Add files

group_vars.yml

@@ -0,0 +1,9 @@
+---
+pleroma_domain: localhost
+instance_name: Pleroma
+admin_email: admin@mail.example
+notify_email: notify@mail.example
+db_user: pleroma
+db_name: pleroma
+db_host: 127.0.0.1
+db_password: pleroma

playbook.yml

@@ -0,0 +1,131 @@
+---
+- name: Install pleroma
+  hosts: all
+  vars_files:
+    - ./group_vars.yml
+
+  tasks:
+    - name: Get indexes
+      become: true
+      ansible.builtin.apt:
+        update-cache: true
+
+    - name: Upgrade OS
+      become: true
+      ansible.builtin.apt:
+        upgrade: full
+
+    - name: Install deps for building
+      become: true
+      ansible.builtin.apt:
+        name: 
+          - acl
+          - git
+          - build-essential
+          - postgresql
+          - postgresql-contrib
+          - cmake
+          - libmagic-dev
+          - elixir
+          - erlang-dev
+          - erlang-nox
+          - imagemagick
+          - ffmpeg
+          - libimage-exiftool-perl
+          - python3-psycopg2
+
+    - name: Create pleroma database user
+      become: true
+      become_user: postgres
+      community.postgresql.postgresql_user:
+        name: '{{ db_user }}'
+        password: '{{ db_password }}'
+
+    - name: Create pleroma database
+      become: true
+      become_user: postgres
+      community.postgresql.postgresql_db:
+        name: '{{ db_name }}'
+        owner: '{{ db_user }}'
+
+    - name: Create pleroma user
+      become: true
+      ansible.builtin.user:
+        name: pleroma
+        system: true
+        home: /var/lib/pleroma
+        shell: /bin/false
+
+    - name: Create pleroma directory
+      become: true
+      ansible.builtin.file:
+        path: /opt/pleroma
+        state: directory
+        recurse: true
+        owner: pleroma
+        group: pleroma
+
+    - name: Get pleroma source
+      become: true
+      become_user: pleroma
+      ansible.builtin.git:
+        repo: https://git.pleroma.social/pleroma/pleroma
+        dest: /opt/pleroma
+        version: stable
+
+    - name: Create pleroma config
+      become: true
+      become_user: pleroma
+      ansible.builtin.template:
+        src: ./templates/config.j2
+        dest: /opt/pleroma/config/prod.secret.exs
+        owner: pleroma
+        group: pleroma
+        mode: '0644'
+
+    - name: Install Hex
+      become: true
+      become_user: pleroma
+      ansible.builtin.shell:
+        chdir: /opt/pleroma
+        cmd: mix local.hex --force
+
+    - name: Install pleroma deps
+      become: true
+      become_user: pleroma
+      ansible.builtin.shell:
+        chdir: /opt/pleroma
+        cmd: mix deps.get
+
+    - name: Install rebar3
+      become: true
+      become_user: pleroma
+      ansible.builtin.shell:
+        chdir: /opt/pleroma
+        cmd: mix local.rebar --force
+
+    - name: Building pleroma and database migration
+      become: true
+      become_user: pleroma
+      ansible.builtin.shell:
+        chdir: /opt/pleroma
+        cmd: MIX_ENV=prod mix ecto.migrate
+
+    - name: Copy SystemD unit
+      become: true
+      ansible.builtin.copy:
+        src: /opt/pleroma/installation/pleroma.service
+        dest: /etc/systemd/system/pleroma.service
+        mode: '0644'
+
+    - name: Daemons reload
+      become: true
+      ansible.builtin.systemd_service:
+        daemon_reload: true
+
+    - name: Enable and start pleroma service
+      become: true
+      ansible.builtin.systemd_service:
+        name: pleroma
+        enabled: true
+        state: started

templates/config.j2

@@ -0,0 +1,74 @@
+import Config
+
+config :pleroma, Pleroma.Web.Endpoint,
+  url: [host: "{{ pleroma_domain }}", scheme: "http", port: 80],
+  http: [ip: {0, 0, 0, 0}, port: 4000]
+
+config :pleroma, :instance,
+  name: "{{ instance_name }}",
+  email: "{{ admin_email }}",
+  notify_email: "{{ notify_email }}",
+  limit: 5000,
+  registrations_open: true,
+  federating: true,
+  healthcheck: true
+
+config :pleroma, :media_proxy,
+  enabled: false,
+  redirect_on_failure: true,
+  base_url: "https://cache.domain.tld"
+
+config :pleroma, Pleroma.Repo,
+  adapter: Ecto.Adapters.Postgres,
+  username: "{{ db_user }}",
+  password: "{{ db_password }}",
+  database: "{{ db_name }}",
+  hostname: "{{ db_host }}",
+  pool_size: 10
+
+# Configure web push notifications
+config :web_push_encryption, :vapid_details, subject: "mailto:#{{ notify_email }}"
+
+config :pleroma, :database, rum_enabled: false
+config :pleroma, :instance, static_dir: "/var/lib/pleroma/static"
+config :pleroma, Pleroma.Uploaders.Local, uploads: "/var/lib/pleroma/uploads"
+
+# We can't store the secrets in this file, since this is baked into the docker image
+if not File.exists?("/var/lib/pleroma/secret.exs") do
+  secret = :crypto.strong_rand_bytes(64) |> Base.encode64() |> binary_part(0, 64)
+  signing_salt = :crypto.strong_rand_bytes(8) |> Base.encode64() |> binary_part(0, 8)
+  {web_push_public_key, web_push_private_key} = :crypto.generate_key(:ecdh, :prime256v1)
+
+  secret_file =
+    EEx.eval_string(
+      """
+      import Config
+
+      config :pleroma, Pleroma.Web.Endpoint,
+        secret_key_base: "<%= secret %>",
+        signing_salt: "<%= signing_salt %>"
+
+      config :web_push_encryption, :vapid_details,
+        public_key: "<%= web_push_public_key %>",
+        private_key: "<%= web_push_private_key %>"
+      """,
+      secret: secret,
+      signing_salt: signing_salt,
+      web_push_public_key: Base.url_encode64(web_push_public_key, padding: false),
+      web_push_private_key: Base.url_encode64(web_push_private_key, padding: false)
+    )
+
+  File.write("/var/lib/pleroma/secret.exs", secret_file)
+end
+
+import_config("/var/lib/pleroma/secret.exs")
+
+# For additional user config
+if File.exists?("/var/lib/pleroma/config.exs"),
+  do: import_config("/var/lib/pleroma/config.exs"),
+  else:
+    File.write("/var/lib/pleroma/config.exs", """
+    import Config
+
+    # For additional configuration outside of environmental variables
+    """)