diff --git a/group_vars/sn05.yml b/group_vars/sn05.yml deleted file mode 100644 index cb1f795a0..000000000 --- a/group_vars/sn05.yml +++ /dev/null @@ -1,111 +0,0 @@ ---- -# Autofs -autofs_service.install: true -autofs_service.enable: true - -autofs_mount_points: - - data - - gxtest - - gxkey - - jwd - -# packages -software_groups_to_install: - - admin - - debug - - editors - - services - - utils - -# HTCondor -# condor_host: "condor-cm.galaxyproject.eu" -# condor_allow_write: "10.5.68.0/24, 132.230.223.0/24, 132.230.153.0/28" -# condor_daemons: -# - COLLECTOR -# - MASTER -# - NEGOTIATOR -# condor_allow_negotiator: $(ALLOW_WRITE) -# condor_allow_administrator: "$(ALLOW_NEGOTIATOR)" -# condor_network_interface: ens802f0.2368 -# condor_extra: | -# MASTER_UPDATE_INTERVAL = 150 -# CLASSAD_LIFETIME = 300 -# NEGOTIATOR_INTERVAL = 15 -# NEGOTIATOR_UPDATE_INTERVAL = 100 -# JOB_START_COUNT = 250 -# JOB_START_DELAY = 0 -# NEGOTIATOR_POST_JOB_RANK = isUndefined(RemoteOwner) * (10000 - TotalLoadAvg) - -# PostgreSQL -postgresql_conf: - # From pgtune - # DB Version: 13 - # OS Type: linux - # DB Type: web - # Total Memory (RAM): 125 GB - # CPUs num: 40 - # Data Storage: ssd - - listen_addresses: "'*'" - - max_connections: 1024 - - shared_buffers: "24GB" - - effective_cache_size: "72GB" - - maintenance_work_mem: "2GB" - - checkpoint_completion_target: 0.9 - - wal_buffers: 16MB - - default_statistics_target: 100 - - random_page_cost: 1.1 - - effective_io_concurrency: 200 - - work_mem: 40MB - - huge_pages: try - - min_wal_size: 1GB - - max_wal_size: 4GB - - max_worker_processes: 30 - - max_parallel_workers_per_gather: 4 - - max_parallel_workers: 30 - - max_parallel_maintenance_workers: 4 - - temp_buffers: "64MB" - - max_prepared_transactions: 100 -# the following line throws an error in v13 -# - shared_preload_libraries: "'pg_stat_statements'" -# - log_line_prefix: "'%t:%r:%u@%d:[%p]<%m>: '" - - log_checkpoints: "on" - - log_min_duration_statement: 1500 - - track_activity_query_size: 4096 -postgresql_pg_hba_conf: - - "host postgres galaxy 132.230.223.239/32 md5" - - "host postgres galaxy 10.5.68.237/32 md5" - - "host postgres galaxy-test 10.5.68.154/32 md5" - - "host galaxy galaxy 132.230.223.239/32 md5" - - "host galaxy galaxy 132.230.223.238/32 md5" - - "host galaxy galaxy 10.5.68.237/32 md5" - - "host galaxy galaxy 10.5.68.126/32 md5" - - "host galaxy galaxy 10.5.67.211/32 md5" - - "host galaxy galaxy 10.5.67.216/32 md5" - - "host galaxy galaxy 10.4.68.198/32 md5" - - "host galaxy galaxy 100.118.169.22/32 md5" - - "host galaxy galaxy-readonly 132.230.223.239/32 md5" - - "host galaxy galaxy-readonly 10.5.68.237/32 md5" - - "host galaxy galaxy-readonly 10.5.67.211/32 md5" - - "host galaxy galaxy-readonly 132.230.223.238/32 md5" - - "host tiaas tiaas 132.230.223.239/32 md5" - - "host tiaas tiaas 132.230.223.238/32 md5" - - "host tiaas tiaas 10.5.68.237/32 md5" - - "host gxitproxy galaxy 132.230.223.239/32 md5" - - "host galaxy-test galaxy-test 132.230.223.239/32 md5" - - "host galaxy-test galaxy-test 10.5.68.0/24 md5" - - "host galaxy galaxyftp 132.230.224.107/32 md5" - - "host galaxy galaxyftp 10.5.67.0/24 md5" - - "host galaxy galaxy-apollo 10.5.67.0/24 md5" - - "host apollo apollo 10.5.67.0/24 md5" - - "host chado apollo 10.5.67.0/24 md5" - - "host grt grt 10.5.68.0/24 md5" - - "host grafana grafana 132.230.224.112/32 md5" - - "host grafana grafana 132.230.223.239/32 md5" - - "host grafana grafana 10.5.67.211/32 md5" - - "host galaxy galaxy 10.4.68.201/32 md5" - - "host postgres galaxy 10.4.68.201/32 md5" - - "host galaxy galaxy-readonly 10.4.68.201/32 md5" - - "host tiaas tiaas 10.4.68.201/32 md5" - - "host gxitproxy galaxy 10.4.68.201/32 md5" - -postgresql_pgdump_dir: "/var/lib/pgsql/pgdump3" diff --git a/group_vars/sn06/sn06.yml b/group_vars/sn06/sn06.yml deleted file mode 100644 index 8ae2acd59..000000000 --- a/group_vars/sn06/sn06.yml +++ /dev/null @@ -1,455 +0,0 @@ ---- -# packages -software_groups_to_install: - - admin - - debug - - editors - - pdf_export_deps - - services - - terminals - - utils - -# Docker -docker_users: - - galaxy - -# Autofs -autofs_service.install: true -autofs_service.enable: true -nfs_kernel_tuning: true - -autofs_mount_points: - - data - - gxtest - - gxkey - - jwd - - usrlocal - - cache - - misc - -# Miniconda role variables (galaxyproject.miniconda) -conda_prefix: /opt/miniconda - -# FirewallD -firewall_internal_services: - - http - - https - - ssh - - mosh -firewall_public_services: - - http - - https -firewall_mosh_service: > - - - MOSH - Mosh (mosh.mit.edu) is a free replacement for SSH that allows roaming and supports intermittent connectivity. - - - -# fs-maintenance -fsm_maintenance_dir: "/data/dnb01/maintenance" -fsm_cron_tasks: - docker: - enable: true - name: "Docker clean up" - minute: 30 - hour: 2 - dom: "*" - month: "*" - dow: "*" - job: ". {{ galaxy_root }}/.bashrc && docker system prune -f > /dev/null" - user: "{{ fsm_galaxy_user.username }}" - gxadmin: - enable: false - name: "Gxadmin Galaxy clean up" - minute: 0 - hour: 0 - dom: "*/2" - month: "*" - dow: "*" - job: "{{ custom_telegraf_env }} /usr/bin/gxadmin galaxy cleanup 60" - user: "{{ fsm_galaxy_user.username }}" - -# TIaaS -tiaas_virtualenv_python: "python3.8" - -# Telegraf -telegraf_agent_hostname: "{{ hostname }}" -telegraf_agent_version: 1.17.2 -custom_telegraf_env: "/usr/bin/env GDPR_MODE=1 PGUSER={{ galaxy_user.name }} PGHOST={{ postgres_host }} GALAXY_ROOT={{ galaxy_server_dir }} GALAXY_CONFIG_FILE={{ galaxy_config_file }} GALAXY_LOG_DIR={{ galaxy_log_dir }} GXADMIN_PYTHON={{ galaxy_venv_dir }}/bin/python" -telegraf_plugins_extra: - listen_galaxy_routes: - plugin: "statsd" - config: - - service_address = ":8125" - - percentiles = [90] - - metric_separator = "." - - allowed_pending_messages = 10000 - - percentile_limit = 100 - - # Some custom galaxy monitoring stuff that can only run on the Galaxy server - galaxy_lastlog: - plugin: "exec" - config: - - commands = ["{{ custom_telegraf_env }} /usr/bin/gxadmin gunicorn lastlog"] - - timeout = "15s" - - data_format = "influx" - - interval = "15s" - galaxy_active_users: - plugin: "exec" - config: - - commands = ["/usr/bin/gxadmin gunicorn active-users"] - - timeout = "90s" - - data_format = "influx" - - interval = "5m" - -# Custom pip installer -pip_venv_path: "{{ galaxy_venv_dir }}" -pip_install_dependencies: - - rspace-client==2.6.1 # RSpace support for Galaxy (workaround