main.yml

---
- hosts: static-www
  tasks:
    - add_host: hostname={{inventory_hostname}} groupname=tag_role_www
- hosts: tag_role_www
  sudo: true
  serial: 1
  gather_facts: false
  user: fedora
  vars:
    mediawiki_branch: "synhak-1.22.0"
    mw_git: "https://gerrit.wikimedia.org/r/p/mediawiki/extensions"
  vars_files:
    - private/spiff-settings.yml
    - private/mediawiki-settings.yml
  pre_tasks:
    - name: Collect EC2 facts
      action: ec2_facts
    - name: Remove from ELB
      connection: local
      sudo: false
      local_action:
        module: ec2_elb
        region: "{{ansible_ec2_placement_region}}"
        ec2_elbs:
          - www-vpc
        state: 'absent'
        instance_id: "{{ansible_ec2_instance_id}}"
    - name: Install libselinux-python
      action: yum pkg=libselinux-python state=present
    - name: Configure selinux
      action: selinux state=permissive policy=targeted
  post_tasks:
    - name: Add to ELB
      connection: local
      sudo: false
      local_action:
        module: ec2_elb
        region: "{{ansible_ec2_placement_region}}"
        ec2_elbs:
          - www-vpc
        instance_id: "{{ansible_ec2_instance_id}}"
        state: 'present'
  roles:
    - role: managed-host
      sysadmins:
        - name: tdfischer
          key: "{{ lookup('file', 'sysadmin-keys/tdfischer.pub') }}"
        - name: phuzion
          key: "{{ lookup('file', 'sysadmin-keys/phuzion.pub') }}"
        - name: gsvolt
          key: "{{ lookup('file', 'sysadmin-keys/gsvolt.pub') }}"
      extra_packages:
        - php-pecl-apc
        - php-xml
        - php-mysql
        - mysql-devel
        - mysql
        - librsvg2
        - ImageMagick

    - role: django-app
      name: spiff
      git: git://github.com/SYNHAK/spiff.git
      vcs_version: master
      uwsgi_mount: auth
      uwsgi_config:
        src: templates/spiff-settings.py
        dest: "{{uwsgi_app_path}}/local_settings.py"
      uwsgi_extra_packages:
        - MySQL-python
      nginx_config: "add_header Access-Control-Allow-Credentials true;add_header Access-Control-Allow-Headers 'Origin,Content-Type,Accept';"
      uwsgi_logger: "syslog:spiff"
      nginx_log: "/dev/null"

    - role: uwsgi-app
      name: mediawiki
      git: git://github.com/SYNHAK/mediawiki.git
      vcs_version: synhak-1.22.0
      plugin: php
      uwsgi_mount: wiki
      uwsgi_nginx_config: templates/mediawiki-nginx.conf
      uwsgi_buffer_size: 8192
      uwsgi_config:
        src: templates/LocalSettings.php
        dest: "{{uwsgi_app_path}}/LocalSettings.php"
      uwsgi_logger: "syslog:mediawiki"
      nginx_log: "/dev/null"

    - role: mediawiki-extension
      name: ConfirmEdit
      git: "{{mw_git}}/ConfirmEdit.git"
      uwsgi_name: mediawiki

    - role: mediawiki-extension
      name: ParserFunctions
      git: "{{mw_git}}/ParserFunctions.git"
      uwsgi_name: mediawiki

    - role: mediawiki-extension
      name: Nuke
      git: "{{mw_git}}/Nuke.git"
      uwsgi_name: mediawiki

    - role: mediawiki-extension
      name: Gadgets
      git: "{{mw_git}}/Gadgets.git"
      uwsgi_name: mediawiki

    - role: mediawiki-extension
      name: googleAnalytics
      git: "git://github.com/SYNHAK/googleAnalytics.git"
      uwsgi_name: mediawiki

    - role: mediawiki-extension
      name: secured_html
      srcFile: "scripts/Secured_HTML.php"
      uwsgi_name: mediawiki

    - role: mediawiki-extension
      name: RSS
      git: "{{mw_git}}/RSS.git"
      uwsgi_name: mediawiki

    - role: mediawiki-extension
      name: Nuke
      git: "{{mw_git}}/Nuke.git"
      uwsgi_name: mediawiki

    - role: mediawiki-extension
      name: ExternalData
      git: "{{mw_git}}/ExternalData.git"
      uwsgi_name: mediawiki

    - role: mediawiki-extension
      name: googleAgenda
      srcFile: "scripts/googleAgenda.php"
      destFile: "googleAgenda.php"
      uwsgi_name: mediawiki

    - role: mediawiki-extension
      name: LocalS3Repo
      git: "https://github.com/SYNHAK/LocalS3Repo.git"
      uwsgi_name: mediawiki

    - role: uwsgi-server

    - role: nginx-uwsgi
      name: synhak.org
      nginx_append:
        - templates/synhak-nginx.conf