Ansible Role - Ansible AWX Setup

Ansible Role to deploy the Ansible AWX software on a linux server.

This role is following the docker installation process.

Tested:

• Debian 11

Version

19.3.0

WARNING: The docker-based installation is NOT RECOMMENDED BY ANSIBLE-AWX!

Install

# latest
ansible-galaxy role install git+https://github.com/ansibleguy/sw_awx

# from galaxy
ansible-galaxy install ansibleguy.sw_awx

# or to custom role-path
ansible-galaxy install ansibleguy.sw_awx --roles-path ./roles

# install dependencies
ansible-galaxy install -r requirements.yml

Functionality

• Package installation

  • Docker => using THIS Role
    • Dependencies
    • Server
    • Docker-compose
  • Nginx => using THIS Role
  • Ansible Client

• Source installation

  • Ansible AWX

• Configuration

  • Service to start/stop Ansible AWX containers
  • Fixes for multiple bugs of this version
  • Backup-Service to pull data from postgres container

Info

• Note: this role currently only supports debian-based systems

• Warning: Not every setting/variable you provide will be checked for validity. Bad config might break the role!

• Warning: Getting the setup-process to work was 'a little painful'.
  This role will most probably only work on the version that it was written for!

Usage

You want a simple Ansible GUI? Check-out my Ansible WebUI

Config

Define the config as needed:

# must-have
awx:
  admin_user: 'someguy'
  admin_mail: 'awx@template.ansibleguy.net'
  admin_pwd: !vault |
      $ANSIBLE_VAULT;1.1;AES256
      64373031333937633163366236663237623464336461613334343739323763373330393930666331
      3333663262346337636536383539303834373733326631310a393865653831663238383937626238
      35396531316338373030353530663465343838373635363633613035356338353366373231343264
      3437356663383466630a666161363163346533333139656566386466383733646134616166376638
      35313765356134396130333439663461353336313230366338646165376666313232

  nginx:  # configure the webserver settings => see: https://github.com/ansibleguy/infra_nginx
    domain: 'some.guy.net'
    aliases: ['other.guy.net']
    ip: '192.168.24.20'

    ssl:
      mode: 'ca'
      cert:
        cn: 'Ansible AWX'
        country: 'AT'
        org: 'AnsibleGuy'
        email: 'awx@template.ansibleguy.net'

  # good to have
  backup_path: '/var/backups/awx'
  backup_timer: 'Mon *-*-* 00:00:00'
  # for date-time format see:
  #   https://wiki.archlinux.org/title/Systemd/Timers
  #   https://silentlad.com/systemd-timers-oncalendar-(cron)-format-explained

  # not necessary => only set if you need them especially
  settings:
    pg_username: 'awxpg'
    pg_password: !vault ...
    broadcast_websocket_secret: !vault ...
    secret_key: !vault ...

You might want to use 'ansible-vault' to encrypt your passwords:

ansible-vault encrypt_string

Execution

Run the playbook:

ansible-playbook -K -D -i inventory/hosts.yml playbook.yml --ask-vault-pass