy_set_header X-JFrog-Override-Base-Url $http_x_forwarded_proto://$host:$server_port;
proxy_set_header X-Forwarded-Port $server_port;
proxy_set_header X-Forwarded-Proto $http_x_forwarded_proto;
proxy_set_header Host $http_host;
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
location ~ ^/artifactory/ {
proxy_pass http://artifactory-direct;
}
}
}

57
Ansible/artifactory7/jfrog/rt7ansible/roles/artifactory/tasks/main.yml
View File

@@ -4,60 +4,9 @@
include_role:
name: artifactory-java
#- name: install nginx
# package:
# name: nginx
# state: present
# become: true
#
#- name: configure main nginx conf file.
# copy:
# src: nginx.conf
# dest: /etc/nginx/nginx.conf
# owner: root
# group: root
# mode: '0755'
# become: true
#
#- name: configure the artifactory nginx conf
# template:
# src: artifactory.conf.j2
# dest: /etc/nginx/conf.d/artifactory.conf
# owner: root
# group: root
# mode: '0755'
# become: true
#
#- name: ensure nginx dir exists
# file:
# path: "/var/opt/jfrog/nginx/ssl"
# state: directory
# become: true
#
#- name: configure certificate
# template:
# src: certificate.pem.j2
# dest: "/var/opt/jfrog/nginx/ssl/cert.pem"
# become: true
#
#- name: ensure pki exists
# file:
# path: "/etc/pki/tls"
# state: directory
# become: true
#
#- name: configure key
# template:
# src: certificate.key.j2
# dest: "/etc/pki/tls/cert.key"
# become: true
#
#- name: restart nginx
# service:
# name: nginx
# state: started
# enabled: yes
# become: true
- name: install nginx
include_role:
name: artifactory-nginx
- name: create group for artifactory
group: