Migrate to the new v2 format
This commit is contained in:
Luke Murphy
parent
45c60fa186
commit
2b0cab6145
@ -1,5 +0,0 @@
|
|||||||
#!/bin/bash
|
|
||||||
|
|
||||||
set -eu -o pipefail
|
|
||||||
|
|
||||||
echo $(pass show hosts/autonomic-dokku/vault/password)
|
|
||||||
@ -1,40 +0,0 @@
|
|||||||
---
|
|
||||||
- hosts: all
|
|
||||||
gather_facts: false
|
|
||||||
tasks:
|
|
||||||
- name: Load variables
|
|
||||||
include_vars:
|
|
||||||
dir: "{{ dokku_lib_root }}/data/ansible/alerta/vars/"
|
|
||||||
extensions:
|
|
||||||
- yml
|
|
||||||
|
|
||||||
- name: Set HTTP 80 port proxy
|
|
||||||
dokku_ports:
|
|
||||||
app: alerta
|
|
||||||
mappings:
|
|
||||||
- "http:80:{{ http_port }}"
|
|
||||||
state: present
|
|
||||||
|
|
||||||
- name: Setup LE certificates
|
|
||||||
shell: dokku letsencrypt alerta
|
|
||||||
args:
|
|
||||||
creates: /home/dokku/alerta/letsencrypt/certs
|
|
||||||
|
|
||||||
- name: Setup LE certificates renew cron job
|
|
||||||
shell: dokku letsencrypt:cron-job --add
|
|
||||||
args:
|
|
||||||
creates: /home/dokku/alerta/letsencrypt/cron-job
|
|
||||||
|
|
||||||
- name: Remove automatically configured ports
|
|
||||||
dokku_ports:
|
|
||||||
app: alerta
|
|
||||||
mappings:
|
|
||||||
- "http:8080:8080"
|
|
||||||
state: absent
|
|
||||||
|
|
||||||
- name: Set HTTP 443 port
|
|
||||||
dokku_ports:
|
|
||||||
app: alerta
|
|
||||||
mappings:
|
|
||||||
- "https:443:{{ http_port }}"
|
|
||||||
state: present
|
|
||||||
@ -1,98 +0,0 @@
|
|||||||
---
|
|
||||||
- hosts: all
|
|
||||||
gather_facts: false
|
|
||||||
tasks:
|
|
||||||
- name: Load variables
|
|
||||||
include_vars:
|
|
||||||
dir: "{{ dokku_lib_root }}/data/ansible/alerta/vars/"
|
|
||||||
extensions:
|
|
||||||
- yml
|
|
||||||
|
|
||||||
- name: "Configure the {{ domain }} domain"
|
|
||||||
dokku_domains:
|
|
||||||
app: alerta
|
|
||||||
domains:
|
|
||||||
- "{{ domain }}"
|
|
||||||
state: present
|
|
||||||
|
|
||||||
- name: Create mongo database
|
|
||||||
no_log: true
|
|
||||||
shell: "
|
|
||||||
dokku
|
|
||||||
mongo:create
|
|
||||||
alerta
|
|
||||||
--password {{ db_passwd }}
|
|
||||||
--root-password {{ root_db_passwd }}
|
|
||||||
"
|
|
||||||
args:
|
|
||||||
creates: /var/lib/dokku/services/mongo/alerta
|
|
||||||
|
|
||||||
- name: Link mongo database to application
|
|
||||||
dokku_service_link:
|
|
||||||
app: alerta
|
|
||||||
name: alerta
|
|
||||||
service: mongo
|
|
||||||
|
|
||||||
- name: Create application directories
|
|
||||||
become: true
|
|
||||||
file:
|
|
||||||
path: /var/lib/alerta
|
|
||||||
state: directory
|
|
||||||
owner: dokku
|
|
||||||
group: dokku
|
|
||||||
|
|
||||||
- name: Copy over the /web/ configurations
|
|
||||||
become: true
|
|
||||||
template:
|
|
||||||
src: "{{ item.src }}"
|
|
||||||
dest: "{{ item.dest }}"
|
|
||||||
owner: "{{ docker_user_uid }}"
|
|
||||||
group: "{{ docker_user_gid }}"
|
|
||||||
mode: 0664
|
|
||||||
with_items:
