Update to 2021-12-01 19:13

roles/unmaintained/mayan_edms/tasks/archive_post.yml

@@ -0,0 +1,10 @@
+---
+
+- name: Compress previous version
+  command: tar cf {{ mayan_root_dir }}/archives/{{ mayan_current_version }}.tar.zst --use-compress-program=zstd ./
+  environment:
+    ZST_CLEVEL: 10
+  args:
+    chdir: "{{ mayan_root_dir }}/archives/{{ mayan_current_version }}"
+    warn: False
+  tags: mayan

roles/unmaintained/mayan_edms/tasks/archive_pre.yml

@@ -0,0 +1,56 @@
+---
+
+- name: Create the archive dir
+  file: path={{ mayan_root_dir }}/archives/{{ mayan_current_version }} state=directory
+  tags: mayan
+
+- name: Stop sevices during upgrade
+  service: name={{ item }} state=stopped
+  loop:
+    - mayan-edms-web
+    - mayan-edms-worker-fast
+    - mayan-edms-worker-medium
+    - mayan-edms-worker-slow
+    - mayan-edms-beat
+  tags: mayan
+
+- name: Archive previous version
+  synchronize:
+    src: "{{ mayan_root_dir }}/{{ item }}"
+    dest: "{{ mayan_root_dir }}/archives/{{ mayan_current_version }}/"
+    recursive: True
+    delete: True
+  loop:
+    - venv
+    - config
+  delegate_to: "{{ inventory_hostname }}"
+  tags: mayan
+
+- name: Dump the database
+  mysql_db:
+    state: dump
+    name: "{{ mayan_db_name }}"
+    target: "{{ root_dir }}/archives/{{ mayan_current_version }}/{{ mayan_db_name }}.sql.gz"
+    login_host: "{{ mayan_db_server }}"
+    login_user: sqladmin
+    login_password: "{{ mysql_admin_pass }}"
+    quick: True
+    single_transaction: True
+  when: mayan_db_engine == 'mysql'
+  tags: mayan
+
+- name: Dump the database
+  command: >
+    /usr/pgsql-14/bin/pg_dump
+    --clean
+    --create
+    --host={{ mayan_db_server | quote }}
+    --port={{ mayan_db_port | quote }}
+    --username=sqladmin {{ mayan_db_name | quote }}
+    --file="{{ mayan_root_dir }}/archives/{{ mayan_current_version }}/{{ mayan_db_name }}.sql"
+  environment:
+    - PGPASSWORD: "{{ pg_admin_pass }}"
+  when: mayan_db_engine == 'postgresql'
+  tags: mayan
+
+

roles/unmaintained/mayan_edms/tasks/cleanup.yml

@@ -0,0 +1,7 @@
+---
+
+- name: Remove temp and obsolete files
+  file: path={{ item }} state=absent
+  loop:
+    - "{{ mayan_root_dir }}/archive"
+  tags: mayan

roles/unmaintained/mayan_edms/tasks/conf.yml

@@ -0,0 +1,9 @@
+---
+
+- name: Deploy configuration
+  template: src={{ item.src }} dest={{ item.dest }} group={{ mayan_user }} mode=640
+  loop:
+    - src: env.j2
+      dest: "{{ mayan_root_dir }}/config/.env"
+  notify: restart mayan-edms
+  tags: mayan

roles/unmaintained/mayan_edms/tasks/directories.yml

@@ -0,0 +1,28 @@
+---
+- name: Create directories
+  file:
+    path: "{{ item.path }}"
+    state: directory
+    owner: "{{ item.owner | default(omit) }}"
+    group: "{{ item.group | default(omit) }}"
+    mode: "{{ item.mode | default(omit) }}"
+  loop:
+    - path: "{{ mayan_root_dir }}/meta"
+      mode: 700
+    - path: "{{ mayan_root_dir }}/tmp"
+      mode: 700
+      owner: "{{ mayan_user }}"
+    - path: "{{ mayan_root_dir }}/data/mayan_settings/"
+      mode: 700
+      owner: "{{ mayan_user }}"
+    - path: "{{ mayan_root_dir }}/archives"
+      mode: 700
+    - path: "{{ mayan_root_dir }}/backup"
+      mode: 700
+    - path: "{{ mayan_root_dir }}/config"
+      group: "{{ mayan_user }}"
+      mode: 750
+    - path: "{{ mayan_root_dir }}/fuse"
+      mode: 700
+    - path: "{{ mayan_root_dir }}/input"
+  tags: mayan

