---
- name: Configure Jump Server
  hosts: lbs 
  tags: conf-lbs
  vars_files:
    - "{{ var }}"
  vars:
     nagios_nrpe_server_allowed_hosts: "{{ groups['monit'][0] }},127.0.0.1"
  user: centos
  sudo: yes
  roles:
      - role: ../roles/common
        tags: [ 'common' ]
      - role: ../roles/swap/roles/swap
        tags: [ 'common' ]
      - role: ../roles/ganglia-gmond
      - role: ../roles/nrpe
        tags: [ 'common', 'conf-monit' ]
      - role: ../roles/postfix
        postfix_mynetworks: [ "{{ ip_range }}" ]
        enable_postfix_relayhost: false
      - role: ../roles/letsencrypt
        when: env != "test"
      - role: ../roles/haproxy
      - role: ../roles/jump
  handlers:
    - include: ../handlers/main.yml

#- name: Configure keepalived for jump
#  hosts: c4science-jump00
#  roles:
#      - role: ../rolesepalived
#        keepalived_shared_ip: "{{ external_ip }}"
#        keepalived_role: ../rolesaster"

#- name: Configure keepalived for jump2
#  hosts: c4science-jump01
#  roles:
#      - role: ../rolesepalived
#        keepalived_shared_ip: "{{ external_ip }}"
#        keepalived_role: ../roleslave"

- name: Configure Monitoring Server
  hosts: monit
  tags: conf-monit
  vars_files:
    - "{{ var }}"
  vars:
     nagios_nrpe_server_allowed_hosts: "{{ groups['monit'][0] }},127.0.0.1"
  user: centos
  sudo: yes
  roles:
      - role: ../roles/common
        tags: [ 'common' ]
      - role: ../roles/swap/roles/swap
        tags: [ 'common' ]
      - role: ../roles/nrpe
        tags: [ 'common', 'conf-monit' ]
      - role: ../roles/postfix
        postfix_relayhost: "[{{ hostvars['127.0.0.1']['openstackjump'].results[0]['openstack']['private_v4'] }}]"
      - role: ../roles/logcheck
      - role: ../roles/rsyslog
      - { role: ../roles/apache, apache_config: placeholder.conf }
      - role: ../roles/nagios
      - role: ../roles/ganglia-gmond
      - role: ../roles/ganglia-gmetad
  tasks:
      - include: ../roles/galera/tasks/install.yml
        yum_repo: ../roles/galera/files/yum.repo
      - service: name=mysql enabled=false state=stopped
  handlers:
    - include: ../handlers/main.yml

- name: Configure Databases
  hosts: dbs
  tags: conf-dbs
  vars_files:
    - "{{ var }}"
  vars:
     nagios_nrpe_server_allowed_hosts: "{{ groups['monit'][0] }},127.0.0.1"
  user: centos
  sudo: yes
  roles:
      - role: ../roles/common
        tags: [ 'common' ]
      - role: ../roles/swap/roles/swap
        tags: [ 'common' ]
      - role: ../roles/nrpe
        tags: [ 'common', 'conf-monit' ]
      - role: ../roles/postfix
        postfix_relayhost: "[{{ hostvars['127.0.0.1']['openstackjump'].results[0]['openstack']['private_v4'] }}]"
      - role: ../roles/ganglia-gmond
      - role: ../roles/galera
  handlers:
    - include: ../handlers/main.yml

- name: Configure App
  hosts: app
  tags: conf-app
  vars_files:
    - "{{ var }}"
  vars:
     nagios_nrpe_server_allowed_hosts: "{{ groups['monit'][0] }},127.0.0.1"
  user: centos
  sudo: yes
  roles:
      - role: ../roles/common
        tags: [ 'common' ]
      - role: ../roles/swap/roles/swap
        tags: [ 'common' ]
      - role: ../roles/nrpe
        tags: [ 'common', 'conf-monit' ]
      - role: ../roles/postfix
        postfix_relayhost: "[{{ hostvars['127.0.0.1']['openstackjump'].results[0]['openstack']['private_v4'] }}]"
      - role: ../roles/ganglia-gmond
      - { role: ../roles/apache, apache_config: phabricator.conf }
      - role: ../roles/glusterfs
        tags: ['gluster']
      - role: ../roles/phabricator
      - role: ../roles/shibboleth
  handlers:
    - include: ../handlers/main.yml

