pyinfra-nginx/pyinfra_nginx/nginx.py

"""
nginx deploy
"""
from io import StringIO

from pyinfra import host
from pyinfra.api.deploy import deploy
from pyinfra.operations import files, server, apt, systemd
from pyinfra.facts.deb import DebPackages
from pyinfra_acmetool import deploy_acmetool

def _install_nginx():
    if not host.get_fact(DebPackages):
        raise DeployError(("Can't deploy prerequisites on non-deb system"))

    apt.packages(
        name = "Install nginx-extras",
        packages = ["nginx-extras"],
        _sudo = True,
    )

def add_nginx_domain(domain: str, config_path: str, enabled=True):
    """Let a domain be handled by nginx, create a Let's Encrypt certificate for it, and deploy the config.

    :param domain: the domain of the website
    :param config_path: the local path to the nginx config file
    :param enabled: whether the site should be enabled at /etc/nginx/sites-enabled
    """
    default_config_link = files.link(
        path="/etc/nginx/sites-enabled/default", present=False
    )
    need_restart = default_config_link.changed

    deploy_acmetool(nginx_hook=True, domains=[domain])

    config = files.put(
        src=config_path,
        dest=f"/etc/nginx/sites-available/{domain}",
        user="root",
        group="root",
        mode="644",
    )

    if enabled:
        config_link = files.link(
            path=f"/etc/nginx/sites-enabled/{domain}",
            target=f"/etc/nginx/sites-available/{domain}",
            user="root",
            group="root",
            present=enabled,
        )

    if config.changed or config_link.changed:
        need_restart = True

    systemd.service(
        name="NGINX should be enabled and running",
        service="nginx.service",
        running=True,
        enabled=True,
        restarted=need_restart,
    )

@deploy("Deploy nginx")
def deploy_nginx():
    _install_nginx()