Add files via upload
This commit is contained in:
David Rotermund
GitHub
parent
9c385e3913
commit
0beddefac0
5 changed files with 361 additions and 0 deletions
1
host_overleaf
Normal file
1
host_overleaf
Normal file
|
|
@ -0,0 +1 @@
|
|||
134.102.55.230
|
||||
31
install_docker.yaml
Normal file
31
install_docker.yaml
Normal file
|
|
@ -0,0 +1,31 @@
|
|||
---
|
||||
- name: install docker as systemd plus add a protainer web
|
||||
hosts: all
|
||||
become: true
|
||||
|
||||
tasks:
|
||||
|
||||
- name: remove other files
|
||||
include_tasks: yaml_sub/install_docker.yaml
|
||||
|
||||
- name: Create a volume
|
||||
community.docker.docker_volume:
|
||||
name: portainer_data
|
||||
state: present
|
||||
|
||||
- name: Create portainer container
|
||||
community.docker.docker_container:
|
||||
name: portainerweb
|
||||
image: portainer/portainer-ce
|
||||
state: started
|
||||
recreate: yes
|
||||
restart_policy: always
|
||||
published_ports:
|
||||
- "8000:8000/tcp"
|
||||
- "9443:9443/tcp"
|
||||
volumes:
|
||||
- /var/run/docker.sock:/var/run/docker.sock
|
||||
- portainer_data:/data
|
||||
|
||||
|
||||
|
||||
280
install_overleaf.yaml
Normal file
280
install_overleaf.yaml
Normal file
|
|
@ -0,0 +1,280 @@
|
|||
---
|
||||
# TODO: Need to fix the mongo db init
|
||||
|
||||
- name: install overleaf
|
||||
hosts: all
|
||||
become: true
|
||||
|
||||
vars:
|
||||
EMAIL__USERNAME: "{{ EUSER }}"
|
||||
EMAIL__PASSWORD: "{{ EPASS }}"
|
||||
|
||||
tasks:
|
||||
|
||||
- name: Create network OverleafNet
|
||||
community.docker.docker_network:
|
||||
name: OverleafNet
|
||||
|
||||
- name: set smtpd_pre.conf
|
||||
blockinfile:
|
||||
path: /root/opensmtpd/smtpd_pre.conf
|
||||
state: present
|
||||
create: true
|
||||
owner: "root"
|
||||
group: "root"
|
||||
mode: "0644"
|
||||
block: |
|
||||
listen on 0.0.0.0
|
||||
listen on ::
|
||||
|
||||
table aliases file:/etc/smtpd/aliases
|
||||
|
||||
queue ttl 4d
|
||||
bounce warn-interval 1h, 6h, 2d
|
||||
smtp max-message-size 35M
|
||||
|
||||
table authinfo db:/etc/smtpd/authinfo.db
|
||||
action default relay host "smtps://user@mailhost.neurotec.uni-bremen.de:465" auth <authinfo> tls no-verify
|
||||
match from any for any action default
|
||||
|
||||
|
||||
- name: Create a volume overleafsmtpd_spool
|
||||
community.docker.docker_volume:
|
||||
name: overleafsmtpd_spool
|
||||
state: present
|
||||
|
||||
|
||||
- name: Create OpenSMTPd
|
||||
community.docker.docker_container:
|
||||
name: overleafsmtpd
|
||||
image: wodby/opensmtpd
|
||||
state: started
|
||||
recreate: no
|
||||
restart_policy: always
|
||||
networks:
|
||||
- name: OverleafNet
|
||||
comparisons:
|
||||
networks: strict
|
||||
env:
|
||||
RELAY_HOST: "XXX"
|
||||
RELAY_PROTO: "smtps"
|
||||
RELAY_PORT: "XXX"
|
||||
RELAY_USER: "{{ EMAIL__USERNAME }}"
|
||||
RELAY_PASSWORD: "{{ EMAIL__PASSWORD }}"
|
||||
|
||||
volumes:
|
||||
- "/root/opensmtpd/smtpd_pre.conf:/etc/gotpl/smtpd.conf.tmpl"
|
||||
- "overleafsmtpd_spool:/var/spool/smtpd"
|
||||
|
||||
- name: Create a volume overleaf_redis
|
||||
community.docker.docker_volume:
|
||||
name: overleaf_redis
|
||||
state: present
|
||||
|
||||
- name: Create redis container
|
||||
community.docker.docker_container:
|
||||
name: overleafredis
|
||||
image: docker.io/library/redis:6.2
|
||||
state: started
|
||||
recreate: no
|
||||
restart_policy: always
|
||||
healthcheck:
|
||||
test: ["CMD-SHELL", "redis-cli ping | grep PONG"]
|
||||
start_period: 20s
|
||||
interval: 30s
|
||||
retries: 5
|
||||
timeout: 3s
|
||||
command: --save 60 1 --loglevel warning
|
||||
volumes:
|
||||
- overleaf_redis:/data
|
||||
|
||||
networks:
|
||||
- name: OverleafNet
|
||||
|
||||
comparisons:
|
||||
networks: strict
|
||||
|
||||
|
||||
- name: Create a volume overleaf_mongo
|
||||
community.docker.docker_volume:
|
||||
name: overleaf_mongo
|
||||
state: present
|
||||
register: mongo_volume_creation
|
||||
|
||||
- name: Create a volume overleaf_mongo_cdb
|
||||
community.docker.docker_volume:
|
||||
name: overleaf_mongo_cdb
|
||||
state: present
|
||||
register: mongo_volume_creation
|
||||
|
||||
|
||||
- name: Create mongo container
|
||||
community.docker.docker_container:
|
||||
name: overleafmongo
|
||||
image: mongo:5.0
|
||||
state: started
|
||||
recreate: no
|
||||
restart_policy: always
|
||||
healthcheck:
|
||||
test: "mongosh --quiet --eval 'rs.hello().setName ? rs.hello().setName : rs.initiate({_id: \"overleaf\",members:[{_id: 0, host:\"overleafmongo:27017\"}]})'"
|
||||
#echo 'db.stats().ok' | mongo localhost:27017/test --quiet
|
||||
interval: 10s
|
||||
timeout: 10s
|
||||
retries: 5
|
||||
command: --replSet overleaf
|
||||
volumes:
|
||||
- "overleaf_mongo:/data/db"
|
||||
- "overleaf_mongo_cdb:/data/configdb"
|
||||
|
||||
networks:
|
||||
- name: OverleafNet
|
||||
# - name: bridge
|
||||
|
||||
# ports:
|
||||
# - "27017:27017"
|
||||
|
||||
comparisons:
|
||||
networks: strict
|
||||
|
||||
# - name: Prepare mongodb
|
||||
# community.docker.docker_container_exec:
|
||||
# container: overleafmongo
|
||||
# command: sh -c 'mongo --eval "rs.initiate({ _id: \"overleaf\", members: [ { _id: 0, host: \"overleafmongo:27017\" } ] })"'
|
||||
# when: mongo_volume_creation.changed
|
||||
|
||||
- name: Create a volume overleaf_data
|
||||
community.docker.docker_volume:
|
||||
name: overleaf_data
|
||||
state: present
|
||||
|
||||
- name: Create a volume overleaf_tex2024
|
||||
community.docker.docker_volume:
|
||||
name: overleaf_tex2024
|
||||
state: present
|
||||
|
||||
- name: Create overleaf container
|
||||
