add Final Infrastructure Setup

infrastructure/ansible/roles/mft-restart-services/tasks/main.yml

@@ -0,0 +1,52 @@
+---
+
+- name: change configs dir permissions
+  ansible.builtin.raw: chmod +x /opt/tixel/config/*
+  ignore_errors: true
+  become: true
+
+- name: Make sure nginx is restarted
+  service: name=nginx state=restarted enabled=True
+
+- name: Add Debug option to tjm service file
+  ansible.builtin.lineinfile:
+    path: /usr/lib/systemd/system/transfer-job-manager.service
+    regexp: 'ExecStart=/usr/bin/java -Dloader.path=/opt/tixel/drivers/tjm -Dsun.misc.URLClassPath.disableJarChecking=true -Dfile.encoding=UTF-8 -Djava.security.egd=file:/dev/./urandom -Djavax.net.ssl.trustStore=/opt/tixel/config/trusted.p12 -Djavax.net.ssl.trustStorePassword=changeit -Djavax.net.ssl.keyStore=/opt/tixel/config/host.p12 -Djavax.net.ssl.keyStorePassword=changeit -Dlogging.config=/opt/tixel/config/tjm-logback-spring-prod.xml -jar /opt/tixel/transfer-job-manager/bin/transfer-job-manager.jar --spring.config.location=classpath:application.properties,file:/opt/tixel/config/transfer-job-manager.properties'
+    line: 'ExecStart=/usr/bin/java -Dloader.path=/opt/tixel/drivers/tjm -Dsun.misc.URLClassPath.disableJarChecking=true -Dfile.encoding=UTF-8 -Djava.security.egd=file:/dev/./urandom -Djavax.net.ssl.trustStore=/opt/tixel/config/trusted.p12 -Djavax.net.ssl.trustStorePassword=changeit -Djavax.net.ssl.keyStore=/opt/tixel/config/host.p12 -Djavax.net.ssl.keyStorePassword=changeit -Dlogging.config=/opt/tixel/config/tjm-logback-spring-prod.xml -agentlib:jdwp=transport=dt_socket,server=y,suspend=n,address=0.0.0.0:5005 -jar /opt/tixel/transfer-job-manager/bin/transfer-job-manager.jar --spring.config.location=classpath:application.properties,file:/opt/tixel/config/transfer-job-manager.properties'
+
+- name: Add Debug option to am service file
+  ansible.builtin.lineinfile:
+    path: /usr/lib/systemd/system/access-manager.service
+    regexp: 'ExecStart=/usr/bin/java -Dsun.misc.URLClassPath.disableJarChecking=true -Dfile.encoding=UTF-8 -Djava.security.egd=file:/dev/./urandom -Djavax.net.ssl.trustStore=/opt/tixel/config/trusted.p12 -Djavax.net.ssl.trustStorePassword=changeit -jar /opt/tixel/access-manager/bin/access-manager.jar --spring.config.location=classpath:application.properties,file:/opt/tixel/config/access-manager.properties'
+    line: 'ExecStart=/usr/bin/java -Dsun.misc.URLClassPath.disableJarChecking=true -Dfile.encoding=UTF-8 -Djava.security.egd=file:/dev/./urandom -Djavax.net.ssl.trustStore=/opt/tixel/config/trusted.p12 -Djavax.net.ssl.trustStorePassword=changeit -agentlib:jdwp=transport=dt_socket,server=y,suspend=n,address=0.0.0.0:5006 -jar /opt/tixel/access-manager/bin/access-manager.jar --spring.config.location=classpath:application.properties,file:/opt/tixel/config/access-manager.properties'
+
+- name: Add Debug option to tcc service file
+  ansible.builtin.lineinfile:
+    path: /usr/lib/systemd/system/tixel-control-center.service
+    regexp: 'ExecStart=/usr/bin/java -Dsun.misc.URLClassPath.disableJarChecking=true -Dfile.encoding=UTF-8 -Djava.security.egd=file:/dev/./urandom -Djavax.net.ssl.trustStore=/opt/tixel/config/trusted.p12 -Djavax.net.ssl.trustStorePassword=changeit -Djavax.net.ssl.keyStore=/opt/tixel/config/host.p12 -Djavax.net.ssl.keyStorePassword=changeit -jar /opt/tixel/tixel-control-center/bin/tixel-control-center.jar --spring.config.location=classpath:application.properties,file:/opt/tixel/config/tixel-control-center.properties'
+    line: 'ExecStart=/usr/bin/java -Dsun.misc.URLClassPath.disableJarChecking=true -Dfile.encoding=UTF-8 -Djava.security.egd=file:/dev/./urandom -Djavax.net.ssl.trustStore=/opt/tixel/config/trusted.p12 -Djavax.net.ssl.trustStorePassword=changeit -Djavax.net.ssl.keyStore=/opt/tixel/config/host.p12 -Djavax.net.ssl.keyStorePassword=changeit -agentlib:jdwp=transport=dt_socket,server=y,suspend=n,address=0.0.0.0:5007 -jar /opt/tixel/tixel-control-center/bin/tixel-control-center.jar --spring.config.location=classpath:application.properties,file:/opt/tixel/config/tixel-control-center.properties'
+
+- name: reload systemctl
+  command: systemctl daemon-reload
+
+- name: Installiere Java 17 (für TIXstream Runtime)
+  apt:
+    name: openjdk-21-jre-headless
+    state: present
+- name: Setze Java 17 als Standard (alternatives)
+  community.general.alternatives:
+    name: java
+    path: /usr/lib/jvm/java-21-openjdk-amd64/bin/java
+    link: /usr/bin/java
+
+- name: Restart MFT services
+  service: name={{ item.value.name }} state=restarted
+  with_dict: "{{ configs.mft_services }}"
+
+- name: Wait for tixel_control_center to be reachable
+  wait_for: host="{{ ansible_fqdn }}" port="{{ configs.mft_services.tixel_control_center.port }}" delay=1 timeout=200
+
+- name: Wait for transfer_job_manager to be reachable
+  wait_for: host="{{ ansible_fqdn }}" port="{{ configs.mft_services.transfer_job_manager.port }}" delay=1 timeout=200
+
+# vim:ft=ansible