Ansible builds and deploys the documentation

ansible/base.yml

@@ -16,3 +16,4 @@
     - 5-nginx
     - 6-psql
     - 7-postinstall
+    - 8-docs

ansible/host_vars/bde-nk20-beta.adh.crans.org.yml

@@ -3,3 +3,4 @@ note:
   server_name: note-beta.crans.org
   git_branch: beta
   cron_enabled: false
+  doc_enabled: false

ansible/host_vars/bde-note.adh.crans.org.yml

@@ -3,3 +3,5 @@ note:
   server_name: note.crans.org
   git_branch: master
   cron_enabled: true
+  doc_enabled: true
+  doc_url: doc.note.crans.org

ansible/host_vars/bde3-virt.adh.crans.org.yml

@@ -3,3 +3,5 @@ note:
   server_name: note-dev.crans.org
   git_branch: beta
   cron_enabled: false
+  doc_enabled: true
+  doc_url: bde3.crans.org

ansible/roles/5-nginx/templates/nginx_note.conf

 # the upstream component nginx needs to connect to
-upstream note{
+upstream note {
     server unix:///var/www/note_kfet/note_kfet.sock; # file socket
 }
 
+{% if note.doc_enabled %}
+# Redirect doc HTTP to doc HTTPS
+server {
+    listen 80;
+    listen [::]:80;
+    server_name {{ note.doc_url }};
+
+    location / {
+        return 301 https://{{ note.doc_url }}$request_uri;
+    }
+}
+
+# configuration of the documentation website
+server {
+    listen 443 ssl;
+    listen [::]:443 ssl;
+
+    server_name {{ note.doc_url }};
+    root /var/www/documentation;
+    charset     utf-8;
+
+    ssl_certificate /etc/letsencrypt/live/{{ note.server_name }}/fullchain.pem;
+    ssl_certificate_key /etc/letsencrypt/live/{{ note.server_name }}/privkey.pem;
+    include /etc/letsencrypt/options-ssl-nginx.conf;
+    ssl_dhparam /etc/letsencrypt/ssl-dhparams.pem;
+}
+{% endif %}
+
 # Redirect HTTP to nk20 HTTPS
 server {
     listen 80 default_server;

ansible/roles/8-docs/tasks/main.yml

+---
+- name: Install Sphinx and RTD theme
+  pip:
+    requirements: /var/www/note_kfet/docs/requirements.txt
+    virtualenv: /var/www/note_kfet/env
+    virtualenv_command: /usr/bin/python3 -m venv
+    virtualenv_site_packages: true
+  become_user: www-data
+
+- name: Create documentation directory with good permissions
+  file:
+    path: /var/www/documentation
+    state: directory
+    owner: www-data
+    group: www-data
+    mode: u=rwx,g=rwxs,o=rx
+
+- name: Build HTML documentation
+  command: /var/www/note_kfet/env/bin/sphinx-build -b dirhtml /var/www/note_kfet/docs/ /var/www/documentation/
+  become_user: www-data