kopia lustrzana https://github.com/jedie/PyInventory
Merge remote-tracking branch 'origin/deployment' into merge-deploy-src
JensDiemer
commit
e9ad443e06
|
|
@ -0,0 +1 @@
|
||||||
|
*
|
||||||
|
|
@ -0,0 +1,79 @@
|
||||||
|
.*
|
||||||
|
!.github
|
||||||
|
!.dockerignore
|
||||||
|
!.editorconfig
|
||||||
|
!.flake8
|
||||||
|
!.gitignore
|
||||||
|
!.isort.cfg
|
||||||
|
!/.travis.yml
|
||||||
|
!/.style.yapf
|
||||||
|
!.coveralls.yml
|
||||||
|
|
||||||
|
poetry.lock
|
||||||
|
|
||||||
|
# for django-dbbackup
|
||||||
|
/backups/
|
||||||
|
!/backups/.gitkeep
|
||||||
|
|
||||||
|
# from test projects:
|
||||||
|
/static/
|
||||||
|
/media/
|
||||||
|
*.sqlite3
|
||||||
|
|
||||||
|
# docker-compose usage:
|
||||||
|
volumes
|
||||||
|
|
||||||
|
# Django
|
||||||
|
secret.txt
|
||||||
|
|
||||||
|
# Coverage HTML Report files:
|
||||||
|
htmlcov
|
||||||
|
|
||||||
|
# Byte-compiled / optimized / DLL files
|
||||||
|
__pycache__/
|
||||||
|
*.py[cod]
|
||||||
|
*$py.class
|
||||||
|
|
||||||
|
# C extensions
|
||||||
|
*.so
|
||||||
|
|
||||||
|
# Distribution / packaging
|
||||||
|
.tox
|
||||||
|
.Python
|
||||||
|
env/
|
||||||
|
build/
|
||||||
|
develop-eggs/
|
||||||
|
dist/
|
||||||
|
downloads/
|
||||||
|
eggs/
|
||||||
|
lib/
|
||||||
|
lib64/
|
||||||
|
parts/
|
||||||
|
sdist/
|
||||||
|
var/
|
||||||
|
*.egg-info/
|
||||||
|
.installed.cfg
|
||||||
|
*.egg
|
||||||
|
|
||||||
|
# Installer logs
|
||||||
|
pip-log.txt
|
||||||
|
pip-delete-this-directory.txt
|
||||||
|
|
||||||
|
# Unit test / coverage reports
|
||||||
|
db.sqlite3
|
||||||
|
coverage_html/
|
||||||
|
coverage.xml
|
||||||
|
*,cover
|
||||||
|
|
||||||
|
# Translations
|
||||||
|
*.pot
|
||||||
|
|
||||||
|
# Django stuff:
|
||||||
|
*.log
|
||||||
|
|
||||||
|
# Sphinx documentation
|
||||||
|
docs/_build/
|
||||||
|
|
||||||
|
# PyBuilder
|
||||||
|
target/
|
||||||
|
|
||||||
|
|
@ -0,0 +1,18 @@
|
||||||
|
FROM python:3.9-slim-buster
|
||||||
|
# https://hub.docker.com/_/python
|
||||||
|
|
||||||
|
# Install deps
|
||||||
|
RUN apt-get update \
|
||||||
|
&& apt-mark auto $(apt-mark showinstall) \
|
||||||
|
&& apt-get install -y postgresql-client-11 python3-pip \
|
||||||
|
&& apt autoremove \
|
||||||
|
&& apt -y full-upgrade \
|
||||||
|
&& rm -rf /var/lib/apt \
|
||||||
|
&& python3 -m pip install -U pip \
|
||||||
|
&& pip install -U psycopg2-binary
|
||||||
|
|
||||||
|
WORKDIR /inventory
|
||||||
|
|
||||||
|
RUN pip install "pyinventory>=0.4.2"
|
||||||
|
|
||||||
|
|
||||||
|
|
@ -0,0 +1,131 @@
|
||||||
|
SHELL := /bin/bash
|
||||||
|
|
||||||
|
help: ## List all commands
|
||||||
|
@awk 'BEGIN {FS = ":.*?## "} /^[a-zA-Z0-9 -_]+:.*?## / {printf "\033[36m%-20s\033[0m %s\n", $$1, $$2}' $(MAKEFILE_LIST)
|
||||||
|
|
||||||
|
check-poetry:
|
||||||
|
@if [[ "$(shell poetry --version 2>/dev/null)" == *"Poetry"* ]] ; \
|
||||||
|
then \
|
||||||
|
echo "Poetry found, ok." ; \
|
||||||
|
else \
|
||||||
|
echo 'Please install poetry first, with e.g.:' ; \
|
||||||
|
echo 'make install-poetry' ; \
|
||||||
|
exit 1 ; \
|
||||||
|
fi
|
||||||
|
|
||||||
|
install-poetry: ## install or update poetry
|
||||||
|
@if [[ "$(shell poetry --version 2>/dev/null)" == *"Poetry"* ]] ; \
|
||||||
|
then \
|
||||||
|
echo 'Update poetry' ; \
|
||||||
|
poetry self update ; \
|
||||||
|
else \
|
||||||
|
echo 'Install poetry' ; \
|
||||||
|
curl -sSL "https://raw.githubusercontent.com/python-poetry/poetry/master/get-poetry.py" | python3 ; \
|
||||||
|
fi
|
||||||
|
|
||||||
|
install: check-poetry ## install requirements to setup project
|
||||||
|
poetry install
|
||||||
|
|
||||||
|
update: check-poetry ## update the sources and docker containers
|
||||||
|
git fetch --all
|
||||||
|
git pull origin deployment
|
||||||
|
poetry update
|
||||||
|
./compose.sh build --pull
|
||||||
|
$(MAKE) restart
|
||||||
|
|
||||||
|
check-compose:
|
||||||
|
@if [[ "$(shell poetry run docker-compose --version 2>/dev/null)" = *"docker-compose version"* ]] ; \
|
||||||
|
then \
|
