Activation de Greenlight
This commit is contained in:
parent
fa02a84e07
commit
7955e5e001
5 changed files with 37 additions and 3 deletions
11
Makefile
11
Makefile
|
|
@ -5,7 +5,7 @@ PLAYBOOK ?= site.yml
|
|||
EXTRA_VARS ?=
|
||||
ANSIBLE ?= ansible-playbook
|
||||
|
||||
.PHONY: help ping check run dry-run diff vars tree clean prep bbb bbb-dry-run
|
||||
.PHONY: help ping check run dry-run diff vars tree clean prep bbb bbb-dry-run greenlight greenlight-dry-run
|
||||
|
||||
help:
|
||||
@echo "Targets:"
|
||||
|
|
@ -20,6 +20,8 @@ help:
|
|||
@echo "Examples:"
|
||||
@echo " make run EXTRA_VARS='-e ssh_allow_cidrs_v4=[\"1.2.3.4/32\"]'"
|
||||
@echo " make vars host=bbb"
|
||||
@echo " make greenlight - installer/mettre à niveau Greenlight v3 (bbb-install -g)"
|
||||
@echo " make greenlight-dry-run - check mode pour Greenlight"
|
||||
|
||||
ping:
|
||||
ansible -i $(INVENTORY) vps -m ping
|
||||
|
|
@ -54,3 +56,10 @@ bbb:
|
|||
|
||||
bbb-dry-run:
|
||||
$(ANSIBLE) -i $(INVENTORY) $(PLAYBOOK) --become --tags bbb --check --diff $(EXTRA_VARS)
|
||||
|
||||
|
||||
greenlight:
|
||||
$(ANSIBLE) -i $(INVENTORY) $(PLAYBOOK) --become --tags bbb $(EXTRA_VARS) -e bbb_install_greenlight=true
|
||||
|
||||
greenlight-dry-run:
|
||||
$(ANSIBLE) -i $(INVENTORY) $(PLAYBOOK) --become --tags bbb --check --diff $(EXTRA_VARS) -e bbb_install_greenlight=true
|
||||
|
|
|
|||
15
README.md
15
README.md
|
|
@ -52,3 +52,18 @@ make bbb-dry-run
|
|||
```
|
||||
|
||||
> Note: BBB 3.x installe un TURN local + HAProxy pour partager le port 443 avec HTTPS. Le firewall `hostfilter` doit donc autoriser **UDP/443** en plus de TCP/443.
|
||||
|
||||
|
||||
## Greenlight v3 (portail principal)
|
||||
|
||||
Installation sur le domaine racine (remplace la page d’accueil BBB) :
|
||||
|
||||
```bash
|
||||
make greenlight
|
||||
```
|
||||
|
||||
Créer un compte admin :
|
||||
|
||||
```bash
|
||||
sudo docker exec -it greenlight-v3 bundle exec rake admin:create
|
||||
```
|
||||
|
|
|
|||
|
|
@ -53,4 +53,4 @@ bbb_install_enabled: true
|
|||
bbb_version: "jammy-300" # installe toujours la dernière 3.0.x
|
||||
letsencrypt_email: "allaire.dan@chezlepro.ca" # OBLIGATOIRE: email pour Let's Encrypt (ex: ops@chezlepro.ca)
|
||||
bbb_skip_min_requirements: true # -j: utile si IPv6 désactivé ou serveur < recommandations prod
|
||||
bbb_install_greenlight: false # -g (optionnel)
|
||||
bbb_install_greenlight: true # -g (optionnel)
|
||||
|
|
|
|||
|
|
@ -42,6 +42,16 @@
|
|||
path: /usr/bin/bbb-conf
|
||||
register: bbb_conf_bin
|
||||
|
||||
- name: Detect if Greenlight v3 is already installed (docker container)
|
||||
ansible.builtin.command: "docker ps -a --format '{{ '{{.Names}}' }}'"
|
||||
register: docker_ps_names
|
||||
changed_when: false
|
||||
failed_when: false
|
||||
|
||||
- name: Set fact greenlight_installed
|
||||
ansible.builtin.set_fact:
|
||||
greenlight_installed: "{{ 'greenlight-v3' in (docker_ps_names.stdout_lines | default([])) }}"
|
||||
|
||||
- name: Run bbb-install.sh (BBB 3.x + built-in TURN/haproxy)
|
||||
ansible.builtin.command: >
|
||||
{{ bbb_install_script_path }}
|
||||
|
|
@ -52,7 +62,7 @@
|
|||
{% if bbb_install_greenlight | bool %}-g{% endif %}
|
||||
register: bbb_install_run
|
||||
changed_when: true
|
||||
when: bbb_install_force | bool or not bbb_conf_bin.stat.exists
|
||||
when: bbb_install_force | bool or (not bbb_conf_bin.stat.exists) or (bbb_install_greenlight | bool and not (greenlight_installed | default(false) | bool))
|
||||
|
||||
# --- Post-install: align coturn relay UDP range with our nftables policy ---
|
||||
- name: Ensure /etc/turnserver.conf exists (installed by bbb-install)
|
||||
|
|
|
|||
0
roles/bbb_vps_prep/files/apply-hostfilter-nft.sh
Executable file → Normal file
0
roles/bbb_vps_prep/files/apply-hostfilter-nft.sh
Executable file → Normal file
Loading…
Reference in a new issue