|
|
||||||
- src: config.json
|
|
||||||
dest: /var/lib/alerta/config.json
|
|
||||||
|
|
||||||
# Note(decentral1se): can't use "template" module here
|
|
||||||
# because there are {{ }} jinja markers in this file!
|
|
||||||
- name: Copy over email templates
|
|
||||||
become: true
|
|
||||||
copy:
|
|
||||||
src: "{{ item.src }}"
|
|
||||||
dest: "{{ item.dest }}"
|
|
||||||
owner: "{{ docker_user_uid }}"
|
|
||||||
group: "{{ docker_user_gid }}"
|
|
||||||
mode: 0664
|
|
||||||
with_items:
|
|
||||||
- src: email.tmpl
|
|
||||||
dest: /var/lib/alerta/email.tmpl
|
|
||||||
|
|
||||||
- name: Copy over the /app/ configurations
|
|
||||||
become: true
|
|
||||||
template:
|
|
||||||
src: "{{ item.src }}"
|
|
||||||
dest: "{{ item.dest }}"
|
|
||||||
owner: root
|
|
||||||
group: root
|
|
||||||
mode: 0664
|
|
||||||
with_items:
|
|
||||||
- src: alerta.conf
|
|
||||||
dest: /var/lib/alerta/alerta.conf
|
|
||||||
- src: alertad.conf
|
|
||||||
dest: /var/lib/alerta/alertad.conf
|
|
||||||
|
|
||||||
- name: Specify docker volume mounts
|
|
||||||
dokku_storage:
|
|
||||||
app: alerta
|
|
||||||
mounts:
|
|
||||||
- /var/lib/alerta/email.tmpl:/app/email.tmpl
|
|
||||||
- /var/lib/alerta/alerta.conf:/app/alerta.conf
|
|
||||||
- /var/lib/alerta/alertad.conf:/app/alertad.conf
|
|
||||||
- /var/lib/alerta/config.json:/web/config.json
|
|
||||||
|
|
||||||
- name: Configure the dokku app environment
|
|
||||||
dokku_config:
|
|
||||||
app: alerta
|
|
||||||
restart: false
|
|
||||||
config:
|
|
||||||
SMTP_PASSWORD: "{{ smtp_passwd }}"
|
|
||||||
@ -1,6 +0,0 @@
|
|||||||
---
|
|
||||||
- src: dokku_bot.ansible_dokku
|
|
||||||
version: v2020.3.24
|
|
||||||
|
|
||||||
- src: https://git.coop/decentral1se/autonomic.gandi/-/archive/0.0.5/autonomic.gandi-0.0.5.tar.gz
|
|
||||||
name: autonomic.gandi
|
|
||||||
@ -1,25 +0,0 @@
|
|||||||
[DEFAULT]
|
|
||||||
debug = True
|
|
||||||
endpoint = http://localhost:8080/api
|
|
||||||
key = {{ alerta_cli_api_key }}
|
|
||||||
output = json
|
|
||||||
sslverify = False
|
|
||||||
timezone = Europe/London
|
|
||||||
|
|
||||||
[alerta-mailer]
|
|
||||||
amqp_topic = notify
|
|
||||||
amqp_url = {{ db_type }}://{{ db_user }}:{{ db_passwd }}@{{ db_loc }}/alerta
|
|
||||||
config_file = /app/alerta.conf
|
|
||||||
dashboard_url = https://{{ domain }}
|
|
||||||
debug = True
|
|
||||||
email_type = text
|
|
||||||
endpoint = http://localhost:8080/api
|
|
||||||
key = {{ alerta_mailer_api_key }}
|
|
||||||
mail_from = {{ mail_from }}
|
|
||||||
mail_template = /app/email.tmpl
|
|
||||||
mail_to = {{ mail_to }}
|
|
||||||
skip_mta = False
|
|
||||||
smtp_host = {{ smtp_host }}
|
|
||||||
smtp_password = {{ smtp_passwd }}
|
|
||||||
smtp_port = {{ smtp_port }}
|
|
||||||
smtp_starttls = {{ smtp_starttls }}
|
|
||||||
@ -1,79 +0,0 @@
|
|||||||
SITE_LOGO_URL = "https://www.coops.tech/images/coops/autonomic"
|
|
||||||
|
|
||||||
DEBUG = True
|
|
||||||
|
|
||||||
SECRET = "{{ alerta_secret_key }}"
|
|
||||||
|
|
||||||
DASHBOARD_URL = "https://{{ domain }}"
|
|
||||||
BASE_URL = "/api"
|
|
||||||
USE_PROXYFIX = True
|
|
||||||
|
|
||||||
AUTH_REQUIRED = True
|
|
||||||
AUTH_PROVIDER = "keycloak"
|
|
||||||
|
|
||||||
ADMIN_USERS = [
|
|
||||||
"calix",
|
|
||||||
"decentral1se",
|
|
||||||
"gunnar",
|
|
||||||
"kawaiipunk",
|
|
||||||
"naomi",
|
|
||||||
"roxie",
|
|
||||||
"takkaria"
|
|
||||||
]
|
|
||||||
USER_DEFAULT_SCOPES = ["admin"]
|
|
||||||
|
|
||||||
SIGNUP_ENABLED = False
|
|
||||||
|
|
||||||
KEYCLOAK_URL = "{{ keycloak_url }}"
|
|
||||||
KEYCLOAK_REALM = "{{ keycloak_realm }}"
|
|
||||||
ALLOWED_KEYCLOAK_ROLES = ["{{ keycloak_role }}"]
|
|
||||||
OAUTH2_CLIENT_ID = "{{ oauth_client_id }}"
|
|
||||||
OAUTH2_CLIENT_SECRET = "{{ oauth_client_secret }}"
|
|
||||||
|
|
||||||
SEVERITY_MAP = {
|
|
||||||
"fatal": 0,
|
|
||||||
"critical": 1,
|
|
||||||
"major": 2,
|
|
||||||
"minor": 3,
|
|
||||||
"warning": 4,
|
|
||||||
"indeterminate": 5,
|
|
||||||
"cleared": 5,
|
|
||||||
"normal": 5,
|
|
||||||
"ok": 5,
|
|
||||||
"informational": 6,
|
|
||||||
"debug": 7,
|
|
||||||
"trace": 8,
|
|
||||||
"unknown": 9
|
|
||||||
}
|
|
||||||
|
|
||||||
DEFAULT_NORMAL_SEVERITY = "normal"
|
|
||||||
DEFAULT_PREVIOUS_SEVERITY = "indeterminate"
|
|
||||||
|
|
||||||
PLUGINS = [
|
|
||||||
"alerta-mailer",
|
|
||||||
"amqp",
|
|
||||||
"blackout",
|
|
||||||
"normalise",
|
|
||||||
"rocketchat",
|
|
||||||
]
|
|
||||||
|
|
||||||
AMQP_URL = "{{ db_type }}://{{ db_user }}:{{ db_passwd }}@{{ db_loc }}/alerta"
|
|
||||||
AMQP_TOPIC = "notify"
|
|
||||||
|
|
||||||
ROCKETCHAT_WEBHOOK_URL = "{{ rocket_chat_webhook_url }}"
|
|
||||||
ROCKETCHAT_CHANNEL = "{{ rocket_chat_channel }}"
|
|
||||||
ALERTA_USERNAME = "{{ alerta_username }}"
|
|
||||||
ICON_EMOJI = "{{ rocket_chat_icon_emoji }}"
|
|
||||||
|
|
||||||
DATABASE_URL = "{{ db_type }}://{{ db_user }}:{{ db_passwd }}@{{ db_loc }}/{{ db_name }}"
|
|
||||||
DATABASE_NAME = "{{ db_name }}"
|
|
||||||
|
|
||||||
EMAIL_VERIFICATION = False
|
|
||||||
MAIL_FROM = "{{ mail_from }}"
|
|
||||||
SMTP_HOST = "{{ smtp_host }}"
|
|
||||||
SMTP_PASSWORD = "{{ smtp_passwd }}"
|
|
||||||
SMTP_PORT = "{{ smtp_port }}"
|
|
||||||
SMTP_STARTTLS = True
|
|
||||||
SMTP_USERNAME = "{{ smtp_username }}"
|
|
||||||
|
|
||||||
CORS_ORIGINS = ["*"]
|
|
||||||
@ -1,9 +0,0 @@
|
|||||||
---
|
|
||||||
alerta_admin_key: !vault |
|
|
||||||
$ANSIBLE_VAULT;1.1;AES256
|
|
||||||
63646336653264643762383534656133316563613837663433303531313064333562303130366162
|
|
||||||
6639613330663839356562303463616538393335636438650a356462663561313961366632653761
|
|
||||||
64326530653339346138373666623430306138623139633061653466643939653032613538646237
|
|
||||||
3832333964306461330a366334383539636431623261666530623739623533356163653535303064
|
|
||||||
39363161326165623936346339313834383561366563356330303963666639353962336565356439
|
|
||||||
6634313338326362353332356132353033396235633335663864
|
|
||||||
@ -1,9 +0,0 @@
|
|||||||
---
|
|
||||||
alerta_admin_passwd: !vault |
|
|
||||||
$ANSIBLE_VAULT;1.1;AES256
|
|
||||||
38616564643264396163666135656438336266623132393436653734313339323731613638376630
|
|
||||||
6138653434376366623966343930383565363665396132340a356461313738326438373963383738
|
|
||||||
65356263303465366630666366616537316362656639663066616366383962393533393931366535
|
|
||||||
3731333261346631360a356538626235333532353730383439393166323838353964393166376137
|
|
||||||
61613034363765623966656536373135623139323566306665303064343437616464373631346665
|
|
||||||
6566336638343939353764623833383733653232373062306264
|
|
||||||
@ -1,9 +0,0 @@
|
|||||||
---
|
|
||||||
alerta_cli_api_key: !vault |
|
|
||||||
$ANSIBLE_VAULT;1.1;AES256
|
|
||||||
31613438623962623730323666633431383066306566653562393663376364373030303233653836
|
|
||||||
6664353163646430366436346530653463376464623164310a313965643737646563636263386564
|
|
||||||
66383965653138396338383938613134306438643537336531353437643239376135326564623737
|
|
||||||
6533666539346337340a333236343064656463383163386230313731343966363064626236336363
|
|
||||||
33396463666136613663356135643062666633356435643564353739616661303566363561613966
|
|
||||||
3164316364336135363331396363356266373666633731626262
|
|
||||||
@ -1,9 +0,0 @@
|
|||||||
---
|
|
||||||
alerta_mailer_api_key: !vault |
|
|
||||||
$ANSIBLE_VAULT;1.1;AES256
|
|
||||||
32366665633739636439343636633563616465653864356163386365616635396466656631656537
|
|
||||||
3266393861333132336561336236363633616434336462370a623539323664333763356562663934
|
|
||||||
62363033646264386137353933313931633637633736333737633066656561343530333938376532
|
|
||||||
3231666663376335370a353062633239356364306230356362303962633338333265646238356439
|
|
||||||
34663234666334366430323661353030373436363662383063363164366464646632303063646262
|
|
||||||
3366653738646438313265316639396636313565633737653335
|
|
||||||
@ -1,9 +0,0 @@
|
|||||||
---
|
|
||||||
alerta_secret_key: !vault |
|
|
||||||
$ANSIBLE_VAULT;1.1;AES256
|
|
||||||
65373532396564323565326161386132323730396234323465323166666661333537613537613137
|
|
||||||
6262333130363835336637313633383561343736663832320a316261623735356630646434383864
