fix: batcher ansible

Author: JuArce

infra/ansible/playbooks/caddy.yaml

@@ -0,0 +1,87 @@
+- name: Caddy Setup
+  hosts: "{{ host }}"
+
+  tasks:
+    - name: Allow http/https traffic on UFW
+      become: true
+      ufw:
+        rule: allow
+        state: enabled
+        port: '{{ item }}'
+      loop:
+        - http
+        - https
+      vars:
+        ansible_ssh_user: "{{ admin_user }}"
+
+    - name: Install dependencies for Caddy
+      become: true
+      apt:
+        name:
+          - debian-keyring
+          - debian-archive-keyring
+          - apt-transport-https
+          - curl
+        state: present
+        update_cache: yes
+      vars:
+        ansible_ssh_user: "{{ admin_user }}"
+
+    - name: Download and install Caddy GPG key
+      shell:
+        cmd: curl -1sLf 'https://dl.cloudsmith.io/public/caddy/stable/gpg.key' | sudo gpg --dearmor -o /usr/share/keyrings/caddy-stable-archive-keyring.gpg
+        creates: /usr/share/keyrings/caddy-stable-archive-keyring.gpg
+      vars:
+        ansible_ssh_user: "{{ admin_user }}"
+
+    - name: Add Caddy repository
+      shell:
+        cmd: curl -1sLf 'https://dl.cloudsmith.io/public/caddy/stable/debian.deb.txt' | sudo tee /etc/apt/sources.list.d/caddy-stable.list
+        creates: /etc/apt/sources.list.d/caddy-stable.list
+      vars:
+        ansible_ssh_user: "{{ admin_user }}"
+
+    - name: Download and install XCaddy GPG key
+      shell:
+        cmd: curl -1sLf 'https://dl.cloudsmith.io/public/caddy/xcaddy/gpg.key' | sudo gpg --dearmor -o /usr/share/keyrings/caddy-xcaddy-archive-keyring.gpg
+        creates: /usr/share/keyrings/caddy-xcaddy-archive-keyring.gpg
+      vars:
+        ansible_ssh_user: "{{ admin_user }}"
+
+    - name: Add XCaddy repository
+      shell:
+        cmd: curl -1sLf 'https://dl.cloudsmith.io/public/caddy/xcaddy/debian.deb.txt' | sudo tee /etc/apt/sources.list.d/caddy-xcaddy.list
+        creates: /etc/apt/sources.list.d/caddy-xcaddy.list
+      vars:
+        ansible_ssh_user: "{{ admin_user }}"
+
+    - name: Install Caddy and XCaddy
+      become: true
+      apt:
+        update_cache: yes
+        name:
+          - caddy
+          - xcaddy
+        state: present
+      vars:
+        ansible_ssh_user: "{{ admin_user }}"
+
+    - name: Build Cloudflare DNS module for caddy
+      shell:
+        cmd: |
+          xcaddy build --with github.com/caddy-dns/cloudflare
+          sudo mv /home/{{ ansible_ssh_user }}/caddy /usr/bin/caddy
+        chdir: /home/{{ ansible_ssh_user }}/
+      vars:
+        ansible_ssh_user: "{{ admin_user }}"
+      environment:
+        PATH: "{{ ansible_env.PATH }}:/usr/local/go/bin"
+
+    - name: Enable caddy
+      become: true
+      systemd_service:
+        name: caddy
+        enabled: true
+        state: started
+      vars:
+        ansible_ssh_user: "{{ admin_user }}"

infra/ansible/playbooks/ini/caddy-batcher.ini.example

@@ -0,0 +1,2 @@
+[global]
+batcher_domain=

infra/ansible/playbooks/templates/caddy/Caddyfile.batcher.j2

@@ -0,0 +1,13 @@
+# The Caddyfile is an easy way to configure your Caddy web server.
+
+# To use your own domain name (with automatic HTTPS), first make
+# sure your domain's A/AAAA DNS records are properly pointed to
+# this machine's public IP, then replace ":80" below with your
+# domain name.
+
+# Refer to the Caddy docs for more information:
+# https://caddyserver.com/docs/caddyfile
+
+{{ batcher_domain }} {
+	reverse_proxy localhost:8080
+}