vade-cli 0.1.1

A command-line tool to deploy applications on Linux servers
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61

# Install the Caddy web server from its official apt repository and point it at vade-managed
# Caddyfiles. Meant to be applied as a non-root user with passwordless sudo rights.
from io import StringIO

from pyinfra import config, host
from pyinfra.operations import server, files, apt
from pyinfra.facts.files import File

config.SUDO = True

apt.packages(
    name="Install dependencies for Caddy",
    packages=["curl", "debian-keyring", "debian-archive-keyring", "apt-transport-https"],
    latest=True,
    update=True,
)

if not host.get_fact(File, path="/usr/share/keyrings/caddy-stable-archive-keyring.gpg"):
    server.shell(
        name="Download and install Caddy GPG key",
        commands=[
            "curl -1sLf 'https://dl.cloudsmith.io/public/caddy/stable/gpg.key' "
            "| gpg --dearmor -o /usr/share/keyrings/caddy-stable-archive-keyring.gpg"
        ],
    )

files.file(
    name="Set permissions on Caddy GPG keyring",
    path="/usr/share/keyrings/caddy-stable-archive-keyring.gpg",
    mode="644",
)

if not host.get_fact(File, path="/etc/apt/sources.list.d/caddy-stable.list"):
    server.shell(
        name="Add Caddy repository to sources list",
        commands=[
            "curl -1sLf 'https://dl.cloudsmith.io/public/caddy/stable/debian.deb.txt' "
            "| tee /etc/apt/sources.list.d/caddy-stable.list"
        ],
    )

files.file(
    name="Set permissions on Caddy sources list",
    path="/etc/apt/sources.list.d/caddy-stable.list",
    mode="644",
)

apt.packages(
    name="Install Caddy",
    packages=["caddy"],
    update=True,
)

files.put(
    name="Configure Caddy to automatically pick up deployed Caddyfiles",
    src=StringIO("import /opt/vade/apps/*/active-deployment/Caddyfile\n"),
    dest="/etc/caddy/Caddyfile",
    user="root",
    group="root",
    mode="644",
)