|
|
||||||
65313564633434306136613936333666646431333530326566356535393465376633363065626533
|
|
||||||
3935323633336234360a333030393965623364376233663134363562386463366238616336313163
|
|
||||||
32623339373863363737663530663235356134323634386664623833336533653735623937396161
|
|
||||||
3431306265383232393762333234333466336533346430333631
|
|
||||||
@ -1,21 +0,0 @@
|
|||||||
---
|
|
||||||
alerta_username: "alerta"
|
|
||||||
db_loc: "dokku-mongo-alerta:27017"
|
|
||||||
db_name: "alerta"
|
|
||||||
db_type: "mongodb"
|
|
||||||
db_user: "alerta"
|
|
||||||
docker_user_gid: 0
|
|
||||||
docker_user_uid: 2000
|
|
||||||
domain: "alerta.autonomic.zone"
|
|
||||||
http_port: "8080"
|
|
||||||
keycloak_realm: "autonomic"
|
|
||||||
keycloak_role: "worker-owner"
|
|
||||||
keycloak_url: "https://id.autonomic.zone"
|
|
||||||
mail_from: "alerta-noreply@autonomic.zone"
|
|
||||||
mail_to: "kaboom@autonomic.zone"
|
|
||||||
rocket_chat_channel: "kaboom"
|
|
||||||
rocket_chat_icon_emoji: ":rocket:"
|
|
||||||
smtp_host: "mail.gandi.net"
|
|
||||||
smtp_port: "587"
|
|
||||||
smtp_starttls: "True"
|
|
||||||
smtp_username: "alerta-noreply"
|
|
||||||
@ -1,8 +0,0 @@
|
|||||||
---
|
|
||||||
ansible_become_pass: !vault |
|
|
||||||
$ANSIBLE_VAULT;1.1;AES256
|
|
||||||
34396236353735666531323238656533643465303131663464613162396333313836363630666266
|
|
||||||
6539323631656635333864316166633064633366323936610a656137616334313534333635313232
|
|
||||||
35323561303763366563316631313638363333393763323935343563303963616334336639386462
|
|
||||||
3837383830616637360a373539613630356564363662393836366462666430353439353637303035
|
|
||||||
63396633303166343433313439303539313637306637663137313533316531616434
|
|
||||||
@ -1,9 +0,0 @@
|
|||||||
---
|
|
||||||
db_passwd: !vault |
|
|
||||||
$ANSIBLE_VAULT;1.1;AES256
|
|
||||||
66613866666133643236393137646262346262356564333730656432303766623663656639316135
|
|
||||||
6461373238626433343638326564316561623161666563390a323066616336336238643033313765
|
|
||||||
35303436643633383637663162643731326130646165363733643833663966306233383339613661
|
|
||||||
3234636138633533380a636363383366343834643831626633366366343732663334636632613730
|
|
||||||
32653539383834343937346563643539623963383237303036336431346463333262613838356134
|
|
||||||
6465386337343037336530646335663533656433306663343261
|
|
||||||
@ -1,8 +0,0 @@
|
|||||||
---
|
|
||||||
oauth_client_id: !vault |
|
|
||||||
$ANSIBLE_VAULT;1.1;AES256
|
|
||||||
39306264623166643338363663373230373263613139316532343061373434336565393766353566
|
|
||||||
3766306664323930366335323936336661346631643835320a653161303439306639376534373530
|
|
||||||
66366230353338306464623336363539393064366136346133653163653835333938323137613965
|
|
||||||
6261643035373035340a616166636636333730663632356533636561313530613466373635376239
|
|
||||||
64623336383365386164393234643463666434613935623164363138653731333766
|
|
||||||
@ -1,9 +0,0 @@
|
|||||||
---
|
|
||||||
oauth_client_secret: !vault |
|
|
||||||
$ANSIBLE_VAULT;1.1;AES256
|
|
||||||
66376130626633383864663931383235346236613964343930303962633032626339646264643566
|
|
||||||
3538393033383630633062323631306563383634643366610a343432633265303137626238393739
|
|
||||||
38323230646566623563653037336636636635333435653162373539333036353261333366666466
|
|
||||||
3861626564313636350a373938613136336233386437613833383333383565333933303938343766
|
|
||||||
63663730316431363133393332306562653164343337303334663933616337343964623033666432
|
|
||||||
3665653337373731616231363465383865313136393036393634
|
|
||||||
@ -1,12 +0,0 @@
|
|||||||
---
|
|
||||||
rocket_chat_webhook_url: !vault |
|
|
||||||
$ANSIBLE_VAULT;1.1;AES256
|
|
||||||
65346638303735373565363538386636616432323035313863356162363137323532323239316666
|
|
||||||
3731386135653361393734323038356665393164663630390a623632376364633639626338653436
|
|
||||||
31333038313138316233343533613061636462313965663764643530626531313738303461373833
|
|
||||||
3731656362613761350a616465653534643930393637656238643739383436643836306566636234
|
|
||||||
