Add MinIO cluster (#15)

Co-authored-by: Fedor Batonogov <f.batonogov@yandex.ru>

ansible/roles/nginx_install/tasks/cert.yml

@@ -0,0 +1,34 @@
+---
+- name: Создаю директорию для ключей
+  ansible.builtin.file:
+    path: /etc/ssl/private
+    state: directory
+    owner: "{{ nginx_user }}"
+    group: "{{ nginx_user }}"
+    mode: "755"
+
+- name: Генерирую приватный ключ
+  community.crypto.openssl_privatekey:
+    path: "/etc/ssl/private/private.key"
+    mode: "0600"
+    owner: "{{ nginx_user }}"
+    group: "{{ nginx_user }}"
+
+- name: Создаю запроса на подписание сертификата (CSR) для самоподписанного сертификата
+  community.crypto.openssl_csr_pipe:
+    privatekey_path: "/etc/ssl/private/private.key"
+    common_name: "minio"
+    organization_name: Example, Inc.
+    subject_alt_name:
+      - "DNS:s3.example.local"
+  register: csr
+
+- name: Создаю самоподписанный сертификат из CSR
+  community.crypto.x509_certificate:
+    path: "/etc/ssl/private/minio.crt"
+    csr_content: "{{ csr.csr }}"
+    privatekey_path: "/etc/ssl/private/private.key"
+    provider: selfsigned
+    mode: "0640"
+    owner: "{{ nginx_user }}"
+    group: "{{ nginx_user }}"

ansible/roles/nginx_install/tasks/config.yml

@@ -0,0 +1,19 @@
+---
+- name: Создаю директорию для nginx conf
+  ansible.builtin.file:
+    path: /etc/nginx/conf.d
+    state: directory
+    owner: "{{ nginx_user }}"
+    group: "{{ nginx_user }}"
+    mode: "755"
+
+- name: Синхронизирую конфигурационные файлы
+  ansible.posix.synchronize:
+    src: "conf.d/"
+    dest: "/etc/nginx/conf.d/"
+    delete: true
+    rsync_opts:
+      - "--chown={{ nginx_user }}:{{ nginx_user }}"
+      - "--chmod=F640"
+  notify:
+    - Перезапускаю сервер nginx

ansible/roles/nginx_install/tasks/main.yml

@@ -0,0 +1,16 @@
+---
+- name: Создаю пользователя nginx
+  ansible.builtin.import_tasks: user.yml
+  when: ansible_distribution == 'Ubuntu'
+
+- name: Копирую конфигурацию
+  ansible.builtin.import_tasks: config.yml
+  when: ansible_distribution == 'Ubuntu'
+
+- name: Генерирую самоподписанный сертификат
+  ansible.builtin.import_tasks: cert.yml
+  when: ansible_distribution == 'Ubuntu'
+
+- name: Устанавливаю nginx
+  ansible.builtin.import_tasks: nginx.yml
+  when: ansible_distribution == 'Ubuntu'

ansible/roles/nginx_install/tasks/nginx.yml

@@ -0,0 +1,23 @@
+---
+- name: Наливаю docker-compose файл nginx
+  ansible.builtin.template:
+    src: docker-compose.yml.j2
+    dest: "/home/{{ nginx_user }}/docker-compose.yml"
+    owner: "{{ nginx_user }}"
+    group: "{{ nginx_user }}"
+    mode: "640"
+
+- name: Налаживаю права для директории /etc/letsencrypt/
+  ansible.builtin.file:
+    path: "{{ item }}"
+    owner: "{{ nginx_user }}"
+    group: "{{ nginx_user }}"
+    recurse: true
+  with_items:
+    - "/etc/letsencrypt/"
+
+- name: Поднимаю nginx
+  community.docker.docker_compose_v2:
+    project_src: "/home/{{ nginx_user }}/"
+    remove_orphans: true
+    wait: true

ansible/roles/nginx_install/tasks/user.yml

@@ -0,0 +1,7 @@
+---
+- name: Создаю пользователя {{ nginx_user }}
+  ansible.builtin.user:
+    name: "{{ nginx_user }}"
+    state: present
+    groups: docker
+    shell: /bin/bash