for issue https://github.com/galaxyproject/galaxy/issues/20483, remove when fixed) - # celery and flower - - redis - - flower - # phdcomics - - beautifulsoup4 - # Used by code_files for apollo - - biopython - - bcbio-gff - # Needed for tool watching - - watchdog - # Needed gxadmin graphs - - data_hacks - # used by reports - - WeasyPrint - - nbconvert - - gitlab-arc-fs - # Needed for usegalaxy-eu.vgcn-monitoring Telegraf role - - pyyaml - - GitPython - - python-openstackclient - # WallE - - tqdm # progress bar, has no dependencies - -yum_exclude_repos: - - condor* - - npm* - -all_yum_repositories: - - name: galaxy_gpel - description: Galaxy Packages for Enterprise Linux $releasever - $basearch - baseurl: https://depot.galaxyproject.org/yum/el/$releasever/$basearch/ - enabled: true - gpgcheck: false - retries: 1 - timeout: 10 - -# Certbot -certbot_virtualenv_package_name: python3-virtualenv -certbot_dns_provider: route53 -certbot_auth_method: --standalone -certbot_domains: "{{ server_names }}" -certbot_post_renewal: | - systemctl restart nginx || true -certbot_share_key_users: - - nginx - -# AWS Credentials for certbot-route53 -aws_cli_credentials: - - access_key: "{{ aws_credentials.certbot.AWS_ACCESS_KEY }}" - secret_key: "{{ aws_credentials.certbot.AWS_SECRET_KEY }}" - homedir: /root - owner: root - group: root - -# rsync to nfs -galaxy_nfs_location: /data/gxkey - -# Nginx -nginx_servers: - - redirect-ssl -nginx_ssl_servers: - - galaxyproject - - telescope-ssl - - galaxy-main - - galaxy-ie-main - - galaxy-test-proxy -nginx_conf_http: - client_max_body_size: 1g - proxy_cache_path: "/tmp/nginx-cache levels=1:2 keys_zone=STATIC:10m inactive=24h max_size=1g" - gzip: "on" - gzip_proxied: any - # The ngx_http_gzip_static_module module allows sending precompressed files with the “.gz” filename extension instead of regular files. - gzip_static: "on" - gzip_http_version: "1.1" - gzip_disable: '"MSIE [1-6]\."' - gzip_vary: "on" - gzip_comp_level: 6 - gzip_types: | - text/plain - text/css - text/xml - text/javascript - application/javascript - application/x-javascript - application/json - application/xml - application/xml+rss - application/xhtml+xml - application/x-font-ttf - application/x-font-opentype - image/png - image/svg+xml - image/x-icon - application/zip - gzip_buffers: "16 8k" - gzip_min_length: 128 -nginx_enable_default_server: false -nginx_flavor: "" - -# Nginx Letsencrypt bindings -nginx_ssl_role: usegalaxy-eu.certbot -nginx_conf_ssl_certificate: /etc/ssl/certs/fullchain.pem -nginx_conf_ssl_certificate_key: /etc/ssl/user/privkey-nginx.pem - -# Dynmotd -dynmotd_custom: - - name: Condor - command: "condor_q -totals | tail -n 2" - -# TPV Script -tpv_config_dir_name: total_perspective_vortex - -# CVMFS -cvmfs_role: client -galaxy_cvmfs_repos_enabled: config-repo - -galaxy_cvmfs_server_urls: - - domain: galaxyproject.org - urls: - - "http://cvmfs1-ufr0.galaxyproject.eu/cvmfs/@fqrn@" - -# SystemD -galaxy_systemd_mode: "gunicorn" -galaxy_systemd_gunicorns: 7 -galaxy_systemd_gunicorn_workers: 4 -galaxy_systemd_gunicorn_timeout: 600 -galaxy_systemd_handlers: 6 -galaxy_systemd_workflow_schedulers: 3 - -galaxy_systemd_gunicorn_env: "{{ apollo_env }} GALAXY_DROPBOX_APP_CLIENT_ID={{ dropbox_app_client_id }} GALAXY_DROPBOX_APP_CLIENT_SECRET={{ dropbox_app_client_secret }} GALAXY_GOOGLE_DRIVE_APP_CLIENT_ID={{ google_drive_oauth_client_id }} GALAXY_GOOGLE_DRIVE_APP_CLIENT_SECRET={{ google_drive_oauth_client_secret }}" -galaxy_systemd_handler_env: "{{ galaxy_systemd_gunicorn_env }}" -galaxy_systemd_workflow_scheduler_env: "{{ galaxy_systemd_gunicorn_env }}" - -galaxy_systemd_memory_limit: 25 -galaxy_systemd_memory_limit_handler: 30 -galaxy_systemd_memory_limit_workflow: 15 - -# gie_proxy -gie_proxy_dir: "{{ galaxy_root }}/gie-proxy/proxy" -gie_proxy_git_version: v0.1.0 -gie_proxy_setup_nodejs: nodeenv -gie_proxy_virtualenv_command: "{{ conda_prefix }}/envs/_galaxy_/bin/python -m venv --copies" #"{{ pip_virtualenv_command }}" -gie_proxy_nodejs_version: "14.21.3" -gie_proxy_virtualenv: "{{ galaxy_root }}/gie-proxy/venv" -gie_proxy_setup_service: systemd -gie_proxy_service_restart_mode: always -gie_proxy_service_restartsec: 2s -gie_proxy_sessions_path: "{{ interactivetools_db_connection }}" -gie_proxy_path_prefix: /interactivetool/ep -gie_proxy_port: 8800 -gie_proxy_verbose: true - -# gxadmin -postgres_user: galaxy -postgres_host: sn05.galaxyproject.eu -postgres_port: 5432 - -# GRT -galaxy_grt_exporter: galaxy -galaxy_grt_uploader: galaxy - -# Influx Notifier -gxadmin_influx_task_notifier: true -gxadmin_influx_task_notifier_db: notifications - -# postgres_pass defined in secret_group_vars/all.yml -gxadmin_commit: main -gxadmin_dir: /opt/gxadmin -gxadmin_bin_dir: /usr/bin -gxadmin_force: true - -# GALAXY -galaxy_group: - name: galaxy - gid: 999 -galaxy_system_group: galaxy -galaxy_log_dir: "/var/log/galaxy" -galaxy_layout: root-dir -galaxy_separate_privileges: true -galaxy_manage_paths: true -galaxy_build_client: false -galaxy_restart_handler_name: Restart Galaxy -galaxy_create_user: true -galaxy_user: - name: galaxy - create_home: true - home: /opt/galaxy - uid: 999 - shell: /bin/bash - -# Galaxy configuration files will be written with these permissions (mode argument to Ansible copy/template module) -galaxy_config_perms: 0644 - -galaxy_root: /opt/galaxy -galaxy_workflow_scheduler_count: "{{ galaxy_systemd_workflow_schedulers }}" -galaxy_home_dir: /opt/galaxy -galaxy_mutable_config_dir: "{{ galaxy_root }}/mutable-config" -galaxy_mutable_data_dir: "{{ galaxy_root }}/mutable-data" -galaxy_shed_tools_dir: "{{ galaxy_root }}/shed_tools" -galaxy_tool_data_path: "{{ galaxy_root }}/tool-data" -__galaxy_shed_tools_dir: "{{ galaxy_shed_tools_dir }}" -galaxy_backup_configfiles: false - -galaxy_server_dir: "{{ galaxy_root }}/server" -galaxy_config_dir: "{{ galaxy_root }}/config" -galaxy_venv_dir: "{{ galaxy_root }}/venv" -galaxy_job_working_directory: "{{ galaxy_config['galaxy']['job_working_directory'] }}" -ucsc_build_sites: - -galaxy_virtualenv_command: "{{ conda_prefix }}/envs/_galaxy_/bin/python -m venv --copies" -#galaxy_virtualenv_python: "python3.6" -galaxy_nonrepro_tools: "{{ galaxy_root }}/custom-tools" -galaxy_nonrepro_commit: master - - -# Custom override -# Our galaxy_tool_dependency_dir is on NFS, and permissions are set in such a -# way that they cannot be changed by the ansible connected user. -galaxy_dirs: - - "{{ galaxy_mutable_data_dir }}" - - "{{ galaxy_mutable_config_dir }}" - - "{{ galaxy_cache_dir }}" - - "{{ galaxy_shed_tools_dir }}" - #- "{{ galaxy_tool_dependency_dir }}" - - "{{ galaxy_file_path }}" - - "{{ galaxy_job_working_directory }}" - - "{{ galaxy_tool_data_path }}" - - "{{ galaxy_nonrepro_tools }}" - - "{{ galaxy_webhook_dir }}" - - "{{ galaxy_tour_dir }}" - - "{{ galaxy_log_dir }}" - - "{{ galaxy_config_dir }}/total_perspective_vortex" - - "{{ tpv_mutable_dir }}" - -galaxy_instance_hostname: usegalaxy.eu -galaxy_config_style: yaml - -galaxy_repo: "https://github.com/usegalaxy-eu/galaxy.git" -galaxy_commit_id: "release_25.0_europe" -galaxy_force_checkout: true # discard any modified files -#galaxy_admin_email_from: 'noreply@usegalaxy.eu' - -galaxy_singularity_images_cvmfs_path: "/cvmfs/singularity.galaxyproject.org/all/" - -galaxy_config: "{{ galaxy_config_hash }}" - -# Galaxy Subdomains -galaxy_themes_ansible_file_path: /scratch/workspace/usegalaxy-eu/playbooks/sn06/files/galaxy/subdomains -galaxy_themes_default_welcome: https://galaxyproject.org/bare/eu/usegalaxy/main/ -galaxy_themes_welcome_url_prefix: https://usegalaxy-eu.github.io/index- - -galaxy_config_file_src_dir: files/galaxy -galaxy_config_files: - # TODO(bgruening): sync this with cvmfs? can we have ours be just a small additional builds.txt? - - src: "{{ galaxy_config_file_src_dir }}/config/builds.txt" - dest: "{{ galaxy_config['galaxy']['builds_file_path'] }}" - - src: "{{ galaxy_config_file_src_dir }}/config/data_manager_conf.xml" - dest: "{{ galaxy_config['galaxy']['data_manager_config_file'] }}" - - src: "{{ galaxy_config_file_src_dir }}/config/datatypes_conf.xml" - dest: "{{ galaxy_config['galaxy']['datatypes_config_file'] }}" - - src: "{{ galaxy_config_file_src_dir }}/config/dependency_resolvers_conf.xml" - dest: "{{ galaxy_config['galaxy']['dependency_resolvers_config_file'] }}" - - src: "{{ galaxy_config_file_src_dir }}/config/email_domain_blocklist.conf" - dest: "{{ galaxy_config['galaxy']['email_domain_blocklist_file'] }}" - - src: "{{ galaxy_config_file_src_dir }}/config/user_preferences_extra_conf.yml" - dest: "{{ galaxy_config['galaxy']['user_preferences_extra_conf_path'] }}" - - src: "{{ galaxy_config_file_src_dir }}/config/job_resource_params_conf.xml" - dest: "{{ galaxy_config['galaxy']['job_resource_params_file'] }}" - - src: "{{ galaxy_config_file_src_dir }}/config/trs_servers_conf.yml" - dest: "{{ galaxy_config['galaxy']['trs_servers_config_file'] }}" - # test? Unknown if this works. - - src: "{{ galaxy_config_file_src_dir }}/config/error_report.yml" - dest: "{{ galaxy_config_dir }}/error_report.yml" - - src: "{{ galaxy_config_file_src_dir }}/config/job_metrics_conf.yml" - dest: "{{ galaxy_config['galaxy']['job_metrics_config_file'] }}" - - src: "{{ galaxy_config_file_src_dir }}/config/migrated_tools_conf.xml" - dest: "{{ galaxy_config['galaxy']['migrated_tools_config'] }}" - - src: "{{ galaxy_config_file_src_dir }}/config/tool_data_table_conf.xml" - dest: "{{ galaxy_config_dir }}/tool_data_table_conf.xml" - - src: "{{ galaxy_config_file_src_dir }}/config/tool_sheds_conf.xml" - dest: "{{ galaxy_config['galaxy']['tool_sheds_config_file'] }}" - - src: "{{ galaxy_config_file_src_dir }}/config/ucsc_build_sites.txt" - dest: "{{ galaxy_config['galaxy']['ucsc_build_sites'] }}" - - src: "{{ galaxy_config_file_src_dir }}/config/echo_main_env.xml" - dest: "{{ galaxy_config_dir }}/echo_main_env.xml" - - src: "{{ galaxy_config_file_src_dir }}/tpv/tool_defaults.yml" - dest: "{{ tpv_mutable_dir }}/tool_defaults.yml" - - src: "{{ galaxy_config_file_src_dir }}/tpv/tools.yml" - dest: "{{ tpv_mutable_dir }}/tools.yml" - - src: "{{ galaxy_config_file_src_dir }}/tpv/roles.yml" - dest: "{{ tpv_mutable_dir }}/roles.yml" - - src: "{{ galaxy_config_file_src_dir }}/tpv/interactive_tools.yml" - dest: "{{ tpv_mutable_dir }}/interactive_tools.yml" - - src: "{{ galaxy_config_file_src_dir }}/tpv/users.yml" - dest: "{{ tpv_mutable_dir }}/users.yml" - - #- src: files/galaxy/config/job_resource_params_conf.xml - #dest: "{{ galaxy_config['app:main']['job_resource_params_file'] }}" - #- src: files/galaxy/config/pulsar_stampede_actions.yml - #dest: "{{ galaxy_config_dir }}/pulsar_stampede_actions.yml" - #- src: files/galaxy/config/pulsar_bridges_actions.yml - #dest: "{{ galaxy_config_dir }}/pulsar_bridges_actions.yml" - #- src: files/galaxy/config/pulsar_jetstream.yml - #dest: "{{ galaxy_config_dir }}/pulsar_jetstream.yml" - #- src: files/galaxy/config/pulsar_jetstream_actions.yml - #dest: "{{ galaxy_config_dir }}/pulsar_jetstream_actions.yml" - -galaxy_config_template_src_dir: templates/galaxy -galaxy_config_templates: - - src: "{{ galaxy_config_template_src_dir }}/config/build_sites.yml.j2" - dest: "{{ galaxy_config['galaxy']['build_sites_config_file'] }}" - - src: "{{ galaxy_config_template_src_dir }}/config/global_host_filters.py.j2" - dest: "{{ galaxy_server_dir }}/lib/galaxy/tool_util/toolbox/filters/global_host_filters.py" - - src: "{{ galaxy_config_template_src_dir }}/config/job_conf.yml.j2" - dest: "{{ galaxy_config_dir }}/job_conf.yml" - - src: "{{ galaxy_config_template_src_dir }}/config/container_resolvers_conf.xml.j2" - dest: "{{ galaxy_config_dir }}/container_resolvers_conf.xml" - - src: "{{ galaxy_config_template_src_dir }}/config/user_filters.py.j2" - dest: "{{ galaxy_server_dir }}/lib/galaxy/tool_util/toolbox/filters/user_filters.py" - - src: "{{ galaxy_config_template_src_dir }}/config/nagios_tool_conf.xml" - dest: "{{ galaxy_config_dir }}/nagios_tool_conf.xml" - - src: "{{ galaxy_config_template_src_dir }}/config/oidc_backends_config.xml" - dest: "{{ galaxy_config['galaxy']['oidc_backends_config_file'] }}" - - src: "{{ galaxy_config_template_src_dir }}/config/oidc_config.xml" - dest: "{{ galaxy_config['galaxy']['oidc_config_file'] }}" - - src: "{{ galaxy_config_template_src_dir }}/config/grt.yml.j2" - dest: "{{ galaxy_config_dir }}/grt.yml" - - src: "{{ galaxy_config_template_src_dir }}/config/pulsar_app.yml" - dest: "{{ galaxy_config_dir }}/pulsar_app.yml" - - src: "{{ galaxy_config_template_src_dir }}/config/tool_conf.xml.j2" - dest: "{{ galaxy_config_dir }}/tool_conf.xml" - - src: "{{ galaxy_config_template_src_dir }}/config/galaxy_workflow_scheduler.j2" - dest: "{{ galaxy_config_dir }}/workflow_schedulers_conf.xml" - - src: "{{ galaxy_config_template_src_dir }}/config/file_sources_conf.yml.j2" - dest: "{{ galaxy_config_dir }}/file_sources_conf.yml" - - src: "{{ galaxy_config_template_src_dir }}/config/object_store_conf.yml.j2" - dest: "{{ galaxy_config['galaxy']['object_store_config_file'] }}" - - src: "{{ galaxy_config_file_src_dir }}/tpv/destinations.yml.j2" - dest: "{{ tpv_mutable_dir }}/destinations.yml" - - src: '{{ galaxy_config_template_src_dir }}/config/vault_conf.yml.j2' - dest: '{{ galaxy_config_dir }}/vault_conf.yml' - - src: '{{ galaxy_config_template_src_dir }}/config/file_source_templates.yml.j2' - dest: "{{ galaxy_config['galaxy']['file_source_templates_config_file'] }}" - - src: '{{ galaxy_config_template_src_dir }}/config/object_store_templates.yml.j2' - dest: "{{ galaxy_config['galaxy']['object_store_templates_config_file'] }}" diff --git a/group_vars/sn06/subdomains.yml b/group_vars/sn06/subdomains.yml deleted file mode 100644 index c5c755ee4..000000000 --- a/group_vars/sn06/subdomains.yml +++ /dev/null @@ -1,237 +0,0 @@ ---- -galaxy_themes_subdomains: - - name: assembly - theme: - assembly: - masthead: - color: > - bottom -90px left / 1000px no-repeat url("/static/dist/flying-bird-1.svg"), - bottom -90px left / 1000px no-repeat url("/static/dist/flying-bird-2.svg"), - linear-gradient( 20deg, - rgb(7, 40, 98) 0%, - rgb(69, 122, 184) 48%, - rgba(165, 204, 210, 0.9676562309265136) 74%, - rgb(228, 195, 131) 92%, - rgb(203, 119, 79) 100%) - - name: nanopore - - name: erasmusmc - - name: climate - theme: - climate: - masthead: - color: > - linear-gradient(to right, #3337 0, #3337 340px, transparent 340px), - linear-gradient(to left, #3337 0, #3337 120px, transparent 120px), - linear-gradient(to right, #2171b5 0.00%, - #2171b5 0.83%, #c6dbef 0.83%, #c6dbef 1.65%, #9ecae1 1.65%, #9ecae1 2.48%, #fee0d2 2.48%, - #fee0d2 3.31%, #6baed6 3.31%, #6baed6 4.13%, #9ecae1 4.13%, #9ecae1 4.96%, #08519c 4.96%, - #08519c 5.79%, #08306b 5.79%, #08306b 6.61%, #2171b5 6.61%, #2171b5 7.44%, #4292c6 7.44%, - #4292c6 8.26%, #9ecae1 8.26%, #9ecae1 9.09%, #2171b5 9.09%, #2171b5 9.92%, #4292c6 9.92%, - #4292c6 10.74%, #9ecae1 10.74%, #9ecae1 11.57%, #deebf7 11.57%, #deebf7 12.40%, #9ecae1 12.40%, - #9ecae1 13.22%, #deebf7 13.22%, #deebf7 14.05%, #4292c6 14.05%, #4292c6 14.88%, #08519c 14.88%, - #08519c 15.70%, #deebf7 15.70%, #deebf7 16.53%, #9ecae1 16.53%, #9ecae1 17.36%, #c6dbef 17.36%, - #c6dbef 18.18%, #6baed6 18.18%, #6baed6 19.01%, #4292c6 19.01%, #4292c6 19.83%, #2171b5 19.83%, - #2171b5 20.66%, #deebf7 20.66%, #deebf7 21.49%, #fcbba1 21.49%, #fcbba1 22.31%, #9ecae1 22.31%, - #9ecae1 23.14%, #deebf7 23.14%, #deebf7 23.97%, #9ecae1 23.97%, #9ecae1 24.79%, #deebf7 24.79%, - #deebf7 25.62%, #4292c6 25.62%, #4292c6 26.45%, #deebf7 26.45%, #deebf7 27.27%, #2171b5 27.27%, - #2171b5 28.10%, #fee0d2 28.10%, #fee0d2 28.93%, #fcbba1 28.93%, #fcbba1 29.75%, #08519c 29.75%, - #08519c 30.58%, #9ecae1 30.58%, #9ecae1 31.40%, #4292c6 31.40%, #4292c6 32.23%, #c6dbef 32.23%, - #c6dbef 33.06%, #fee0d2 33.06%, #fee0d2 33.88%, #9ecae1 33.88%, #9ecae1 34.71%, #c6dbef 34.71%, - #c6dbef 35.54%, #2171b5 35.54%, #2171b5 36.36%, #fcbba1 36.36%, #fcbba1 37.19%, #4292c6 37.19%, - #4292c6 38.02%, #c6dbef 38.02%, #c6dbef 38.84%, #4292c6 38.84%, #4292c6 39.67%, #ef3b2c 39.67%, - #ef3b2c 40.50%, #deebf7 40.50%, #deebf7 41.32%, #fee0d2 41.32%, #fee0d2 42.15%, #c6dbef 42.15%, - #c6dbef 42.98%, #08306b 42.98%, #08306b 43.80%, #08519c 43.80%, #08519c 44.63%, #2171b5 44.63%, - #2171b5 45.45%, #fcbba1 45.45%, #fcbba1 46.28%, #c6dbef 46.28%, #c6dbef 47.11%, #fcbba1 47.11%, - #fcbba1 47.93%, #deebf7 47.93%, #deebf7 48.76%, #fcbba1 48.76%, #fcbba1 49.59%, #fc9272 49.59%, - #fc9272 50.41%, #fee0d2 50.41%, #fee0d2 51.24%, #9ecae1 51.24%, #9ecae1 52.07%, #fcbba1 52.07%, - #fcbba1 52.89%, #6baed6 52.89%, #6baed6 53.72%, #4292c6 53.72%, #4292c6 54.55%, #08306b 54.55%, - #08306b 55.37%, #fee0d2 55.37%, #fee0d2 56.20%, #c6dbef 56.20%, #c6dbef 57.02%, #fcbba1 57.02%, - #fcbba1 57.85%, #deebf7 57.85%, #deebf7 58.68%, #fcbba1 58.68%, #fcbba1 59.50%, #08519c 59.50%, - #08519c 60.33%, #9ecae1 60.33%, #9ecae1 61.16%, #4292c6 61.16%, #4292c6 61.98%, #deebf7 61.98%, - #deebf7 62.81%, #fcbba1 62.81%, #fcbba1 63.64%, #9ecae1 63.64%, #9ecae1 64.46%, #6baed6 64.46%, - #6baed6 65.29%, #deebf7 65.29%, #deebf7 66.12%, #6baed6 66.12%, #6baed6 66.94%, #c6dbef 66.94%, - #c6dbef 67.77%, #fcbba1 67.77%, #fcbba1 68.60%, #deebf7 68.60%, #deebf7 69.42%, #fee0d2 69.42%, - #fee0d2 70.25%, #6baed6 70.25%, #6baed6 71.07%, #4292c6 71.07%, #4292c6 71.90%, #c6dbef 71.90%, - #c6dbef 72.73%, #fcbba1 72.73%, #fcbba1 73.55%, #9ecae1 73.55%, #9ecae1 74.38%, #2171b5 74.38%, - #2171b5 75.21%, #9ecae1 75.21%, #9ecae1 76.03%, #2171b5 76.03%, #2171b5 76.86%, #fc9272 76.86%, - #fc9272 77.69%, #ef3b2c 77.69%, #ef3b2c 78.51%, #c6dbef 78.51%, #c6dbef 79.34%, #fb6a4a 79.34%, - #fb6a4a 80.17%, #deebf7 80.17%, #deebf7 80.99%, #cb181d 80.99%, #cb181d 81.82%, #fcbba1 81.82%, - #fcbba1 82.64%, #08519c 82.64%, #08519c 83.47%, #fcbba1 83.47%, #fcbba1 84.30%, #fc9272 84.30%, - #fc9272 85.12%, #ef3b2c 85.12%, #ef3b2c 85.95%, #cb181d 85.95%, #cb181d 86.78%, #fcbba1 86.78%, - #fcbba1 87.60%, #ef3b2c 87.60%, #ef3b2c 88.43%, #fb6a4a 88.43%, #fb6a4a 89.26%, #fcbba1 89.26%, - #fcbba1 90.08%, #ef3b2c 90.08%, #ef3b2c 90.91%, #cb181d 90.91%, #cb181d 91.74%, #ef3b2c 91.74%, - #ef3b2c 92.56%, #fc9272 92.56%, #fc9272 93.39%, #6baed6 93.39%, #6baed6 94.21%, #ef3b2c 94.21%, - #ef3b2c 95.04%, #fc9272 95.04%, #fc9272 95.87%, #fee0d2 95.87%, #fee0d2 96.69%, #67000d 96.69%, - #67000d 97.52%, #cb181d 97.52%, #cb181d 98.35%, #ef3b2c 98.35%, #ef3b2c 99.17%, #67000d 99.17%, - #67000d 100.00%) - link: - color: "#3337" - hover: "#3339" - active: "#333e" - - name: hicexplorer - theme: - hicexplorer: - masthead: - color: > - linear-gradient(to right, #3337 0, #3337 285px, transparent 285px), - linear-gradient(to left, #3337 0, #3337 120px, transparent 120px), - left / 340px url("/static/dist/hicexplorer.png") - link: - color: "#3337" - hover: "#3339" - active: "#333e" - - name: annotation - theme: - annotation: - masthead: - color: > - linear-gradient(to right, #3337 0, #3337 365px, transparent 365px), - linear-gradient(to left, #3337 0, #3337 120px, transparent 120px), - left / 23% url("/static/dist/annotation.png") - link: - color: "#3337" - hover: "#3339" - active: "#333e" - - name: metabolomics - - name: metagenomics - hidden: true - - name: microbiome - hidden: true - - name: microgalaxy - - name: microbiology - - name: rna - - name: graphclust - hidden: true - - name: ecology - theme: - ecology: - masthead: - color: > - linear-gradient(to right, #3337 0, #3337 340px, transparent 340px), - linear-gradient(to left, #3337 0, #3337 120px, transparent 120px), - linear-gradient(to right, #2171b5 0.00%, - #2171b5 0.83%, #c6dbef 0.83%, #c6dbef 1.65%, #9ecae1 1.65%, #9ecae1 2.48%, #fee0d2 2.48%, - #fee0d2 3.31%, #6baed6 3.31%, #6baed6 4.13%, #9ecae1 4.13%, #9ecae1 4.96%, #08519c 4.96%, - #08519c 5.79%, #08306b 5.79%, #08306b 6.61%, #2171b5 6.61%, #2171b5 7.44%, #4292c6 7.44%, - #4292c6 8.26%, #9ecae1 8.26%, #9ecae1 9.09%, #2171b5 9.09%, #2171b5 9.92%, #4292c6 9.92%, - #4292c6 10.74%, #9ecae1 10.74%, #9ecae1 11.57%, #deebf7 11.57%, #deebf7 12.40%, #9ecae1 12.40%, - #9ecae1 13.22%, #deebf7 13.22%, #deebf7 14.05%, #4292c6 14.05%, #4292c6 14.88%, #08519c 14.88%, - #08519c 15.70%, #deebf7 15.70%, #deebf7 16.53%, #9ecae1 16.53%, #9ecae1 17.36%, #c6dbef 17.36%, - #c6dbef 18.18%, #6baed6 18.18%, #6baed6 19.01%, #4292c6 19.01%, #4292c6 19.83%, #2171b5 19.83%, - #2171b5 20.66%, #deebf7 20.66%, #deebf7 21.49%, #fcbba1 21.49%, #fcbba1 22.31%, #9ecae1 22.31%, - #9ecae1 23.14%, #deebf7 23.14%, #deebf7 23.97%, #9ecae1 23.97%, #9ecae1 24.79%, #deebf7 24.79%, - #deebf7 25.62%, #4292c6 25.62%, #4292c6 26.45%, #deebf7 26.45%, #deebf7 27.27%, #2171b5 27.27%, - #2171b5 28.10%, #fee0d2 28.10%, #fee0d2 28.93%, #fcbba1 28.93%, #fcbba1 29.75%, #08519c 29.75%, - #08519c 30.58%, #9ecae1 30.58%, #9ecae1 31.40%, #4292c6 31.40%, #4292c6 32.23%, #c6dbef 32.23%, - #c6dbef 33.06%, #fee0d2 33.06%, #fee0d2 33.88%, #9ecae1 33.88%, #9ecae1 34.71%, #c6dbef 34.71%, - #c6dbef 35.54%, #2171b5 35.54%, #2171b5 36.36%, #fcbba1 36.36%, #fcbba1 37.19%, #4292c6 37.19%, - #4292c6 38.02%, #c6dbef 38.02%, #c6dbef 38.84%, #4292c6 38.84%, #4292c6 39.67%, #ef3b2c 39.67%, - #ef3b2c 40.50%, #deebf7 40.50%, #deebf7 41.32%, #fee0d2 41.32%, #fee0d2 42.15%, #c6dbef 42.15%, - #c6dbef 42.98%, #08306b 42.98%, #08306b 43.80%, #08519c 43.80%, #08519c 44.63%, #2171b5 44.63%, - #2171b5 45.45%, #fcbba1 45.45%, #fcbba1 46.28%, #c6dbef 46.28%, #c6dbef 47.11%, #fcbba1 47.11%, - #fcbba1 47.93%, #deebf7 47.93%, #deebf7 48.76%, #fcbba1 48.76%, #fcbba1 49.59%, #fc9272 49.59%, - #fc9272 50.41%, #fee0d2 50.41%, #fee0d2 51.24%, #9ecae1 51.24%, #9ecae1 52.07%, #fcbba1 52.07%, - #fcbba1 52.89%, #6baed6 52.89%, #6baed6 53.72%, #4292c6 53.72%, #4292c6 54.55%, #08306b 54.55%, - #08306b 55.37%, #fee0d2 55.37%, #fee0d2 56.20%, #c6dbef 56.20%, #c6dbef 57.02%, #fcbba1 57.02%, - #fcbba1 57.85%, #deebf7 57.85%, #deebf7 58.68%, #fcbba1 58.68%, #fcbba1 59.50%, #08519c 59.50%, - #08519c 60.33%, #9ecae1 60.33%, #9ecae1 61.16%, #4292c6 61.16%, #4292c6 61.98%, #deebf7 61.98%, - #deebf7 62.81%, #fcbba1 62.81%, #fcbba1 63.64%, #9ecae1 63.64%, #9ecae1 64.46%, #6baed6 64.46%, - #6baed6 65.29%, #deebf7 65.29%, #deebf7 66.12%, #6baed6 66.12%, #6baed6 66.94%, #c6dbef 66.94%, - #c6dbef 67.77%, #fcbba1 67.77%, #fcbba1 68.60%, #deebf7 68.60%, #deebf7 69.42%, #fee0d2 69.42%, - #fee0d2 70.25%, #6baed6 70.25%, #6baed6 71.07%, #4292c6 71.07%, #4292c6 71.90%, #c6dbef 71.90%, - #c6dbef 72.73%, #fcbba1 72.73%, #fcbba1 73.55%, #9ecae1 73.55%, #9ecae1 74.38%, #2171b5 74.38%, - #2171b5 75.21%, #9ecae1 75.21%, #9ecae1 76.03%, #2171b5 76.03%, #2171b5 76.86%, #fc9272 76.86%, - #fc9272 77.69%, #ef3b2c 77.69%, #ef3b2c 78.51%, #c6dbef 78.51%, #c6dbef 79.34%, #fb6a4a 79.34%, - #fb6a4a 80.17%, #deebf7 80.17%, #deebf7 80.99%, #cb181d 80.99%, #cb181d 81.82%, #fcbba1 81.82%, - #fcbba1 82.64%, #08519c 82.64%, #08519c 83.47%, #fcbba1 83.47%, #fcbba1 84.30%, #fc9272 84.30%, - #fc9272 85.12%, #ef3b2c 85.12%, #ef3b2c 85.95%, #cb181d 85.95%, #cb181d 86.78%, #fcbba1 86.78%, - #fcbba1 87.60%, #ef3b2c 87.60%, #ef3b2c 88.43%, #fb6a4a 88.43%, #fb6a4a 89.26%, #fcbba1 89.26%, - #fcbba1 90.08%, #ef3b2c 90.08%, #ef3b2c 90.91%, #cb181d 90.91%, #cb181d 91.74%, #ef3b2c 91.74%, - #ef3b2c 92.56%, #fc9272 92.56%, #fc9272 93.39%, #6baed6 93.39%, #6baed6 94.21%, #ef3b2c 94.21%, - #ef3b2c 95.04%, #fc9272 95.04%, #fc9272 95.87%, #fee0d2 95.87%, #fee0d2 96.69%, #67000d 96.69%, - #67000d 97.52%, #cb181d 97.52%, #cb181d 98.35%, #ef3b2c 98.35%, #ef3b2c 99.17%, #67000d 99.17%, - #67000d 100.00%) - link: - color: "#3337" - hover: "#3339" - active: "#333e" - - name: proteomics - - name: clipseq - hidden: true - - name: cheminformatics - - name: imaging - theme: - imaging: - masthead: - color: > - linear-gradient(90deg, - rgb(0, 0, 0) 0%, - rgb(0, 69, 227) 17%, - rgb(9, 121, 33) 30%, - rgb(180, 170, 15) 70%, - rgb(193, 35, 0) 79%, - rgb(0, 0, 0) 100%) - - name: test - hidden: true - - name: beta - hidden: true - - name: streetscience - - name: singlecell - theme: - singlecell: - masthead: - color: "#530080" - - name: humancellatlas - - name: ml - - name: live - hidden: true - theme: - live: - masthead: - color: > - linear-gradient(33deg, rgba(131,58,180,1) 0%, - rgba(253,29,29,1) 25%, rgba(252,176,69,1) 50%, - rgba(253,29,29,1) 75%, rgba(131,58,180,1) 100%) - - name: plants - theme: - plants: - masthead: - color: > - linear-gradient(90deg, - #1a5d1a 0%, - #369c36 50%, - rgb(29 95 28) 100%) - - name: virology - theme: - virology: - masthead: - color: > - linear-gradient(50deg, - hsl(240deg 100% 20%) 0%, - hsl(234deg 95% 23%) 13%, - hsl(227deg 90% 26%) 26%, - hsl(220deg 85% 29%) 38%, - hsl(213deg 79% 32%) 52%, - hsl(207deg 74% 35%) 66%, - hsl(200deg 69% 38%) 82%, - hsl(194deg 64% 42%) 100%) - - name: lite - - name: covid19 - hidden: true - - name: africa - hidden: true - - name: india - hidden: true - - name: spatialomics - hidden: true - - name: materials - hidden: true - - name: phage - - name: earth-system - - name: cancer - hidden: true - - name: aqua - hidden: true - - name: eirene - hidden: true - - name: astronomy diff --git a/group_vars/sn06/themes_conf.yml b/group_vars/sn06/themes_conf.yml deleted file mode 100644 index 2cdb2691e..000000000 --- a/group_vars/sn06/themes_conf.yml +++ /dev/null @@ -1,61 +0,0 @@ ---- -# Ansible variables from ansible-galaxy v0.11.0 -galaxy_themes: - europe: - masthead: - color: "#003399" - - lightblue: - masthead: - color: "#384E77" - text: - color: white - hover: "#E6F9AF" - active: white - link: - color: transparent - hover: transparent - active: "#18314F" - - pride: - masthead: - color: > - linear-gradient(120deg, - #3c476d 0px 200px, - #fdda0f 202px 210px, - #fff 212px 220px, - #f4b0c9 222px 230px, - #7ccee6 232px 240px, - #93540c 242px 250px, - #000 252px 260px, - transparent 262px), - linear-gradient(270deg, - #3c476d 0px 120px, - #3c476d00 120px), - linear-gradient(180deg, - #FE0000 16.66%, - #FD8C00 16.66% 33.32%, - #FFE500 33.32% 49.98%, - #119F0B 49.98% 66.64%, - #0644B3 66.64% 83.3%, - #C22EDC 83.3%) - text: - color: white - hover: gold - active: white - link: - color: "#3c476d" - hover: "#323a53" - active: "#6170a6" - - smoky: - masthead: - color: "#0C0F0A" - text: - color: white - hover: "#FBFF12" - active: white - link: - color: transparent - hover: transparent - active: "#FF206E" diff --git a/group_vars/sn06/toolmsg.yml b/group_vars/sn06/toolmsg.yml deleted file mode 100644 index 3d89da66d..000000000 --- a/group_vars/sn06/toolmsg.yml +++ /dev/null @@ -1,65 +0,0 @@ ---- -# This file is used to define custom messages for tools that are displayed in the tool form -# The toolmsg webhook wil be triggered and the message will be displayed in the tool form if the tool_id matches - -# Format: -# toolmsg_messages: -# - tool_id: to match subject.startsWith(tool_id) -# Best to use remove version numbers and trailing slash -# e.g. toolshed.g2.bx.psu.edu/repos/galaxyp/diann/diann -# message: A custom HTML message to be displayed for this tool -# class: bootstrap class [primary, info, success, warning, danger] - -# Example 1: Display a warning message for the tool ncbi_blastp_wrapper, the message will be in bold format -# toolmsg_messages: -# - tool_id: toolshed.g2.bx.psu.edu/repos/devteam/ncbi_blast_plus/ncbi_blastp_wrapper -# message: We recommend using Diamond instead. -# class: warning - -# Example 2: Display a warning message for the tool ncbi_blastp_wrapper, the message will be in bold format and will have a link to the Diamond tool -# toolmsg_messages: -# - tool_id: toolshed.g2.bx.psu.edu/repos/devteam/ncbi_blast_plus/ncbi_blastp_wrapper -# message: > -# We recommend using -# -# Diamond -# -# instead. -# class: warning - -toolmsg_messages: - - tool_id: toolshed.g2.bx.psu.edu/repos/devteam/fastqc/fastqc - message: > - We recommend using - Falco - instead. Falco is 3 times faster and offers the same functionality as FASTQC. - class: warning - - tool_id: toolshed.g2.bx.psu.edu/repos/devteam/ncbi_blast_plus/ncbi_blastp_wrapper - message: > - We recommend using - Diamond - instead. Pairwise alignment of proteins and translated DNA can be up to 100x-10,000x faster than BLAST. - class: warning - - tool_id: toolshed.g2.bx.psu.edu/repos/maciek/spamr_vet_tools/mlst_amr_staramr - message: > - The SPAMR-VET tools - are in-development tools currently offered for testing purposes only. - class: warning - - tool_id: toolshed.g2.bx.psu.edu/repos/maciek/spamr_vet_tools/quality_script_fastp_bracken - message: > - The SPAMR-VET tools - are in-development tools currently offered for testing purposes only. - class: warning - - tool_id: toolshed.g2.bx.psu.edu/repos/maciek/spamr_vet_tools/quast_get_fasta - message: > - The SPAMR-VET tools - are in-development tools currently offered for testing purposes only. - class: warning - - tool_id: toolshed.g2.bx.psu.edu/repos/iuc/meme_dreme/meme_dreme/4.11.2.0 - message: > - We recommend using - STREME - instead. DREME has been deprecated. STREME provides higher accuracy and sensitivity in motif discovery. - class: warning diff --git a/hosts b/hosts index 23bd4e696..a4f98b290 100644 --- a/hosts +++ b/hosts @@ -55,18 +55,12 @@ celery-1.galaxyproject.eu # Baremetal [galaxyservers] -sn06.galaxyproject.eu +sn09.galaxyproject.eu sn07.galaxyproject.eu -[sn06] -sn06.galaxyproject.eu - [sn07] sn07.galaxyproject.eu -[sn05] -sn05.galaxyproject.eu ansible_ssh_user=root - [maintenance] maintenance.galaxyproject.eu @@ -88,7 +82,6 @@ ansible_group_priority=4 [htcondor-submit] maintenance.galaxyproject.eu -sn06.galaxyproject.eu sn09.galaxyproject.eu [htcondor-submit:vars] diff --git a/sn05.yml b/sn05.yml deleted file mode 100644 index e7bdadbb8..000000000 --- a/sn05.yml +++ /dev/null @@ -1,41 +0,0 @@ ---- -- name: Galaxy DB server - hosts: sn05 - become: true - vars: - hostname: sn05.galaxyproject.eu - vars_files: - - secret_group_vars/all.yml - - mounts/dest/all.yml - - mounts/mountpoints.yml - collections: - - devsec.hardening - pre_tasks: - - name: Install Dependencies - package: - name: ['python3', 'rsync', 'perl', 'glibc-langpack-en'] - become: true - - name: Disable firewalld service - ansible.builtin.service: - name: firewalld - enabled: false - state: stopped - roles: - - geerlingguy.repo-epel - - role: usegalaxy_eu.handy.os_setup - vars: - enable_hostname: true - enable_powertools: true # geerlingguy.repo-epel role doesn't enable PowerTools repository - enable_install_software: true # Some extra admin tools (*top, vim, etc) - - usegalaxy-eu.dynmotd - - influxdata.chrony - - hxr.monitor-email - - usegalaxy-eu.autoupdates # keep all of our packages up to date - - usegalaxy-eu.autofs - - ssh-host-sign - # Applications - #- usegalaxy_eu.htcondor - - usegalaxy-eu.ansible-postgresql - # End Applications - - dj-wasabi.telegraf - - ssh_hardening diff --git a/sn06.yml b/sn06.yml deleted file mode 100644 index b03ec40f5..000000000 --- a/sn06.yml +++ /dev/null @@ -1,285 +0,0 @@ ---- -- name: UseGalaxy.eu - hosts: sn06 - become: true - become_user: root - vars: - # The full internal name. - hostname: sn06.galaxyproject.eu - # The nginx user needed into the galaxyproject.nginx role - nginx_conf_user: galaxy - # This server has multiple CNAMEs that are important. Additionally it - # provides proxying for many of the other services run by Galaxy Europe. - # These server_names are passed to certbot. They generally should not need - # to be updated unless you add a new domain. They *only* work with the - # route53 provider, so if we want to do usegalaxy.xy, it may require - # refactoring / multiple certbot runs. - # - # - # The best way to expand them is to run the playbook, it will leave a message with the command it would have run (look for `skipped, since /etc/letsencrypt/renewal/usegalaxy.eu.conf exists`) - # - # Then take this command to the command line (root@sn04) and run it with `--expand`. E.g. (DO NOT COPY PASTE (in case the config changes)) - # - # $ /opt/certbot/bin/certbot certonly --non-interactive --dns-route53 \ - # -m security@usegalaxy.eu --agree-tos -d 'usegalaxy.eu,*.usegalaxy.eu,galaxyproject.eu,*.galaxyproject.eu,*.interactivetoolentrypoint.interactivetool.usegalaxy.eu,*.interactivetoolentrypoint.interactivetool.live.usegalaxy.eu,*.interactivetoolentrypoint.interactivetool.test.usegalaxy.eu' --expand - # Saving debug log to /var/log/letsencrypt/letsencrypt.log - # Credentials found in config file: ~/.aws/config - # .... - # IMPORTANT NOTES: - # - Congratulations! Your certificate and chain have been saved at: - # - # And you're done expanding the certs. - # - # The nginx user needed into the galaxyproject.nginx role - server_names: - - "usegalaxy.eu" - - "*.usegalaxy.eu" - - "galaxyproject.eu" - - "*.galaxyproject.eu" - - "*.ep.interactivetool.usegalaxy.eu" - - "*.ep.interactivetool.live.usegalaxy.eu" - - "*.ep.interactivetool.test.usegalaxy.eu" - - "*.aqua.usegalaxy.eu" - - "*.ep.interactivetool.aqua.usegalaxy.eu" - - "*.ecology.usegalaxy.eu" - - "*.ep.interactivetool.ecology.usegalaxy.eu" - - "*.earth-system.usegalaxy.eu" - - "*.ep.interactivetool.earth-system.usegalaxy.eu" - - "*.eirene.usegalaxy.eu" - - "*.ep.interactivetool.eirene.usegalaxy.eu" - vars_files: - - group_vars/sn06/sn06.yml - - group_vars/sn06/themes_conf.yml - - group_vars/sn06/subdomains.yml - - group_vars/sn06/toolmsg.yml - - group_vars/tiaas.yml # All of the training infrastructure - - group_vars/gxconfig.yml # The base galaxy configuration - - group_vars/toolbox.yml # User controlled toolbox - - secret_group_vars/sentry.yml # Sentry SDK init url - - secret_group_vars/aws.yml # AWS creds - - secret_group_vars/pulsar.yml # Pulsar + MQ Connections - - secret_group_vars/oidc.yml # OIDC credentials (ELIXIR, keycloak) - - secret_group_vars/object_store.yml # Object Store credentils (S3 etc ...) - - secret_group_vars/db-main.yml # DB URL + some postgres stuff - - secret_group_vars/file_sources.yml # file_sources_conf.yml creds - - secret_group_vars/all.yml # All of the other assorted secrets... - - secret_group_vars/keys.yml # SSH keys - - templates/galaxy/config/job_conf.yml - - mounts/dest/all.yml - - mounts/mountpoints.yml - handlers: - - name: Restart Galaxy - shell: | - cd /opt/galaxy/ && source /opt/galaxy/.bashrc && /usr/bin/gxadmin gunicorn handler-restart && sudo -u galaxy /usr/bin/galaxy-sync-to-nfs && systemctl restart galaxy-handler@* && systemctl restart galaxy-workflow-scheduler@* - listen: "restart galaxy" - pre_tasks: - - name: Install Dependencies - package: - name: - [ - "git", - "postgresql", - "python3-psycopg2", - "python3-virtualenv", - "bc", - "python38", - "python38-devel", - ] - become: true - - name: Set default version of Python - alternatives: - name: python - path: /usr/bin/python3 - - name: Disable SELinux - selinux: - state: disabled - - name: Add mosh service config for FirewallD - ansible.builtin.copy: - content: "{{ firewall_mosh_service }}" - dest: /etc/firewalld/services/mosh.xml - post_tasks: - - name: Write Galaxy __galaxy_client_build_version and __galaxy_current_commit_id - delegate_to: 127.0.0.1 - ansible.builtin.copy: - content: | - client_build_version={{ __galaxy_client_build_version }} - current_commit_id={{ __galaxy_current_commit_id }} - dest: "{{ playbook_dir }}/galaxy_update.properties" - - name: Append some users to the systemd-journal group - user: - name: "{{ item }}" - groups: systemd-journal - append: true - loop: - - "{{ galaxy_user.name }}" - - "telegraf" - - "stats" # special account to retrieve statistics from the server in read-only mode - - name: Set authorized SSH key (galaxy user) - ansible.posix.authorized_key: - user: "{{ galaxy_user.name }}" - state: present - key: "{{ item }}" - loop: - - "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIFH54+qZEBeU5uwIeWWOViLcC509qxoRW6oN0VHRQr4r nate@treehouse" - - https://github.com/mira-miracoli.keys - - "ecdsa-sha2-nistp521 AAAAE2VjZHNhLXNoYTItbmlzdHA1MjEAAAAIbmlzdHA1MjEAAACFBACB5Q5blymkTIRSzVzXITOGvBuI7W0L9Ykwfz8LJGPraaGVPiezzFGvjhqwX+EyCqQPt7JprR5mimJRw/JN3nBXWAHjekvmB5FuILkk6m5fOiQJ5QhRMyQ5GfxODAvGbHpTuWHbYJLWD5fhcboKPxlXOWy4xY9kDZVuQvEKisNKYBsFLA== sanjay" - - "ecdsa-sha2-nistp521 AAAAE2VjZHNhLXNoYTItbmlzdHA1MjEAAAAIbmlzdHA1MjEAAACFBABRaLHL8mgW86rbtdUh6TY4rs7/la8hAGeSQ3jBF7LMwYZnbS32YDMYvDq3KgNu5WqSMFvkxNm3vfTAbd8CXBfakwDBFBaD9kO0b2t4/p4VoFUsd3B2OvmTR7Bsg7OxTGJJ7aUP/SzTg+Z4NzsmHwQ9h31gfI7n/buZD4S1edQke19Y6w== dominguj@informatik.uni-freiburg.de" - - https://github.com/wm75.keys - - https://github.com/bgruening.keys - - "{{ galaxy_user_public_key }}" - - name: Set authorized SSH key (stats user) - ansible.posix.authorized_key: - user: "stats" - state: present - key: "{{ item }}" - loop: - - "ssh-rsa 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 paul@paul-LIFEBOOK-U7410" - - "ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAACAQDC6kanRFWmhjkV8pkwOYtHoCNDIP/nj2umigbSylMFmiXm2rwnqi1qhDeJqd53PTrT4RWynT7Gqg7/HSITPAZA4wdGNcDLHD7QvexBDhIhUJCERmMZa6EWPvOPgDACbJDjrwLxd8oF65UhQU+meVrkBmpod6YDSuVIfmZXHUheK7NuZfvfNx3ruQNU5MRbI3p6vuY++B4GYRXrxM68+GWYEOEa6zz142Nl1PNnvDMkiobro0k6P5bXv4LDYMW3YyDXu69okJgPqEKjE/IsI4/2JKfzduEZMQyPZDQswyuNQwMAfKQjvDQ0gvQiVE0eM2gdR7qi/jOqFXrzkOwYWQd00Cy9EtSWqhDlpu9KrIfs8T2HTn9p/XU+Bwg4anyMh//gb+EOctpvptqoBhjNxoRTX/bwNLFq/ARFAtFDn+qX8w9HWeB5/vNvdOkH7fSMTTFmFkDZ8U/Hrg5vhcwy2Hid2K7j9peixB/41d7/O08qL99qH9362L8ZmhyT9aNeOKQ0MUEEhAasYkKO7AQcChDpkgW635mkvI5EOZGsqCRPiX8P8iTH5neH6ZI4H21JoON5E0raMJlwznNq3D4as12kZBtw198DHFAMQXlfMR24NTcv0nFnS6JmxlwCKu+Uzyt3Xlyj/wEzKYnr71vfShb3/vUgYbzIEdDQmGV8DXEJBw== anup" - - "ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEApcUIRRUHl0wVVXz5GX1QnHSq9+nThIKKH3fYM21LfW1n6gGvC7UiCCaDZQUbejJTq3EITbH3J6/Tji2jGAIJ6Xzn0Jf7sQ1yON/dO/75To32Jdo8YWS7XQeA7lU9heSc7FM5yKIBJN7PrpnYAveCsOE/1kkfUSsBZsqj9yyoFe/tquoVm5Y3nFZfKJv7/gszSVkzNxhHvn+0ccClRLpnFUHjqXgXHIQCm7P/9Lf7unSoYRd9Iefwgp52Lcm6AIncQvz5tdAFD2WciP4J15EFPMTKPdc6tfT5Tis/+/oNfYlsnaIGrbV5Hc2909KiYnvuvqKcrSFloXWzAdXJOxhszw== videmp@cn001.bi.uni-freiburg.de" - - "ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC8/9GdD96Xfc0MavIJQEuNSIrOlaBSYkH4s5RyGhNnc8Al7x3hC7KXt/mcqyNoI1JTvrXp23aDpTr67e3Dnrp6Me7z8nyY9oIy5WHOgwG2ra1Ga8oi89MVgXPhtxvcYnk8hVfuPDmhWkgwS5ILH/7V/1hEKHcS0H7Q0pJp8EGCBDFWrxNfUWqJJuVcXb11CMnaSJX/VhD+S4g4rG01lMr696+k8eKs9y2sq9JpuUD1TNN16RYu1uVlVz8nhIPbEBsnFeKV+EYKLcSRQnjDTNjWqZHHM9NMWfK3wGvr5pfla158ZdsYQTmQtcchTsEoB+7eAQaER3XsEtuo8yQj4zbL videmp@work" - - "ssh-rsa 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 ubuntu@pavan-dedicated-vm" - - "ssh-rsa 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 laptop@freiburg" - - "ssh-rsa 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 david" - - "ecdsa-sha2-nistp521 AAAAE2VjZHNhLXNoYTItbmlzdHA1MjEAAAAIbmlzdHA1MjEAAACFBAA6oD5Ps9h6pKokzaAcCI6R08CKm2aSVv86h/O2HTEQkzeJq/Uvu4gbrONAM0FK5R693mHggIwaROKf1Z1+q4YNtACtYjV1c+6a9lcrGMM31y5RzO6mAW+rHNEXgZ1n3wqDcBQhSXhSekSen0R2QKwvmB7xeP4XX9qE10azZuafIFU9hQ== sanjay" - - "ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABgQC9itwmMTgcRCrwjO3RCke/NWJsRb3N5lUTF5fubw/V0PlSbFDuv7IMKp5hhFfhiOuVRMoXQBHnnOWWu1xd9jDqZKXmNGHg06JtnddQ/OVprZ6Dpu2g9pZ6uc4r1As94mvpICLVK9lNHPNA60sIwTsTRVFSb1VbXALI4iuLOxPLzIxhrZ1LouK19VWetJIQ/Uq8UalfTDr1KOyQQ/ZgjBeWdD5InSOl3sbPJZhGQLqSHIi0MVxH527CMnh1PQIxiD/vqX8SK7HaKvUZIHHzz5TFrUgrw7BkfRd04UIgr1OhnMf1E413yZdeQzJQV7C1CL9MbAThXX6Ruvs0Rg3ylazpYfwDifMWvqLeRoTCDUbGx94ySO/wzer/kcjpJ27iydNo+en/hImMYz7kktf6A3BzOYxFmOQvnQ9cChP+iuk7fTiQZS7Qtkz+axNIvwCkm7Hmgt7vYizHc+OAtKmzZFTHecozjxCXs9RwynnWpToheP3ZPYgOpKc7pkUngRSjXyc= bebatut@bebatut-ThinkPad-T14-Gen-1" - - https://github.com/mira-miracoli.keys - - https://github.com/bgruening.keys - - "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIFH54+qZEBeU5uwIeWWOViLcC509qxoRW6oN0VHRQr4r nate" - - "ecdsa-sha2-nistp521 AAAAE2VjZHNhLXNoYTItbmlzdHA1MjEAAAAIbmlzdHA1MjEAAACFBABRaLHL8mgW86rbtdUh6TY4rs7/la8hAGeSQ3jBF7LMwYZnbS32YDMYvDq3KgNu5WqSMFvkxNm3vfTAbd8CXBfakwDBFBaD9kO0b2t4/p4VoFUsd3B2OvmTR7Bsg7OxTGJJ7aUP/SzTg+Z4NzsmHwQ9h31gfI7n/buZD4S1edQke19Y6w== dominguj@informatik.uni-freiburg.de" - - "ssh-rsa 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 catherine.bromhead@unimelb.edu.au" - - "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIPzm/ZHp+16Oz/5TbQkJZMC5yvp/C3OfvgOlRWqEX/Fc jdavcs@gmail.com" - - "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAINGQxOm1ZlWT4k8+wK9QXSY4Obb/kz7CR7u89XWCJcqW marius@galaxyproject.org" - - name: Set temporary cron for cleaning docker images - ansible.builtin.cron: - name: "Temporary docker cleanup – needs upstream fix see issue #584" - minute: "0" - hour: "*/3" - job: "/bin/docker system prune --all -f > /dev/null" - roles: - ## Starting configuration of the operating system - - role: usegalaxy_eu.handy.os_setup - vars: - enable_hostname: true - enable_powertools: true # geerlingguy.repo-epel role doesn't enable PowerTools repository - enable_remap_user: true - enable_exclude_packages: true - enable_pam_limits: true # Prevent out of control processes - enable_install_software: true # Some extra admin tools (*top, vim, etc) - - geerlingguy.repo-epel # Install EPEL repository - - ## Install miniconda, create a _galaxy_ environment and install Packages - ## Galaxy will use the virtualenv from this conda environment (see - ## galaxy_virtualenv_command) in the group_vars/sn06.yml - - role: galaxyproject.miniconda - vars: - miniconda_prefix: "{{ conda_prefix }}" - galaxy_conda_create_env: true - galaxy_conda_env_packages: - - python=3.11 - - pip - - - usegalaxy-eu.autoupdates # keep all of our packages up to date - - influxdata.chrony # Keep our time in sync. - - ## Filesystems - - usegalaxy-eu.autofs # Setup the mount points which will be needed later - - galaxyproject.cvmfs # Galaxy datasets - - ## Monitoring - - hxr.monitor-email - - hxr.monitor-galaxy-journalctl - # - usegalaxy-eu.monitor-disk-access-time - - # Setup Galaxy user - - role: galaxyproject.galaxy - vars: - galaxy_create_user: true - galaxy_manage_clone: false - galaxy_manage_cleanup: false # we should use this - galaxy_manage_download: false - galaxy_manage_existing: true - galaxy_manage_paths: true - galaxy_manage_static_setup: false - galaxy_manage_mutable_setup: false - galaxy_manage_database: false - galaxy_manage_subdomain_static: false - galaxy_fetch_dependencies: false - galaxy_build_client: false - galaxy_manage_systemd: false # switch to gravity(?) - galaxy_manage_gravity: false - # The bashrc needs to be created for several later features. - - usegalaxy-eu.bashrc - - ## Setup docker - - geerlingguy.docker - - # HTCondor Cluster setup - # - usegalaxy_eu.htcondor - - # Misc. - - role: hxr.galaxy-nonreproducible-tools - become: true - become_user: galaxy - - usegalaxy-eu.dynmotd # nicer MOTD/welcome message - - usegalaxy-eu.rsync-to-nfs # sync codebase to NFS - - role: usegalaxy-eu.webhooks # Clone webhook repository - become: true - become_user: galaxy - - role: usegalaxy-eu.tours # Clone tour repository - become: true - become_user: galaxy - - ## SSL / Security - # https://en.wikipedia.org/wiki/Trust_on_first_use - - ssh-host-sign # Sign the server host key to prevent TOFU for SSH - - hxr.aws-cli # Setup the AWS client that will be needed for route53 authentication of certbot. MUST come before nginx role - - ## GALAXY - - hxr.postgres-connection - - galaxyproject.gxadmin - - galaxyproject.tiaas2 - - usegalaxy-eu.nginx - # TODO move under monitoring + telegraf. - - usegalaxy-eu.gapars-galaxy - # The REAL galaxy role - - role: galaxyproject.galaxy - vars: - galaxy_create_user: true - galaxy_manage_clone: true - galaxy_manage_cleanup: false # we should use this - galaxy_manage_download: false - galaxy_manage_existing: false - galaxy_manage_static_setup: true - galaxy_manage_mutable_setup: true - galaxy_manage_database: true - galaxy_manage_subdomain_static: true - galaxy_manage_host_filters: false # test when themes work - galaxy_manage_systemd: false # switch to gravity(?) - galaxy_manage_gravity: false - galaxy_fetch_dependencies: true - galaxy_build_client: true - galaxy_client_make_target: client-production - - - - usegalaxy_eu.tpv_auto_lint - ## Extras! - - usegalaxy-eu.fix-galaxy-server-dir # Fix details into the galaxy server dirs - - hxr.install-to-venv # Some extra packages our site needs. - - usegalaxy_eu.galaxy_systemd # Manage the Galaxy processes with SystemD - - usegalaxy-eu.update-hosts # Update hosts list - - usegalaxy_eu.gie_proxy # Setup the NodeJS proxy for GxIT - - usegalaxy_eu.fs_maintenance # Filesystems maintenance - - usegalaxy-eu.logrotate # Rotate logs - - usegalaxy-eu.error-pages # Copy the NGINX error pages - - usegalaxy-eu.htcondor_release - # Various ugly fixes - # - usegalaxy-eu.fix-unscheduled-jobs # Workaround for ??? - - usegalaxy-eu.fix-stuck-handlers # Restart handlers to prevent several classes of issues - - usegalaxy-eu.log-cleaner # do not retain journalctl logs, they are unnecessary/risky under GDPR - - usegalaxy-eu.galaxy-procstat # Some custom telegraf monitoring that's templated - # Some of our 'cleanups' also generate telegraf format so this goes at end. - - dj-wasabi.telegraf - # - dev-sec.os-hardening - - dev-sec.ssh-hardening - - usegalaxy-eu.fix-stop-ITs - - usegalaxy_eu.firewall