Update to 2022-07-25 16:00

roles/odoo/tasks/archive_post.yml

@@ -0,0 +1,14 @@
+---
+
+- name: Compress previous version
+  command: tar cf {{ odoo_root_dir }}/archives/{{ odoo_current_version }}.tar.zst --use-compress-program=zstd ./
+  args:
+    chdir: "{{ odoo_root_dir }}/archives/{{ odoo_current_version }}"
+    warn: False
+  environment:
+    ZSTD_CLEVEL: 10
+  tags: odoo
+
+- name: Remove archive tmp dir
+  file: path={{ odoo_root_dir }}/archives/{{ odoo_current_version }} state=absent
+  tags: odoo

roles/odoo/tasks/archive_pre.yml

@@ -0,0 +1,42 @@
+---
+
+- name: Create the archive dir
+  file: path={{ odoo_root_dir }}/archives/{{ odoo_current_version }} state=directory
+  tags: odoo
+
+- name: Install postgresql client
+  package:
+    name:
+      - postgresql14
+  tags: odoo
+
+- name: Stop the server during upgrade
+  service: name=odoo-server state=stopped
+  tags: odoo
+
+- name: Archive previous version
+  synchronize:
+    src: "{{ odoo_root_dir }}/{{ item }}"
+    dest: "{{ odoo_root_dir }}/archives/{{ odoo_current_version }}/"
+    recursive: True
+    delete: True
+    compress: False
+  loop:
+    - venv
+    - app
+  delegate_to: "{{ inventory_hostname }}"
+  tags: odoo
+
+- name: Dump the database
+  command: >
+    /usr/pgsql-14/bin/pg_dump
+    --clean
+    --create
+    --host={{ odoo_db_server | quote }}
+    --port={{ odoo_db_port | quote }}
+    --username={{ odoo_db_user }} {{ odoo_db_name | quote }}
+    --file="{{ odoo_root_dir }}/archives/{{ odoo_current_version }}/{{ odoo_db_name }}.sql"
+  environment:
+    - PGPASSWORD: "{{ odoo_db_pass }}"
+  tags: odoo
+

roles/odoo/tasks/cleanup.yml

@@ -0,0 +1,8 @@
+---
+
+- name: Remove temp files
+  file: path={{ item }} state=absent
+  with_items:
+    - "{{ odoo_root_dir }}/tmp/odoo_{{ odoo_version }}.{{ odoo_build }}.tar.gz"
+    - "{{ odoo_root_dir }}/tmp/odoo-{{ odoo_version }}.post{{ odoo_build }}"
+  tags: odoo

roles/odoo/tasks/conf.yml

@@ -0,0 +1,20 @@
+---
+
+- name: Deploy server configuration
+  template: src=odoo-server.conf.j2 dest={{ odoo_root_dir }}/etc/odoo-server.conf group={{ odoo_user }} mode=640
+  notify: restart odoo-server
+  tags: odoo
+
+- when: odoo_install_mode != 'none'
+  block:
+    - name: Install odoo
+      command: "{{ odoo_root_dir }}/venv/bin/python3 {{ odoo_root_dir }}/app/setup.py install"
+      args:
+        chdir: "{{ odoo_root_dir }}/app/"
+
+    - name: Initialize the DB and update modules
+      command: "{{ odoo_root_dir }}/venv/bin/python3 {{ odoo_root_dir }}/app/setup/odoo -d {{ odoo_db_name }} -i base -u all --stop-after-init --syslog"
+      become_user: "{{ odoo_user }}"
+
+  tags: odoo
+