community.docker.docker_container:
|
||||
name: overleaf
|
||||
image: sharelatex/sharelatex
|
||||
state: started
|
||||
recreate: no
|
||||
restart_policy: always
|
||||
|
||||
volumes:
|
||||
- "overleaf_data:/var/lib/overleaf"
|
||||
- "overleaf_tex2024:/usr/local/texlive/2024"
|
||||
- "overleaf_tex2024:/usr/local/texlive/2023"
|
||||
|
||||
networks:
|
||||
- name: OverleafNet
|
||||
|
||||
comparisons:
|
||||
networks: strict
|
||||
|
||||
env:
|
||||
GIT_BRIDGE_ENABLED: "false"
|
||||
GIT_BRIDGE_HOST: "git-bridge"
|
||||
GIT_BRIDGE_PORT: "8000"
|
||||
REDIS_HOST: "overleafredis"
|
||||
REDIS_PORT: "6379"
|
||||
V1_HISTORY_URL: "http://overleaf:3100/api"
|
||||
OVERLEAF_MONGO_URL: "mongodb://overleafmongo/sharelatex"
|
||||
OVERLEAF_REDIS_HOST: "overleafredis"
|
||||
OVERLEAF_APP_NAME: "FB1 University of Bremen Overleaf"
|
||||
ENABLED_LINKED_FILE_TYPES: "project_file,project_output_file"
|
||||
ENABLE_CONVERSIONS: "true"
|
||||
EMAIL_CONFIRMATION_DISABLED: "false"
|
||||
OVERLEAF_BEHIND_PROXY: "true"
|
||||
OVERLEAF_SECURE_COOKIE: "true"
|
||||
OVERLEAF_SITE_URL: "https://overleaf.neuro.uni-bremen.de"
|
||||
OVERLEAF_NAV_TITLE: "FB1 Overleaf"
|
||||
|
||||
OVERLEAF_ADMIN_EMAIL: "overleaf@neuro.uni-bremen.de"
|
||||
OVERLEAF_EMAIL_FROM_ADDRESS: "overleaf@neuro.uni-bremen.de"
|
||||
OVERLEAF_EMAIL_SMTP_HOST: "overleafsmtpd"
|
||||
OVERLEAF_EMAIL_SMTP_PORT: "25"
|
||||
OVERLEAF_EMAIL_SMTP_SECURE: "false"
|
||||
OVERLEAF_EMAIL_SMTP_LOGGER: "true"
|
||||
OVERLEAF_CUSTOM_EMAIL_FOOTER: "This system is run by the ITP"
|
||||
|
||||
- name: set nginx.conf
|
||||
blockinfile:
|
||||
path: /root/nginx/nginx.conf
|
||||
state: present
|
||||
create: true
|
||||
owner: "root"
|
||||
group: "root"
|
||||
mode: "0644"
|
||||
block: |
|
||||
events {}
|
||||
http {
|
||||
server {
|
||||
listen 80 default_server;
|
||||
server_name _;
|
||||
return 301 https://$host$request_uri;
|
||||
}
|
||||
server {
|
||||
listen 443 ssl;
|
||||
ssl_certificate /certs/nginx_certificate.pem;
|
||||
ssl_certificate_key /certs/nginx_key.pem;
|
||||
ssl_protocols TLSv1 TLSv1.1 TLSv1.2;
|
||||
ssl_prefer_server_ciphers on;
|
||||
ssl_ciphers EECDH+CHACHA20:EECDH+AES128:RSA+AES128:EECDH+AES256:RSA+AES256:EECDH+3DES:RSA+3DES:!MD5;
|
||||
add_header Strict-Transport-Security "max-age=31536000; includeSubdomains;";
|
||||
server_tokens off;
|
||||
client_max_body_size 50M;
|
||||
|
||||
location / {
|
||||
proxy_pass http://overleaf:80;
|
||||
proxy_set_header X-Forwarded-Proto $scheme;
|
||||
proxy_http_version 1.1;
|
||||
proxy_set_header Upgrade $http_upgrade;
|
||||
proxy_set_header Connection "upgrade";
|
||||
proxy_set_header Host $host;
|
||||
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
|
||||
proxy_read_timeout 3m;
|
||||
proxy_send_timeout 3m;
|
||||
}
|
||||
}
|
||||
}
|
||||
|
