carrierbookssl.yml

---
- hosts: myhost
  become: yes
  vars_files:
  - vars/default.yml
  tasks:
    - name: Install aptitude using apt
      apt: name=aptitude state=latest update_cache=yes force_apt_get=yes
      when: ansible_distribution == 'Debian' or ansible_distribution == 'Ubuntu'

    - name: Install required system packages
      apt: name={{ item }} state=latest update_cache=yes
      loop: [ 'apt-transport-https', 'git', 'ca-certificates', 'curl', 'software-properties-common']
      when: ansible_distribution == 'Debian' or ansible_distribution == 'Ubuntu'

    - name: Add docker GPG apt key
      apt_key:
        url: https://download.docker.com/linux/ubuntu/gpg
        state: present
      when: ansible_distribution == 'Debian' or ansible_distribution == 'Ubuntu'

    - name: Add docker repository
      apt_repository:
        repo: deb https://download.docker.com/linux/ubuntu bionic stable
        state: present
      when: ansible_distribution == 'Debian' or ansible_distribution == 'Ubuntu'

    - name: Update apt and install docker-ce
      yum: update_cache=yes name=docker-ce state=latest
      when: ansible_distribution == 'Debian' or ansible_distribution == 'Ubuntu'

    - name: Install required system packages
      yum: name={{ item }} state=latest update_cache=true
      loop: [ 'epel-release', 'yum-utils', 'lvm2', 'git', 'ca-certificates', 'curl' ]
      when: ansible_distribution == 'CentOS' or ansible_distribution == 'Red Hat Enterprise Linux'

    - name: Add docker repo
      get_url:
        url: https://download.docker.com/linux/centos/docker-ce.repo
        dest: /etc/yum.repos.d/docker-ce.repo
      when: ansible_distribution == 'CentOS' or ansible_distribution == 'Red Hat Enterprise Linux'

    - name: Install docker
      package:
        name: docker-ce
        state: latest
      when: ansible_distribution == 'CentOS' or ansible_distribution == 'Red Hat Enterprise Linux'

    - name: Start docker service
      service:
        name: docker
        state: started
        enabled: yes
      when: ansible_distribution == 'CentOS' or ansible_distribution == 'Red Hat Enterprise Linux'

    - name: Create docker mount
      shell: service docker stop && mkdir "{{ CARRIER_PATH }}/docker" && mount --rbind "{{ CARRIER_PATH }}/docker" /var/lib/docker && service docker start

    - name: Install docker-compose
      apt:
        name: docker-compose
        state: present
        update_cache: yes
      when: ansible_distribution == 'Debian' or ansible_distribution == 'Ubuntu'

    - name: Install docker-compose
      get_url:
        url : https://github.com/docker/compose/releases/download/1.25.1-rc1/docker-compose-Linux-x86_64
        dest: /usr/local/bin/docker-compose
        mode: 'u+x,g+x'
      when: ansible_distribution == 'CentOS' or ansible_distribution == 'Red Hat Enterprise Linux'

    - name: Copy Files
      shell: git clone https://github.com/carrier-io/installer.git --branch v.2.5 && mv ./installer/carrier-ssl "{{ CARRIER_PATH }}/carrier" && mkdir /installer && mv ./installer/grafana /installer/grafana && rm -rf ./installer

    - name: Replace app host
      replace:
        path: "{{ CARRIER_PATH }}/carrier-ssl/.env"
        regexp: 'http://localhost'
        replace: "https://{{ APP_HOST }}"

    - name: Replace app domain
      replace:
          path: "{{ CARRIER_PATH }}/carrier-ssl/.env"
          regexp: "APP_DOMAIN=localhost"
          replace: "APP_DOMAIN={{ APP_HOST }}"

    - name: Replace install path
      replace:
        path: "{{ CARRIER_PATH }}/carrier-ssl/.env"
        regexp: '/opt/carrier'
        replace: "{{ CARRIER_PATH }}/carrier-ssl"

