Merge branch 'main' of https://dns.s-martika.com/smartika/Wordpress-Ansible

:erge branch 'main' of https://dns.s-martika.com/smartika/Wordpress-Ansible

.gitea/workflows/yamllint.yml

@@ -0,0 +1,58 @@
+---
+name: CI/CD Pipeline
+
+on:
+  push:
+    branches: [main, flip_dev]
+
+jobs:
+  lint:
+    runs-on: docker
+    container:
+      image: node:20-bullseye
+    steps:
+      - name: Checkout code
+        uses: actions/checkout@v4
+
+      - name: Install Python & linters
+        run: |
+          apt-get update && apt-get install -y python3 python3-pip bash git
+          pip3 install --upgrade pip
+          pip3 install yamllint ansible-lint
+
+      - name: Run linters
+        run: |
+          yamllint .
+    
+  deploy:
+    runs-on: docker
+    container:
+      image: node:20-bullseye
+    needs: build
+    steps:
+      - name: Checkout code
+        uses: actions/checkout@v4
+
+      - name: Install Ansible & dependencies
+        run: |
+          apt-get update && apt-get install -y python3 python3-pip openssh-client bash git
+          pip3 install --upgrade pip
+          pip3 install ansible
+      
+      - name: Setup SSH key with passphrase
+        run: |
+          mkdir -p ~/.ssh
+          printf "%s\n" "${{ secrets.SSH_PRIVATE_KEY }}" > ~/.ssh/id_rsa
+          chmod 600 ~/.ssh/id_rsa
+          ssh-keyscan -H 213.95.90.157 >> ~/.ssh/known_hosts
+          eval "$(ssh-agent -s)"
+          ssh-add ~/.ssh/id_rsa <<< "${{ secrets.SSH_PASSPHRASE }}"
+
+
+      - name: Run Ansible deployment
+        run: |
+          if [ -n "$SSH_PASSPHRASE" ]; then
+            eval "$(ssh-agent -s)"
+            ssh-add ~/.ssh/id_rsa <<< "$SSH_PASSPHRASE"
+          fi
+          ansible-playbook -i ansible/inventory.yaml site.yaml

.gitlab-ci.yml

@@ -1,11 +0,0 @@
----
-stages:
-  - lint
-
-yamllint:
-  stage: lint
-  image: python:3.12-alpine
-  before_script:
-    - pip install --no-cache-dir yamllint
-  script:
-    - yamllint .

.vscode/settings.json

@@ -0,0 +1,3 @@
+{
+    "ansible.python.interpreterPath": "/opt/homebrew/bin/python3"
+}

.yamllint.yml

@@ -0,0 +1,19 @@
+---
+extends: default
+
+ignore: |
+  ^venv/*
+  ^\.venv/*
+  ^\.gitea/*
+  ^\.git/*
+  ^\.ansible_test/*
+  ^ansible_test/*
+  ^\.ansiblelint/*
+
+rules:
+  line-length:
+    max: 400
+    level: warning
+  trailing-spaces: disable
+  indentation:
+    spaces: 2

docker/monitoring/docker-compose.yaml

@@ -4,7 +4,7 @@ services:
   prometheus:
     image: prom/prometheus:latest
     volumes:
-      - ./prometheus.yml:/etc/prometheus/prometheus.yml:ro
+      - ./prometheus.yaml:/etc/prometheus/prometheus.yml:ro
     ports:
       - "9090:9090"
     networks:
@@ -13,12 +13,12 @@ services:
 
   grafana:
     image: grafana/grafana:latest
-    user: "472"
     volumes:
       - ./grafana/provisioning:/etc/grafana/provisioning:ro
       - grafana_data:/var/lib/grafana
     environment:
       GF_SECURITY_ADMIN_PASSWORD: "admin"
+      GF_DASHBOARDS_DEFAULT_HOME_DASHBOARD_PATH: /var/lib/grafana/dashboards/home.json
     ports:
       - "3000:3000"
     networks:

docker/monitoring/grafana/provisioning/dashboards.yaml

@@ -2,9 +2,9 @@
 apiVersion: 1
 
 providers:
-  - name: default
+  - name: 'default'
-    orgId: 1
+    folder: 'Home'
-    folder: ""
     type: file
+    editable: true
     options:
-      path: /etc/grafana/provisioning/dashboards
+      path: /var/lib/grafana/dashboards