- name: Configure Filesystem for repositories
  hosts: fs
  tags: conf-fs
  vars_files:
    - "{{ var }}"
  vars:
     nagios_nrpe_server_allowed_hosts: "{{ groups['monit'][0] }},127.0.0.1"
  user: centos
  sudo: yes
  roles:
      - role: ../roles/common
        tags: [ 'common' ]
      - role: ../roles/swap/roles/swap
        tags: [ 'common' ]
      - role: ../roles/nrpe
        tags: [ 'common', 'conf-monit' ]
      - role: ../roles/postfix
        postfix_relayhost: "[{{ hostvars['127.0.0.1']['openstackjump'].results[0]['openstack']['private_v4'] }}]"
      - role: ../roles/ganglia-gmond
      - role: ../roles/glusterfs
        tags: ['gluster']
      - role: ../roles/fs
        tags: ['gluster']
  handlers:
    - include: ../handlers/main.yml

- name: Configure App Daemons
  hosts: phd
  tags: conf-phd
  vars_files:
    - "{{ var }}"
  vars:
     nagios_nrpe_server_allowed_hosts: "{{ groups['monit'][0] }},127.0.0.1"
  user: centos
  sudo: yes
  roles:
      - role: ../roles/common
        tags: [ 'common' ]
      - role: ../roles/swap/roles/swap
        tags: [ 'common' ]
      - role: ../roles/nrpe
        tags: [ 'common', 'conf-monit' ]
      - role: ../roles/postfix
        postfix_relayhost: "[{{ hostvars['127.0.0.1']['openstackjump'].results[0]['openstack']['private_v4'] }}]"
      - role: ../roles/ganglia-gmond
      - role: ../roles/glusterfs
        tags: ['gluster']
  tasks:
      - include: ../roles/phabricator/tasks/packages.yml
      - include: ../roles/phabricator/tasks/users.yml
      - include: ../roles/phabricator/tasks/glusterfs.yml
      - include: ../roles/phabricator/tasks/install.yml myconfig=../roles/phabricator/templates/myconfig.conf.php
      - include: ../roles/phabricator/tasks/daemons.yml
        phd_init: ../roles/phabricator/templates/phd_init
  handlers:
    - include: ../handlers/main.yml

- name: Configure Jenkins master
  hosts: ci
  vars_files:
    - "{{ var }}"
  vars:
     nagios_nrpe_server_allowed_hosts: "{{ groups['monit'][0] }},127.0.0.1"
  user: centos
  sudo: yes
  roles:
      - role: ../roles/common
        tags: [ 'common' ]
      - role: ../roles/swap/roles/swap
        tags: [ 'common' ]
      - role: ../roles/nrpe
        tags: [ 'common', 'conf-monit' ]
      - role: ../roles/postfix
        postfix_relayhost: "[{{ hostvars['127.0.0.1']['openstackjump'].results[0]['openstack']['private_v4'] }}]"
      - role: ../roles/ganglia-gmond
      - role: ../roles/jenkins
        plugins:
          - 'preSCMbuildstep'
          - 'git'
          - 'build-token-root'
          - 'phabricator-plugin'
          - 'docker-plugin'
          - 'build-monitor-plugin'
          - 'job-restrictions'
          - 'project-stats-plugin'
          - 'cluster-stats'
          - 'embeddable-build-status'
        prefix: '/build'
        email:
          smtp_host: 'localhost'
          smtp_ssl: 'false'
          default_email_suffix: "@{{ domain }}"
      - role: ../roles
        tags: [ 'jenkins' ]

#- name: Configure Jenkins slave
#  hosts: ci-slave
#  tags: conf-ci-slave
#  vars_files:
#    - "{{ var }}"
#  user: core
#  sudo: yes
#  roles:
#    - role: ../rolescker