roles/unmaintained/mayan_edms/tasks/facts.yml

@@ -0,0 +1,35 @@
+---
+
+- fail: msg="mysql_admin_pass must be set"
+  when: mysql_admin_pass is not defined
+  tags: mayan
+
+# Ensure we have recent enough MariaDB version
+- fail: msg="Require MariaDB > 10"
+  when:
+    - mayan_db_server == 'localhost' or mayan_db_server == '127.0.0.1'
+    - mysql_mariadb_version == 'default'
+  tags: mayan
+
+- import_tasks: ../includes/webapps_set_install_mode.yml
+  vars:
+    - root_dir: "{{ mayan_root_dir }}"
+    - version: "{{ mayan_version }}"
+  tags: mayan
+
+- block:
+    - set_fact: mayan_install_mode={{ (install_mode == 'upgrade' and not mayan_manage_upgrade) | ternary('none',install_mode) }}
+    - set_fact: mayan_current_version={{ current_version | default('') }}
+  tags: mayan
+
+  # Create a random pass for the DB if needed
+- block:
+    - import_tasks: ../includes/get_rand_pass.yml
+      vars:
+        - pass_file: "{{ mayan_root_dir }}/meta/ansible_dbpass"
+        - complex: False
+    - set_fact: mayan_db_pass={{ rand_pass }}
+  when: mayan_db_pass is not defined
+  tags: mayan
+
+

roles/unmaintained/mayan_edms/tasks/install.yml

@@ -0,0 +1,168 @@
+---
+
+- name: Install needed tools
+  yum:
+    name:
+      - git
+      - gcc
+      - openssl-devel
+      - libffi-devel
+      - openldap-devel
+      - libjpeg-turbo-devel
+      - libpng-devel
+      - libexif
+      - ghostscript
+      - gnupg1
+      - graphviz
+      - fuse-libs
+      - file-libs
+      - libreoffice
+      - poppler-utils
+      - sane-backends
+      - tesseract
+      - tesseract-langpack-fra
+      - python3-devel
+      - python3-pip
+      - python3-virtualenv
+      - python-setuptools
+      - rabbitmq-server
+  tags: mayan
+
+- name: Install MySQL support
+  yum:
+    name:
+      - mysql-devel
+      - MySQL-python
+  when: mayan_db_engine == 'mysql'
+  tags: mayan
+
+# WHen using upstream MariaDB repo, we have to install MariaDB-shared
+- name: Install MariaDB shared libs
+  yum:
+    name:
+      - MariaDB-shared
+  when:
+    - mayan_db_engine == 'mysql'
+    - mysql_mariadb_version is defined and mysql_mariadb_version != 'default'
+  tags: mayan
+
+- name: Install PostgreSQL support
+  yum:
+    name:
+      - postgresql-devel
+      - postgresql14
+      - python-psycopg2
+  when: mayan_db_engine == 'postgresql'
+  tags: mayan
+
+- name: Wipe the venv on upgrades
+  file: path={{ mayan_root_dir }}/venv state=absent
+  when: mayan_install_mode=='upgrade'
+  tags: mayan
+
+- name: Create the venv dir
+  file: path={{ mayan_root_dir }}/venv state=directory
+  tags: mayan
+
+- name: Create the virtualenv
+  pip:
+    name:
+      - pip
+      - redis==3.5.3
+      - python-ldap
+      - django_auth_ldap
+      - "{{ (mayan_db_engine == 'mysql') | ternary('mysql','psycopg2==2.8.6') }}"
+    virtualenv: "{{ mayan_root_dir }}/venv"
+    virtualenv_command: /usr/bin/virtualenv-3
+    virtualenv_python: /usr/bin/python3
+  tags: mayan
+
+- name: Install mayan-edms wrapper
+  template: src=mayan-edms.j2 dest=/usr/local/bin/mayan-edms mode=755
+  tags: mayan
+
+- name: Install Mayan EDMS
+  pip:
+    name:
+      - mayan-edms=={{ mayan_version }}
+    virtualenv: "{{ mayan_root_dir }}/venv"
+    virtualenv_command: /usr/bin/virtualenv-3
+    virtualenv_python: /usr/bin/python3
+  tags: mayan
+
+- when: mayan_db_engine == 'mysql'
+  block:
+    - import_tasks: ../includes/webapps_create_mysql_db.yml
+      vars:
+        - db_name: "{{ mayan_db_name }}"
+        - db_user: "{{ mayan_db_user }}"
+        - db_server: "{{ mayan_db_server }}"
+        - db_pass: "{{ mayan_db_pass }}"
+  tags: mayan
+
+- when: mayan_db_engine == 'postgresql'
+  block:
+    - name: Create the PostgreSQL role
+      postgresql_user:
+        db: postgres
+        name: "{{ mayan_db_user }}"
+        password: "{{ mayan_db_pass }}"
+        login_host: "{{ mayan_db_server }}"
+        login_user: sqladmin
+        login_password: "{{ pg_admin_pass }}"
+    
+    - name: Create the PostgreSQL database
+      postgresql_db:
+        name: "{{ mayan_db_name }}"
+        encoding: UTF-8
+        template: template0
+        owner: "{{ mayan_db_user }}"
+        login_host: "{{ mayan_db_server }}"
+        login_user: sqladmin
+        login_password: "{{ pg_admin_pass }}"
+  tags: mayan
+
+- name: Initialize or upgrade database
+  command: >-
+    {{ mayan_root_dir }}/venv/bin/python
+      {{ mayan_root_dir }}/venv/bin/mayan-edms.py
+      {{ (mayan_install_mode == 'install') | ternary('initialsetup','performupgrade') }}
+  environment:
+    - MAYAN_MEDIA_ROOT: "{{ mayan_root_dir }}/data"
+    - MAYAN_DATABASE_ENGINE: django.db.backends.{{ (mayan_db_engine == 'mysql') | ternary('mysql','postgresql') }}
+    - MAYAN_DATABASE_NAME: "{{ mayan_db_name }}"
+    - MAYAN_DATABASE_PASSWORD: "{{ mayan_db_pass }}"
+    - MAYAN_DATABASE_USER: "{{ mayan_db_user }}"
+    - MAYAN_DATABASE_HOST: "{{ mayan_db_server }}"
+  when: mayan_install_mode != 'none'
+  tags: mayan
+
+- name: Deploy systemd units
+  template: src={{ item }}.j2 dest=/etc/systemd/system/{{ item }}
+  loop:
+    - mayan-edms-web.service
+    - mayan-edms-worker-fast.service
+    - mayan-edms-worker-medium.service
+    - mayan-edms-worker-slow.service
+    - mayan-edms-beat.service
+  register: mayan_systemd_units
+  notify: restart mayan-edms
+  tags: mayan
+
+- name: Reload systemd
+  systemd: daemon_reload=True
+  when:  mayan_systemd_units.results | selectattr('changed', 'equalto', True) | list | length > 0
+  tags: mayan
+
+- name: Install pre/post backup scripts
+  template: src={{ item }}_backup.sh.j2 dest=/etc/backup/{{ item }}.d/mayan_edms.sh mode=750
+  loop:
+    - pre
+    - post
+  tags: mayan
+
+- name: Deploy auth configuration
+  template: src=auth.py.j2 dest={{ mayan_root_dir }}/data/mayan_settings/auth.py group={{ mayan_user }} mode=640
+  when: mayan_ldap_auth
+  notify: restart mayan-edms
+  tags: mayan

