feat(roles): add litestream

Author: skylenet

Diff for: README.md

@@ -39,6 +39,7 @@ A collection of reusable ansible components used by the EthPandaOps team.
 - [docker_nginx_proxy](roles/docker_nginx_proxy)
 - [bootstrap](roles/bootstrap)
 - [oh_my_zsh](roles/oh_my_zsh)
+- [litestream](roles/litestream)
 
 ## Usage
 

Diff for: roles/litestream/README.md

@@ -0,0 +1,38 @@
+# ethpandaops.general.litestream
+
+This role will run [litestream](https://github.com/benbjohnson/litestream) within a docker container.
+
+## Requirements
+
+You'll need docker on the target system. Make sure to install it upfront.
+
+## Role Variables
+
+Default variables are defined in [defaults/main.yaml](defaults/main.yaml)
+
+## Dependencies
+
+You'll need docker to run this role. One way of installing docker could be via ansible galaxy with the following dependencies set within `requirements.yaml`:
+
+```yaml
+roles:
+- src: geerlingguy.docker
+  version: latest
+- src: geerlingguy.pip
+  version: latest
+```
+
+## Example Playbook
+
+Your playbook could look like this:
+
+```yaml
+- hosts: localhost
+  become: true
+  roles:
+  - role: geerlingguy.docker
+  - role: geerlingguy.pip
+    pip_install_packages:
+    - name: docker
+  - role: ethpandaops.general.litestream
+```

Diff for: roles/litestream/defaults/main.yaml

@@ -0,0 +1,30 @@
+litestream_user: "litestream"
+
+litestream_container_name: "litestream"
+litestream_container_image: "litestream/litestream"
+litestream_container_env:
+  LITESTREAM_ACCESS_KEY_ID: ""
+  LITESTREAM_SECRET_ACCESS_KEY: ""
+litestream_container_ports: []
+#  - "127.0.0.1:9090:9090" # metrics
+litestream_container_volumes:
+  - "{{ litestream_paths_config }}/litestream.yml:/etc/litestream.yml"
+  - "{{ litestream_paths_data }}:/data"
+
+litestream_container_stop_timeout: "120"
+litestream_container_networks: []
+
+litestream_paths_data: /data/path/to/your/sqlite_directory
+
+litestream_paths_config: /etc/litestream/
+
+litestream_container_command:
+  - 'replicate'
+
+# https://litestream.io/reference/config/
+litestream_config: |
+  addr: ":9090"
+  dbs:
+    - path: /data/db.sqlite
+      replicas:
+        - url: s3://mybkt.litestream.io/db1

Diff for: roles/litestream/handlers/main.yaml

@@ -0,0 +1,5 @@
+- name: Restart litestream container
+  community.docker.docker_container:
+    name: "{{ litestream_container_name }}"
+    state: started
+    restart: true

Diff for: roles/litestream/tasks/main.yaml

@@ -0,0 +1,43 @@
+- name: Add litestream user
+  ansible.builtin.user:
+    name: "{{ litestream_user }}"
+    shell: /bin/nologin
+
+- name: Get litestream uid
+  ansible.builtin.getent:
+    database: passwd
+    key: "{{ litestream_user }}"
+  register: litestream_user_getent
+
+- name: Create litestream dirs
+  ansible.builtin.file:
+    path: "{{ item }}"
+    state: directory
+    mode: '0777'
+    owner: "{{ litestream_user }}"
+    group: "{{ litestream_user }}"
+  loop:
+    - "{{ litestream_paths_config }}"
+
+- name: Create litestream config
+  ansible.builtin.copy:
+    content: "{{ litestream_config }}"
+    dest: "{{ litestream_paths_config }}/litestream.yml"
+    owner: "{{ litestream_user }}"
+    group: "{{ litestream_user }}"
+    mode: '0664'
+  notify: Restart litestream container
+
+- name: Run litestream container
+  community.docker.docker_container:
+    name: "{{ litestream_container_name }}"
+    image: "{{ litestream_container_image }}"
+    user: "{{ litestream_user_getent.ansible_facts.getent_passwd[litestream_user][1] }}"
+    state: started
+    restart_policy: always
+    stop_timeout: "{{ litestream_container_stop_timeout }}"
+    ports: "{{ litestream_container_ports }}"
+    volumes: "{{ litestream_container_volumes }}"
+    env: "{{ litestream_container_env }}"
+    networks: "{{ litestream_container_networks }}"
+    command: "{{ litestream_container_command }}"