||||||
|
echo "docker-compose found, ok." ; \
|
||||||
|
else \
|
||||||
|
echo 'Please install extras first, with e.g.:' ; \
|
||||||
|
echo 'make install-compose' ; \
|
||||||
|
exit 1 ; \
|
||||||
|
fi
|
||||||
|
|
||||||
|
up: check-compose ## Start containers via docker-compose
|
||||||
|
./compose.sh up -d
|
||||||
|
$(MAKE) prune
|
||||||
|
./compose.sh logs --tail=500 --follow
|
||||||
|
|
||||||
|
down: ## Stop all containers
|
||||||
|
./compose.sh down
|
||||||
|
|
||||||
|
prune: ## Cleanup docker
|
||||||
|
docker system prune --force --all --filter until=4464h
|
||||||
|
|
||||||
|
build: check-compose ## Update docker container build
|
||||||
|
./compose.sh build --pull
|
||||||
|
|
||||||
|
init_postgres: ## Create postgres database
|
||||||
|
./compose.sh exec postgres ./docker/postgres_init.sh
|
||||||
|
|
||||||
|
##############################################################################
|
||||||
|
|
||||||
|
createsuperuser: ## Create super user
|
||||||
|
./compose.sh exec inventory ./manage.sh createsuperuser
|
||||||
|
|
||||||
|
##############################################################################
|
||||||
|
|
||||||
|
shell_inventory: ## Go into bash shell in inventory container
|
||||||
|
./compose.sh exec inventory /bin/bash
|
||||||
|
|
||||||
|
shell_postgres: ## Go into bash shell in postgres container
|
||||||
|
./compose.sh exec postgres /bin/bash
|
||||||
|
|
||||||
|
shell_caddy: ## Go into bash shell in caddy container
|
||||||
|
./compose.sh exec caddy /bin/ash
|
||||||
|
|
||||||
|
##############################################################################
|
||||||
|
|
||||||
|
caddy_environ: ## Prints the caddy environment
|
||||||
|
./compose.sh exec caddy /usr/bin/caddy environ
|
||||||
|
|
||||||
|
##############################################################################
|
||||||
|
|
||||||
|
logs: ## Display docker logs from all containers
|
||||||
|
./compose.sh logs --tail=500 --follow
|
||||||
|
|
||||||
|
logs_postgres: ## Display docker logs from postgres container
|
||||||
|
./compose.sh logs --tail=500 --follow postgres
|
||||||
|
|
||||||
|
logs_inventory: ## Display docker logs from inventory container
|
||||||
|
./compose.sh logs --tail=500 --follow inventory
|
||||||
|
|
||||||
|
logs_caddy: ## Display docker logs from caddy container
|
||||||
|
./compose.sh logs --tail=500 --follow caddy
|
||||||
|
|
||||||
|
##############################################################################
|
||||||
|
|
||||||
|
dbbackup: ## Backup database
|
||||||
|
./compose.sh exec inventory ./manage.sh dbbackup
|
||||||
|
|
||||||
|
dbrestore: ## Restore a database backup
|
||||||
|
./compose.sh exec inventory ./manage.sh dbrestore
|
||||||
|
|
||||||
|
##############################################################################
|
||||||
|
|
||||||
|
restart: down up ## Restart all containers
|
||||||
|
|
||||||
|
upgrade_inventory: ## Upgrade "inventory" container and restart it
|
||||||
|
$(MAKE) build
|
||||||
|
./compose.sh stop inventory
|
||||||
|
$(MAKE) up
|
||||||
|
|
||||||
|
restart_caddy: ## Restart caddy container
|
||||||
|
./compose.sh stop caddy
|
||||||
|
$(MAKE) up
|
||||||
|
|
||||||
|
##############################################################################
|
||||||
|
|
||||||
|
reload_caddy: ## Reload Caddy server
|
||||||
|
./compose.sh exec caddy caddy reload --config /etc/caddy/Caddyfile --adapter caddyfile
|
||||||
|
$(MAKE) logs_caddy
|
||||||
|
|
||||||
|
reload_inventory: ## Reload server in "inventory" container
|
||||||
|
./compose.sh exec inventory ./docker/kill_python.sh
|
||||||
|
./compose.sh logs --tail=500 --follow inventory
|
||||||
|
|
||||||
|
##############################################################################
|
||||||
|
|
||||||
|
.PHONY: help
|
||||||
|
|
@ -0,0 +1,221 @@
|
||||||
|
= PyInventory - deployment branch
|
||||||
|
|
||||||
|
Web based management to catalog things including state and location etc. using Python/Django.
