kunsi/bundlewrap
1
0
Fork 0
Code Issues 1 Pull requests 1 Releases Activity

Merge pull request 'Add new Node and bundle for infobeamer-cms' (#49) from sschi-infobeamer-cms into main
All checks were successful
kunsi/bundlewrap/pipeline/head This commit looks good
Details

Browse source 
Reviewed-on: #49
This commit is contained in:
Franzi 2021-12-24 10:57:58 +00:00
commit ba294f6a6c
8 changed files with 440 additions and 0 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

10
bundles/infobeamer-cms/files/infobeamer-cms-runperiodic.service Normal file
View file

@ -0,0 +1,10 @@
[Unit]
Description=infobeamer-cms sync
After=network.target
Requires=infobeamer-cms.service
[Service]
User=infobeamer-cms
Group=infobeamer-cms
WorkingDirectory=/opt/infobeamer-cms
ExecStart=curl http://127.0.0.1:8000/sync

9
bundles/infobeamer-cms/files/infobeamer-cms-runperiodic.timer Normal file
View file

@ -0,0 +1,9 @@
[Unit]
Description=Run infobeamer-cms sync
[Timer]
OnCalendar=*:0/5
Persistent=true
[Install]
WantedBy=timers.target

18
bundles/infobeamer-cms/files/infobeamer-cms.service Normal file
View file

@ -0,0 +1,18 @@
[Unit]
Description=infobeamer-cms - upload custom info pages to info-beamer
After=network.target
[Service]
Type=exec
Environment=SETTINGS=settings.cfg
Restart=always
RestartSec=5s
ExecStart=/usr/bin/gunicorn frontend:app -b 127.0.0.1:${PORT} -w ${WORKERS} -t 120 -k gevent --max-requests=1000
# You may have to adjust these settings
User=infobeamer-cms
Group=infobeamer-cms
WorkingDirectory=/opt/infobeamer-cms
[Install]
WantedBy=multi-user.target

47
bundles/infobeamer-cms/files/settings.cfg Normal file
View file

@ -0,0 +1,47 @@
<%
from json import dumps
%>
# This github OAuth client will be used for authentication. Create
# one at https://github.com/organizations/ACCOUNT/settings/applications
GITHUB_CLIENT_ID = '${GITHUB_CLIENT_ID}'
GITHUB_CLIENT_SECRET = '${GITHUB_CLIENT_SECRET}'
SESSION_COOKIE_NAME = '${SESSION_COOKIE_NAME}'
PREFERRED_URL_SCHEME = '${PREFERRED_URL_SCHEME}'
# info-beamer API keys.
# This key needs access to setups and assets as well as the
# node-message calls. If you consider the host running this
# code trusted, you might use a key with full account access.
# The keys given out to users are adhoc keys based on this key.
HOSTED_API_KEY = '${HOSTED_API_KEY}'
# Maximum uploads per github user
MAX_UPLOADS = ${MAX_UPLOADS}
# Setup IDs using the scheduled player setup. One of the
# playlists must be named 'User Content'. Its pages will be
# autogenerated by the CMS when calling /sync
SETUP_IDS = ${SETUP_IDS}
# Generate some random string. It's used for signing
# urls send to moderators.
URL_KEY = b'${URL_KEY}'
# Push notifications for moderation requests user pushover.
# Specify a target key and the app key to use.
PUSHOVER_TARGET = '${PUSHOVER_TARGET}'
PUSHOVER_APP_KEY = '${PUSHOVER_APP_KEY}'
# Unix timestamp allows for specifying start/end time
# of uploaded content
TIME_MIN = ${TIME_MIN}
TIME_MAX = ${TIME_MAX}
# change this to invalidate cached static files.
VERSION = ${VERSION}
# rooms. This is both used for the /last view as well
# as the interruption control on /interrupt.
ROOMS = ${dumps(node.metadata.get('infobeamer-cms/config/ROOMS', {}))}