    - name: Replace redis password
      replace:
        path: "{{ CARRIER_PATH }}/carrier-ssl/.env"
        regexp: 'REDIS_PASSWORD=password'
        replace: "REDIS_PASSWORD={{ REDIS_PASSWORD }}"

    - name: Replace rabbit password
      replace:
        path: "{{ CARRIER_PATH }}/carrier-ssl/.env"
        regexp: 'RABBIT_PASSWORD=password'
        replace: "RABBIT_PASSWORD={{ RABBIT_PASSWORD }}"

    - name: Replace influx password
      replace:
        path: "{{ CARRIER_PATH }}/carrier-ssl/.env"
        regexp: 'INFLUX_PASSWORD=password'
        replace: "INFLUX_PASSWORD={{ INFLUX_PASSWORD }}"

    - name: Replace influx username
      replace:
        path: "{{ CARRIER_PATH }}/carrier-ssl/.env"
        regexp: 'INFLUX_USERNAME=admin'
        replace: "INFLUX_USERNAME={{ INFLUX_USERNAME }}"

    - name: Replace mail for ssl
      replace:
        path: "{{ CARRIER_PATH }}/carrier-ssl/traefik/traefik.toml"
        regexp: 'email = "admin@example.com"'
        replace: 'email = "{{ SSL_MAIL }}"'

    - name: Replace influx host in telegraf config
      replace:
        path: "{{ CARRIER_PATH }}/carrier-ssl/telegraf/telegraf.conf"
        regexp: 'INFLUX_HOST'
        replace: "http://{{ APP_HOST }}:8086"

    - name: Replace influx username in telegraf config
      replace:
        path: "{{ CARRIER_PATH }}/carrier-ssl/telegraf/telegraf.conf"
        regexp: 'INFLUX_USER'
        replace: "{{ INFLUX_USERNAME }}"

    - name: Replace influx password in telegraf config
      replace:
        path: "{{ CARRIER_PATH }}/carrier-ssl/telegraf/telegraf.conf"
        regexp: 'INFLUX_PASSWORD'
        replace: "{{ INFLUX_PASSWORD }}"

    - name: Create and start services
      shell: cd "{{ CARRIER_PATH }}/carrier-ssl" && docker-compose up -d
      when: ansible_distribution == 'Debian' or ansible_distribution == 'Ubuntu'
      register: output

    - name: Create and start services
      shell: cd "{{ CARRIER_PATH }}/carrier-ssl" && /usr/local/bin/docker-compose up -d
      when: ansible_distribution == 'CentOS' or ansible_distribution == 'Red Hat Enterprise Linux'
      register: output

    - name: Wait until the services fully load
      command: sleep 35

    - name: Replace influx password
      replace:
        path: "{{ CARRIER_PATH }}/carrier-ssl/bootstrap.sh"
        regexp: 'INFLUXPASSWORD'
        replace: "{{ INFLUX_PASSWORD }}"

    - name: Bootstrap influx username
      replace:
        path: "{{ CARRIER_PATH }}/carrier-ssl/bootstrap.sh"
        regexp: 'INFLUXUSERNAME'
        replace: "{{ INFLUX_USERNAME }}"

    - name: Restart services
      shell: docker restart carrier-vault && sleep 30 && docker restart carrier-galloper

    - name: bootstrap
      shell: bash "{{ CARRIER_PATH }}/carrier-ssl/bootstrap.sh" https {{ APP_HOST }} {{ CARRIER_PATH }}

    - name: Restart services
      shell: cd "{{ CARRIER_PATH }}/carrier-ssl" && docker-compose up -d
      when: ansible_distribution == 'Debian' or ansible_distribution == 'Ubuntu'
      register: output

    - name: Restart services
      shell: cd "{{ CARRIER_PATH }}/carrier-ssl" && /usr/local/bin/docker-compose up -d
      when: ansible_distribution == 'CentOS' or ansible_distribution == 'Red Hat Enterprise Linux'
      register: output

    - debug:
        var: output