[galene] Deploy Galène

Signed-off-by: Yohann D'ANELLO <ynerant@crans.org>

plays/galene.yml

@@ -8,4 +8,4 @@
   roles:
     - certbot
     - nginx
-  # - galene
+    - galene

roles/galene/handlers/main.yml

+---
+- name: Restart galène
+  systemd:
+    name: galene
+    state: restarted

roles/galene/tasks/main.yml

+---
+- name: Install golang and git
+  apt:
+    update_cache: true
+    install_recommends: false
+    name:
+      - git
+      - golang
+  register: apt_result
+  retries: 3
+  until: apt_result is succeeded
+
+- name: Create galene account
+  user:
+    name: galene
+    comment: Galène
+    home: ""
+    create_home: false
+
+- name: Create Galène directory
+  file:
+    path: /var/local/galene
+    state: directory
+    owner: galene
+    group: galene
+    mode: u+rw,g+rws,o+r
+
+- name: Clone Galène
+  git:
+    repo: https://github.com/jech/galene.git
+    dest: /var/local/galene
+  register: git_result
+  become_user: galene
+
+- name: Build galene
+  when: git_result.changed
+  shell: "go build -ldflags='-s -w'"
+  args:
+    chdir: /var/local/galene
+  environment:
+    CGO_ENABLED: 0
+  notify: Restart galène
+
+- name: Install systemd unit
+  template:
+    src: systemd/system/galene.service.j2
+    dest: /etc/systemd/system/galene.service
+    owner: root
+    group: root
+    mode: 0644
+  notify: Restart galène
+
+- name: Enable systemd unit
+  systemd:
+    name: galene
+    enabled: yes
+    daemon_reload: yes
+    state: started
+
+- name: Create directory for streaming front page
+  file:
+    path: /var/www/galene-stream-frontend
+    state: directory
+    owner: www-data
+    group: www-data
+    mode: u+rw,g+rws,o+r
+
+- name: Clone stream front
+  git:
+    repo: https://gitlab.adm.crans.org/erdnaxe/galene-stream-frontend.git
+    dest: /var/www/galene-stream-frontend
+
+- name: Indicate role in motd
+  template:
+    src: update-motd.d/05-service.j2
+    dest: /etc/update-motd.d/05-galene
+    mode: 0755

roles/galene/templates/systemd/system/galene.service.j2

+{{ ansible_header }}
+
+[Unit]
+Description=Galene
+After=network.target
+
+[Service]
+Type=simple
+WorkingDirectory=/var/local/galene
+User=galene
+Group=galene
+ExecStart=/var/local/galene/galene --insecure
+LimitNOFILE=65536
+
+[Install]
+WantedBy=multi-user.target

roles/galene/templates/update-motd.d/05-service.j2

+#!/usr/bin/tail +14
+{{ ansible_header | comment }}
+> Galène a été déployé sur cette machine. Voir /var/local/galene/.