38643236643530623963663331313032396661336264333139356162356537313831373136363665
|
|
||||||
36643331663663353766643135336366613638343932343664616161633638393035386537396334
|
|
||||||
66626164396636396639396562386231646163366333616461376266316463646632316565333164
|
|
||||||
38343431393233633931356537363063383030353965663031633662636533313132393961643730
|
|
||||||
62323266373564633863316261363834303762646662333338383730636162366639
|
|
||||||
@ -1,9 +0,0 @@
|
|||||||
---
|
|
||||||
root_db_passwd: !vault |
|
|
||||||
$ANSIBLE_VAULT;1.1;AES256
|
|
||||||
61623136343461613137323665303834646466636631396538616232663061376439303739633861
|
|
||||||
6132323764333365396237303936353431313866383261340a336336313162643363643231656662
|
|
||||||
32613561666538633364643066343261636239656637303134396565666536623334616234393837
|
|
||||||
6165636634646332330a316130613531346430373163316130363330656532663137373832656237
|
|
||||||
63666337303434623465366331336538626536313535393938656232323634316632656636613339
|
|
||||||
3330386231353338343236356133393538366337626438613537
|
|
||||||
@ -1,8 +0,0 @@
|
|||||||
---
|
|
||||||
smtp_passwd: !vault |
|
|
||||||
$ANSIBLE_VAULT;1.1;AES256
|
|
||||||
63363435653931383333353934663266336231346465333934303964353435353330303865376361
|
|
||||||
3033346166353266663037376164663465306633643530340a383564383038306563633736623430
|
|
||||||
64386330303863336539346461653332346233303538613465613363356532376137623439616132
|
|
||||||
3563613431363738620a653339633765313564633639383366383236656635353737633031323466
|
|
||||||
64393064623139333661633361306531626532613562643465336561303536333632
|
|
||||||
5
app.json
5
app.json
@ -1,5 +0,0 @@
|
|||||||
{
|
|
||||||
"name": "alerta",
|
|
||||||
"description": "A tool used to consolidate and de-duplicate alerts from multiple sources for quick ‘at-a-glance’ visualisation",
|
|
||||||
"repository": "https://git.autonomic.zone/autonomic-cooperative/alerta"
|
|
||||||
}
|
|
||||||
58
deploy.d/config.yml
Normal file
58
deploy.d/config.yml
Normal file
@ -0,0 +1,58 @@
|
|||||||
|
---
|
||||||
|
vars:
|
||||||
|
alerta_username: "alerta"
|
||||||
|
domain: "alerta.autonomic.zone"
|
||||||
|
keycloak_realm: "autonomic"
|
||||||
|
keycloak_role: "worker-owner"
|
||||||
|
keycloak_url: "https://id.autonomic.zone"
|
||||||
|
mail_from: "alerta-noreply@autonomic.zone"
|
||||||
|
mail_to: "kaboom@autonomic.zone"
|
||||||
|
port: "8080"
|
||||||
|
rocket_chat_channel: "kaboom"
|
||||||
|
rocket_chat_icon_emoji: ":rocket:"
|
||||||
|
smtp_host: "mail.gandi.net"
|
||||||
|
smtp_port: "587"
|
||||||
|
smtp_starttls: "True"
|
||||||
|
smtp_username: "alerta-noreply"
|
||||||
|
|
||||||
|
dirs:
|
||||||
|
- path: /var/lib/alerta/
|
||||||
|
|
||||||
|
db:
|
||||||
|
- type: "mongo"
|
||||||
|
passwd: "{{ vault.db_passwd }}"
|
||||||
|
root_passwd: "{{ vault.root_db_passwd }}"
|
||||||
|
|
||||||
|
files:
|
||||||
|
- src: email.tmpl
|
||||||
|
dest: /var/lib/alerta/email.tmpl
|
||||||
|
owner: "{{ vars.docker_user_uid }}"
|
||||||
|
group: "{{ vars.docker_user_gid }}"
|
||||||
|
mode: "664"
|
||||||
|
|
||||||
|
templates:
|
||||||
|
- src: config.json
|
||||||
|
dest: /var/lib/alerta/config.json
|
||||||
|
owner: "{{ vars.docker_user_uid }}"
|
||||||
|
group: "{{ vars.docker_user_gid }}"
|
||||||
|
mode: "664"
|
||||||
|
- src: alerta.conf
|
||||||
|
dest: /var/lib/alerta/alerta.conf
|
||||||
|
owner: "root"
|
||||||
|
group: "root"
|
||||||
|
mode: "664"
|
||||||
|
- src: alertad.conf
|
||||||
|
dest: /var/lib/alerta/alertad.conf
|
||||||
|
owner: "root"
|
||||||
|
group: "root"
|
||||||
|
mode: "664"
|
||||||
|
|
||||||
|
volumes:
|
||||||
|
- /var/lib/alerta/email.tmpl:/app/email.tmpl
|
||||||
|
- /var/lib/alerta/alerta.conf:/app/alerta.conf
|
||||||
|
- /var/lib/alerta/alertad.conf:/app/alertad.conf
|
||||||
|
- /var/lib/alerta/config.json:/web/config.json
|
||||||
|
|
||||||
|
env:
|
||||||
|
DOKKU_LETSENCRYPT_EMAIL: "helo@autonomic.zone"
|
||||||
|
SMTP_PASSWORD: "{{ vault.smtp_passwd }}"
|
||||||
@ -29,6 +29,7 @@ Raw Data
|
|||||||
Comrades! To Arms!
|
Comrades! To Arms!
