westfarn
578b749ac5
Sync runner checkout / sync (push) Successful in 7s
## Summary - Closes #47. - Register `disney_hotel_service` (`DisneyHotel/disney_hotel_service`, branch `master`) for beta and prod on all five webservers. - Prod port **8023**, beta port **8024** (8021/8022 stay WordPress `relawfirm`). Alert worker profile only on adama. - Document Postgres databases `disney_hotel_service` / `disney_hotel_service_beta`, NPM hosts, and the control-node secret layout. This app reads `POSTGRES_*`, not `DATABASE_URL`. ## Test plan - [ ] `disney_hotel_service` is in `app_catalog` and `./scripts/deploy.sh --help` lists it - [ ] All five hosts have prod **8023** and beta **8024**; only adama sets `compose_profiles: [worker]` - [ ] After merge (ops): create both databases on `10.0.0.230` and grant `westfarn` - [ ] After merge (ops): write `~/Documents/secrets/disney_hotel_service/disney_hotel_service_{prod,beta}.env` (mode 600) - [ ] After merge (ops): NPM `disneyhotel.app` (+ www) → `:8023`, `beta.disneyhotel.app` → `:8024` - [ ] Deploy waits on `docker-compose.prod.yml` in the app repo (no bundled db, `${WEB_PORT}:8000`, worker profile `worker`) Reviewed-on: #48
server-infra
Ansible provisioning and deployment for homelab web servers.
Quick Start
# Install collections (once)
ansible-galaxy collection install -r requirements.yml
# Bootstrap SSH key to each host (one-time, before Ansible)
ssh-copy-id westfarn@10.0.0.77
ssh-copy-id westfarn@10.0.0.176
ssh-copy-id westfarn@10.0.0.44
ssh-copy-id westfarn@10.0.0.7
# First-time only: passwordless sudo on each new host (before first provision)
ssh -t westfarn@10.0.0.176 # repeat for each host IP
# on the host:
echo 'westfarn ALL=(ALL) NOPASSWD:ALL' | sudo tee /etc/sudoers.d/westfarn
sudo chmod 440 /etc/sudoers.d/westfarn
exit
# Test connectivity to one host
ansible adama -m ping
# Provision one host (dry run first) — includes Alloy log/metrics agent
./scripts/provision.sh adama --check
./scripts/provision.sh adama
# Control node: Alloy + Loki + Prometheus + Grafana
./scripts/provision.sh ai-server-4080
# Provision all hosts
./scripts/provision.sh
# Stop a compose app (does not remove volumes/checkouts)
./scripts/stop.sh --app print_forge --env prod
./scripts/stop.sh --app print_forge --env beta
See IMPLEMENTATION.md for full architecture, CI/CD plan, and phase breakdown.
Observability (Alloy → Loki / Prometheus → Grafana): docs/OBSERVABILITY.md · docs/GRAFANA_USAGE.md
WordPress (MariaDB on TrueNAS): docs/WORDPRESS.md.
Provision mounts each site's wp-content and writes its compose file from
inventory/wordpress_sites.yml. Start the
containers by hand (adama first).
Provision installs Alloy on every host. On ai-server-4080 it also starts
the central Loki / Prometheus / Grafana stack (observability_stack: true).
Servers
| Host | IP | Role |
|---|---|---|
| adama | 10.0.0.77 | app host |
| roslin | 10.0.0.176 | app host |
| starbuck | 10.0.0.44 | app host |
| apollo | 10.0.0.7 | app host |
| ai-server-4080 | 10.0.0.128 | control node + act runner |