Deploy app, demo, fider and listmonk on OCI
This commit is contained in:
parent
b45e29c278
commit
b3a1eba792
8 changed files with 1004 additions and 1 deletions
167
host.go
Normal file
167
host.go
Normal file
|
|
@ -0,0 +1,167 @@
|
|||
package main
|
||||
|
||||
import (
|
||||
"encoding/base64"
|
||||
"io"
|
||||
"io/ioutil"
|
||||
|
||||
"github.com/pulumi/pulumi-oci/sdk/go/oci/core"
|
||||
"github.com/pulumi/pulumi-oci/sdk/go/oci/identity"
|
||||
"github.com/pulumi/pulumi-oci/sdk/go/oci/networkloadbalancer"
|
||||
"github.com/pulumi/pulumi/sdk/v3/go/pulumi"
|
||||
"github.com/pulumi/pulumi/sdk/v3/go/pulumi/config"
|
||||
)
|
||||
|
||||
func setupHostMain(ctx *pulumi.Context, ocicfg *config.Config, compartment *identity.Compartment, ns pulumi.StringOutput, subnet *core.Subnet, listmonkAuthToken *identity.CustomerSecretKey, smtpcreds *identity.SmtpCredential, pemprvkey io.Reader) error {
|
||||
cfg := config.New(ctx, "")
|
||||
|
||||
// Setup load-balancer
|
||||
nlb, err := networkloadbalancer.NewNetworkLoadBalancer(ctx, "happy-nlb", &networkloadbalancer.NetworkLoadBalancerArgs{
|
||||
DisplayName: pulumi.Sprintf("%s-happy-nlb", ctx.Stack()),
|
||||
SubnetId: subnet.ID(),
|
||||
CompartmentId: compartment.ID(),
|
||||
IsPreserveSourceDestination: pulumi.Bool(false),
|
||||
IsPrivate: pulumi.Bool(false),
|
||||
NlbIpVersion: pulumi.String("IPV4"),
|
||||
})
|
||||
if err != nil {
|
||||
return err
|
||||
}
|
||||
|
||||
ctx.Export("nlb-ip", nlb.IpAddresses)
|
||||
|
||||
nlbset4, err := networkloadbalancer.NewBackendSet(ctx, "happydomain-nlbset4", &networkloadbalancer.BackendSetArgs{
|
||||
HealthChecker: &networkloadbalancer.BackendSetHealthCheckerArgs{
|
||||
Protocol: pulumi.String("HTTPS"),
|
||||
Port: pulumi.Int(443),
|
||||
UrlPath: pulumi.String("/api/version"),
|
||||
ReturnCode: pulumi.Int(200),
|
||||
},
|
||||
Name: pulumi.Sprintf("%s-happydomain-nlbset4", ctx.Stack()),
|
||||
NetworkLoadBalancerId: nlb.ID(),
|
||||
Policy: pulumi.String("FIVE_TUPLE"),
|
||||
IpVersion: pulumi.String("IPV4"),
|
||||
IsPreserveSource: pulumi.Bool(true),
|
||||
IsFailOpen: pulumi.Bool(true),
|
||||
})
|
||||
if err != nil {
|
||||
return err
|
||||
}
|
||||
|
||||
_, err = networkloadbalancer.NewListener(ctx, "happydomain-listener4", &networkloadbalancer.ListenerArgs{
|
||||
DefaultBackendSetName: nlbset4.Name,
|
||||
Name: pulumi.Sprintf("%s-happydomain-nlb-listen4", ctx.Stack()),
|
||||
NetworkLoadBalancerId: nlb.ID(),
|
||||
Port: pulumi.Int(0),
|
||||
Protocol: pulumi.String("TCP"),
|
||||
IpVersion: pulumi.String("IPV4"),
|
||||
})
|
||||
if err != nil {
|
||||
return err
|
||||
}
|
||||
|
||||
// Get boot image
|
||||
imageId := compartment.CompartmentId.ApplyT(func(id string) string {
|
||||
images, _ := core.GetImages(ctx, &core.GetImagesArgs{
|
||||
CompartmentId: id,
|
||||
OperatingSystem: pulumi.StringRef("Canonical Ubuntu"),
|
||||
OperatingSystemVersion: pulumi.StringRef("22.04 Minimal"),
|
||||
SortBy: pulumi.StringRef("TIMECREATED"),
|
||||
SortOrder: pulumi.StringRef("DESC"),
|
||||
Shape: pulumi.StringRef(SHAPE_AMD64),
|
||||
})
|
||||
return images.Images[0].Id
|
||||
}).(pulumi.StringOutput)
|
||||
|
||||
// Get availability domains
|
||||
availabilityDomainName := compartment.CompartmentId.ApplyT(func(id string) string {
|
||||
availabilityDomains, _ := identity.GetAvailabilityDomains(ctx, &identity.GetAvailabilityDomainsArgs{
|
||||
CompartmentId: id,
|
||||
})
|
||||
return availabilityDomains.AvailabilityDomains[0].Name
|
||||
}).(pulumi.StringOutput)
|
||||
|
||||
// Load cloudinit
|
||||
userData, err := ioutil.ReadFile("cloud-init.yaml")
|
||||
if err != nil {
|
||||
return err
|
||||
}
|
||||
|
||||
storens := ns.ApplyT(func(storageNamespace string) string {
|
||||
return storageNamespace + ".compat.objectstorage." + ocicfg.Require("region") + ".oraclecloud.com"
