playbook.yml

##
# DevShop: DevMaster Role.
#

---
- hosts: all
  user: root

  roles:
    - aegir
    - solr

  vars_files:
    - vars.yml
    - vars.{{ ansible_os_family }}.yml

  tasks:

    - hostname: name={{ server_hostname }}

    - name: Setup | Message of the day.
      action: template src=templates/motd.j2 dest={{ motd_path }} mode=755

    # DEBIAN
    - name: Setup | Install required packages.
      action: apt pkg={{ item }} state=installed update_cache=yes
      when: ansible_os_family == "Debian"
      with_items:
        - apache2
        - mysql-server
        - php5
        - php5-cli
        - php5-curl
        - php5-gd
        - php5-mysql
        - php5-mcrypt
        - php-pear
        - postfix
        - sudo
        - rsync
        - git-core
        - unzip
        - vim
        - git
        - curl
        - supervisor
        - python-mysqldb

    # REDHAT
    - name: Setup | Install required packages.
      action: yum name={{ item }} state=present
      when: ansible_os_family == "RedHat"
      with_items:
#      httpd php php-mysql php-cli php-gd php-process sudo rsync git postfix
        - httpd
        - php
        - php-mysql
        - php-cli
        - php-gd
        - php-process
        - php-pear
        - php-xml
        - php-mcrypt
        - postfix
        - sudo
        - rsync
        - git-core
        - unzip
        - vim
        - git
        - cronie
        - mariadb
        - mariadb-server
        - MySQL-python
        - epel-release
        - supervisor
#
#    - name: Create Aegir Group (so we can set the GID)
#      group:
#        name=aegir
#        state=present
#        gid={{ aegir_user_uid }}
#
#    - name: Create Aegir user
#      user:
#        name=aegir
#        shell=/bin/bash
#        group=aegir
#        groups={{ apache_user }}
#        append=yes
#        system=yes
#        home=/var/aegir
#        generate_ssh_key=yes
#        uid={{ aegir_user_uid }}
#
#    - name: Ensure /var/aegir is owned by aegir user.
#      file:
#        state=directory
#        path=/var/aegir
#        group=aegir
#        owner=aegir
#
#    # Aegir's CentOS installation requires this.
#    - name: Set appropriate permissions for Aegir's home folder.
#      command: chmod -R 755 /var/aegir
#      when: ansible_os_family == "RedHat"
#
#
#    - name: Setup SSH config for aegir user.
#      template:
#        src=templates/ssh-config.j2
#        dest=/var/aegir/.ssh/config
#        mode=0600
#        owner=aegir
#        group=aegir

    - name: Setup | Install Composer
      shell: curl -sS https://getcomposer.org/installer | php;  mv composer.phar /usr/local/bin/composer
      args:
        creates: /usr/local/bin/composer

    - name: Setup | Prepare composer directory
      file:
        path=/usr/share/composer
        state=directory

    - name: Setup | Install Drush
      shell: /usr/local/bin/composer global require drush/drush:6.* -d /usr/share/composer; /usr/share/composer/vendor/bin/drush
      args:
        creates: /usr/share/composer/vendor/bin/drush

    - name: Setup | Add composer bin to path
      command: sed -i '1i export PATH="/usr/share/composer/vendor/bin:$PATH"' {{ bashrc_path }}

    - name: Make drush available globally.
      file:
        src=/usr/share/composer/vendor/bin/drush
        dest={{ drush_path }}
        state=link
        force=yes

    # DEBIAN only.  RedHat has rewrite enabled by default.
    - name: Enable mod rewrite
      command: a2enmod rewrite
      when: ansible_os_family == "Debian"

    - name: Symbolic link to Aegir's Apache Config
      when: ansible_distribution != "Ubuntu" or ansible_lsb.major_release|int >= 14
      file:
        src=/var/aegir/config/apache.conf
        dest={{ apache_confd_path }}
        state=link
        force=yes
      notify:
        - restart apache

    # Apache Symlink for 14.04 and higher.
    - name: Symbolic link to Aegir's Apache Config (When ubuntu < 14.04)
      when: ansible_os_family == "Debian" and ansible_lsb.major_release|int < 14
      file:
        src=/var/aegir/config/apache.conf
        dest=/etc/apache2/conf.d/aegir.conf
        state=link
        force=yes
      notify:
        - restart apache

