dani
/
ansible-roles
1
0
Fork 0
Code Issues Pull Requests Projects Releases Wiki Activity

Update to 2023-07-20 14:00

This commit is contained in:
Daniel Berteaud 2023-07-20 14:00:26 +02:00
parent 46009264eb
commit 5fa912498c
13 changed files with 131 additions and 38 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

26
roles/odoo/defaults/main.yml
View File

@ -1,13 +1,11 @@
---
# Version of Odoo to deploy
# Version of Odoo to deploy (name of the branch of the git repo
odoo_version: 16.0
# Odoo Build
odoo_build: 20230323
# URL of the archive
odoo_archive_url: https://nightly.odoo.com/{{ odoo_version }}/nightly/tgz/odoo_{{ odoo_version }}.{{ odoo_build }}.tar.gz
# Checksum of the archive
odoo_archive_sha256: 9e685e4a49fd6dd15b4e71f20ae9fc31a7b1b4b70f3d79ed52dddd021804ef77
# URL of the repository
odoo_git_url: https://github.com/odoo/odoo.git
# Where will odoo be installed
odoo_root_dir: /opt/odoo
# User under which odoo will run (will be created if needed
@ -15,20 +13,32 @@ odoo_user: odoo
# Database settings
odoo_db_server: "{{ pg_server | default('localhost') }}"
odoo_db_port: 5432
odoo_db_name: odoo
odoo_db_user: odoo
# If not defined, a random password will be generated and stored under {{ odoo_root_dir }}/meta
# odoo_db_pass: secret
# List of IP/CIDR which will be able to reach Odoo ports
# This should be empty most of the time to access Odoo only from the nginx reverse proxy
odoo_src_ip: []
# Public URL of the odoo instance
# odoo_public_url: https://erp.domain.tld/
odoo_http_port: 8069
odoo_longpolling_port: 8072
odoo_ports: [ "{{ odoo_http_port }}","{{ odoo_longpolling_port }}" ]
odoo_ports: [ "{{ odoo_http_port }}", "{{ odoo_longpolling_port }}" ]
odoo_workers: 4
odoo_email: "{{ system_admin_email | default('admin' + ansible_domain ) }}"
# If enabled, db manager will be accessible
odoo_db_list: False
# If you turn enterprise on, you need to set the SSH key of the root account of the target system
# on your Github account, allowed to access the https://github.com/odoo/enterprise.git repo
# You should also accept the host key for example by running
# /bin/git ls-remote git@github.com:odoo/enterprise.git as the root user
odoo_enterprise: False
odoo_enterprise_git_url: git@github.com:odoo/enterprise.git

2
roles/odoo/meta/main.yml
View File

@ -4,4 +4,6 @@ dependencies:
- role: mkdir
- role: wkhtmltopdf
- role: postgresql_server
pg_version: 15
when: odoo_db_server in ['localhost', '127.0.0.1']
- role: nginx

4
roles/odoo/tasks/cleanup.yml
View File

@ -2,7 +2,5 @@
- name: Remove temp files
file: path={{ item }} state=absent
with_items:
- "{{ odoo_root_dir }}/tmp/odoo_{{ odoo_version }}.{{ odoo_build }}.tar.gz"
- "{{ odoo_root_dir }}/tmp/odoo-{{ odoo_version }}.post{{ odoo_build }}"
with_items: []
tags: odoo

4
roles/odoo/tasks/conf.yml
View File

@ -18,3 +18,7 @@
tags: odoo
- name: Install nginx configuration
template: src=nginx.conf.j2 dest=/etc/nginx/ansible_conf.d/33-odoo.conf
notify: reload nginx
tags: odoo,web

3
roles/odoo/tasks/directories.yml
View File

@ -5,7 +5,7 @@
with_items:
- path: "{{ odoo_root_dir }}"
owner: "{{ odoo_user }}"
mode: 700
mode: 775
- path: "{{ odoo_root_dir }}/tmp"
- path: "{{ odoo_root_dir }}/meta"
mode: 700
@ -18,5 +18,6 @@
- path: "{{ odoo_root_dir }}/data"
group: "{{ odoo_user }}"
mode: 770
- path: "{{ odoo_root_dir }}/enterprise"
tags: odoo

2
roles/odoo/tasks/facts.yml
View File

@ -14,7 +14,7 @@
- import_tasks: ../includes/webapps_set_install_mode.yml
vars:
- root_dir: "{{ odoo_root_dir }}"
- version: "{{ odoo_version }}-{{ odoo_build }}"
- version: "{{ odoo_version }}"
- set_fact: odoo_install_mode={{ install_mode | default('none') }}
- set_fact: odoo_current_version={{ current_version | default('') }}
tags: odoo

