nginx: manage ffmuc.net rsync setup in Salt

freifunkMUC · Jan 6, 2025 · 7099e55 · 7099e55
1 parent 8921eb9
commit 7099e55
Showing 1 changed file with 32 additions and 1 deletion.
diff --git a/nginx/init.sls b/nginx/init.sls
@@ -3,7 +3,7 @@
 ###
 {%- set role = salt['pillar.get']('netbox:role:name', salt['pillar.get']('netbox:device_role:name')) %}
 {% set tags = salt['pillar.get']('netbox:tag_list', []) %}
-{% if "webserver" in role or "webserver" in tags %}
+{% if not "jitsi meet" in role and ("webserver" in role or "webserver" in tags) %}
 
 nginx-repo-key:
   cmd.run:
@@ -125,6 +125,37 @@ nginx-module-{{ module }}:
     - require_in:
       - service: nginx
 
+{% if "ffmuc.net" in salt['pillar.get']('netbox:config_context:webserver:domains') %}
+/srv/www/ffmuc.net:
+    file.directory:
+      - user: deploy-ffmuc
+      - group: deploy-ffmuc
+
+/srv/www/ffmuc.net/.ssh:
+    file.directory:
+      - user: deploy-ffmuc
+      - group: deploy-ffmuc
+
+/srv/www/ffmuc.net/.ssh/id_ed25519:
+    file.managed:
+      - contents_pillar: netbox:config_context:ffmuc-net_deploy:ssh_privkey
+      - user: deploy-ffmuc
+      - group: deploy-ffmuc
+
+/srv/www/ffmuc.net/.ssh/id_ed25519.pub:
+    file.managed:
+      - contents_pillar: netbox:config_context:ffmuc-net_deploy:ssh_pubkey
+      - user: deploy-ffmuc
+      - group: deploy-ffmuc
+
+/srv/www/ffmuc.net/.ssh/authorized_keys:
+    file.managed:
+      - contents_pillar: netbox:config_context:ffmuc-net_deploy:ssh_pubkey
+      - user: deploy-ffmuc
+      - group: deploy-ffmuc
+
+{% endif %}{# "ffmuc.net" in salt['pillar.get']('netbox:config_context:webserver:domains') #}
+
 /etc/logrotate.d/nginx:
   file.managed:
     - source: salt://nginx/files/logrotate.conf