Ecosyste.ms: Awesome

An open API service indexing awesome lists of open source software.

Awesome Lists | Featured Topics | Projects

https://github.com/plone/ansible-playbook

An Ansible playbook for automated deployment of full-stack Plone servers.
https://github.com/plone/ansible-playbook

Last synced: 15 days ago
JSON representation

An Ansible playbook for automated deployment of full-stack Plone servers.

Awesome Lists containing this project

README 

        
======================

Plone Ansible playbook

======================



.. admonition:: Description



    Use Ansible to provision a full-stack Plone server



.. warning::



    **Before you update***: If you're using version 1.2.x, you should note that version 1.3.0+ sets up client monitors for each ZEO client.

    These monitors will use the client port + 100.

    haproxy will use these monitor ports as a mechanism to check ZEO client status without using an http thread.

    See ``tcpcheck`` variables in the documentation for plone setup if you wish to alter or turn off this feature.



Introduction

------------



Plone's Ansible Playbook can completely provision a remote server to run the full stack of Plone, including:



* Plone in a cluster configuration;



* Automatic starting and process control of the Plone cluster with `supervisor `_;



* Load balancing of the cluster with `HAProxy `_;



* Caching with `Varnish `_;



* `Nginx `_ as a world-facing remote proxy and URL rewrite engine;



* An outgoing-mail-only mail server using `Postfix `_;



* Monitoring and log analysis with `munin-node `_ and `logwatch `_ and `fail2ban `_.



* Use of a local `VirtualBox `_ provisioned via `vagrant `_ to test and model your remote server.



An ansible playbook and roles describe the desired condition of the server. The playbook is used both for initial provisioning and for updating.



We generally support relatively current CentOS and Debian/Ubuntu environments. Versions currently supported are Ubuntu 18.04 (Bionic) LTS, 16.0.4 (Xenial) LTS, Ubuntu 15, Debian jessie, Debian stretch, and CentOS 7.



See the ``docs`` subdirectory or `readthedocs `_ for complete documentation.



Detailed, tutorial-style documentation with lots of real-life examples is available at the `Plone Training `_ site.



TL;DR

^^^^^



1. Install a *current* version of Ansible (use virtualenv and pip -- not your OS package manager);



2. If you wish to test locally, install Vagrant and VirtualBox;



3. Check out or download a copy of `the STABLE branch of this package `_;



4. Run ``ansible-galaxy install -r requirements.yml`` to install required roles;



5. Copy one of the ``sample*.yml`` files to ``local-configure.yml`` and edit as needed.



6. To test in a local virtual machine, run ``vagrant up`` or ``vagrant provision``;



7. To deploy, create an `Ansible inventory file `_  for the remote host and run ``ansible-playbook -K -i myhost.cfg playbook.yml`` (`-K` prompts for the sudo password on the remote host)



8. Set a real password for your Plone instance on the target server;



9. Set up appropriate firewalls.



.. warning::



    **Python required:** Ansible requires that the target server have a recent Python 2.x on the server. Newer platforms (like Ubuntu Xenial and later) may not have this activated on pristine new machines.



    If you get connection errors from Ansible, check the remote machine to make sure Python 2.7 is available.

    ``which python2.7`` will let you know.

    If it's missing, use your package manager to install it.



    On Ubuntu Xenial and Bionic (16.0.4 LTS), ``sudo apt-get install -y python`` will do the trick.



    **sshpass**: You may need to install ``sshpass`` on the host machine to manage sending passwords to the remote machine over ssh. ``sudo apt-get install sshpass`` will do the trick in the Debian universe.



License

-------



BSD-3-Clause