Activation de Greenlight

This commit is contained in:
Daniel Allaire 2026-02-08 21:41:17 -05:00
parent fa02a84e07
commit 7955e5e001
5 changed files with 37 additions and 3 deletions

View file

@ -5,7 +5,7 @@ PLAYBOOK ?= site.yml
EXTRA_VARS ?=
ANSIBLE ?= ansible-playbook
.PHONY: help ping check run dry-run diff vars tree clean prep bbb bbb-dry-run
.PHONY: help ping check run dry-run diff vars tree clean prep bbb bbb-dry-run greenlight greenlight-dry-run
help:
@echo "Targets:"
@ -20,6 +20,8 @@ help:
@echo "Examples:"
@echo " make run EXTRA_VARS='-e ssh_allow_cidrs_v4=[\"1.2.3.4/32\"]'"
@echo " make vars host=bbb"
@echo " make greenlight - installer/mettre à niveau Greenlight v3 (bbb-install -g)"
@echo " make greenlight-dry-run - check mode pour Greenlight"
ping:
ansible -i $(INVENTORY) vps -m ping
@ -54,3 +56,10 @@ bbb:
bbb-dry-run:
$(ANSIBLE) -i $(INVENTORY) $(PLAYBOOK) --become --tags bbb --check --diff $(EXTRA_VARS)
greenlight:
$(ANSIBLE) -i $(INVENTORY) $(PLAYBOOK) --become --tags bbb $(EXTRA_VARS) -e bbb_install_greenlight=true
greenlight-dry-run:
$(ANSIBLE) -i $(INVENTORY) $(PLAYBOOK) --become --tags bbb --check --diff $(EXTRA_VARS) -e bbb_install_greenlight=true

View file

@ -52,3 +52,18 @@ make bbb-dry-run
```
> Note: BBB 3.x installe un TURN local + HAProxy pour partager le port 443 avec HTTPS. Le firewall `hostfilter` doit donc autoriser **UDP/443** en plus de TCP/443.
## Greenlight v3 (portail principal)
Installation sur le domaine racine (remplace la page daccueil BBB) :
```bash
make greenlight
```
Créer un compte admin :
```bash
sudo docker exec -it greenlight-v3 bundle exec rake admin:create
```

View file

@ -53,4 +53,4 @@ bbb_install_enabled: true
bbb_version: "jammy-300" # installe toujours la dernière 3.0.x
letsencrypt_email: "allaire.dan@chezlepro.ca" # OBLIGATOIRE: email pour Let's Encrypt (ex: ops@chezlepro.ca)
bbb_skip_min_requirements: true # -j: utile si IPv6 désactivé ou serveur < recommandations prod
bbb_install_greenlight: false # -g (optionnel)
bbb_install_greenlight: true # -g (optionnel)

View file

@ -42,6 +42,16 @@
path: /usr/bin/bbb-conf
register: bbb_conf_bin
- name: Detect if Greenlight v3 is already installed (docker container)
ansible.builtin.command: "docker ps -a --format '{{ '{{.Names}}' }}'"
register: docker_ps_names
changed_when: false
failed_when: false
- name: Set fact greenlight_installed
ansible.builtin.set_fact:
greenlight_installed: "{{ 'greenlight-v3' in (docker_ps_names.stdout_lines | default([])) }}"
- name: Run bbb-install.sh (BBB 3.x + built-in TURN/haproxy)
ansible.builtin.command: >
{{ bbb_install_script_path }}
@ -52,7 +62,7 @@
{% if bbb_install_greenlight | bool %}-g{% endif %}
register: bbb_install_run
changed_when: true
when: bbb_install_force | bool or not bbb_conf_bin.stat.exists
when: bbb_install_force | bool or (not bbb_conf_bin.stat.exists) or (bbb_install_greenlight | bool and not (greenlight_installed | default(false) | bool))
# --- Post-install: align coturn relay UDP range with our nftables policy ---
- name: Ensure /etc/turnserver.conf exists (installed by bbb-install)

0
roles/bbb_vps_prep/files/apply-hostfilter-nft.sh Executable file → Normal file
View file