roles/unmaintained/mayan_edms/tasks/iptables.yml

@@ -0,0 +1,9 @@
+---
+
+- name:  Handle Mayan EDMS port in the firewall
+  iptables_raw:
+    name: mayan_port
+    state: "{{ (mayan_src_ip | length > 0) | ternary('present','absent') }}"
+    rules: "-A INPUT -m state --state NEW -p tcp --dport {{ mayan_port }} -s {{ mayan_src_ip | join(',') }} -j ACCEPT"
+  tags: firewall,mayan
+

roles/unmaintained/mayan_edms/tasks/main.yml

@@ -0,0 +1,15 @@
+---
+- include: user.yml
+- include: directories.yml
+- include: facts.yml
+- include: archive_pre.yml
+  when: mayan_install_mode == 'upgrade'
+- include: install.yml
+- include: conf.yml
+- include: iptables.yml
+  when: iptables_manage | default(True)
+- include: services.yml
+- include: write_version.yml
+- include: archive_post.yml
+  when: mayan_install_mode == 'upgrade'
+- include: cleanup.yml

roles/unmaintained/mayan_edms/tasks/services.yml

@@ -0,0 +1,11 @@
+---
+
+- name: Start and enable services
+  service: name={{ item }} state=started enabled=True
+  loop:
+    - mayan-edms-web
+    - mayan-edms-worker-fast
+    - mayan-edms-worker-medium
+    - mayan-edms-worker-slow
+    - mayan-edms-beat
+  tags: mayan

roles/unmaintained/mayan_edms/tasks/user.yml

@@ -0,0 +1,6 @@
+---
+
+- name: Create mayan user account
+  user: name={{ mayan_user }} home={{ mayan_root_dir }} system=True
+  tags: mayan
+

roles/unmaintained/mayan_edms/tasks/write_version.yml

@@ -0,0 +1,5 @@
+---
+
+- name: Write current version
+  copy: content={{ mayan_version }} dest={{ mayan_root_dir }}/meta/ansible_version
+  tags: mayan