|
||||||
|
|
||||||
To acknowledge this alert visit this URL:
|
To acknowledge this alert visit this URL:
|
||||||
|
|
||||||
{{ dashboard_url }}/#/alert/{{ alert.id }}
|
{{ dashboard_url }}/#/alert/{{ alert.id }}
|
||||||
|
|
||||||
Generated by {{ program }} on {{ hostname }} at {{ now }}
|
Generated by {{ program }} on {{ hostname }} at {{ now }}
|
||||||
19
deploy.d/plays/predeploy.yml
Normal file
19
deploy.d/plays/predeploy.yml
Normal file
@ -0,0 +1,19 @@
|
|||||||
|
---
|
||||||
|
- name: Get uid/guid of the Docker user
|
||||||
|
become: true
|
||||||
|
getent:
|
||||||
|
database: passwd
|
||||||
|
key: docker
|
||||||
|
split: ":"
|
||||||
|
|
||||||
|
- name: Prepare docker user information dictionary
|
||||||
|
set_fact:
|
||||||
|
docker_user_info:
|
||||||
|
{
|
||||||
|
"docker_user_uid": "{{ getent_passwd['docker'][1] }}",
|
||||||
|
"docker_user_gid": "{{ getent_passwd['docker'][2] }}",
|
||||||
|
}
|
||||||
|
|
||||||
|
- name: Store docker user uid/guid in config.vars dictionary
|
||||||
|
set_fact:
|
||||||
|
config: "{{ config | update_vars(docker_user_info) }}"
|
||||||
25
deploy.d/templates/alerta.conf
Normal file
25
deploy.d/templates/alerta.conf
Normal file
@ -0,0 +1,25 @@
|
|||||||
|
[DEFAULT]
|
||||||
|
debug = True
|
||||||
|
endpoint = http://localhost:8080/api
|
||||||
|
key = {{ vault.alerta_cli_api_key }}
|
||||||
|
output = json
|
||||||
|
sslverify = False
|
||||||
|
timezone = Europe/London
|
||||||
|
|
||||||
|
[alerta-mailer]
|
||||||
|
amqp_topic = notify
|
||||||
|
amqp_url = {{ dokku.mogodb_type }}://{{ dokku.mongodb_user }}:{{ vault.db_passwd }}@{{ dokku.mongodb_addr }}/{{ dokku.app }}
|
||||||
|
config_file = /app/alerta.conf
|
||||||
|
dashboard_url = https://{{ config.vars.domain }}
|
||||||
|
debug = True
|
||||||
|
email_type = text
|
||||||
|
endpoint = http://localhost:8080/api
|
||||||
|
key = {{ vault.alerta_mailer_api_key }}
|
||||||
|
mail_from = {{ config.vars.mail_from }}
|
||||||
|
mail_template = /app/email.tmpl
|
||||||
|
mail_to = {{ config.vars.mail_to }}
|
||||||
|
skip_mta = False
|
||||||
|
smtp_host = {{ config.vars.smtp_host }}
|
||||||
|
smtp_password = {{ vault.smtp_passwd }}
|
||||||
|
smtp_port = {{ config.vars.smtp_port }}
|
||||||
|
smtp_starttls = {{ config.vars.smtp_starttls }}
|
||||||
79
deploy.d/templates/alertad.conf
Normal file
79
deploy.d/templates/alertad.conf
Normal file
@ -0,0 +1,79 @@
|
|||||||
|
SITE_LOGO_URL = "https://www.coops.tech/images/coops/autonomic"
|
||||||
|
|
||||||
|
DEBUG = True
|
||||||
|
|
||||||
|
SECRET = "{{ vault.alerta_secret_key }}"
|
||||||
|
|
||||||
|
DASHBOARD_URL = "https://{{ config.vars.domain }}"
|
||||||
|
BASE_URL = "/api"
|
||||||
|
USE_PROXYFIX = True
|
||||||
|
|
||||||
|
AUTH_REQUIRED = True
|
||||||
|
AUTH_PROVIDER = "keycloak"
|
||||||
|
|
||||||
|
ADMIN_USERS = [
|
||||||
|
"calix",
|
||||||
|
"decentral1se",
|
||||||
|
"gunnar",
|
||||||
|
"kawaiipunk",
|
||||||
|
"naomi",
|
||||||
|
"roxie",
|
||||||
|
"takkaria"
|
||||||
|
]
|
||||||
|
USER_DEFAULT_SCOPES = ["admin"]
|
||||||
|
|
||||||
|
SIGNUP_ENABLED = False
|
||||||
|
|
||||||
|
KEYCLOAK_URL = "{{ config.vars.keycloak_url }}"
|
||||||
|
KEYCLOAK_REALM = "{{ config.vars.keycloak_realm }}"
|
||||||
|
ALLOWED_KEYCLOAK_ROLES = ["{{ config.vars.keycloak_role }}"]
|
||||||
|
OAUTH2_CLIENT_ID = "{{ vault.oauth_client_id }}"
|
||||||
|
OAUTH2_CLIENT_SECRET = "{{ vault.oauth_client_secret }}"
|
||||||
|
|
||||||
|
SEVERITY_MAP = {
|
||||||
|
"fatal": 0,
|
||||||
|
"critical": 1,
|
||||||
|
"major": 2,
|
||||||
|
"minor": 3,
|
||||||
|
"warning": 4,
|
||||||
|
"indeterminate": 5,
|
||||||
|
"cleared": 5,
|
||||||
|
"normal": 5,
|
||||||
|
"ok": 5,
|
||||||
|
"informational": 6,
|
||||||
|
"debug": 7,
|
||||||
|
"trace": 8,
|
||||||
|
"unknown": 9
|
||||||
|
}
|
||||||
|
|
||||||
|
DEFAULT_NORMAL_SEVERITY = "normal"
|
||||||
|
DEFAULT_PREVIOUS_SEVERITY = "indeterminate"
|
||||||
|
|
||||||
|
PLUGINS = [
|
||||||
|
"alerta-mailer",
|
||||||
|
"amqp",
|
||||||
|
"blackout",
|
||||||
|
"normalise",
|
||||||
|
"rocketchat",
|
||||||
|
]
|
||||||
|
|
||||||
|
AMQP_URL = "{{ dokku.mogodb_type }}://{{ dokku.mongodb_user }}:{{ vault.db_passwd }}@{{ dokku.mongodb_addr }}/{{ dokku.app }}"
|
||||||
|
AMQP_TOPIC = "notify"
|
||||||
|
|
||||||
|
ROCKETCHAT_WEBHOOK_URL = "{{ vault.rocket_chat_webhook_url }}"
|
||||||
|
ROCKETCHAT_CHANNEL = "{{ config.vars.rocket_chat_channel }}"
|
||||||
|
ALERTA_USERNAME = "{{ config.vars.alerta_username }}"
|
||||||
|
ICON_EMOJI = "{{ config.vars.rocket_chat_icon_emoji }}"
|
||||||
|
|
||||||
|
DATABASE_URL = "{{ dokku.mogodb_type }}://{{ dokku.mongodb_user }}:{{ vault.db_passwd }}@{{ dokku.mongodb_addr }}/{{ dokku.app }}"
