Added systemd service to run the explorer.

Author: samoht9277

.gitignore

@@ -16,3 +16,4 @@ config-files/*.last_processed_batch.json
 nonce_*.bin
 
 infra/ansible/playbooks/ini/**.ini
+infra/ansible/playbooks/files/**.pem

infra/ansible/playbooks/explorer.yaml

@@ -36,9 +36,23 @@
       ansible.builtin.git:
         repo: https://github.com/yetanotherco/aligned_layer
         dest: "/home/{{ ansible_user }}/repos/explorer/aligned_layer"
-        version: explorer-ssl
         update: yes
 
+    - name: Create .ssl directory
+      file:
+        path: /home/{{ ansible_user }}/.ssl/
+        state: directory
+
+    - name: Upload SSL key to server (infra/ansible/playbooks/files/key.pem)
+      copy:
+        src: key.pem
+        dest: /home/{{ ansible_user }}/.ssl/key.pem
+
+    - name: Upload SSL certificate to server (infra/ansible/playbooks/files/cert.pem)
+      copy:
+        src: cert.pem
+        dest: /home/{{ ansible_user }}/.ssl/cert.pem
+
   tasks:
     - name: Add environment file for Explorer
       template:
@@ -56,6 +70,9 @@
         DB_HOST: "{{ lookup('ini', 'DB_HOST file=ini/config-explorer.ini') }}"
         TRACKER_API_URL: "{{ lookup('ini', 'TRACKER_API_URL file=ini/config-explorer.ini') }}"
         SECRET_KEY_BASE: "{{ lookup('ini', 'SECRET_KEY_BASE file=ini/config-explorer.ini') }}"
+        KEYFILE_PATH: "{{ lookup('ini', 'KEYFILE_PATH file=ini/config-explorer.ini') }}"
+        CERTFILE_PATH: "{{ lookup('ini', 'CERTFILE_PATH file=ini/config-explorer.ini') }}"
+
 
     - name: Build the explorer release
       args:
@@ -82,4 +99,23 @@
       vars:
         ansible_ssh_user: "{{ admin_user }}"
 
-    # TODO: add systemd service
+    - name: Create .env for Explorer systemd service
+      shell: cat /home/{{ ansible_user }}/repos/explorer/aligned_layer/explorer/.env | sed 's/export //g' > /home/{{ ansible_user }}/config/.env.explorer
+
+    - name: Create systemd services directory
+      file:
+        path: "/home/{{ ansible_user }}/.config/systemd/user/"
+        state: directory
+
+    - name: Add service to systemd
+      template:
+        src: services/explorer.service.j2
+        dest: "/home/{{ ansible_user }}/.config/systemd/user/explorer.service"
+        force: no
+
+    - name: Start explorer service
+      systemd_service:
+        name: explorer
+        state: started
+        enabled: true
+        scope: user

infra/ansible/playbooks/ini/config-explorer.ini.example

@@ -10,3 +10,5 @@ DB_PASS=
 DB_HOST=
 TRACKER_API_URL=
 SECRET_KEY_BASE=
+KEYFILE_PATH=
+CERTFILE_PATH=

infra/ansible/playbooks/postgres.yaml

@@ -55,3 +55,4 @@
         DB_PASS: "{{ lookup('ini', 'DB_PASS', file=ini_file) }}"
         DB_NAME: "{{ lookup('ini', 'DB_NAME', file=ini_file) }}"
       ignore_errors: true
+      no_log: true

infra/ansible/playbooks/templates/explorer/explorer_env.j2

@@ -3,6 +3,7 @@ export ENVIRONMENT={{ ENVIRONMENT }}
 export ALIGNED_CONFIG_FILE={{ ALIGNED_CONFIG_FILE }}
 export PHX_HOST={{ PHX_HOST }}
 export ELIXIR_HOSTNAME={{ ELIXIR_HOSTNAME }}
+export PHX_SERVER=true
 
 # Database
 export DB_NAME={{ DB_NAME }}
@@ -13,3 +14,6 @@ export DB_HOST={{ DB_HOST }}
 # Tracker API
 export TRACKER_API_URL={{ TRACKER_API_URL }}
 export SECRET_KEY_BASE={{ SECRET_KEY_BASE }}
+
+export KEYFILE_PATH={{ KEYFILE_PATH }}
+export CERTFILE_PATH={{ CERTFILE_PATH }}

infra/ansible/playbooks/templates/services/explorer.service.j2

@@ -0,0 +1,16 @@
+[Unit]
+Description=Explorer
+After=network.target
+
+[Service]
+Type=simple
+WorkingDirectory=/home/{{ ansible_user }}/repos/explorer/aligned_layer/explorer
+EnvironmentFile=/home/{{ ansible_user }}/config/.env.explorer
+ExecStart=/home/{{ ansible_user }}/repos/explorer/aligned_layer/explorer/_build/prod/rel/explorer/bin/explorer start
+Restart=always
+RestartSec=1
+StartLimitBurst=100
+LimitNOFILE=100000
+
+[Install]
+WantedBy=multi-user.target