|
||||||
|
|
||||||
|
**Note:**
|
||||||
|
|
||||||
|
* This README (in git **deployment** branch) contains only the instruction to install PyInventory on a root server.
|
||||||
|
* Read [[https://github.com/jedie/PyInventory/tree/master#readme|master README]] for local develompment installation.
|
||||||
|
|
||||||
|
Pull requests welcome!
|
||||||
|
|
||||||
|
|
||||||
|
== git branches
|
||||||
|
|
||||||
|
Currently we have two main branches:
|
||||||
|
|
||||||
|
|= git branch |= description
|
||||||
|
| **[[https://github.com/jedie/PyInventory/tree/master|master]]** | The main PyInventory source code
|
||||||
|
| **[[https://github.com/jedie/PyInventory/tree/deployment|deployment]]** | separate project to deploy PyInventory for production use case
|
||||||
|
|
||||||
|
|
||||||
|
== deploy
|
||||||
|
|
||||||
|
Install PyInventory on a root server:
|
||||||
|
|
||||||
|
**Note:**
|
||||||
|
|
||||||
|
* Running a public web server is a lot of work and brings some risks.
|
||||||
|
* This instructions are only the basics to get PyInventory working.
|
||||||
|
* To run the server safely, more work should be done, which is not explained here.
|
||||||
|
* Run at your own risk! No warranty is given.
|
||||||
|
|
||||||
|
|
||||||
|
=== prepare root server
|
||||||
|
|
||||||
|
Here some steps for a fresh created root server:
|
||||||
|
|
||||||
|
Update all packages, e.g.:
|
||||||
|
{{{
|
||||||
|
apt update && apt -y full-upgrade
|
||||||
|
}}}
|
||||||
|
|
||||||
|
Setup a normal user. You may use [[https://github.com/jedie/PyInventory/blob/deployment/scripts/setup_user.sh|scripts/setup_user.sh]]
|
||||||
|
|
||||||
|
|
||||||
|
=== Setup SSH services
|
||||||
|
|
||||||
|
{{{
|
||||||
|
~# nano /etc/ssh/sshd_config
|
||||||
|
}}}
|
||||||
|
|
||||||
|
Change e.g.:
|
||||||
|
{{{
|
||||||
|
Port xxxx
|
||||||
|
PermitRootLogin no
|
||||||
|
PasswordAuthentication no
|
||||||
|
}}}
|
||||||
|
(Changing the Port may need to change a firewall/network settings)
|
||||||
|
|
||||||
|
{{{
|
||||||
|
# restart SSH deamon:
|
||||||
|
~# service ssh restart
|
||||||
|
|
||||||
|
# Display and follow the ssh log output to see connection errors:
|
||||||
|
~# journalctl -f -u ssh
|
||||||
|
}}}
|
||||||
|
|
||||||
|
* Keep the current SSH session (with the log output) open!