|
||||||
|
DATABASE_NAME = "{{ dokku.app }}"
|
||||||
|
|
||||||
|
EMAIL_VERIFICATION = False
|
||||||
|
MAIL_FROM = "{{ config.vars.mail_from }}"
|
||||||
|
SMTP_HOST = "{{ config.vars.smtp_host }}"
|
||||||
|
SMTP_PASSWORD = "{{ vault.smtp_passwd }}"
|
||||||
|
SMTP_PORT = "{{ config.vars.smtp_port }}"
|
||||||
|
SMTP_STARTTLS = True
|
||||||
|
SMTP_USERNAME = "{{ config.vars.smtp_username }}"
|
||||||
|
|
||||||
|
CORS_ORIGINS = ["*"]
|
||||||
9
deploy.d/vault/alerta_admin_key.yml
Normal file
9
deploy.d/vault/alerta_admin_key.yml
Normal file
@ -0,0 +1,9 @@
|
|||||||
|
---
|
||||||
|
alerta_admin_key: !vault |-
|
||||||
|
$ANSIBLE_VAULT;1.1;AES256
|
||||||
|
34313632666130383832633066396334313136393838313534326264346133336562333633323631
|
||||||
|
6566343333353165633537643331616364366566346533640a373965393433393735323237653762
|
||||||
|
61373835366162316630646136323665623332373966393061643237386661343463376137623539
|
||||||
|
6564623030336638340a316533613863303132366231393434376535383963653165313065653838
|
||||||
|
34323239326438616436363864323837366666393564343765643735363233636234343165303432
|
||||||
|
3964353761646163633162353761613763323139393664346565
|
||||||
9
deploy.d/vault/alerta_admin_passwd.yml
Normal file
9
deploy.d/vault/alerta_admin_passwd.yml
Normal file
@ -0,0 +1,9 @@
|
|||||||
|
---
|
||||||
|
alerta_admin_passwd: !vault |-
|
||||||
|
$ANSIBLE_VAULT;1.1;AES256
|
||||||
|
61386635613234316466653038313332633565663932353863666263643364363831343633616461
|
||||||
|
6238343035613264336666333838333864313064363666340a663839366631396536633966363264
|
||||||
|
35306264333563656633313032343937386435666631623738626632323837326262303136343163
|
||||||
|
6334633033373830620a626663393737653433633635643662663432333237656632663130626635
|
||||||
|
63643039333937353039653439616638613966363362333439613564643333616564373464633365
|
||||||
|
3866373639306361323466323537613236316163656636376239
|
||||||
9
deploy.d/vault/alerta_cli_api_key.yml
Normal file
9
deploy.d/vault/alerta_cli_api_key.yml
Normal file
@ -0,0 +1,9 @@
|
|||||||
|
---
|
||||||
|
alerta_cli_api_key: !vault |-
|
||||||
|
$ANSIBLE_VAULT;1.1;AES256
|
||||||
|
33653264303231306632383136363466643237643130633937613862666662636265623931356133
|
||||||
|
3966643536623562383737623935366264636339383730650a366563363730653865643839663032
|
||||||
|
65333766316637353737636162396666306332616338646233643134356633313033323263616231
|
||||||
|
3536366165626336300a336266353539326631376362313263653636376361366463343766636632
|
||||||
|
61373235643634346636343466393365633562383433323830373032323633633535333238646435
|
||||||
|
3937366335343037383031353130653937333034326332653162
|
||||||
9
deploy.d/vault/alerta_mailer_api_key.yml
Normal file
9
deploy.d/vault/alerta_mailer_api_key.yml
Normal file
@ -0,0 +1,9 @@
|
|||||||
|
---
|
||||||
|
alerta_mailer_api_key: !vault |-
|
||||||
|
$ANSIBLE_VAULT;1.1;AES256
|
||||||
|
62363530353231306463613063633465306633396630333262646461663563383038366565366361
|
||||||
|
3237386339393561646261333238303064663139643332390a303363613965323138333931613136
|
||||||
|
64306337633064313938366264316636663565616533376330393732363364333061316337386434
|
||||||
|
3636666430393436610a656263376133363939386362656439396563383861643638313763383065
|
||||||
|
39633366323336383430313032646131313535346261613833636539383832313737613530626331
|
||||||
|
3038646333373063363761666337373636346237353365623339
|
||||||
9
deploy.d/vault/alerta_secret_key.yml
Normal file
9
deploy.d/vault/alerta_secret_key.yml
Normal file
@ -0,0 +1,9 @@
|
|||||||
|
---
|
||||||
|
alerta_secret_key: !vault |-
|
||||||
|
$ANSIBLE_VAULT;1.1;AES256
|
||||||
|
63393463393937636330343330663164353035653235656362633435316337313034373535356466
|
||||||
|
3734386165306530363336353531326532623266386365620a633831323537656164366261613438
|
||||||
|
33303932316233353439646233616566353836376265613835333564326432643439336562376237
|
||||||
|
3563336163323138390a633261633661303361353935623637373635326134356437623261343334
|
||||||
|
32623861376666306637316466613365656266623364623661383032313461633434343332346636
|
||||||
|
6236383965323331313436646463346132626437653361303831
|
||||||
9
deploy.d/vault/db_passwd.yml
Normal file
9
deploy.d/vault/db_passwd.yml
Normal file
@ -0,0 +1,9 @@
|
|||||||
|
---
|
||||||
|
db_passwd: !vault |-
|
||||||
|
$ANSIBLE_VAULT;1.1;AES256
|
||||||
|
62323761346564613537633764396461313935646436633865373463323065396633316666303433
|
||||||
|
6435303135663230663862346230613030353838643563350a353739656135346362333030333331
|
||||||
|