|
||||
}).(pulumi.StringOutput)
|
||||
|
||||
// Create an OCI instance
|
||||
instance, err := core.NewInstance(ctx, "happydomain-main-1", &core.InstanceArgs{
|
||||
AvailabilityDomain: availabilityDomainName,
|
||||
CompartmentId: compartment.ID(),
|
||||
DisplayName: pulumi.Sprintf("%s-happydomain-main", ctx.Stack()),
|
||||
Shape: pulumi.String(SHAPE_AMD64),
|
||||
SourceDetails: &core.InstanceSourceDetailsArgs{
|
||||
SourceId: imageId,
|
||||
SourceType: pulumi.String("image"),
|
||||
},
|
||||
CreateVnicDetails: &core.InstanceCreateVnicDetailsArgs{
|
||||
AssignIpv6ip: pulumi.Bool(true),
|
||||
SubnetId: subnet.ID(),
|
||||
DisplayName: pulumi.Sprintf("%s-happydomain-main", ctx.Stack()),
|
||||
},
|
||||
ExtendedMetadata: pulumi.Map{
|
||||
"EMAIL_SMTP_HOST": pulumi.String("smtp.email." + ocicfg.Require("region") + ".oci.oraclecloud.com"),
|
||||
"EMAIL_SMTP_PORT": pulumi.String("587"),
|
||||
"EMAIL_SMTP_USERNAME": smtpcreds.Username,
|
||||
"EMAIL_SMTP_PASSWORD": smtpcreds.Password,
|
||||
"FIDER_DOMAIN": pulumi.String("feedback.happydomain.org"),
|
||||
"FIDER_JWT_SECRET": cfg.RequireSecret("fider_jwt_secret"),
|
||||
"FIDER_GITHUB_CLIENTID": cfg.RequireSecret("fider_github_clientid"),
|
||||
"FIDER_GITHUB_SECRET": cfg.RequireSecret("fider_github_secret"),
|
||||
"UMAMI_ID": pulumi.String("3a9d70d8-c2d4-44e0-9fa1-46d4b2e3fca0"),
|
||||
"HAPPYDOMAIN_JWT_SECRET_KEY": cfg.RequireSecret("happydomain_jwt_secret_key"),
|
||||
"HAPPYDOMAIN_OVH_APPLICATION_KEY": cfg.RequireSecret("happydomain_ovh_application_key"),
|
||||
"HAPPYDOMAIN_OVH_APPLICATION_SECRET": cfg.RequireSecret("happydomain_ovh_application_secret"),
|
||||
"HAPPYDOMAIN_VERSION": pulumi.String("latest"),
|
||||
"MY_DOMAIN": pulumi.String("app.happydomain.org"),
|
||||
"LISTMONK_NEWSLETTER_ID": pulumi.String("4"),
|
||||
"LISTMONK_API_USERNAME": cfg.RequireSecret("listmonk_api_username"),
|
||||
"LISTMONK_API_PASSWORD": cfg.RequireSecret("listmonk_api_password"),
|
||||
"LISTMONK_DOMAIN": pulumi.String("lists.happydomain.org"),
|
||||
"LISTMONK_S3_BUCKET": pulumi.String(HappyListmonkBucketName),
|
||||
"LISTMONK_S3_CLIENT_ID": listmonkAuthToken.ID(),
|
||||
"LISTMONK_S3_CLIENT_SECRET": listmonkAuthToken.Key,
|
||||
"LISTMONK_S3_HOST": storens,
|
||||
"LISTMONK_S3_REGION": pulumi.String(ocicfg.Require("region")),
|
||||
"POSTGRES_PASSWORD": cfg.RequireSecret("postgres_password"),
|
||||
"RESTIC_REPOSITORY": pulumi.String("s3:storage.nemunai.re/zbackup-happydomain"),
|
||||
"RESTIC_REPOSITORY_POSTGRES": pulumi.String("s3:storage.nemunai.re/zbackup-postgres-happydomain"),
|
||||
"RESTIC_PASSWORD": cfg.RequireSecret("restic_password"),
|
||||
"RESTIC_AWS_ACCESS_KEY_ID": cfg.RequireSecret("restic_aws_access_key_id"),
|
||||
"RESTIC_AWS_SECRET_ACCESS_KEY": cfg.RequireSecret("restic_aws_secret_access_key"),
|
||||
"TRY_DOMAIN": pulumi.String("try.happydomain.org"),
|
||||
"TRY_UMAMI_ID": pulumi.String("0af0b29f-bf8a-4801-918a-01a8fb4b4312"),
|
||||
},
|
||||
Metadata: pulumi.Map{
|
||||
"user_data": pulumi.String(base64.StdEncoding.EncodeToString(userData)),
|
||||
"ssh_authorized_keys": pulumi.String(SSH_AUTHORIZED_KEYS),
|
||||
},
|
||||
})
|
||||
if err != nil {
|
||||
return err
|
||||
}
|
||||
|
||||
// Export the public-ip
|
||||
ctx.Export("instance-ip", instance.PublicIp)
|
||||
|
||||
// Add host to backend
|
||||
_, err = networkloadbalancer.NewBackend(ctx, "happydomain-lb4", &networkloadbalancer.BackendArgs{
|
||||
BackendSetName: nlbset4.Name,
|
||||
NetworkLoadBalancerId: nlb.ID(),
|
||||
Port: pulumi.Int(0),
|
||||
IpAddress: instance.PrivateIp,
|
||||
TargetId: instance.ID(),
|
||||
})
|
||||
if err != nil {
|
||||
return err
|
||||
}
|
||||
|
||||
return nil
|
||||
}
|
||||
Loading…
Add table
Add a link
Reference in a new issue