|
||||||
|
* Update your {{{~/.ssh/config}}}
|
||||||
|
* Try to connect as the new, normal user in a **separate** terminal
|
||||||
|
|
||||||
|
Only after a working new connection: Terminate the first root SSH session ;)
|
||||||
|
|
||||||
|
|
||||||
|
=== setup unattended-upgrades
|
||||||
|
|
||||||
|
{{{
|
||||||
|
~$ sudo apt install unattended-upgrades
|
||||||
|
~$ sudo dpkg-reconfigure unattended-upgrades
|
||||||
|
~$ sudo nano /etc/apt/apt.conf.d/50unattended-upgrades
|
||||||
|
}}}
|
||||||
|
|
||||||
|
|
||||||
|
=== install requirements
|
||||||
|
|
||||||
|
Install docker, see: https://docs.docker.com/engine/install/ubuntu/
|
||||||
|
|
||||||
|
install some base packages, e.g.:
|
||||||
|
{{{
|
||||||
|
~$ sudo apt install git make
|
||||||
|
}}}
|
||||||
|
|
||||||
|
|
||||||
|
|
||||||
|
=== install PyInventory
|
||||||
|
|
||||||
|
{{{
|
||||||
|
# Checkout the deployment branch:
|
||||||
|
~$ git clone -b deployment https://github.com/jedie/PyInventory.git PyInventory-Deployment
|
||||||
|
~$ cd PyInventory-Deployment
|
||||||
|
|
||||||
|
# Theses Makefile targets exists:
|
||||||
|
~/PyInventory-Deployment$ make
|
||||||
|
help List all commands
|
||||||
|
install-poetry install or update poetry
|
||||||
|
install install requirements to setup project
|
||||||
|
update update the sources and docker containers
|
||||||
|
up Start containers via docker-compose
|
||||||
|
down Stop all containers
|
||||||
|
prune Cleanup docker
|
||||||
|
build Update docker container build
|
||||||
|
init_postgres Create postgres database
|
||||||
|
createsuperuser Create super user
|
||||||
|
shell_inventory Go into bash shell in inventory container
|
||||||
|
shell_postgres Go into bash shell in postgres container
|
||||||
|
shell_caddy Go into bash shell in caddy container
|
||||||
|
caddy_environ Prints the caddy environment
|
||||||
|
logs Display docker logs from all containers
|
||||||
|
logs_postgres Display docker logs from postgres container
|
||||||
|
logs_inventory Display docker logs from inventory container
|
||||||
|
logs_caddy Display docker logs from caddy container
|
||||||
|
dbbackup Backup database
|
||||||
|
dbrestore Restore a database backup
|
||||||
|
restart Restart all containers
|
||||||
|
upgrade_inventory Upgrade "inventory" container and restart it
|
||||||
|
restart_caddy Restart caddy container
|
||||||
|
reload_caddy Reload Caddy server
|
||||||
|
reload_inventory Reload server in "inventory" container
|
||||||
|
}}}
|
||||||
|
|
||||||
|
Install, e.g.:
|
||||||
|
|
||||||
|
{{{
|
||||||
|
# install or update poetry:
|
||||||
|
~/PyInventory-Deployment$ make install-poetry
|
||||||
|
}}}
|
||||||
|
|
||||||
|
To keep poetry running (PATH must be expand) just logout and login ;)
|
||||||
|
|
||||||
|
{{{
|
||||||
|
# install requirements (e.g.: docker-compose) via poetry:
|
||||||
|
~/PyInventory-Deployment$ make install
|
||||||
|
}}}
|
||||||
|
|
||||||
|
Create a {{{.env}}} file in project root directory with these content, e.g.:
|
||||||
|
{{{
|
||||||
|
~/PyInventory-Deployment$ touch .env
|
||||||
|
~/PyInventory-Deployment$ nano .env
|
||||||
|
~/PyInventory-Deployment$ cat .env
|
||||||
|
# Your Public domain:
|
||||||
|
HOSTNAME=domain.tld
|
||||||
|
|
||||||
|
# eMail address for Let's encrypt:
|
||||||
|
LETSENCRYPT_EMAIL=webmaster@domain.tld
|
||||||
|
}}}
|
||||||
|
|
||||||
|
For local testing of the docker-compose setup, used this values:
|
||||||
|
{{{
|
||||||
|
HOSTNAME=localhost
|
||||||
|
LETSENCRYPT_EMAIL=internal
|
||||||
|
}}}
|
||||||
|
(Caddy will create a self signed https certificate)
|
||||||
|
|
||||||
|
Start containers via docker-compose:
|
||||||
|
{{{
|
||||||
|
~/PyInventory-Deployment$ make up
|
||||||
|
}}}
|
||||||
|
|
||||||
|
Notes: At the first start it takes a little while until the database is created ;)
|
||||||
|
|
||||||
|
Create first super user:
|
||||||
|
{{{
|
||||||
|
~/PyInventory-Deployment$ make docker_createsuperuser
|
||||||
|
}}}
|
||||||
|
|
||||||
|
* Now you should be able to connect to your PyInventory installation and login with created super user.
