Sync runner checkout / sync (push) Successful in 6s
## Summary - Closes [#33](#33). - Add `scripts/stop.sh` → `playbooks/stop-apps.yml` → `docker compose down` for one `--app` + `--env` (no `-v`; checkouts/secrets stay). - `host_apps.enabled: false` skips deploy (including CI `--app`) so a stopped app cannot come back. Rows stay for ports and `stop.sh`. - Disable `print_forge` beta + prod on all app hosts. After merge (or from this branch): `./scripts/stop.sh --app print_forge --env prod` and `--env beta`. ## Test plan - [ ] `./scripts/stop.sh --help` shows required `--app` / `--env` - [ ] `ansible-playbook playbooks/stop-apps.yml --syntax-check -e app=print_forge -e app_env=prod` - [ ] `./scripts/stop.sh --app print_forge --env prod` compose-downs `print_forge_prod` on all webservers - [ ] `./scripts/stop.sh --app print_forge --env beta` compose-downs `print_forge_beta` (including adama worker) - [ ] `./scripts/deploy.sh --app print_forge --env prod --check` skips disabled rows (does not start containers) - [ ] NPM: `print-forge-preview.aimloperations.com` will 502 until the proxy host is disabled (out of scope) Reviewed-on: #34
58 lines
1.8 KiB
Markdown
58 lines
1.8 KiB
Markdown
# server-infra
|
|
|
|
Ansible provisioning and deployment for homelab web servers.
|
|
|
|
## Quick Start
|
|
|
|
```bash
|
|
# Install collections (once)
|
|
ansible-galaxy collection install -r requirements.yml
|
|
|
|
# Bootstrap SSH key to each host (one-time, before Ansible)
|
|
ssh-copy-id westfarn@10.0.0.77
|
|
ssh-copy-id westfarn@10.0.0.176
|
|
ssh-copy-id westfarn@10.0.0.44
|
|
ssh-copy-id westfarn@10.0.0.7
|
|
|
|
# First-time only: passwordless sudo on each new host (before first provision)
|
|
ssh -t westfarn@10.0.0.176 # repeat for each host IP
|
|
# on the host:
|
|
echo 'westfarn ALL=(ALL) NOPASSWD:ALL' | sudo tee /etc/sudoers.d/westfarn
|
|
sudo chmod 440 /etc/sudoers.d/westfarn
|
|
exit
|
|
|
|
# Test connectivity to one host
|
|
ansible adama -m ping
|
|
|
|
# Provision one host (dry run first) — includes Alloy log/metrics agent
|
|
./scripts/provision.sh adama --check
|
|
./scripts/provision.sh adama
|
|
|
|
# Control node: Alloy + Loki + Prometheus + Grafana
|
|
./scripts/provision.sh ai-server-4080
|
|
|
|
# Provision all hosts
|
|
./scripts/provision.sh
|
|
|
|
# Stop a compose app (does not remove volumes/checkouts)
|
|
./scripts/stop.sh --app print_forge --env prod
|
|
./scripts/stop.sh --app print_forge --env beta
|
|
```
|
|
|
|
See [IMPLEMENTATION.md](IMPLEMENTATION.md) for full architecture, CI/CD plan, and phase breakdown.
|
|
|
|
Observability (Alloy → Loki / Prometheus → Grafana): [docs/OBSERVABILITY.md](docs/OBSERVABILITY.md) · [docs/GRAFANA_USAGE.md](docs/GRAFANA_USAGE.md)
|
|
|
|
Provision installs **Alloy** on every host. On **ai-server-4080** it also starts
|
|
the central **Loki / Prometheus / Grafana** stack (`observability_stack: true`).
|
|
|
|
## Servers
|
|
|
|
| Host | IP | Role |
|
|
|------|-----|------|
|
|
| adama | 10.0.0.77 | app host |
|
|
| roslin | 10.0.0.176 | app host |
|
|
| starbuck | 10.0.0.44 | app host |
|
|
| apollo | 10.0.0.7 | app host |
|
|
| ai-server-4080 | 10.0.0.128 | control node + act runner |
|