From 3e27850c2de440eb4a36ee9227b7ce0bb8cc85a8 Mon Sep 17 00:00:00 2001
From: Sheppy <sheppy@atlantishq.de>
Date: Mon, 5 Feb 2024 14:29:52 +0000
Subject: [PATCH] add: atlantis webchecks + oidc

---
 group_vars/all.yaml                           | 11 +++++
 roles/docker-deployments/tasks/main.yaml      |  7 ++++
 .../templates/atlantis-web-check.yaml         | 42 +++++++++++++++++++
 vars/services.yaml                            |  2 +
 4 files changed, 62 insertions(+)
 create mode 100644 roles/docker-deployments/templates/atlantis-web-check.yaml

diff --git a/group_vars/all.yaml b/group_vars/all.yaml
index 59a6b7b..3765a6e 100644
--- a/group_vars/all.yaml
+++ b/group_vars/all.yaml
@@ -271,3 +271,14 @@ keycloak_clients:
         keycloak_id: "00000000-0000-0000-0000-000000000016"
         groups:
         master_address: "https://money-balancer.atlantishq.de"
+
+    atlantis-web-check:
+        party_secret: "CHISTORY_PURGED_SECRET"
+        client_id: z_web_check
+        client_secret: "HISTORY_PURGED_SECRET"
+        redirect_uris:
+            - "https://smartchecks.atlantishq.de/*"
+        description: "SMART Web-Checks"
+        keycloak_id: "00000000-0000-0000-0000-000000000017"
+        groups:
+        master_address: "https://smartchecks.atlantishq.de"
diff --git a/roles/docker-deployments/tasks/main.yaml b/roles/docker-deployments/tasks/main.yaml
index f7c354c..987b26f 100644
--- a/roles/docker-deployments/tasks/main.yaml
+++ b/roles/docker-deployments/tasks/main.yaml
@@ -56,6 +56,7 @@
     - soundlib-interface
     - python-flask-picture-factory
     - money-balancer
+    - atlantis-web-check
 
 - name: Copy AtlantisHub config
   copy:
@@ -103,6 +104,7 @@
     - soundlib-interface
     - python-flask-picture-factory
     - money-balancer
+    - atlantis-web-check
 
 - name: Copy compose templates
   template:
@@ -124,6 +126,7 @@
     - soundlib-interface
     - python-flask-picture-factory
     - money-balancer
+    - atlantis-web-check
 
 - name: Log into private registry
   docker_login:
@@ -153,6 +156,7 @@
     - soundlib-interface
     - python-flask-picture-factory
     - money-balancer
+    - atlantis-web-check
 
 - name: OAuth2Proxy directories
   file:
@@ -169,6 +173,7 @@
     - python-flask-picture-factory
     - reactive-resume
     - money-balancer
+    - atlantis-web-check
 
 - name: include services ports
   include_vars: services.yaml
@@ -187,6 +192,7 @@
     - python-flask-picture-factory
     - reactive-resume
     - money-balancer
+    - atlantis-web-check
 
 - name: Deploy OAuth2Proxy
   community.docker.docker_compose:
@@ -202,3 +208,4 @@
     - python-flask-picture-factory
     - reactive-resume
     - money-balancer
+    - atlantis-web-check
diff --git a/roles/docker-deployments/templates/atlantis-web-check.yaml b/roles/docker-deployments/templates/atlantis-web-check.yaml
new file mode 100644
index 0000000..f26ec08
--- /dev/null
+++ b/roles/docker-deployments/templates/atlantis-web-check.yaml
@@ -0,0 +1,42 @@
+version: "3.3"
+services:
+    master:
+        image: harbor-registry.atlantishq.de/atlantishq/atlantis-webcheck-master:latest
+        restart: always
+        ports:
+            - {{ services[item].port + 1000 }}:5000
+        depends_on:
+            - queue
+        volumes:
+            - /data/atlantis-web-check/instance/:/app/instance/
+        environment:
+            - QUEUE_HOST=queue
+            - QUEUE_NAME=scheduled
+            - DISPATCH_SERVER={{ event_dispatcher_address }}
+            - DISPATCH_AUTH_USER={{ event_dispatcher_user }}
+            - DISPATCH_AUTH_PASSWORD={{ event_dispatcher_pass }}
+    scheduler:
+        image: harbor-registry.atlantishq.de/atlantishq/atlantis-webcheck-scheduler:latest
+        restart: always
+        depends_on:
+            - master
+        environment:
+            - MASTER_HOST=master:5000
+            - SLEEP_TIME=1
+    queue:
+        image: rabbitmq
+        restart: always
+        ports:
+            - 5672:5672
+        environment:
+            - MASTER_HOST=master:5000
+            - SLEEP_TIME=5
+    worker:
+        image: harbor-registry.atlantishq.de/atlantishq/atlantis-webcheck-worker:latest
+        restart: always
+        depends_on:
+            - master
+        environment:
+            - MASTER_HOST=master:5000
+            - QUEUE_HOST=queue
+            - QUEUE_NAME=scheduled
diff --git a/vars/services.yaml b/vars/services.yaml
index 17abd13..33375fa 100644
--- a/vars/services.yaml
+++ b/vars/services.yaml
@@ -27,3 +27,5 @@ services:
         port: 5016
     money-balancer:
         port: 5017
+    atlantis-web-check:
+        port: 5018