chadrem / provision

Ansible Example - Cloud Server Provisioning

Ansible Example - Cloud Server Provisioning

This is an example project for provisioning cloud servers using Ansible and the following applications:

• CentOS 7
• Amazon (AWS) EC2
• nginx
• PostgreSQL (Amazon RDS)
• PgBouncer
• Redis
• Ruby on Rails
• Capistrano
• My capistrano-releases gem to make Capistrano play nice with auto scaling environments.

This example project is meant to be highly customized. Do not attempt to use it without customization. The target audience for this project is someone with detailed knowledge of Linux, devops, AWS, Python, Bash, etc. The goal of this project is to demonstrate reproducible and automated server builds.

Features

• Reproducible and automated server builds.
• Python Invoke script for creating AMIs and launch configurations.

Setup

This project assumes you are using Linux or OSX to run Ansible. It hasn't been tried with Windows and customization is most likely needed.

• Install Ansible and any of its dependencies (such as Python) using the official documentation.
• Install Python and Invoke.
• Setup your default ansible-vault password file: echo myproject > "$HOME/.vault_pass_myproject.txt"
• Source the required environment variables: . shell_vars.env
• Customize the project to your requirements.

Customization

• This example project is called myproject throughout the code and configuration files. You will need to manually edit all of the files to change the name.
• Sensitive information is stored in inventories/production/inventory and encrypted with ansible-vault. You will need to customize it to your environment.

Ansible Vault

Some file(s) that contain sensitive information are encrypted using ansible-vault. The default password is myproject.

To find all of your encrypted files you can run:

grep -R '$ANSIBLE_VAULT' .

Example on how to change a password:

ansible-vault rekey inventories/production/inventory

Copyright

Copyright (c) 2018 Chad Remesch. See LICENSE.txt for further details.