|
||||||
|
* Redirect from **http** to **https** should work.
|
||||||
|
* Let's Encrypt certificate should be installed and valid.
|
||||||
|
* Containers should be restarted after a server reboot
|
||||||
|
|
||||||
|
|
||||||
|
=== Maintenance
|
||||||
|
|
||||||
|
TO keep everything up-to-date do the following steps:
|
||||||
|
|
||||||
|
Update the OS call:
|
||||||
|
{{{
|
||||||
|
~/PyInventory-Deployment$ sudo ./scripts/apt-distupgrade.sh
|
||||||
|
}}}
|
||||||
|
|
||||||
|
Update PyInventory installation and docker containers:
|
||||||
|
{{{
|
||||||
|
~/PyInventory-Deployment$ make update
|
||||||
|
}}}
|
||||||
|
|
||||||
|
This will do:
|
||||||
|
|
||||||
|
* update the source code
|
||||||
|
* update docker-compose and all requirements
|
||||||
|
* Pull and rebuild all docker containers
|
||||||
|
* restart all docker containers
|
||||||
|
|
||||||
|
Take a look at [[https://github.com/jedie/PyInventory/blob/deployment/scripts/apt-cleanup.sh|scripts/apt-cleanup.sh]] to keep your system clean.
|
||||||
|
|
||||||
|
|
||||||
|
== links ==
|
||||||
|
|
||||||
|
| Homepage | http://github.com/jedie/PyInventory
|
||||||
|
|
||||||
|
Web server stuff:
|
||||||
|
|
||||||
|
* https://help.ubuntu.com/community/Security
|
||||||
|
* https://help.ubuntu.com/lts/serverguide/automatic-updates.html
|
||||||
|
* https://help.ubuntu.com/community/AutomaticSecurityUpdate
|
||||||
|
|
||||||
|
|
||||||
|
== donation ==
|
||||||
|
|
||||||
|
* [[https://www.paypal.me/JensDiemer|paypal.me/JensDiemer]]
|
||||||
|
* [[https://flattr.com/submit/auto?uid=jedie&url=https%3A%2F%2Fgithub.com%2Fjedie%2FPyInventory%2F|Flattr This!]]
|
||||||
|
* Send [[http://www.bitcoin.org/|Bitcoins]] to [[https://blockexplorer.com/address/1823RZ5Md1Q2X5aSXRC5LRPcYdveCiVX6F|1823RZ5Md1Q2X5aSXRC5LRPcYdveCiVX6F]]
|
||||||
|
|
@ -0,0 +1,31 @@
|
||||||
|
# https://caddyserver.com/docs/caddyfile
|
||||||
|
|
||||||
|
{$HOSTNAME} {
|
||||||
|
tls {$LETSENCRYPT_EMAIL}
|
||||||
|
|
||||||
|
log {
|
||||||
|
output stdout
|
||||||
|
format console
|
||||||
|
level WARN
|
||||||
|
}
|
||||||
|
|
||||||
|
header {
|
||||||
|
X-Robots-Tag "none"
|
||||||
|
}
|
||||||
|
|
||||||
|
respond /robots.txt 200 {
|
||||||
|
body "User-agent: *
|
||||||
|
Disallow: /"
|
||||||
|
close
|
||||||
|
}
|
||||||
|
|
||||||
|
route {
|
||||||
|
file_server /static/* {
|
||||||
|
root /srv/
|
||||||
|
}
|
||||||
|
file_server /media/* {
|
||||||
|
root /srv/
|
||||||
|
}
|
||||||
|
reverse_proxy inventory:8000
|
||||||
|
}
|
||||||
|
}
|
||||||
|
|
@ -0,0 +1,10 @@
|
||||||
|
DB_NAME=pyinventory
|
||||||
|
DB_USER=postgres
|
||||||
|
DB_PASS=postgres
|
||||||
|
DB_HOST=postgres
|
||||||
|
DB_PORT=5432
|
||||||
|
|
||||||
|
PYTHONUNBUFFERED=1
|
||||||
|
|
||||||
|
# e.g.: pip cache:
|
||||||
|
XDG_CACHE_HOME="/var/cache"
|
||||||
|
|
@ -0,0 +1,12 @@
|
||||||
|
#!/bin/bash
|
||||||
|
|
||||||
|
set -e
|
||||||
|
|
||||||
|
if [[ -f .env ]]; then
|
||||||
|
echo "Read '.env' file..."
