Live host deployment¶
Creating a host file¶
You'll need to tell Ansible how to connect to your host. There are multiple ways to do this. The easiest for our purposes is to create a manifest file.
Create a file with a name like
that follows the pattern:
plone.com ansible_ssh_user=stevem ansible_ssh_host=192.168.1.50 ansible_ssh_port=5555
You may leave off the
setting if the hostname is real. However, when doing early
provisioning, it's often not available.
is only required if you want to use a non-standard ssh
should be the login id on the remote machine. That user
must have sudo rights.
Running your playbook¶
ansible-playbook --ask-sudo-pass -i myhost.cfg playbook.yml
option instructs Ansible to ask for your user password
when it uses sudo for provisioning. It's not required if
the remote user has password-less sudo rights.
Using tags for quick, partial updates.
The following tags are set up in playbook.yml.
When you use one of these tags while running your playbook, only the bare minimum setup and the module named will be updated.
Apply a tag using the --tags option. Example: --tags="nginx"
The main playbook,
playbook.yml, does not configure your firewall.
A separate playbook,
sets up a basic firewall that closes all ports except ssh,
http and https. The munin-node port is also opened to your
To reach other ports, use SSH tunnelling. In the default setup, you will have to use a tunnel and connect to the load-balancer port in order to get access to the Zope root. (The default proxy-cache setup blocks http basic authentication.)
You must set the
variable to the desired password for the Zope
user. Use this id only for initial Plone login, then
create users within Plone.
Hotfixes, Updates, Upgrades¶
If you are administering an Internet-accessible Plone install, you must subscribe to the Plone-Announce mailing list to receive vital security and version update announcements. Expect to apply periodic hotfixes to maintain your site.
This is the minimum responsibility of a site administrator. Ideally you should also participate in the Plone community and read other Plone news.