24 lines
805 B
YAML
24 lines
805 B
YAML
deploy:
|
|
stage: deploy
|
|
image: python:3.7
|
|
environment:
|
|
name: production
|
|
url: rss.fudiggity.nl
|
|
rules:
|
|
- if: $CI_COMMIT_TAG
|
|
before_script:
|
|
- pip install ansible --quiet
|
|
- git clone https://git.fudiggity.nl/sonny/ansible-playbooks.git deployment
|
|
- mkdir -p /root/.ssh
|
|
- echo "$DEPLOY_HOST_KEY" > /root/.ssh/known_hosts
|
|
- echo "$DEPLOY_KEY" > deployment/deploy_key && chmod 0600 deployment/deploy_key
|
|
- mkdir -p /root/.vaults
|
|
- echo "$VAULT_PASSWORD" > /root/.vaults/newsreader && chmod 0600 /root/.vaults/newsreader
|
|
script:
|
|
- >
|
|
ansible-playbook deployment/playbook.yml
|
|
--inventory deployment/apps.yml
|
|
--limit newsreader
|
|
--user ansible
|
|
--private-key deployment/deploy_key
|
|
--vault-password-file /root/.vaults/newsreader
|