From 2bd16aa3772aa1f7d1cd2a51157d474f235fad3a Mon Sep 17 00:00:00 2001
From: Felix Stupp <felix.stupp@outlook.com>
Date: Sat, 7 Sep 2019 00:15:52 +0200
Subject: [PATCH] Added role server/tt-rss

---
 roles/server/tt-rss/defaults/main.yml        |  15 ++
 roles/server/tt-rss/handlers/main.yml        |   7 +
 roles/server/tt-rss/meta/main.yml            |  22 +++
 roles/server/tt-rss/tasks/main.yml           |  37 ++++
 roles/server/tt-rss/templates/config.php     | 182 +++++++++++++++++++
 roles/server/tt-rss/templates/tt-rss.service |  13 ++
 6 files changed, 276 insertions(+)
 create mode 100644 roles/server/tt-rss/defaults/main.yml
 create mode 100644 roles/server/tt-rss/handlers/main.yml
 create mode 100644 roles/server/tt-rss/meta/main.yml
 create mode 100644 roles/server/tt-rss/tasks/main.yml
 create mode 100755 roles/server/tt-rss/templates/config.php
 create mode 100644 roles/server/tt-rss/templates/tt-rss.service

diff --git a/roles/server/tt-rss/defaults/main.yml b/roles/server/tt-rss/defaults/main.yml
new file mode 100644
index 0000000..c34c0f2
--- /dev/null
+++ b/roles/server/tt-rss/defaults/main.yml
@@ -0,0 +1,15 @@
+---
+
+ttrss_repo: "https://gitlab.com/gothfox/tt-rss.git"
+ttrss_version: "master"
+
+# domain: tt-rss.example
+service_name: "{{ domain }}.service"
+system_user: "{{ domain | regex_replace('[^A-Za-z0-9-]+', '-') }}"
+
+user_directory: "{{ global_webservers_directory }}/{{ domain }}"
+installation_directory: "{{ user_directory }}/repository"
+
+database_user: "{{ system_user }}"
+# database_pass from mysql/database
+# database_name from mysql/database
diff --git a/roles/server/tt-rss/handlers/main.yml b/roles/server/tt-rss/handlers/main.yml
new file mode 100644
index 0000000..aab1416
--- /dev/null
+++ b/roles/server/tt-rss/handlers/main.yml
@@ -0,0 +1,7 @@
+---
+
+- name: restart {{ domain }}
+  systemd:
+    enabled: yes
+    name: "{{ service_name }}"
+    state: restarted
diff --git a/roles/server/tt-rss/meta/main.yml b/roles/server/tt-rss/meta/main.yml
new file mode 100644
index 0000000..84506e4
--- /dev/null
+++ b/roles/server/tt-rss/meta/main.yml
@@ -0,0 +1,22 @@
+---
+
+allow_duplicates: yes
+
+dependencies:
+  - role: misc/handlers
+  - role: misc/system_user
+    # system_user
+    # user_directory
+    user_directory_group: "{{ nginx_system_user }}"
+  - role: mysql/database
+    # database_user
+  - role: nginx/php
+    # domain
+    # system_user
+    src: "{{ installation_directory }}"
+    includes:
+      - "{{ installation_directory }}/include"
+    env_vars:
+      DATABASE_USERNAME: "{{ database_user }}"
+      DATABASE_PASSWORD: "{{ database_pass }}"
+      DATABASE_NAME: "{{ database_name }}"
diff --git a/roles/server/tt-rss/tasks/main.yml b/roles/server/tt-rss/tasks/main.yml
new file mode 100644
index 0000000..54f89ce
--- /dev/null
+++ b/roles/server/tt-rss/tasks/main.yml
@@ -0,0 +1,37 @@
+---
+
+- name: Create installation directory
+  file:
+    path: "{{ installation_directory }}"
+    state: directory
+    owner: "{{ system_user }}"
+    group: "{{ nginx_system_user }}"
+    mode: "u=rwx,g=rx,o="
+
+- name: Download Tiny Tiny RSS
+  become_user: "{{ system_user }}"
+  git:
+    repo: "{{ ttrss_repo }}"
+    version: "{{ ttrss_version }}"
+    dest: "{{ installation_directory }}"
+    update: no
+
+- name: Configure Tiny Tiny RSS
+  template:
+    src: config.php
+    dest: "{{ installation_directory }}/config.php"
+    owner: "{{ system_user }}"
+    group: "{{ nginx_system_user }}"
+    mode: "u=rw,g=r,o="
+  notify: "restart {{ domain }}"
+
+- name: Configure Tiny Tiny RSS systemd service
+  template:
+    src: tt-rss.service
+    dest: "{{ global_systemd_configuration_directory }}/{{ service_name }}"
+    owner: root
+    group: root
+    mode: "u=rw,g=r,o="
+  notify:
+    - reload systemd
+    - "restart {{ domain }}"
diff --git a/roles/server/tt-rss/templates/config.php b/roles/server/tt-rss/templates/config.php
