_webserver.yml

- hosts: webserver

  vars:
    HOME: "{{ ansible_env.HOME }}"
    APP_DIR: "{{ HOME }}/site"
    VENV_DIR: "{{ APP_DIR }}/ENV"
    db_passwd: "{{ lookup('password', 'auth/db_passwd.txt') }}"
    django_secret_key: "{{ lookup('password', 'auth/django_secret_key.txt length=50') }}"

  tasks:
    - name: add gpg key for nodejs
      become: yes
      apt_key:
        url: https://deb.nodesource.com/gpgkey/nodesource.gpg.key
        state: present

    - name: be able to add apt repositories
      become: yes
      apt:
        name: apt-transport-https

    - name: add apt repository for nodejs
      become: yes
      apt_repository:
        repo: "deb https://deb.nodesource.com/node_10.x {{ ansible_distribution_release }} main"
        state: present
        update_cache: yes

    - name: install packages
      become: yes
      apt:
        name: "{{ packages }}"
        update_cache: yes
        cache_valid_time: 3600
      vars:
        packages:
        - git
        - gcc
        - g++
        - make
        - python-dev
        - nodejs
        - libxml2-dev
        - libxslt1-dev
        - zlib1g-dev
        - ruby-sass
        - gettext
        - curl
        - python-pip
        - mysql-server
        - default-libmysqlclient-dev
        - python-mysqldb
        - nginx

    - name: mysql database dmoj should exist(with 3 byte utf8 :( )
      become: yes
      mysql_db:
        name: dmoj
        encoding: utf8
        state: present

    - name: which should belong to user dmoj
      become: yes
      mysql_user:
        name: dmoj
        priv: "dmoj.*:ALL"
        password: "{{ db_passwd }}"

    - command: mysql -NBe "SELECT COUNT(*) FROM mysql.time_zone"
      become: yes
      register: mysql_timezones_count
      changed_when: false
      check_mode: no
    
    - name: ensure mysql timezone data is imported
      become: yes
      shell: "mysql_tzinfo_to_sql /usr/share/zoneinfo | mysql mysql"
      when: mysql_timezones_count.stdout|int < 1
      notify: restart mysql

    - name: clone our fork of dmoj
      git:
        repo: "https://github.com/duck2/site"
        dest: "{{ APP_DIR }}"

    - name: install virtualenv with pip
      become: yes
      pip:
        name: virtualenv

    - name: install gunicorn in the virtualenv(pip will create it)
      pip:
        name: gunicorn
        virtualenv: "{{ VENV_DIR }}"

    - name: install pip dependencies in the virtualenv(coroutine 1)
      pip:
        requirements: "{{ APP_DIR }}/requirements.txt"
        virtualenv: "{{ VENV_DIR }}"
      async: 10000
      poll: 0
      register: pip_deps

    - name: install npm dependencies(coroutine 2)
      npm:
        executable: /usr/bin/npm --no-save
        path: "{{ APP_DIR }}"
      async: 10000
      poll: 0
      register: npm_deps

    - name: write service file for dmoj_site
      become: yes
      template:
        src: tpl/dmoj_site.service.j2
        dest: /etc/systemd/system/dmoj_site.service
      notify: restart dmoj_site

    - name: write local_settings.py
      template:
        src: tpl/local_settings.py.j2
        dest: "{{ APP_DIR }}/dmoj/local_settings.py"
      notify: restart dmoj_site

    - name: write service file for bridged
      become: yes
      template:
        src: tpl/bridged.service.j2
        dest: /etc/systemd/system/bridged.service
      notify: restart bridged

    - name: write service file for wsevent
      become: yes
      template:
        src: tpl/wsevent.service.j2
        dest: /etc/systemd/system/wsevent.service
      notify: restart wsevent

    - name: write event server's own config
      template:
        src: tpl/config.js.j2
        dest: "{{ APP_DIR }}/websocket/config.js"
      notify: restart wsevent

    - name: write nginx config
      become: yes
      template:
        src: tpl/dmoj_site.conf.j2
        dest: /etc/nginx/conf.d/dmoj_site.conf
      notify: restart nginx

    - name: wait for pip dependencies to finish installing(coroutine 1)
      async_status:
        jid: "{{ pip_deps.ansible_job_id }}"
      register: r
      until: r.finished
      retries: 60

    - name: do the database migrations
      command: "{{ VENV_DIR }}/bin/python {{ APP_DIR }}/manage.py migrate --noinput"

    - name: write initial fixture with judge info
      template:
        src: tpl/initial.json.j2
        dest: "{{ APP_DIR }}/judge/fixtures/initial.json"

    - name: load initial fixture into django
      command: "{{ VENV_DIR }}/bin/python {{ APP_DIR }}/manage.py loaddata initial"

    - name: compile gettext messages(coroutine 3)
      shell: |
        {{ VENV_DIR }}/bin/python {{ APP_DIR }}/manage.py compilemessages -l tr -l en &&
        {{ VENV_DIR }}/bin/python {{ APP_DIR }}/manage.py compilejsi18n
      async: 10000
      poll: 0
      register: gettext_messages

    - name: wait for npm dependencies to finish installing(coroutine 2)
      async_status:
        jid: "{{ npm_deps.ansible_job_id }}"
      register: r
      until: r.finished
      retries: 60

    - name: build css files
      shell: "npm run --prefix {{ APP_DIR }} build:css"

    - name: wait for gettext messages to compile(coroutine 3)
      async_status:
        jid: "{{ npm_deps.ansible_job_id }}"
      register: r
      until: r.finished
      retries: 60

    - name: collect static assets
      shell: "{{ VENV_DIR }}/bin/python {{ APP_DIR }}/manage.py collectstatic --no-input"

  handlers:
    - name: restart nginx
      become: yes
      systemd:
        name: nginx
        state: restarted
        enabled: yes

    - name: restart mysql
      become: yes
      systemd:
        name: mysql
        state: restarted
        enabled: yes

    - name: restart dmoj_site
      become: yes
      systemd:
        name: dmoj_site
        state: restarted
        enabled: yes
        daemon_reload: yes

    - name: restart bridged
      become: yes
      systemd:
        name: bridged
        state: restarted
        enabled: yes
        daemon_reload: yes

    - name: restart wsevent
      become: yes
      systemd:
        name: wsevent
        state: restarted
        enabled: yes
        daemon_reload: yes