47
roles/odoo/tasks/install.yml
View File

@ -6,29 +6,36 @@
- when: odoo_install_mode != 'none'
block:
- name: Fetch odoo sources
get_url:
url: "{{ odoo_archive_url }}"
dest: "{{ odoo_root_dir }}/tmp"
checksum: sha256:{{ odoo_archive_sha256 }}
- name: Clone or update the repo
git:
repo: "{{ odoo_git_url }}"
dest: "{{ odoo_root_dir }}/app"
depth: 1
version: "{{ odoo_version }}"
force: True
notify: restart odoo-server
- name: Extract odoo archive
unarchive:
src: "{{ odoo_root_dir }}/tmp/odoo_{{ odoo_version }}.{{ odoo_build }}.tar.gz"
dest: "{{ odoo_root_dir }}/tmp"
remote_src: True
- name: Copy odoo application to its final directory
synchronize:
src: "{{ odoo_root_dir }}/tmp/odoo-{{ odoo_version }}.post{{ odoo_build }}/"
dest: "{{ odoo_root_dir }}/app/"
recursive: True
delete: True
compress: False
delegate_to: "{{ inventory_hostname }}"
- name: Add ACL
command: |
setfacl -R -b -k {{ odoo_root_dir }}
setfacl -m u:nginx:X {{ odoo_root_dir }}
setfacl -R -m u:nginx:rX {{ odoo_root_dir }}/data {{ odoo_root_dir }}/app/addons {{ odoo_root_dir }}/app/odoo/addons {{ odoo_root_dir }}/enterprise
tags: odoo
- when: odoo_install_mode != 'none' and odoo_enterprise
block:
- name: Clone or update the enterprise repo
git:
repo: "{{ odoo_enterprise_git_url }}"
dest: "{{ odoo_root_dir }}/enterprise"
depth: 1
version: "{{ odoo_version }}"
force: True
notify: restart odoo-server
tags: odoo
- name: Create the virtualenv
pip:
state: "{{ (odoo_install_mode == 'none') | ternary('present', 'latest') }}"
@ -36,7 +43,7 @@
virtualenv_command: "{{ odoo_venv_command }}"
requirements: "{{ odoo_root_dir }}/app/requirements.txt"
environment:
PATH: "{{ (pg_version == 'default') | ternary('', '/usr/pgsql-' ~ pg_version ~ '/bin:') }}/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin"
PATH: "{{ (pg_version | default('default') == 'default') | ternary('', '/usr/pgsql-' ~ pg_version ~ '/bin:') }}/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin"
tags: odoo
- name: Install additional modules in the venv

2
roles/odoo/tasks/write_version.yml
View File

@ -1,5 +1,5 @@
---
- name: Write version
copy: content={{ odoo_version }}-{{ odoo_build }} dest={{ odoo_root_dir }}/meta/ansible_version
copy: content={{ odoo_version }} dest={{ odoo_root_dir }}/meta/ansible_version
tags: odoo

46
roles/odoo/templates/nginx.conf.j2 Normal file
View File

@ -0,0 +1,46 @@
server {
listen 443 ssl http2;
server_name {{ odoo_public_url | default('https://_/') | urlsplit('hostname') }};
root /usr/share/nginx;
location /websocket {
proxy_pass http://localhost:{{ odoo_longpolling_port }};
proxy_set_header Upgrade $http_upgrade;
proxy_set_header Connection "upgrade";
proxy_set_header X-Forwarded-Host $host;
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
proxy_set_header X-Forwarded-Proto $scheme;
proxy_set_header X-Real-IP $remote_addr;
}
location /web/filestore {
internal;
alias {{ odoo_root_dir }}/filestore;
}
location @odoo {
proxy_set_header X-Forwarded-Host $host;
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
proxy_set_header X-Forwarded-Proto $scheme;
proxy_set_header X-Real-IP $remote_addr;
proxy_redirect off;
proxy_pass http://localhost:{{ odoo_http_port }};
}
location ~ ^/[^/]+/static/.+$ {
root {{ odoo_root_dir }}/app/addons;
try_files {{ odoo_root_dir }}/enterprise$uri {{ odoo_root_dir }}/app/addons$uri {{ odoo_root_dir }}/app/odoo/addons$uri @odoo;
expires 24h;
}
location / {
proxy_set_header X-Forwarded-Host $host;
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
proxy_set_header X-Forwarded-Proto $scheme;
proxy_set_header X-Real-IP $remote_addr;
proxy_redirect off;
proxy_pass http://localhost:{{ odoo_http_port }};
}
}

5
roles/odoo/templates/odoo-server.conf.j2
View File

@ -1,10 +1,12 @@
[options]
db_name = {{ odoo_db_name }}
db_host = {{ odoo_db_server }}
db_port = {{ odoo_db_port }}
db_user = {{ odoo_db_user }}
db_password = {{ odoo_db_pass }}
addons_path = {{ odoo_root_dir }}/app/odoo/addons
addons_path = {{ odoo_root_dir }}/enterprise, {{ odoo_root_dir }}/app/odoo/addons, {{ odoo_root_dir }}/app/addons
workers = {{ odoo_workers }}
max_cron_threads = 1
http_port = {{ odoo_http_port }}
longpolling_port = {{ odoo_longpolling_port }}
email_from = {{ odoo_email }}
@ -12,3 +14,4 @@ smtp_server = localhost
data_dir = {{ odoo_root_dir }}/data
without_demo = ALL
init = base

8
roles/odoo/vars/RedHat-8.yml
View File

@ -1,8 +1,8 @@
---
odoo_packages:
- python39-pip
- python39-devel
- python3.11-pip
- python3.11-devel
- gcc
- gcc-c++
- libxml2-devel
@ -13,5 +13,7 @@ odoo_packages:
- tar
- zstd
- postgresql15 # for pg_dump
- git
- acl
odoo_venv_command: /bin/python3.9 -m venv
odoo_venv_command: /bin/python3.11 -m venv

19
roles/odoo/vars/RedHat-9.yml Normal file
View File

@ -0,0 +1,19 @@
---
odoo_packages:
- python3.11-pip
- python3.11-devel
- gcc
- gcc-c++
- libxml2-devel
- libxslt-devel
- openldap-devel
- postgresql-devel
#- nodejs-less
- tar
- zstd
- postgresql15 # for pg_dump
- git
- acl
odoo_venv_command: /bin/python3.11 -m venv

1
roles/squid/files/acl/software_various.domains
View File

@ -394,3 +394,4 @@ download.copr.fedorainfracloud.org
# TrueNAS
update.ixsystems.com
update.freenas.org
apt.tn.ixsystems.com