new file mode 100755
index 0000000..2f11284
--- /dev/null
+++ b/roles/server/tt-rss/templates/config.php
@@ -0,0 +1,182 @@
+<?php
+	// *******************************************
+	// *** Database configuration (important!) ***
+	// *******************************************
+
+	define('DB_TYPE', "mysql");
+	define('DB_HOST', "localhost");
+	define('DB_USER', $_SERVER["DATABASE_USERNAME"]);
+	define('DB_NAME', $_SERVER["DATABASE_NAME"]);
+	define('DB_PASS', $_SERVER["DATABASE_PASSWORD"]);
+	define('DB_PORT', '3306');
+
+	define('MYSQL_CHARSET', 'UTF8');
+	// Connection charset for MySQL. If you have a legacy database and/or experience
+	// garbage unicode characters with this option, try setting it to a blank string.
+
+	// ***********************************
+	// *** Basic settings (important!) ***
+	// ***********************************
+
+	define('SELF_URL_PATH', 'https://{{ domain }}/');
+	// This should be set to a fully qualified URL used to access
+	// your tt-rss instance over the net.
+	// The value should be a constant string literal. Please don't use
+	// PHP server variables here - you might introduce security
+	// issues on your install and cause hard to debug problems.
+	// If your tt-rss instance is behind a reverse proxy, use the external URL.
+
+	define('SINGLE_USER_MODE', false);
+	// Operate in single user mode, disables all functionality related to
+	// multiple users and authentication. Enabling this assumes you have
+	// your tt-rss directory protected by other means (e.g. http auth).
+
+	define('SIMPLE_UPDATE_MODE', false);
+	// Enables fallback update mode where tt-rss tries to update feeds in
+	// background while tt-rss is open in your browser.
+	// If you don't have a lot of feeds and don't want to or can't run
+	// background processes while not running tt-rss, this method is generally
+	// viable to keep your feeds up to date.
+	// Still, there are more robust (and recommended) updating methods
+	// available, you can read about them here: http://tt-rss.org/wiki/UpdatingFeeds
+
+	// *****************************
+	// *** Files and directories ***
+	// *****************************
+
+	define('PHP_EXECUTABLE', '/usr/bin/php');
+	// Path to PHP *COMMAND LINE* executable, used for various command-line tt-rss
+	// programs and update daemon. Do not try to use CGI binary here, it won't work.
+	// If you see HTTP headers being displayed while running tt-rss scripts,
+	// then most probably you are using the CGI binary. If you are unsure what to
+	// put in here, ask your hosting provider.
+
+	define('LOCK_DIRECTORY', 'lock');
+	// Directory for lockfiles, must be writable to the user you run
+	// daemon process or cronjobs under.
+
+	define('CACHE_DIR', 'cache');
+	// Local cache directory for RSS feed content.
+
+	define('ICONS_DIR', "feed-icons");
+	define('ICONS_URL', "feed-icons");
+	// Local and URL path to the directory, where feed favicons are stored.
+	// Unless you really know what you're doing, please keep those relative
+	// to tt-rss main directory.
+
+	// **********************
+	// *** Authentication ***
+	// **********************
+
+	// Please see PLUGINS below to configure various authentication modules.
+
+	define('AUTH_AUTO_CREATE', false);
+	// Allow authentication modules to auto-create users in tt-rss internal
+	// database when authenticated successfully.
+
+	define('AUTH_AUTO_LOGIN', false);
+	// Automatically login user on remote or other kind of externally supplied
+	// authentication, otherwise redirect to login form as normal.
+	// If set to true, users won't be able to set application language
+	// and settings profile.
+
+	// *********************
+	// *** Feed settings ***
+	// *********************
+
+	define('FORCE_ARTICLE_PURGE', 0);
+	// When this option is not 0, users ability to control feed purging
+	// intervals is disabled and all articles (which are not starred)
+	// older than this amount of days are purged.