|
||||||
|
source .env
|
||||||
|
fi
|
||||||
|
|
||||||
|
set -x
|
||||||
|
|
||||||
|
exec poetry run docker-compose "$@"
|
||||||
|
|
@ -0,0 +1,55 @@
|
||||||
|
version: "3.7"
|
||||||
|
|
||||||
|
services:
|
||||||
|
caddy: # https://hub.docker.com/_/caddy
|
||||||
|
image: caddy:2-alpine
|
||||||
|
restart: unless-stopped
|
||||||
|
ports:
|
||||||
|
- "80:80"
|
||||||
|
- "443:443"
|
||||||
|
volumes:
|
||||||
|
- ./caddy/Caddyfile:/etc/caddy/Caddyfile
|
||||||
|
- ./volumes/static/:/srv/static/:ro
|
||||||
|
- ./volumes/media/:/srv/media/:ro
|
||||||
|
environment:
|
||||||
|
- HOSTNAME=${HOSTNAME:-localhost}
|
||||||
|
- LETSENCRYPT_EMAIL=${LETSENCRYPT_EMAIL:-internal}
|
||||||
|
|
||||||
|
inventory:
|
||||||
|
build:
|
||||||
|
context: .
|
||||||
|
dockerfile: Dockerfile
|
||||||
|
restart: unless-stopped
|
||||||
|
hostname: inventory
|
||||||
|
ports:
|
||||||
|
- "8000"
|
||||||
|
env_file: ./common.env
|
||||||
|
environment:
|
||||||
|
- DJANGO_SETTINGS_MODULE=inventory_settings
|
||||||
|
- HOSTNAME=${HOSTNAME:-localhost}
|
||||||
|
links:
|
||||||
|
- postgres:postgres
|
||||||
|
depends_on:
|
||||||
|
- postgres
|
||||||
|
- caddy
|
||||||
|
volumes:
|
||||||
|
- ./inventory/:/inventory/
|
||||||
|
- ./volumes/static/:/static/:rw
|
||||||
|
- ./volumes/media/:/media/:rw
|
||||||
|
# e.g.: pip cache must be the same value as $XDG_CACHE_HOME !
|
||||||
|
- ./volumes/cache/:/var/cache/:rw
|
||||||
|
entrypoint: /inventory/entrypoint.sh
|
||||||
|
|
||||||
|
postgres:
|
||||||
|
# https://hub.docker.com/_/postgres
|
||||||
|
image: postgres:11-alpine
|
||||||
|
restart: unless-stopped
|
||||||
|
hostname: postgres
|
||||||
|
ports:
|
||||||
|
- "5432"
|
||||||
|
env_file: ./common.env
|
||||||
|
environment:
|
||||||
|
- POSTGRES_HOST_AUTH_METHOD=trust
|
||||||
|
volumes:
|
||||||
|
- ./postgres/init-user-db.sh:/docker-entrypoint-initdb.d/init-user-db.sh:ro
|
||||||
|
- ./volumes/postgresql/data/:/var/lib/postgresql/data/:rw
|
||||||
|
|
@ -0,0 +1,46 @@
|
||||||
|
#!/bin/sh
|
||||||
|
|
||||||
|
set -e
|
||||||
|
|
||||||
|
restart_error_handler() {
|
||||||
|
(
|
||||||
|
echo "Restart ${0} in 3 sec..."
|
||||||
|
sleep 1
|
||||||
|
echo "Restart ${0} in 2 sec..."
|
||||||
|
sleep 1
|
||||||
|
echo "Restart ${0} in 1 sec..."
|
||||||
|
sleep 1
|
||||||
|
)
|
||||||
|
exec ${0}
|
||||||
|
}
|
||||||
|
trap restart_error_handler 0
|
||||||
|
|
||||||
|
echo "_______________________________________________________________________"
|
||||||
|
echo "$(date +%c) - ${0}"
|
||||||
|
|
||||||
|
(
|
||||||
|
set -x
|
||||||
|
|
||||||
|
pip3 install -U pyinventory
|
||||||
|
|
||||||
|
./manage.py collectstatic --noinput
|
||||||
|
./manage.py migrate
|
||||||
|
|
||||||
|
uwsgi \
|
||||||
|
--http inventory:8000 \
|
||||||
|
--chdir /inventory/ \
|
||||||
|
--wsgi-file /inventory/wsgi.py \
|
||||||
|
--master \
|
||||||
|
--processes 2 \
|
||||||
|
--threads 2 \
|
||||||
|
--ignore-sigpipe \
|
||||||
|
--ignore-write-errors \
|
||||||
|
--disable-write-exception \
|
||||||
|
--http-auto-chunked \
|
||||||
|
--http-keepalive
|
||||||
|
echo "uwsgi terminated with exit code: $?"