65666361363638383964323162656232376539343636306235623863333839343932306461373636
|
||||||
|
3666623436623730630a653063306138316661333565306433633231346234363764303662386165
|
||||||
|
62636638373539656562653838313565393332633765653561623834653563633339346366636461
|
||||||
|
3032363032646631346161653932623337343735643138303137
|
||||||
8
deploy.d/vault/oauth_client_id.yml
Normal file
8
deploy.d/vault/oauth_client_id.yml
Normal file
@ -0,0 +1,8 @@
|
|||||||
|
---
|
||||||
|
oauth_client_id: !vault |-
|
||||||
|
$ANSIBLE_VAULT;1.1;AES256
|
||||||
|
61373639333566663566666465376265346266363461353061353866333562636432323731626164
|
||||||
|
3966356130323836376264633538333233663463386336650a666561336234353964306339623739
|
||||||
|
63326431356561323730346463393336373431383839333764353233333462393338626665383165
|
||||||
|
3262666232393361320a646230306666373963633036663261643063366337356365366163636238
|
||||||
|
34346235666536643761356635383236336365643839633434333235323930303162
|
||||||
9
deploy.d/vault/oauth_client_secret.yml
Normal file
9
deploy.d/vault/oauth_client_secret.yml
Normal file
@ -0,0 +1,9 @@
|
|||||||
|
---
|
||||||
|
oauth_client_secret: !vault |-
|
||||||
|
$ANSIBLE_VAULT;1.1;AES256
|
||||||
|
33613831323161653934373132316538643564623666346133626165346438356430613061333332
|
||||||
|
3661643836343966663739306665663231653833306630330a346565313638626164373038306362
|
||||||
|
62373339336662333434343762383062623235346134333531373833346466343338323563353831
|
||||||
|
6638303763663333370a653065356266646638313634373431306130363838353738666633393666
|
||||||
|
30383933353334313932313637386433373738393765306162666461303663663563373334316236
|
||||||
|
6264633331353565643139616436363737633162343037623632
|
||||||
12
deploy.d/vault/rocket_chat_webhook_url.yml
Normal file
12
deploy.d/vault/rocket_chat_webhook_url.yml
Normal file
@ -0,0 +1,12 @@
|
|||||||
|
---
|
||||||
|
rocket_chat_webhook_url: !vault |-
|
||||||
|
$ANSIBLE_VAULT;1.1;AES256
|
||||||
|
36326239336466373635303536363064666165386136393630633435666662313737326561376661
|
||||||
|
6666623437383265386137396430326135623138643935340a386461633463616330343630373333
|
||||||
|
63633438303032383331613932323235623331326539353561623632663936356562393136303765
|
||||||
|
3037613739316630320a613163613863383764613864326664613263373634663738333432326433
|
||||||
|
33326232303933313264666537656634313763316430633937396633326133653866353934346463
|
||||||
|
65343161356565326264663563313462616136383663386461346135383034353961653362303735
|
||||||
|
33666438626338306161376238343365386566326138666639623330316566373561633139313130
|
||||||
|
32636166363763636532346663383139383765316533343162353630356264353966636133303434
|
||||||
|
30643838346530356534656430363862383364396365353435396232353931653862
|
||||||
9
deploy.d/vault/root_db_passwd.yml
Normal file
9
deploy.d/vault/root_db_passwd.yml
Normal file
@ -0,0 +1,9 @@
|
|||||||
|
---
|
||||||
|
root_db_passwd: !vault |-
|
||||||
|
$ANSIBLE_VAULT;1.1;AES256
|
||||||
|
33343661333761643934323666663537313862626465613763373734613763346663303638663230
|
||||||
|
6333343962353439653534646266383039343034646130350a396435636638333936663465623263
|
||||||
|
30306266303337366564663333643764386334303733316436363137643465306135633661316466
|
||||||
|
3634393864613439650a373965393166323531333338376436366135343736336366343364383834
|
||||||
|
66333839343337633666346134396264306334616235363239356130653136336365373763366630
|
||||||
|
6366363230663864666266623838383035366462636565663464
|
||||||
8
deploy.d/vault/smtp_passwd.yml
Normal file
8
deploy.d/vault/smtp_passwd.yml
Normal file
@ -0,0 +1,8 @@
|
|||||||
|
---
|
||||||
|
smtp_passwd: !vault |-
|
||||||
|
$ANSIBLE_VAULT;1.1;AES256
|
||||||
|
38356466313262356537666361396462376663393733393433636161613466356431396665386165
|
||||||
|
3139303436666663356332663766343931323031623161610a373364356163636335326666653030
|
||||||
|
35373366663962363562616631316639376166316438656237386363623461376562643334613262
|
||||||
|
6638613730346139370a303637653665653036316430393239633435613664326362663033636530
|
||||||
|
61306434636234343333626161303866623461643233366434356635373463313432
|
||||||
@ -1 +0,0 @@
|
|||||||
ansible==2.9.6
|
|
||||||
@ -1,15 +0,0 @@
|
|||||||
#!/bin/bash
|
|
||||||
|
|
||||||
set -eu -o pipefail
|
|
||||||
|
|
||||||
# Usage
|
|
||||||
# ./encrypt.sh mysecretname mysecretvalue
|
|
||||||
|
|
||||||
declare name="$1"
|
|
||||||
declare secret="$2"
|
|
||||||
|
|
||||||
ansible-vault \
|
|
||||||
encrypt_string \
|
|
||||||
--vault-password-file ansible/.vault.sh \
|
|
||||||
--name "$name" \
|
|
||||||
"$secret"
|
|
||||||
Reference in New Issue
Block a user