86
bundles/infobeamer-cms/items.py Normal file
View file

@ -0,0 +1,86 @@
actions = {
'infobeamer-cms_set_directory_permissions': {
'triggered': True,
'command': 'chown -R infobeamer-cms:infobeamer-cms /opt/infobeamer-cms/static/'
},
}
git_deploy = {
'/opt/infobeamer-cms': {
'rev': 'master',
'repo': 'https://github.com/sophieschi/36c3-cms.git',
'needs': {
'directory:/opt/infobeamer-cms',
},
'triggers': {
'svc_systemd:infobeamer-cms:restart',
'action:infobeamer-cms_set_directory_permissions',
},
},
}
directories = {
'/opt/infobeamer-cms': {},
}
files = {
'/opt/infobeamer-cms/settings.cfg': {
'content_type': 'mako',
'context': node.metadata.get('infobeamer-cms/config'),
'needs': {
'git_deploy:/opt/infobeamer-cms',
},
'triggers': {
'svc_systemd:infobeamer-cms:restart',
},
},
'/etc/systemd/system/infobeamer-cms.service': {
'content_type': 'mako',
'context': node.metadata.get('infobeamer-cms/config'),
'triggers': {
'action:systemd-reload',
'svc_systemd:infobeamer-cms:restart',
},
},
'/etc/systemd/system/infobeamer-cms-runperiodic.timer': {
'triggers': {
'action:systemd-reload',
'svc_systemd:infobeamer-cms-runperiodic.timer:restart',
},
},
'/etc/systemd/system/infobeamer-cms-runperiodic.service': {
'triggers': {
'action:systemd-reload',
},
},
}
pkg_pip = {
'github-flask': {
'needed_by': {
'git_deploy:/opt/infobeamer-cms',
},
},
}
svc_systemd = {
'infobeamer-cms': {
'needs': {
'file:/opt/infobeamer-cms/settings.cfg',
'file:/etc/systemd/system/infobeamer-cms.service',
'git_deploy:/opt/infobeamer-cms',
},
},
'infobeamer-cms-runperiodic.timer': {
'needs': {
'file:/etc/systemd/system/infobeamer-cms-runperiodic.timer',
'file:/etc/systemd/system/infobeamer-cms-runperiodic.service',
},
},
}
users = {
'infobeamer-cms': {
'home': '/opt/infobeamer-cms',
},
}

