playbooks/apollo: Split the security tracker role into multiple lines and add...

playbooks/apollo: Split the security tracker role into multiple lines and add the nginx configuration
roles/security_tracker: Plug in the maintenance mode

playbooks/apollo.yml

@@ -44,7 +44,11 @@
     - { role: php-fpm, php_extensions: ['bcmath', 'curl', 'gd', 'iconv', 'intl', 'mysqli', 'pdo_pgsql', 'pgsql', 'sockets', 'zip'], zend_extensions: ['opcache'], tags: ["php-fpm"] }
     - { role: memcached, tags: ['memcached'] }
     - { role: archweb, tags: ["archweb"] }
-    - { role: security_tracker, security_tracker_domain: "security.archlinux.org", security_tracker_dir: "/srv/http/security-tracker", tags: ["security_tracker"] }
+    - role: security_tracker
+      security_tracker_domain: "security.archlinux.org"
+      security_tracker_nginx_conf: '/etc/nginx/nginx.d/security-tracker.conf'
+      security_tracker_dir: "/srv/http/security-tracker"
+      tags: ["security_tracker"]
     - { role: flyspray, tags: ["flyspray"] }
     - { role: mailman, mailman_domain: "lists.archlinux.org", tags: ["mailman"] }
     - { role: patchwork, tags: ["patchwork"] }

roles/security_tracker/tasks/main.yml

 ---
+- name: run maintenance mode
+  include_role:
+    name: maintenance
+  vars:
+    service_name: "security tracker"
+    service_domain: "{{ security_tracker_domain }}"
+    service_alternate_domains: []
+    service_nginx_conf: "{{ security_tracker_nginx_conf }}"
+  when: maintenance is defined
 
 - name: install packages
   pacman:
@@ -41,9 +50,10 @@
   file: state=directory owner=security group=security path="{{ security_tracker_dir }}"
 
 - name: set up nginx
-  template: src=nginx.d.conf.j2 dest=/etc/nginx/nginx.d/security-tracker.conf owner=root group=root mode=644
+  template: src=nginx.d.conf.j2 dest="{{ security_tracker_nginx_conf }}" owner=root group=root mode=644
   notify:
     - reload nginx
+  when: maintenance is not defined
   tags: ['nginx']
 
 - name: make nginx log dir