uwsgi-python: add repo-sync service

uwsgi-python/handlers/main.yml

@@ -47,3 +47,6 @@
 
 - name: restart uwsgi instance isic
   service: name="uwsgi@isic" state=restarted
+
+- name: restart uwsgi instance repo-sync
+  service: name="uwsgi@repo-sync" state=restarted

uwsgi-python/tasks/apps/repo-sync.yml

+- name: ensure we have a directory for additional ssh keys
+  file:
+    state: directory
+    dest: "{{ app_home }}/.ssh/"
+    owner: "{{ app_user }}"
+    group: "{{ app_group }}"
+    mode: 0700
+
+- name: ensure we have additional ssh keys
+  copy:
+    src: "{{ item }}"
+    dest: "{{ app_home }}/.ssh/"
+    owner: "{{ app_user }}"
+    group: "{{ app_group }}"
+    mode: 0600
+  with_items:
+    - "{{ repo_sync_ssh_keys }}"
+    - "{{ repo_sync_ssh_keys }}".pub

uwsgi-python/templates/apps/repo-sync.j2

+DEBUG = False
+WORKERS = {{ repo_sync_workers }}
+REPOS = {
+{% for repo in repo_sync_repos %}
+    '{{ repo.source }}': '{{ repo.dest }}',
+{% endfor %}
+}
+ALLOWED_SECRETS = {
+{% for repo in repo_sync_secrets %}
+    '{{ repo.source }}': '{{ repo.secret }}',
+{% endfor %}
+}

uwsgi-python/vars/repo-sync.yml

+app_name: repo-sync
+app_user: repo-sync
+app_group: repo-sync
+app_home: /var/www/stud-repo-sync
+app_path: /var/www/stud-repo-sync
+app_python_version: 3
+app_venv: /var/www/stud-repo-sync/venv/
+app_program: sync.py
+app_callable: app
+app_command: "runserver"
+app_mountpoint: /
+app_service_env: []
+app_mules: 0
+app_enable_threads: true
+app_harakiri: 5
+app_uwsgi_options: []
+
+app_db_name: ''
+app_db_type: ''
+
+app_additional_software: ['git']
+
+app_deploy_key: "{{ inventory_dir }}/files/deploy-keys/repo-sync"
+app_git_url: "git@git.stud.rwth-aachen.de:infra/repo-sync.git"
+app_git_version: HEAD
+
+app_requirements_file: requirements.txt
+app_config_file: config.py
+app_secret_config: false
+app_secret_config_keys: []
+
+repo_sync_ssh_key: "{{ inventory_dir }}/files/deploy-keys/repo-sync-rw"
+repo_sync_workers: 2
+repo_sync_repos:
+  - source: 'git@git.example.com:test/from.git'
+    dest: 'git@git.example.com:test/to.git'
+repo_sync_secrets:
+  - source: 'git@git.example.com:test/from.git'
+    secret: 'ALLOW'