222
bundles/infobeamer-cms/metadata.py Normal file
View file

@ -0,0 +1,222 @@
defaults = {
'apt': {
'packages': {
'gunicorn': {},
'python3-gevent': {},
'python3-flask': {},
'python3-jinja2': {},
'python3-redis': {},
'python3-oauth2client': {},
'python3-virtualenv': {},
'python3-requests': {},
'python3-iso8601': {},
},
},
'infobeamer-cms': {
'config': {
'GITHUB_CLIENT_ID': repo.vault.decrypt('encrypt$gAAAAABhxJT3JG3Qb1X-gjtBxwOXZmF-GVPjNbDkYo0Eke5Ly4CAKiussQ8Lld-4zoIWnIVBgndfPPGFDV2RlAHgb-_RY5r7jQcAlgsR0RUw4as0jEhiKlQ='),
'GITHUB_CLIENT_SECRET': repo.vault.decrypt('encrypt$gAAAAABhxJUgYzLIm5Efbn9-sEPpQRRiskHKa7fSqNoUxgonpcn7b9e6S_WbNHH_CLGrkKi7oE3pYUticDaLLLSM0bv74lswwElNvkhUuOM-RSeEuyKEhPP-fX-NXIa_AkRkFPVVBLnw'),
'SESSION_COOKIE_NAME': '__Host-sess',
'PREFERRED_URL_SCHEME': 'https',
'HOSTED_API_KEY': repo.vault.decrypt('encrypt$gAAAAABhxJPH2sIGMAibU2Us1HoCVlNfF0SQQnVl0eiod48Zu8webL_-xk3wDw3yXw1Hkglj-2usl-D3Yd095yTSq0vZMCv2fh-JWwSPdJewQ45x9Ai4vXVD4CNz5vuJBESKS9xQWXTc'),
'MAX_UPLOADS': 5,
'SETUP_IDS': '[212947]',
'URL_KEY': repo.vault.password_for(f'{node.name} infobeamer-cms url key'),
'PUSHOVER_TARGET': repo.vault.decrypt('encrypt$gAAAAABhxKJJrjd-wBezp1Bl8Lu_8BrMm4jiZvOub_XBnPTXE6mAHCTDCRGqH2-Z---hhuJh50MXroNzzIuA_9uAtwXhtkXkrsR344bcZh-idG6V0tDgzds='),
'PUSHOVER_APP_KEY': repo.vault.decrypt('encrypt$gAAAAABhxJFqFafr8pZhQPn3HXGx0plLNQpnTDtJhM4PnlWYDBKjMZxUVh0Ol4631ZBTO5Sj8SIq79O2-Lx2eu0cGIZuzPQsZIBFuxv-30d81r6ljmLh8RQ='),
'TIME_MIN': 1640039559,
'TIME_MAX': 1640905200,
'VERSION': 1,
'ROOMS': [
{
'name': 'Chaos-West TV',
'device_id': 17968,
'interrupts': [
{
'name': 'Signal',
'data': 'signal',
},
],
},
{
'name': 'Chaosstudio Hamburg',
'device_id': 3284,
'interrupts': [
{
'name': 'Signal',
'data': 'signal',
},
],
},
{
'name': 'ChaosZone TV',
'device_id': 3,
'interrupts': [
{
'name': 'Signal',
'data': 'signal',
},
],
},
{
'name': 'r3s - Monheim/Rhein',
'device_id': 22460,
'interrupts': [
{
'name': 'Signal',
'data': 'signal',
},
],
},
{
'name': 'franconian.net Livestream',
'device_id': 246100657,
'interrupts': [
{
'name': 'Signal',
'data': 'signal',
},
],
},
{
'name': 'about:future stage',
'device_id': 246100658,
'interrupts': [
{
'name': 'Signal',
'data': 'signal',
},
],
},
{
'name': 'Sendezentrum Bühne',
'device_id': 246100659,
'interrupts': [
{
'name': 'Signal',
'data': 'signal',
},
],
},
{
'name': 'Haecksen Stream',
'device_id': 246100660,
'interrupts': [
{
'name': 'Signal',
'data': 'signal',
},
],
},
{
'name': 'xHain Mainhall',
'device_id': 246100661,
'interrupts': [
{
'name': 'Signal',
'data': 'signal',
},
],
},
{
'name': 'xHain Workshop-Area',
'device_id': 246100662,
'interrupts': [
{
'name': 'Signal',
'data': 'signal',
},
],
},
{
'name': 'c-base',
'device_id': 246100663,
'interrupts': [
{
'name': 'Signal',
'data': 'signal',
},
],
},
{
'name': 'about:future Kitchen',
'device_id': 246100664,
'interrupts': [
{
'name': 'Signal',
'data': 'signal',
},
],
},
{
'name': 'Haecksen Zur schönen Mary',
'device_id': 246100665,
'interrupts': [
{
'name': 'Signal',
'data': 'signal',
},
],
},
{
'name': 'Haecksen Zur magischen Margaret',
'device_id': 246100666,
'interrupts': [
{
'name': 'Signal',
'data': 'signal',
},
],
},
{
'name': 'infobeamer stream',
'device_id': 15586,
'interrupts': [
{
'name': 'Signal',
'data': 'signal',
},
],
},
],
'PORT': 8000,
'WORKERS': 4,
'unused': 'foobar',
},
},
}
@metadata_reactor.provides(
'nginx/vhosts',
)
def nginx(metadata):
if not node.has_bundle('nginx'):
raise DoNotRunAgain
locations = {
'/': {
'target': 'http://127.0.0.1:8000',
},
'/sync': {
'return': 'forbidden',
'mode': 403,
},
'/static': {
'alias': '/opt/infobeamer-cms/static',
},
}
vhosts = {
'infobeamer-cms': {
'locations': locations,
'website_check_path': '/',
'website_check_string': '',
},
}
return {
'nginx': {
'vhosts': vhosts
},
}

5
bundles/letsencrypt/metadata.py
View file

@ -1,6 +1,11 @@
defaults = {
'apt': {
'packages': {
'openssl': {
'needed_by': {
'action:letsencrypt_update_certificates',
},
},
'dehydrated': {
'needed_by': {
'action:letsencrypt_update_certificates',

43
nodes/voc/infobeamer-cms.py Normal file
View file

@ -0,0 +1,43 @@
nodes['voc.infobeamer-cms'] = {
'hostname': 'infobeamer-cms.c3voc.de',
'bundles': {
'infobeamer-cms',
'redis',
},
'groups': {
'debian-bullseye',
'webserver',
},
'metadata': {
'apt': {
# Move patchday to somewhere where the possibility of
# clashing with actual events is less likely.
'unattended_upgrades': {
'day': 1,
},
},
'backups': {
'exclude_from_backups': True,
},
'interfaces': {
'ens18': {
'ips': {
'185.106.84.31/26',
'2001:67c:20a0:e::31/64',
},
'gateway4': '185.106.84.1',
'gateway6': '2001:67c:20a0:e::1',
},
},
'icinga_options': {
'pretty_name': 'infobeamer-cms.c3voc.de',
},
'nginx': {
'vhosts': {
'infobeamer-cms': {
'domain': 'infobeamer-cms.c3voc.de',
},
},
},
},
}