Ansible

brew install ansible

Probably the best option is to installed Ubuntu on WSL (Windows Subsytem for Linux).

• Search for Windows features in the search box. And when the “Turn Windows features on or off ” appears, click on that.
• A window will open with a bunch of features. Scroll down and check the box of Windows Subsystem for the Linux option. And after that, click on the OK button.
• Open the Microsoft Store and search for Ubuntu to install the latest version.
• After the installation, you will see a launch button, use that to open the Ubuntu bash.
• On Ubuntu bash, it will ask you to set the username and password for the default user. You can also set the root account password from here by typing sudo passwd root

Now install ansible and press Y when ask for.

sudo apt-get update
sudo apt-get install software-properties-common
sudo apt-add-repository ppa:ansible/ansible
sudo apt-get update
sudo apt-get install ansible

git clone git@github.com:vertilux/ansible.git

Then cd into the ansible directory: $ cd ansible

VTX API is a set of programming code that enables data transmission between one software product and another, based on REST architecture.
It allows simple queries againts Vertilux Databases. Our API has predictable resource-oriented URLs, returns JSON-encoded responses, and uses standard HTTP response codes.

This playbook contains multiples roles to deploy new versions or ERP updates to production.

To avoid password authetication generate a public key and copy to the remote servers.
To create the SSH keys, type ssh-keygen -t rsa -C "your_email@example.com". This will create both id_rsa and id_rsa.pub files. Copy the generated public key to the remote host

cat ~/.ssh/id_rsa.pub | ssh user@remote_host 'cat >> .ssh/authorized_keys'

Additioanlly disable password requirement for sudo. Create a file in /etc/sudoers.d/deploy

deploy ALL=(ALL) NOPASSWD:ALL

A collections o simple playbooks to perform different tasks for the ERP Web Application.

Provision ERP is a collection of ansibles roles to make easy the setup of multiples environments. Every environemnt is a distribution center, this approach makes us use the same code for all distribution centers and easy to maintain.

A few of the many things you can do for your Windows hosts with Ansible.Windows include:

• Starting, stopping and managing services
• Pushing & executing custom PowerShell scripts
• Reboot multiples machines simultaneously

For a complete list of Ansible.Windows modules visit this link.

First, the control machine (where Ansible will be executing your Windows modules from) needs to run Linux. Second, Windows support has been evolving rapidly, so make sure to use the newest possible version of Ansible to get the latest features!

For the target hosts, you should be running at least Windows 7 SP1 or later or Windows Server 2008 SP1 or later.

Lastly, since Ansible connects to Windows machines and runs PowerShell scripts by using Windows Remote Management (WinRM) (as an alternative to SSH for Linux/Unix machines), make WinRM is activated.

Sometimes we get an error plaintext: the specified credentials were rejected by the server and the reason it’s not the credentials as I know they are correct. It must be some other authentication issue.

The problem is that it is sending credentials in plaintext over the unencrypted WinRM port 5985. The fix is a couple of WinRM configuration changes in the Windows servers. In an elevated command prompt type the following commands:

pywinrm dependencies aren’t shipped by default with Ansible, make sure you install the pywinrm library on the machine that Ansible is installed on. The simplest method is to run:

pip install pywinrm

• The Inside Playbook
• Ansible Documentation

The ansible-vault create command is used to create the encrypted file.

ansible-vault create vault.yml

This commland will ask for a password and then ask where to put your content.

$ANSIBLE_VAULT;1.1;AES256
32373330386330643061613237393466393363333031303965383063316338393261616134353233
6364623038303966323834396636646463613837373461380a303662373161393466326139383565
64396538393562343464666337633337353130306365666637373266393965633766366436623836
3430396234626533340a613637393563333131626665626535393462653139346563383062343535
6335

If the file is encrypted and changes are required, use the edit command.

ansible-vault create vault.yml

The ansible-vault decrypt command is used to decrypt the encrypted file.

ansible-vault decrypt vault.yml

Use the ansible-vault rekey command to reset the encrypted file password.

Other ansible-vault commands available are seen via:

ansible-vault -h

Dislpay list of options and arguments:

./acli -h

Help examples:

__     _______ ____ _____ ___ _    _   ___  __
\ \   / / ____|  _ \_   _|_ _| |  | | | \ \/ /
 \ \ / /|  _| | |_) || |  | || |  | | | |\  /
  \ V / | |___|  _ < | |  | || |__| |_| |/  \
   \_/  |_____|_| \_\|_| |___|_____\___//_/\_\

acli - Ansible CLI wrapper writen in bash.

acli [options] [arguments]

Instructions for Windows Playbooks
options:
-r, --reboot-host       Restart host of group of hosts.
-d, --disk-space        Display total disck size.
    If you know the host you can pass it as an argument.
    Or simply run it as: ./acli -d, this will promt the iventory.
-l, --list-hosts        List inventory hosts.
    If you know the host group you can pass it as an argument.
    Or run it as ./acli -l to list all available hosts.
-p, --ping              Ping windows servers
-s, --restart-sql       Restart SQL service.
    Make sure pass the required arguments: host name and service.

Instructions for QNAP NAS
options:
--del                   Delete old backups (older than 3 days).

Instructions for ERP Web Application
options: erp
-s, --restart-sidekiq   Restart sidekiq queue processing job.
-m, --maintenance       Set/Unset ERP to maintenance mode.
-p, --restart-passenger Restart Phusion Passenger application server.
-n, --restart-nginx     Restart Nginx web server.

We use QNAP as our main Network-attached storage (NAS).

Vertilux RESTful API is a Flask application that allows simple queries againts Vertilux Databases. Our API has predictable resource-oriented URLs, returns JSON-encoded responses, and uses standard HTTP response codes, right now it is only accesible withint our main servers.

Vertilux ERP (Enterprise Resource Planning) is a web base application developed to facilitate our customers, vendors and employees information flow between all business functions. Our ERP provides an integrated and continuously updated view of core business processes.