🔥: remove peertube runner
This commit is contained in:
@@ -83,9 +83,6 @@ peertubeservers:
|
|||||||
hosts:
|
hosts:
|
||||||
pt1.dmz.mateu.be:
|
pt1.dmz.mateu.be:
|
||||||
|
|
||||||
peertuberunners:
|
|
||||||
hosts:
|
|
||||||
|
|
||||||
phpservers:
|
phpservers:
|
||||||
hosts:
|
hosts:
|
||||||
web[1:3].dmz.mateu.be:
|
web[1:3].dmz.mateu.be:
|
||||||
|
@@ -1,9 +0,0 @@
|
|||||||
---
|
|
||||||
|
|
||||||
- name: Deploy peertube runner
|
|
||||||
hosts: peertuberunners
|
|
||||||
gather_facts: true
|
|
||||||
diff: true
|
|
||||||
roles:
|
|
||||||
- nodejs
|
|
||||||
- peertube_runner
|
|
@@ -1,7 +0,0 @@
|
|||||||
---
|
|
||||||
|
|
||||||
- name: Restart PeerTube Runner
|
|
||||||
ansible.builtin.systemd_service:
|
|
||||||
name: prunner
|
|
||||||
state: restarted
|
|
||||||
daemon_reload: true
|
|
@@ -1,55 +0,0 @@
|
|||||||
---
|
|
||||||
|
|
||||||
- name: Install prerequisites
|
|
||||||
ansible.builtin.package:
|
|
||||||
name: ffmpeg
|
|
||||||
state: present
|
|
||||||
update_cache: true
|
|
||||||
|
|
||||||
- name: Install peertube-runner via npm
|
|
||||||
community.general.npm:
|
|
||||||
name: "@peertube/peertube-runner"
|
|
||||||
state: latest
|
|
||||||
global: true
|
|
||||||
|
|
||||||
- name: Create PeerTube Runner user
|
|
||||||
ansible.builtin.user:
|
|
||||||
comment: PeerTube Runner
|
|
||||||
home: "{{ peertube_runner_homedir }}"
|
|
||||||
name: prunner
|
|
||||||
password: '!'
|
|
||||||
shell: /bin/bash
|
|
||||||
state: present
|
|
||||||
|
|
||||||
- name: Create PeerTube Runner dir struct
|
|
||||||
ansible.builtin.file:
|
|
||||||
path: "{{ peertube_runner_configdir }}"
|
|
||||||
owner: prunner
|
|
||||||
group: prunner
|
|
||||||
mode: "0o750"
|
|
||||||
state: directory
|
|
||||||
|
|
||||||
- name: Create PeerTube Runner config file
|
|
||||||
ansible.builtin.template:
|
|
||||||
src: config.toml.j2
|
|
||||||
dest: "{{ peertube_runner_configdir }}config.toml"
|
|
||||||
owner: prunner
|
|
||||||
group: prunner
|
|
||||||
mode: "0o640"
|
|
||||||
notify: Restart PeerTube Runner
|
|
||||||
|
|
||||||
- name: Put systemd PeerTube Runner service
|
|
||||||
ansible.builtin.template:
|
|
||||||
src: prunner.service.j2
|
|
||||||
dest: /etc/systemd/system/prunner.service
|
|
||||||
owner: root
|
|
||||||
group: root
|
|
||||||
mode: "0o644"
|
|
||||||
notify: Restart PeerTube Runner
|
|
||||||
|
|
||||||
- name: Start PeerTube Runner service
|
|
||||||
ansible.builtin.systemd_service:
|
|
||||||
name: prunner
|
|
||||||
state: started
|
|
||||||
enabled: true
|
|
||||||
daemon_reload: true
|
|
@@ -1,15 +0,0 @@
|
|||||||
[jobs]
|
|
||||||
concurrency = 2
|
|
||||||
|
|
||||||
[ffmpeg]
|
|
||||||
threads = 0
|
|
||||||
nice = 20
|
|
||||||
|
|
||||||
[transcription]
|
|
||||||
engine = "whisper-ctranslate2"
|
|
||||||
model = "small"
|
|
||||||
|
|
||||||
[[registeredInstances]]
|
|
||||||
url = "https://p.nintendojo.fr"
|
|
||||||
runnerToken = "{{ peertube_runner_token }}"
|
|
||||||
runnerName = "pt-runner1"
|
|
@@ -1,32 +0,0 @@
|
|||||||
[Unit]
|
|
||||||
Description=PeerTube runner daemon
|
|
||||||
After=network.target
|
|
||||||
|
|
||||||
[Service]
|
|
||||||
Type=simple
|
|
||||||
Environment=NODE_ENV=production
|
|
||||||
User=prunner
|
|
||||||
Group=prunner
|
|
||||||
ExecStart=peertube-runner server
|
|
||||||
WorkingDirectory={{ peertube_runner_homedir }}
|
|
||||||
SyslogIdentifier=prunner
|
|
||||||
Restart=always
|
|
||||||
|
|
||||||
; Some security directives.
|
|
||||||
; Mount /usr, /boot, and /etc as read-only for processes invoked by this service.
|
|
||||||
ProtectSystem=full
|
|
||||||
; Sets up a new /dev mount for the process and only adds API pseudo devices
|
|
||||||
; like /dev/null, /dev/zero or /dev/random but not physical devices. Disabled
|
|
||||||
; by default because it may not work on devices like the Raspberry Pi.
|
|
||||||
PrivateDevices=false
|
|
||||||
; Ensures that the service process and all its children can never gain new
|
|
||||||
; privileges through execve().
|
|
||||||
NoNewPrivileges=true
|
|
||||||
; This makes /home, /root, and /run/user inaccessible and empty for processes invoked
|
|
||||||
; by this unit. Make sure that you do not depend on data inside these folders.
|
|
||||||
ProtectHome=true
|
|
||||||
; Drops the sys admin capability from the daemon.
|
|
||||||
CapabilityBoundingSet=~CAP_SYS_ADMIN
|
|
||||||
|
|
||||||
[Install]
|
|
||||||
WantedBy=multi-user.target
|
|
@@ -1,4 +0,0 @@
|
|||||||
---
|
|
||||||
|
|
||||||
peertube_runner_homedir: /srv/prunner/
|
|
||||||
peertube_runner_configdir: "{{ peertube_runner_homedir }}.config/peertube-runner-nodejs/default/"
|
|
Reference in New Issue
Block a user