From a747ed293ec4449ca15271f9476903905dbbfaf5 Mon Sep 17 00:00:00 2001
From: jaseg <code@jaseg.net>
Date: Fri, 17 Jan 2020 11:11:52 +0100
Subject: deploy: add notification proxy

---
 setup_notification_proxy.yml | 48 ++++++++++++++++++++++++++++++++++++++++++++
 1 file changed, 48 insertions(+)
 create mode 100644 setup_notification_proxy.yml

(limited to 'setup_notification_proxy.yml')

diff --git a/setup_notification_proxy.yml b/setup_notification_proxy.yml
new file mode 100644
index 0000000..3f86412
--- /dev/null
+++ b/setup_notification_proxy.yml
@@ -0,0 +1,48 @@
+---
+- name: Create notification proxy worker user and group
+  user:
+      name: uwsgi-notification-proxy
+      create_home: no
+      group: uwsgi
+      password: '!'
+      shell: /sbin/nologin
+      system: yes
+
+- name: Create webapp dir
+  file:
+      path: /var/lib/notification-proxy
+      state: directory
+      owner: uwsgi-notification-proxy
+      group: uwsgi
+      mode: 0550
+
+- name: Copy webapp sources
+  copy:
+      src: notification_proxy.py
+      dest: /var/lib/notification-proxy/
+      owner: uwsgi-notification-proxy
+      group: uwsgi
+      mode: 0440
+
+- name: Template webapp config
+  template:
+    src: notification_proxy_config.py.j2
+    dest: /var/lib/notification-proxy/config.py
+    owner: uwsgi-notification-proxy
+    group: root
+    mode: 0660
+
+- name: Copy uwsgi config
+  copy:
+      src: uwsgi-notification-proxy.ini
+      dest: /etc/uwsgi.d/notification-proxy.ini
+      owner: uwsgi-notification-proxy
+      group: uwsgi
+      mode: 0440
+
+- name: Enable uwsgi systemd socket
+  systemd:
+      daemon-reload: yes
+      name: uwsgi-app@notification-proxy.socket
+      enabled: yes
+
-- 
cgit