|
||||||
|
sleep 3
|
||||||
|
exit 1
|
||||||
|
)
|
||||||
|
|
||||||
|
exit 2
|
||||||
|
|
@ -0,0 +1,42 @@
|
||||||
|
"""
|
||||||
|
Django settings for docker usage
|
||||||
|
"""
|
||||||
|
import os as __os
|
||||||
|
|
||||||
|
from inventory_project.settings.base import * # noqa
|
||||||
|
|
||||||
|
HOSTNAME = __os.environ['HOSTNAME']
|
||||||
|
|
||||||
|
|
||||||
|
if HOSTNAME != 'localhost':
|
||||||
|
print(f'Production mode on domain: {HOSTNAME!r}')
|
||||||
|
DEBUG = False
|
||||||
|
INTERNAL_IPS = ()
|
||||||
|
else:
|
||||||
|
print('Local development mode')
|
||||||
|
DEBUG = True
|
||||||
|
INTERNAL_IPS = ('127.0.0.1', '0.0.0.0', 'localhost')
|
||||||
|
|
||||||
|
|
||||||
|
SERVE_FILES = False # Caddy serve static/media files
|
||||||
|
|
||||||
|
|
||||||
|
ALLOWED_HOSTS = (HOSTNAME,)
|
||||||
|
|
||||||
|
|
||||||
|
DATABASES = {
|
||||||
|
'default': {
|
||||||
|
'ENGINE': 'django.db.backends.postgresql',
|
||||||
|
'NAME': __os.environ['DB_NAME'],
|
||||||
|
'USER': __os.environ['DB_USER'],
|
||||||
|
'PASSWORD': __os.environ['DB_PASS'],
|
||||||
|
'HOST': __os.environ['DB_HOST'],
|
||||||
|
'PORT': __os.environ['DB_PORT'],
|
||||||
|
'DEBUG_NAME': 'default',
|
||||||
|
'CONN_MAX_AGE': 600,
|
||||||
|
},
|
||||||
|
}
|
||||||
|
|
||||||
|
# docker volumes:
|
||||||
|
STATIC_ROOT = '/static/'
|
||||||
|
MEDIA_ROOT = '/media/'
|
||||||
|
|
@ -0,0 +1,5 @@
|
||||||
|
#!/bin/sh
|
||||||
|
|
||||||
|
set -ex
|
||||||
|
|
||||||
|
for pid in $(pidof python3); do kill $pid; done
|
||||||
|
|
@ -0,0 +1,14 @@
|
||||||
|
#!/usr/bin/env python3
|
||||||
|
|
||||||
|
import os
|
||||||
|
import sys
|
||||||
|
|
||||||
|
|
||||||
|
def main():
|
||||||
|
assert 'DJANGO_SETTINGS_MODULE' in os.environ, 'No "DJANGO_SETTINGS_MODULE" in environment!'
|
||||||
|
from django.core.management import execute_from_command_line
|
||||||
|
execute_from_command_line(sys.argv)
|
||||||
|
|
||||||
|
|
||||||
|
if __name__ == '__main__':
|
||||||
|
main()
|
||||||
|
|
@ -0,0 +1,9 @@
|
||||||
|
"""
|
||||||
|
WSGI config
|
||||||
|
"""
|
||||||
|
|
||||||
|
|
||||||
|
from django.core.wsgi import get_wsgi_application
|
||||||
|
|
||||||
|
|
||||||
|
application = get_wsgi_application()
|
||||||
|
|
@ -0,0 +1,5 @@
|
||||||
|
#!/bin/bash
|
||||||
|
|
||||||
|
set -ex
|
||||||
|
|
||||||
|
psql -U postgres -c "CREATE DATABASE $DB_NAME OWNER $DB_USER"
|
||||||
|
|
@ -0,0 +1,16 @@
|
||||||
|
[tool.poetry]
|
||||||
|
name = "pyinventory-deployment"
|
||||||
|
version = "0.1.0"
|
||||||
|
description = "production deployment for PyInventory project with docker-compose usage"
|
||||||
|
authors = ["JensDiemer <git@jensdiemer.de>"]
|
||||||
|
license = "GPL"
|
||||||
|
|
||||||
|
[tool.poetry.dependencies]
|
||||||
|
python = ">=3.7,<4.0.0"
|
||||||
|
docker-compose = "*"
|
||||||
|
|
||||||
|
[tool.poetry.dev-dependencies]
|
||||||
|
|
||||||
|
[build-system]
|
||||||
|
requires = ["poetry-core>=1.0.0"]
|
||||||
|
build-backend = "poetry.core.masonry.api"
|
||||||
|
|
@ -0,0 +1,69 @@
|
||||||
|
#!/bin/bash
|
||||||
|
|
||||||
|
# Cleanup installed packages by using apt-mark:
|
||||||
|
#
|
||||||
|
# 1. mark all packages as "auto"
|
||||||
|
# 2. install really needed packages "manual"
|
||||||
|
# 3. call "autoremove" to deinstall all not needed packages
|
||||||
|
#
|
||||||
|
# WARNING: You may need some more packages depend on your cloud provider!
|
||||||
|
|
||||||
|
|
||||||
|
|
||||||
|
###############################################################
|
||||||
|
# Remove this lines:
|
||||||
|
echo "Adjust this script first, before you use it!"