    - name: Write php.ini file. # @TODO: Restart apache if changed.
      template:
        src=templates/php.ini.j2
        dest={{ php_ini_path }}
        mode=0644

    - name: Write my.cnf file.
      template:
        src=templates/my.cnf.{{ ansible_os_family }}.j2
        dest={{ mysql_cnf_path }}
        mode=0644

    - name: Ensure MySQL is started and enabled on boot.
      service:
        name={{ mysql_daemon }}
        state=started
        enabled=yes

    - name: Check for secured installation of MySQL
      stat: path=/var/mysql-secured
      register: mysqlsecured

    - name: Install MySQL Securely
      include: ./tasks/mysql-secure.yml
      when: not mysqlsecured.stat.exists

    - name: Add aegir to sudoers for restarting apache.
      template:
        src=templates/sudoers-d-aegir.j2
        dest=/etc/sudoers.d/aegir
        mode=0440

    - name: Create /var/aegir/.drush
      file:
        path=/var/aegir/.drush
        owner=aegir group=aegir mode=0744
        state=directory

    - name: Install drush tools.
      command: "{{ drush_path }} dl {{ item }}  --destination=/var/aegir/.drush/commands -y --package-handler=git_drupalorg"
      sudo: yes
      sudo_user: aegir
      with_items:
        - provision-{{ provision_version }}
        - provision_git-{{ provision_git_version }}
        - devshop_provision-{{ devshop_provision_version }}
        - provision_logs-{{ provision_logs_version }}
# Commented out until functional
        - provision_solr-{{ provision_solr_version }}
        - provision_tasks_extra-{{ provision_tasks_extra_version }}
        - registry_rebuild-{{ registry_rebuild_version }}
        - provision_site_backup_manager-{{ provision_site_backup_manager_version }}
      args:
        creates: /var/aegir/.drush/commands/provision_site_backup_manager

    - name: Clear the drush cache.
      command: "{{ drush_path }} cc drush"
      sudo: yes
      sudo_user: aegir

    # Runs the drush devshop-install command with all of our options:
    - debug: msg="$ {{ drush_path }} devshop-install {{ server_hostname }} --version={{ devmaster_version }} --aegir_db_pass={{ mysql_root_password }} --aegir_db_user=root --makefile={{ devshop_makefile }} --profile=devmaster --aegir_host={{ server_hostname }} {{ devshop_working_copy }} -y"

    - name: Install Devmaster
      sudo: yes
      sudo_user: aegir
      command: "{{ drush_path }} devshop-install {{ server_hostname }} --version={{ devmaster_version }} --aegir_db_pass={{ mysql_root_password }} --aegir_db_user=root --makefile={{ devshop_makefile }} --profile=devmaster --aegir_host={{ server_hostname }} {{ devshop_working_copy }} -y"
      args:
        creates: /var/aegir/devmaster-{{ devmaster_version }}/sites/{{ server_hostname }}/settings.php

    - name: Service | Ensure Supervisor is started and enabled
      service:
        name={{ supervisor_daemon }}
        state=started
        sleep=3
        enabled=yes

    - name: Supervisor | Set up queue runner script
      template:
        src=templates/hosting-queue-runner.j2
        dest=/usr/bin/hosting-queue-runner
        mode=0700
        owner=aegir
        group=aegir

    - name: Supervisor | Set up supervisor job
      template:
        src=templates/supervisor-hosting-queue-runner.conf.j2
        dest={{ supervisor_hosting_queued_conf_path }}
        mode=0644
      notify:
        - restart supervisor

    - name: Save SSH key as variable
      shell: "{{ drush_path }} @hostmaster vset devshop_public_key \"$(cat ~/.ssh/id_rsa.pub)\" --yes"
      sudo: yes
      sudo_user: aegir

  handlers:
    - name: restart supervisor
      service:
        name={{ supervisor_daemon }}
        state=restarted
        sleep=3

    - name: restart mysql
      service: >
        name={{ mysql_daemon }}
        state=restarted

    - name: restart apache
      service:
        name={{ apache_daemon }}
        state=restarted