roles/odoo/tasks/directories.yml

@@ -0,0 +1,22 @@
+---
+
+- name: Create directories
+  file: path={{ item.path }} state=directory owner={{ item.owner | default(omit) }} group={{ item.group | default(omit) }} mode={{ item.mode | default(omit) }}
+  with_items:
+    - path: "{{ odoo_root_dir }}"
+      owner: "{{ odoo_user }}"
+      mode: 700
+    - path: "{{ odoo_root_dir }}/tmp"
+    - path: "{{ odoo_root_dir }}/meta"
+      mode: 700
+    - path: "{{ odoo_root_dir }}/etc"
+      group: "{{ odoo_user }}"
+      mode: 750
+    - path: "{{ odoo_root_dir }}/app"
+    - path: "{{ odoo_root_dir }}/backup"
+      mode: 700
+    - path: "{{ odoo_root_dir }}/data"
+      group: "{{ odoo_user }}"
+      mode: 770
+  tags: odoo
+

roles/odoo/tasks/facts.yml

@@ -0,0 +1,29 @@
+---
+
+# Load distribution specific variables
+- include_vars: "{{ item }}"
+  with_first_found:
+    - "{{ role_path }}/vars/{{ ansible_distribution }}-{{ ansible_distribution_major_version }}.yml"
+    - "{{ role_path }}/vars/{{ ansible_os_family }}-{{ ansible_distribution_major_version }}.yml"
+    - "{{ role_path }}/vars/{{ ansible_distribution }}.yml"
+    - "{{ role_path }}/vars/{{ ansible_os_family }}.yml"
+  tags: odoo
+
+- name: Detect installed version
+  block:
+    - import_tasks: ../includes/webapps_set_install_mode.yml
+      vars:
+        - root_dir: "{{ odoo_root_dir }}"
+        - version: "{{ odoo_version }}-{{ odoo_build }}"
+    - set_fact: odoo_install_mode={{ install_mode | default('none') }}
+    - set_fact: odoo_current_version={{ current_version | default('') }}
+  tags: odoo
+
+# Create a random pass for the DB if needed
+- block:
+    - import_tasks: ../includes/get_rand_pass.yml
+      vars:
+        - pass_file: "{{ odoo_root_dir }}/meta/ansible_dbpass"
+    - set_fact: odoo_db_pass={{ rand_pass }}
+  when: odoo_db_pass is not defined
+  tags: odoo

roles/odoo/tasks/install.yml

@@ -0,0 +1,100 @@
+---
+
+- name: Install packages
+  package: name={{ odoo_packages }}
+  tags: odoo
+
+- when: odoo_install_mode != 'none'
+  block:
+    - name: Fetch odoo sources
+      get_url:
+        url: "{{ odoo_archive_url }}"
+        dest: "{{ odoo_root_dir }}/tmp"
+        checksum: sha256:{{ odoo_archive_sha256 }}
+
+    - name: Extract odoo archive
+      unarchive:
+        src: "{{ odoo_root_dir }}/tmp/odoo_{{ odoo_version }}.{{ odoo_build }}.tar.gz"
+        dest: "{{ odoo_root_dir }}/tmp"
+        remote_src: True
+
+    - name: Copy odoo application to its final directory
+      synchronize:
+        src: "{{ odoo_root_dir }}/tmp/odoo-{{ odoo_version }}.post{{ odoo_build }}/"
+        dest: "{{ odoo_root_dir }}/app/"
+        recursive: True
+        delete: True
+        compress: False
+      delegate_to: "{{ inventory_hostname }}"
+
+  tags: odoo
+
+- name: Create the venv
+  pip:
+    name: "{{ item }}"
+    state: "{{ (odoo_install_mode == 'none') | ternary('present', 'latest') }}"
+    virtualenv: "{{ odoo_root_dir }}/venv"
+    virtualenv_command: "{{ odoo_venv_command }}"
+  loop:
+    - phonenumbers
+  tags: odoo
+
+- name: Create the virtualenv
+  pip:
+    state: "{{ (odoo_install_mode == 'none') | ternary('present', 'latest') }}"
+    virtualenv: "{{ odoo_root_dir }}/venv"
+    virtualenv_command: "{{ odoo_venv_command }}"
+    requirements: "{{ odoo_root_dir }}/app/requirements.txt"
+  environment:
+    PATH: "{{ (pg_version == 'default') | ternary('', '/usr/pgsql-' ~ pg_version ~ '/bin:') }}/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin"
+  tags: odoo
+
+- name: Install additional modules in the venv
+  pip:
+    name: "{{ item }}"
+    state: "{{ (odoo_install_mode == 'none') | ternary('present', 'latest') }}"
+    virtualenv: "{{ odoo_root_dir }}/venv"
+    virtualenv_command: "{{ odoo_venv_command }}"
+  loop:
+    - phonenumbers
+  tags: odoo
+
+- name: Create the PostgreSQL role
+  postgresql_user:
+    db: postgres
+    name: "{{ odoo_db_user }}"
+    password: "{{ odoo_db_pass }}"
+    login_host: "{{ odoo_db_server }}"
+    login_user: sqladmin
+    login_password: "{{ pg_admin_pass }}"
+  tags: odoo
+
+- name: Create the PostgreSQL database
+  postgresql_db:
+    name: "{{ odoo_db_name }}"
+    encoding: UTF-8
+    template: template0
+    owner: "{{ odoo_db_user }}"
+    login_host: "{{ odoo_db_server }}"
+    login_user: sqladmin
+    login_password: "{{ pg_admin_pass }}"
+  tags: odoo
+
+- name: Deploy odoo service file
+  template: src=odoo-server.service.j2 dest=/etc/systemd/system/odoo-server.service
+  register: odoo_unit
+  notify: restart odoo-server
+  tags: odoo
+
+- name: Reload systemd
+  command: systemctl daemon-reload
+  when: odoo_unit.changed
+  tags: odoo
+
+- name: Install backup hooks
+  template: src={{ item }}-backup.sh.j2 dest=/etc/backup/{{ item }}.d/odoo.sh mode=750
+  loop:
+    - pre
+    - post
+  tags: odoo
+

