forked from opencrvs/opencrvs-countryconfig
-
Notifications
You must be signed in to change notification settings - Fork 17
Commit
This commit does not belong to any branch on this repository, and may belong to a fork outside of the repository.
Co-authored-by: Riku Rouvila <[email protected]>
- Loading branch information
Showing
6 changed files
with
74 additions
and
18 deletions.
There are no files selected for viewing
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| Original file line number | Diff line number | Diff line change |
|---|---|---|
|
|
@@ -12,8 +12,6 @@ all: | |
| # This configuration variable blocks all access to the server, including SSH, except from the IP addresses specified below. | ||
| # This should always be set when configuring a production server if there is no other firewall in front of the server. | ||
| # SSH and other services should never be exposed to the public internet. | ||
| only_allow_access_from_addresses: | ||
| - 159.89.14.13 | ||
| # Enable backups | ||
| enable_backups: true | ||
| backup_server_remote_target_directory: /home/backup/backups | ||
|
|
@@ -36,28 +34,31 @@ all: | |
| - ssh-rsa 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 | ||
| state: present | ||
| sudoer: true | ||
| - name: shoumik | ||
| ssh_keys: | ||
| - ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAINRSRTqm3vOfjyTutISEtbVp7ZddoWa9NZDZLeWZGzLy dsi@dsi-Inspiron-15-3511 | ||
| state: present | ||
| sudoer: true | ||
|
|
||
| docker-manager-first: | ||
| hosts: | ||
| farajaland-prod: | ||
| ansible_host: '165.22.205.62' | ||
| farajaland-prod-1: | ||
| ansible_host: '188.245.160.165' | ||
| data_label: data1 | ||
| ansible_ssh_common_args: '-J [email protected] -o StrictHostKeyChecking=no' | ||
|
|
||
| # We recommend you add 2-4 workers for a scaled production deployment | ||
| # This should depend on the size of your country and the number of end users. | ||
| # If you are only using one production worker for very small countries or small pilot projects, replace with an empty block like so: docker-workers: {} | ||
| docker-workers: | ||
| hosts: | ||
| farajaland-prod-02: | ||
| ansible_host: '178.128.245.255' | ||
| farajaland-prod-2: | ||
| ansible_host: '49.13.124.87' | ||
| data_label: data2 | ||
| ansible_ssh_common_args: '-J [email protected] -o StrictHostKeyChecking=no' | ||
|
|
||
| backups: | ||
| hosts: | ||
| farajaland-backup: | ||
| ansible_host: '64.226.95.104' | ||
| ansible_host: '188.245.61.69' | ||
| # Written by provision pipeline. Assumes "backup" environment | ||
| # exists in Github environments | ||
| ansible_ssh_private_key_file: /tmp/backup_ssh_private_key | ||
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| Original file line number | Diff line number | Diff line change |
|---|---|---|
|
|
@@ -58,6 +58,11 @@ all: | |
| - ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABgQCWQihdKkwxTItN+rwYAX1vBg+8sv59sFsjYoVaO2mzS01rARfh+M+UVqpEv3zFT/3v6Dr5Z5VhzYvvbH8akiGQxURqie9quEi1iBCqcq+LApkMZxNm7yyvexlFsbkKMHsSZyVCzjE2Wt+6fwR1NqkMQgJjZS+b4CB+CUTNP2i6ytUTmck9K5iAOp1Gpm+Xgyvz6ZEJPkAJ16gV7gzNJUt/DSCkCyV8G2BqYLWeR2QxAbKyuf3LzO5i4XZdiZi9o60QAt3A6KGGLazd0UuYdehQDqVwXzwimLeeuZbaPNmwoAy7DeatOdurrWbnL7ytaiPvAbwai6Grt3PhhM41qO+uojnqTdnFdSOEPVIYMR7+mYu9tuwHZcMJIbbvMPD6EvKumD5Ndn5OxiLY/zQF5PuG89pBdTkTzzREvbV1Dkh2hwAIvgavlZl3P64On+4+FAgjrAx5U55khoRAe2FbEvB+EUGwro0bRffiM2NmxkUBraEuT2Xt5K01ZoBU6F4feO0= [email protected] | ||
| state: present | ||
| sudoer: true | ||
| - name: shoumik | ||
| ssh_keys: | ||
| - ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAINRSRTqm3vOfjyTutISEtbVp7ZddoWa9NZDZLeWZGzLy dsi@dsi-Inspiron-15-3511 | ||
| state: present | ||
| sudoer: true | ||
| # If the machine is repurposed to also be the backup host, we need to add more keys to the authorized_keys file so that | ||
| # when the application servers get provisioned, the provision user of this machine can be used. | ||
| additional_keys_for_provisioning_user: | ||
|
|
@@ -66,7 +71,7 @@ all: | |
| docker-manager-first: | ||
| hosts: | ||
| farajaland-qa: | ||
| ansible_host: '165.22.110.53' | ||
| ansible_host: '5.223.46.129' | ||
| data_label: data1 | ||
|
|
||
| # QA and staging servers are not configured to use workers. | ||
|
|
||
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| Original file line number | Diff line number | Diff line change |
|---|---|---|
|
|
@@ -13,8 +13,6 @@ all: | |
| # OpenCRVS should never be exposed to the public internet. If this is not possible to organise, | ||
| # then this should always be set when configuring a production server if there is no other firewall in front of the server. | ||
| # BE CAREFUL! This will block all SSH traffic except from the IP addresses listed here. | ||
| only_allow_access_from_addresses: | ||
| - 159.89.14.13 | ||
| # Enable backups but write them to a different location from where production writes them | ||
| enable_backups: true | ||
| backup_server_remote_target_directory: /home/backup/staging-backups | ||
|
|
@@ -64,19 +62,23 @@ all: | |
| - ssh-rsa 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 [email protected] | ||
| state: present | ||
| sudoer: true | ||
| - name: shoumik | ||
| ssh_keys: | ||
| - ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAINRSRTqm3vOfjyTutISEtbVp7ZddoWa9NZDZLeWZGzLy dsi@dsi-Inspiron-15-3511 | ||
| state: present | ||
| sudoer: true | ||
| docker-manager-first: | ||
| hosts: | ||
| farajaland-staging: | ||
| ansible_host: '167.172.105.70' | ||
| ansible_host: '5.223.47.53' | ||
| data_label: data1 | ||
| ansible_ssh_common_args: '-J [email protected] -o StrictHostKeyChecking=no' | ||
|
|
||
| # QA and staging servers are not configured to use workers. | ||
| docker-workers: {} | ||
| backups: | ||
| hosts: | ||
| farajaland-qa: | ||
| ansible_host: '64.226.95.104' | ||
| farajaland-backup: | ||
| ansible_host: '188.245.61.69' | ||
| # Written by provision pipeline. Assumes "backup" environment | ||
| # exists in Github environments | ||
| ansible_ssh_private_key_file: /tmp/backup_ssh_private_key | ||
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters