From db0194330fe042d7bdf36f8d2a670fc748975bc7 Mon Sep 17 00:00:00 2001
From: Markus Katharina Brechtel <markus.katharina.brechtel@thengo.net>
Date: Mon, 24 Feb 2020 18:34:39 +0100
Subject: [PATCH] alerta configuration

---
 defaults/main.yaml        |  2 ++
 tasks/local_facts.yaml    | 17 +++++++++++++++++
 tasks/main.yaml           |  8 ++++++++
 templates/alertad.conf.j2 |  3 +++
 vars/main.yaml            |  3 +++
 5 files changed, 33 insertions(+)
 create mode 100644 tasks/local_facts.yaml
 create mode 100644 templates/alertad.conf.j2

diff --git a/defaults/main.yaml b/defaults/main.yaml
index 627eeeb..157c007 100644
--- a/defaults/main.yaml
+++ b/defaults/main.yaml
@@ -1,2 +1,4 @@
 ---
 alerta_server_name: "{{ inventory_hostname }}"
+
+alerta_secret_key: "{{ ansible_local.alerta.secret_key }}"
diff --git a/tasks/local_facts.yaml b/tasks/local_facts.yaml
new file mode 100644
index 0000000..b3f7f64
--- /dev/null
+++ b/tasks/local_facts.yaml
@@ -0,0 +1,17 @@
+---
+
+- name: ansible local facts directory
+  file:
+    path: /etc/ansible/facts.d
+    state: directory
+
+- name: set ansible local fact
+  copy:
+    content: "{{_local_facts|to_json}}"
+    dest: /etc/ansible/facts.d/{{role_name}}.fact
+    mode: 0600
+  register: _local_facts_set
+
+- name: Gathering Facts
+  setup:
+  when: _local_facts_set.changed
diff --git a/tasks/main.yaml b/tasks/main.yaml
index 74d6037..64508ee 100644
--- a/tasks/main.yaml
+++ b/tasks/main.yaml
@@ -1,4 +1,6 @@
 ---
+- import_tasks: local_facts.yaml
+
 
 - name: debian package requirements
   apt:
@@ -82,6 +84,12 @@
     dest: /opt/alerta/wsgi.py
   notify: restart uwsgi
 
+- name: alerta configuration
+  template:
+    src: alertad.conf.j2
+    dest: /etc/alertad.conf
+  notify: restart uwsgi
+
 - include_role:
     name: certificate
   vars:
diff --git a/templates/alertad.conf.j2 b/templates/alertad.conf.j2
new file mode 100644
index 0000000..7f32fd8
--- /dev/null
+++ b/templates/alertad.conf.j2
@@ -0,0 +1,3 @@
+{{ansible_managed|comment}}
+SECRET_KEY = '{{alerta_secret_key}}'
+BASE_URL = '/api'
diff --git a/vars/main.yaml b/vars/main.yaml
index d9d909c..c366e10 100644
--- a/vars/main.yaml
+++ b/vars/main.yaml
@@ -1,4 +1,7 @@
 ---
+_local_facts:
+  secret_key: "{% if not ansible_local[role_name].secret_key is defined %}{{ lookup('password', '/dev/null length=64 chars=ascii_letters,digits') }}{% else %}{{ ansible_local[role_name].secret_key }}{% endif %}"
+
 _alerta_webui_dl_url: "{{ _alerta_webui_releases.json.assets | json_query(\"[?name=='alerta-webui.tar.gz'].browser_download_url|[0]\") }}"
 _alerta_webui_version: "{{ _alerta_webui_releases.json.tag_name }}"