ansible-taler-exchange

Ansible playbook to deploy a production Taler Exchange
Log | Files | Refs | README | LICENSE

site_config.yml (2045B)

      1 ---
      2 # regional-currency/setup-exchange.sh layout + GOA host port / units
      3 
      4 - name: Place regional-style conf.d/setup.conf
      5   ansible.builtin.template:
      6     src: etc/taler-exchange/conf.d/setup.conf.j2
      7     dest: /etc/taler-exchange/conf.d/setup.conf
      8     owner: root
      9     group: root
     10     mode: "0644"
     11 
     12 # Package only inlines conf.d/*.conf + overrides.conf — not exchange-overrides.conf
     13 - name: Place exchange-overrides.conf (currency-goa units)
     14   ansible.builtin.template:
     15     src: etc/taler-exchange/exchange-overrides.conf.j2
     16     dest: /etc/taler-exchange/exchange-overrides.conf
     17     owner: root
     18     group: root
     19     mode: "0644"
     20 
     21 - name: Ensure main conf inlines exchange-overrides.conf
     22   ansible.builtin.lineinfile:
     23     path: /etc/taler-exchange/taler-exchange.conf
     24     line: "@inline@ exchange-overrides.conf"
     25     insertafter: EOF
     26     state: present
     27 
     28 # Filename sorts after package exchange-system.conf (SERVE=unix)
     29 - name: Place zz-serve-tcp.conf so PORT/SERVE win package defaults
     30   ansible.builtin.copy:
     31     dest: /etc/taler-exchange/conf.d/zz-serve-tcp.conf
     32     owner: root
     33     group: root
     34     mode: "0644"
     35     content: |
     36       [exchange]
     37       SERVE = tcp
     38       PORT = {{ EXCHANGE_HTTP_PORT | default(9011) }}
     39 
     40 # regional: chown taler-exchange-wire, mode 0400
     41 - name: Place wire gateway secret
     42   ansible.builtin.template:
     43     src: etc/taler-exchange/secrets/exchange-accountcredentials.secret.conf.j2
     44     dest: "/etc/taler-exchange/secrets/exchange-accountcredentials-{{ exchange_account_id }}.secret.conf"
     45     owner: taler-exchange-wire
     46     group: taler-exchange-db
     47     mode: "0440"
     48 
     49 - name: Ensure terms data dir
     50   ansible.builtin.file:
     51     path: /var/lib/taler-exchange/terms
     52     state: directory
     53     owner: taler-exchange-httpd
     54     group: root
     55     mode: "0755"
     56 
     57 - name: Install no-terms / no-privacy stubs
     58   ansible.builtin.copy:
     59     src: "terms/{{ item }}"
     60     dest: "/var/lib/taler-exchange/terms/{{ item }}"
     61     owner: taler-exchange-httpd
     62     group: root
     63     mode: "0644"
     64   loop:
     65     - no-terms-v0.en.rst
     66     - no-privacy-v0.en.rst