|
||||||
|
exit 1
|
||||||
|
###############################################################
|
||||||
|
|
||||||
|
|
||||||
|
|
||||||
|
set -e
|
||||||
|
|
||||||
|
if [ "$(whoami)" != "root" ]; then
|
||||||
|
echo "Please start with 'sudo' !"
|
||||||
|
exit 1
|
||||||
|
fi
|
||||||
|
|
||||||
|
clear
|
||||||
|
|
||||||
|
# These packages should be installed:
|
||||||
|
PACKAGES=(
|
||||||
|
linux-image-virtual ubuntu-minimal acpid
|
||||||
|
qemu-guest-agent
|
||||||
|
command-not-found
|
||||||
|
update-manager-core
|
||||||
|
unattended-upgrades
|
||||||
|
openssh-server
|
||||||
|
rsync
|
||||||
|
lshw htop mc nano
|
||||||
|
git make
|
||||||
|
apt-transport-https curl gnupg-agent software-properties-common
|
||||||
|
docker-ce docker-ce-cli containerd.io
|
||||||
|
)
|
||||||
|
|
||||||
|
(
|
||||||
|
set -ex
|
||||||
|
|
||||||
|
apt update
|
||||||
|
|
||||||
|
{ echo "---------------------------------------------------"; } 2>/dev/null
|
||||||
|
|
||||||
|
# Mark all installed packages as "auto":
|
||||||
|
apt-mark auto $(apt-mark showinstall)
|
||||||
|
|
||||||
|
{ echo "---------------------------------------------------"; } 2>/dev/null
|
||||||
|
|
||||||
|
# Install the really needed packages:
|
||||||
|
apt -y install "${PACKAGES[@]}"
|
||||||
|
|
||||||
|
{ echo "---------------------------------------------------"; } 2>/dev/null
|
||||||
|
|
||||||
|
# Update all installed packages:
|
||||||
|
apt -y full-upgrade
|
||||||
|
|
||||||
|
{ echo "---------------------------------------------------"; } 2>/dev/null
|
||||||
|
|
||||||
|
# Deinstall all not needed packages:
|
||||||
|
apt autoremove
|
||||||
|
)
|
||||||
|
|
@ -0,0 +1,14 @@
|
||||||
|
#!/bin/bash
|
||||||
|
|
||||||
|
(
|
||||||
|
set -x
|
||||||
|
sudo apt update
|
||||||
|
{ echo "---------------------------------------------------"; } 2>/dev/null
|
||||||
|
sudo apt -y full-upgrade
|
||||||
|
{ echo "---------------------------------------------------"; } 2>/dev/null
|
||||||
|
sudo apt -y autoremove
|
||||||
|
{ echo "---------------------------------------------------"; } 2>/dev/null
|
||||||
|
# Delete old entries:
|
||||||
|
sudo journalctl --vacuum-size=1G
|
||||||
|
sudo journalctl --vacuum-time=1years
|
||||||
|
)
|
||||||
|
|
@ -0,0 +1,21 @@
|
||||||
|
#!/usr/bin/env bash
|
||||||
|
|
||||||
|
if [ "$(whoami)" != "root" ]; then
|
||||||
|
echo "Please start with 'sudo' !"
|
||||||
|
(
|
||||||
|
set -x
|
||||||
|
id
|
||||||
|
exit 1
|
||||||
|
)
|
||||||
|
fi
|
||||||
|
|
||||||
|
|
||||||
|
set -ex
|
||||||
|
|
||||||
|
export USERNAME=${1}
|
||||||
|
|
||||||
|
adduser --disabled-password --gecos "" --home=/home/${USERNAME} ${USERNAME}
|
||||||
|
mkdir -p /home/${USERNAME}/.ssh
|
||||||
|
cp /root/.ssh/authorized_keys /home/${USERNAME}/.ssh/
|
||||||
|
chown -Rfc ${USERNAME}.${USERNAME} /home/${USERNAME}/
|
||||||
|
echo "${USERNAME} ALL=(ALL) NOPASSWD:ALL">/etc/sudoers.d/${USERNAME}
|
||||||
Ładowanie…
Reference in New Issue