🔥: remove peertube runner
This commit is contained in:
@@ -83,9 +83,6 @@ peertubeservers:
|
||||
hosts:
|
||||
pt1.dmz.mateu.be:
|
||||
|
||||
peertuberunners:
|
||||
hosts:
|
||||
|
||||
phpservers:
|
||||
hosts:
|
||||
web[1:3].dmz.mateu.be:
|
||||
|
@@ -1,9 +0,0 @@
|
||||
---
|
||||
|
||||
- name: Deploy peertube runner
|
||||
hosts: peertuberunners
|
||||
gather_facts: true
|
||||
diff: true
|
||||
roles:
|
||||
- nodejs
|
||||
- peertube_runner
|
@@ -1,7 +0,0 @@
|
||||
---
|
||||
|
||||
- name: Restart PeerTube Runner
|
||||
ansible.builtin.systemd_service:
|
||||
name: prunner
|
||||
state: restarted
|
||||
daemon_reload: true
|
@@ -1,55 +0,0 @@
|
||||
---
|
||||
|
||||
- name: Install prerequisites
|
||||
ansible.builtin.package:
|
||||
name: ffmpeg
|
||||
state: present
|
||||
update_cache: true
|
||||
|
||||
- name: Install peertube-runner via npm
|
||||
community.general.npm:
|
||||
name: "@peertube/peertube-runner"
|
||||
state: latest
|
||||
global: true
|
||||
|
||||
- name: Create PeerTube Runner user
|
||||
ansible.builtin.user:
|
||||
comment: PeerTube Runner
|
||||
home: "{{ peertube_runner_homedir }}"
|
||||
name: prunner
|
||||
password: '!'
|
||||
shell: /bin/bash
|
||||
state: present
|
||||
|
||||
- name: Create PeerTube Runner dir struct
|
||||
ansible.builtin.file:
|
||||
path: "{{ peertube_runner_configdir }}"
|
||||
owner: prunner
|
||||
group: prunner
|
||||
mode: "0o750"
|
||||
state: directory
|
||||
|
||||
- name: Create PeerTube Runner config file
|
||||
ansible.builtin.template:
|
||||
src: config.toml.j2
|
||||
dest: "{{ peertube_runner_configdir }}config.toml"
|
||||
owner: prunner
|
||||
group: prunner
|
||||
mode: "0o640"
|
||||
notify: Restart PeerTube Runner
|
||||
|
||||
- name: Put systemd PeerTube Runner service
|
||||
ansible.builtin.template:
|
||||
src: prunner.service.j2
|
||||
dest: /etc/systemd/system/prunner.service
|
||||
owner: root
|
||||
group: root
|
||||
mode: "0o644"
|
||||
notify: Restart PeerTube Runner
|
||||
|
||||
- name: Start PeerTube Runner service
|
||||
ansible.builtin.systemd_service:
|
||||
name: prunner
|
||||
state: started
|
||||
enabled: true
|
||||
daemon_reload: true
|
@@ -1,15 +0,0 @@
|
||||
[jobs]
|
||||
concurrency = 2
|
||||
|
||||
[ffmpeg]
|
||||
threads = 0
|
||||
nice = 20
|
||||
|
||||
[transcription]
|
||||
engine = "whisper-ctranslate2"
|
||||
model = "small"
|
||||
|
||||
[[registeredInstances]]
|
||||
url = "https://p.nintendojo.fr"
|
||||
runnerToken = "{{ peertube_runner_token }}"
|
||||
runnerName = "pt-runner1"
|
@@ -1,32 +0,0 @@
|
||||
[Unit]
|
||||
Description=PeerTube runner daemon
|
||||
After=network.target
|
||||
|
||||
[Service]
|
||||
Type=simple
|
||||
Environment=NODE_ENV=production
|
||||
User=prunner
|
||||
Group=prunner
|
||||
ExecStart=peertube-runner server
|
||||
WorkingDirectory={{ peertube_runner_homedir }}
|
||||
SyslogIdentifier=prunner
|
||||
Restart=always
|
||||
|
||||
; Some security directives.
|
||||
; Mount /usr, /boot, and /etc as read-only for processes invoked by this service.
|
||||
ProtectSystem=full
|
||||
; Sets up a new /dev mount for the process and only adds API pseudo devices
|
||||
; like /dev/null, /dev/zero or /dev/random but not physical devices. Disabled
|
||||
; by default because it may not work on devices like the Raspberry Pi.
|
||||
PrivateDevices=false
|
||||
; Ensures that the service process and all its children can never gain new
|
||||
; privileges through execve().
|
||||
NoNewPrivileges=true
|
||||
; This makes /home, /root, and /run/user inaccessible and empty for processes invoked
|
||||
; by this unit. Make sure that you do not depend on data inside these folders.
|
||||
ProtectHome=true
|
||||
; Drops the sys admin capability from the daemon.
|
||||
CapabilityBoundingSet=~CAP_SYS_ADMIN
|
||||
|
||||
[Install]
|
||||
WantedBy=multi-user.target
|
@@ -1,4 +0,0 @@
|
||||
---
|
||||
|
||||
peertube_runner_homedir: /srv/prunner/
|
||||
peertube_runner_configdir: "{{ peertube_runner_homedir }}.config/peertube-runner-nodejs/default/"
|
Reference in New Issue
Block a user