+
+	// ****************************
+	// *** Sphinx search plugin ***
+	// ****************************
+
+	define('SPHINX_SERVER', 'localhost:9312');
+	// Hostname:port combination for the Sphinx server.
+
+	define('SPHINX_INDEX', 'ttrss, delta');
+	// Index name in Sphinx configuration. You can specify multiple indexes
+	// as a comma-separated string.
+	// Example configuration files are available on tt-rss wiki.
+
+	// ***********************************
+	// *** Self-registrations by users ***
+	// ***********************************
+
+	define('ENABLE_REGISTRATION', false);
+	// Allow users to register themselves. Please be aware that allowing
+	// random people to access your tt-rss installation is a security risk
+	// and potentially might lead to data loss or server exploit. Disabled
+	// by default.
+
+	define('REG_NOTIFY_ADDRESS', 'user@your.domain.dom');
+	// Email address to send new user notifications to.
+
+	define('REG_MAX_USERS', 4);
+	// Maximum amount of users which will be allowed to register on this
+	// system. 0 - no limit.
+
+	// **********************************
+	// *** Cookies and login sessions ***
+	// **********************************
+
+	define('SESSION_COOKIE_LIFETIME', 86400);
+	// Default lifetime of a session (e.g. login) cookie. In seconds,
+	// 0 means cookie will be deleted when browser closes.
+
+	// *********************************
+	// *** Email and digest settings ***
+	// *********************************
+
+	// Tiny Tiny RSS sends mail via PHP mail() function, unless handled
+	// by a plugin.
+
+	// If you need SMTP support, take a look here:
+	// https://git.tt-rss.org/fox/ttrss-mailer-smtp
+
+	define('SMTP_FROM_NAME', 'Tiny Tiny RSS');
+	define('SMTP_FROM_ADDRESS', 'noreply@your.domain.dom');
+	// Name, address and subject for sending outgoing mail. This applies
+	// to password reset notifications, digest emails and any other mail.
+
+	define('DIGEST_SUBJECT', '[tt-rss] New headlines for last 24 hours');
+	// Subject line for email digests
+
+	// ***************************************
+	// *** Other settings (less important) ***
+	// ***************************************
+
+	define('CHECK_FOR_UPDATES', true);
+	// Check for updates automatically if running Git version
+
+	define('ENABLE_GZIP_OUTPUT', false);
+	// Selectively gzip output to improve wire performance. This requires
+	// PHP Zlib extension on the server.
+	// Enabling this can break tt-rss in several httpd/php configurations,
+	// if you experience weird errors and tt-rss failing to start, blank pages
+	// after login, or content encoding errors, disable it.
+
+	define('PLUGINS', 'auth_internal, note');
+	// Comma-separated list of plugins to load automatically for all users.
+	// System plugins have to be specified here. Please enable at least one
+	// authentication plugin here (auth_*).
+	// Users may enable other user plugins from Preferences/Plugins but may not
+	// disable plugins specified in this list.
+	// Disabling auth_internal in this list would automatically disable
+	// reset password link on the login form.
+
+	define('LOG_DESTINATION', 'sql');
+	// Error log destination to use. Possible values: sql (uses internal logging
+	// you can read in Preferences -> System), syslog - logs to system log.
+	// Setting this to blank uses PHP logging (usually to http server
+	// error.log).
+	// Note that feed updating daemons don't use this logging facility
+	// for normal output.
+
+	define('CONFIG_VERSION', 26);
+	// Expected config version. Please update this option in config.php
+	// if necessary (after migrating all new options from this file).
+
+	// vim:ft=php
diff --git a/roles/server/tt-rss/templates/tt-rss.service b/roles/server/tt-rss/templates/tt-rss.service
new file mode 100644
index 0000000..81157f4
--- /dev/null
+++ b/roles/server/tt-rss/templates/tt-rss.service
@@ -0,0 +1,13 @@
+[Unit]
+Description=Tiny Tiny RSS Daemon for {{ domain }}
+After=network.target mysql.service
+
+[Service]
+User={{ system_user }}
+ExecStart={{ installation_directory }}/update_daemon2.php
+Environment="DATABASE_USERNAME={{ database_user }}"
+Environment="DATABASE_PASSWORD={{ database_pass }}"
+Environment="DATABASE_NAME={{ database_name }}"
+
+[Install]
+WantedBy=multi-user.target