||||
- name: Create nginx container
|
||||
community.docker.docker_container:
|
||||
name: overleafnginx
|
||||
image: "nginx:stable-alpine"
|
||||
state: started
|
||||
recreate: no
|
||||
restart_policy: always
|
||||
|
||||
volumes:
|
||||
- "/root/nginx/key.pem:/certs/nginx_key.pem:ro"
|
||||
- "/root/nginx/ca.pem:/certs/nginx_certificate.pem:ro"
|
||||
- "/root/nginx/nginx.conf:/etc/nginx/nginx.conf:ro"
|
||||
|
||||
ports:
|
||||
- "0.0.0.0:443:443"
|
||||
- "0.0.0.0:80:80"
|
||||
env:
|
||||
NGINX_WORKER_PROCESSES: "4"
|
||||
NGINX_WORKER_CONNECTIONS: "768"
|
||||
|
||||
networks:
|
||||
- name: OverleafNet
|
||||
|
||||
comparisons:
|
||||
networks: strict
|
||||
|
||||
- name: Post install info (1)
|
||||
debug:
|
||||
msg: "Restart Overleaf docker container"
|
||||
|
||||
- name: Post install info (2)
|
||||
debug:
|
||||
msg: "Don't forget to place the cerificates onto the server"
|
||||
|
||||
- name: Post install info (3)
|
||||
debug:
|
||||
msg: "Initial Overleaf user: got https://overleaf.neuro.uni-bremen.de/launchpad "
|
||||
|
||||
|
||||
|
||||
14
upgrade_tex.yaml
Normal file
14
upgrade_tex.yaml
Normal file
|
|
@ -0,0 +1,14 @@
|
|||
---
|
||||
- name: update tex
|
||||
hosts: all
|
||||
become: true
|
||||
|
||||
tasks:
|
||||
|
||||
- name: Update tex
|
||||
community.docker.docker_container_exec:
|
||||
container: overleaf
|
||||
command: /bin/bash -c "cd /root ; rm -rf install-tl-* ; curl -L -o tl-unx.tar.gz https://mirror.ctan.org/systems/texlive/tlnet/install-tl-unx.tar.gz ; tar -xzf tl-unx.tar.gz; cd install-tl-*; perl ./install-tl --no-interaction "
|
||||
|
||||
|
||||
|
||||
35
yaml_sub/install_docker.yaml
Normal file
35
yaml_sub/install_docker.yaml
Normal file
|
|
@ -0,0 +1,35 @@
|
|||
---
|
||||
- name: set myrepo
|
||||
blockinfile:
|
||||
path: /etc/yum.repos.d/myrepo.repo
|
||||
state: present
|
||||
create: true
|
||||
owner: "root"
|
||||
group: "root"
|
||||
mode: "0666"
|
||||
block: |
|
||||
[docker-ce-stable]
|
||||
name=Docker CE Stable - $basearch
|
||||
baseurl=https://download.docker.com/linux/fedora/$releasever/$basearch/stable
|
||||
enabled=0
|
||||
gpgcheck=1
|
||||
gpgkey=https://download.docker.com/linux/fedora/gpg
|
||||
|
||||
- name: install docker rpm
|
||||
ansible.builtin.dnf:
|
||||
name: "docker-ce,docker-ce-cli,docker-ce-rootless-extras,docker-buildx-plugin,docker-compose-plugin,python3,python3-pip,python3-requests"
|
||||
state: latest
|
||||
update_cache: true
|
||||
skip_broken: true
|
||||
nobest: false
|
||||
allowerasing: true
|
||||
enablerepo: "docker-ce-stable"
|
||||
|
||||
- name: make sure docker service unit is started
|
||||
ansible.builtin.systemd_service:
|
||||
state: started
|
||||
name: docker
|
||||
enabled: true
|
||||
|
||||
|
||||
|
||||
Loading…
Reference in a new issue