roles/odoo/tasks/iptables.yml

@@ -0,0 +1,8 @@
+---
+
+- name: Handle odoo ports
+  iptables_raw:
+    name: odoo_ports
+    state: "{{ (odoo_src_ip | length > 0) | ternary('present','absent') }}"
+    rules: "-A INPUT -m state --state NEW -p tcp -m multiport --dports {{ odoo_ports | join(',') }} -s {{ odoo_src_ip | join(',') }} -j ACCEPT"
+  tags: firewall,odoo

roles/odoo/tasks/main.yml

@@ -0,0 +1,37 @@
+---
+
+- include_tasks: user.yml
+  tags: always
+
+- include_tasks: directories.yml
+  tags: always
+
+- include_tasks: facts.yml
+  tags: always
+
+- include_tasks: archive_pre.yml
+  when: odoo_install_mode == 'upgrade'
+  tags: always
+
+- include_tasks: install.yml
+  tags: always
+
+- include_tasks: conf.yml
+  tags: always
+
+- include_tasks: iptables.yml
+  when: iptables_manage | default(True)
+  tags: always
+  
+- include_tasks: services.yml
+  tags: always
+
+- include_tasks: write_version.yml
+  tags: always
+
+- include_tasks: archive_post.yml
+  when: odoo_install_mode == 'upgrade'
+  tags: always
+
+- include_tasks: cleanup.yml
+  tags: always

roles/odoo/tasks/services.yml

@@ -0,0 +1,5 @@
+---
+
+- name: Start the service
+  service: name=odoo-server state=started enabled=True
+  tags: odoo

roles/odoo/tasks/user.yml

@@ -0,0 +1,9 @@
+---
+
+- name: Create user account for odoo
+  user:
+    name: "{{ odoo_user }}"
+    system: True
+    shell: /sbin/nologin
+    home: "{{ odoo_root_dir }}"
+  tags: odoo

roles/odoo/tasks/write_version.yml

@@ -0,0 +1,5 @@
+---
+
+- name: Write version
+  copy: content={{ odoo_version }}-{{ odoo_build }} dest={{ odoo_root_dir }}/meta/ansible_version
+  tags: odoo