aboutsummaryrefslogtreecommitdiff
path: root/gerboweb/deploy/setup_secure_download.yml
diff options
context:
space:
mode:
authorjaseg <git@jaseg.net>2020-12-30 13:12:06 +0100
committerjaseg <git@jaseg.net>2020-12-30 13:12:06 +0100
commitc6b1c2225d1ac4ac647950be8667b5709b0033a1 (patch)
tree8db7a14649a277d236791e1c731d98af03a0af88 /gerboweb/deploy/setup_secure_download.yml
parente290ac758b02a9d03bacd511c87fc997db41d0a8 (diff)
downloadgerbolyze-c6b1c2225d1ac4ac647950be8667b5709b0033a1.tar.gz
gerbolyze-c6b1c2225d1ac4ac647950be8667b5709b0033a1.tar.bz2
gerbolyze-c6b1c2225d1ac4ac647950be8667b5709b0033a1.zip
remove ansible scripts, they are now in their own "infra" repo
Diffstat (limited to 'gerboweb/deploy/setup_secure_download.yml')
-rw-r--r--gerboweb/deploy/setup_secure_download.yml57
1 files changed, 0 insertions, 57 deletions
diff --git a/gerboweb/deploy/setup_secure_download.yml b/gerboweb/deploy/setup_secure_download.yml
deleted file mode 100644
index aa94a53..0000000
--- a/gerboweb/deploy/setup_secure_download.yml
+++ /dev/null
@@ -1,57 +0,0 @@
----
-- name: Set local facts
- set_fact:
- secure_download_dir: /var/cache/secure_download
-
-- name: Copy webapp sources
- synchronize:
- # FIXME: make this path configurable
- src: ~/secure_download/
- dest: /var/lib/secure_download/
- group: no
- owner: no
-
-- name: Create secure download worker user and group
- user:
- name: uwsgi-secure-download
- create_home: no
- group: uwsgi
- password: '!'
- shell: /sbin/nologin
- system: yes
-
-- name: Template webapp config
- template:
- src: secure_download.cfg.j2
- dest: /var/lib/secure_download/secure_download_prod.cfg
- owner: uwsgi-secure-download
- group: root
- mode: 0660
-
-- name: Copy uwsgi config
- copy:
- src: uwsgi-secure-download.ini
- dest: /etc/uwsgi.d/secure-download.ini
- owner: uwsgi-secure-download
- group: uwsgi
- mode: 440
-
-- name: Enable uwsgi systemd socket
- systemd:
- daemon-reload: yes
- name: uwsgi-app@secure-download.socket
- enabled: yes
-
-- name: Copy server dir tmpfiles.d config
- template:
- src: tmpfiles-secure-download.conf.j2
- dest: /etc/tmpfiles.d/secure-download.conf
- owner: root
- group: root
- mode: 0644
- register: sec_dl_tmpfiles_config
-
-- name: Kick systemd tmpfiles service to create serve dir
- command: systemd-tmpfiles --create
- when: sec_dl_tmpfiles_config is changed
-