FROM jenkins/jenkins:alpine

# Skip initial setup
ENV JAVA_OPTS -Djenkins.install.runSetupWizard=false

#Pre-install plugins
COPY plugins.txt /usr/share/jenkins/plugins.txt
RUN /usr/local/bin/install-plugins.sh < /usr/share/jenkins/plugins.txt

# setup docker, docker-compose, terraform, ansible, jq
USER root
RUN apk add \
  docker \
  jq \
  ansible \
  python-dev \
  libffi-dev \
  openssl-dev \
  gcc \
  libc-dev \
  make \
  py-pip &&\
 pip install \
  docker-compose \
  awscli &&\
 wget https://releases.hashicorp.com/terraform/0.12.24/terraform_0.12.24_linux_amd64.zip &&\
 unzip terraform_0.12.24_linux_amd64.zip &&\
 mv terraform /usr/local/bin
 
USER jenkins

docker build -t kyivtank/jenkins .

instance_type = "t2.micro"
keyname = "aws2020-key"

variable "instance_type" {
}

variable "keyname" {
}

terraform {
  backend "s3" {
    bucket = "kyivtank-state"
    key    = "terraform/terraform.tfstate"
    region = "eu-central-1"
  }
}

provider "aws" {
}

data "aws_ami" "ubuntu" {
    most_recent = true

    filter {
        name   = "name"
        values = ["ubuntu/images/hvm-ssd/ubuntu-focal-20.04-amd64-server-*"]
    }

    filter {
        name   = "virtualization-type"
        values = ["hvm"]
    }

    owners = ["099720109477"] # Canonical
}

resource "aws_instance" "web" {
    ami           = data.aws_ami.ubuntu.id
    instance_type   = var.instance_type
    key_name        = var.keyname
    vpc_security_group_ids = [aws_security_group.sg_allow_ssh_web.id]
    associate_public_ip_address = true
    tags = {
      Name = "Wordpress"
    }
}

resource "aws_security_group" "sg_allow_ssh_web" {
  name        = "allow_ssh_web"
  description = "Allow SSH and Web inbound traffic"

  ingress {
    from_port   = 22
    to_port     = 22
    protocol    = "tcp"
    cidr_blocks = ["0.0.0.0/0"]
  }

  ingress {
    from_port   = 80
    to_port     = 80
    protocol    = "tcp"
    cidr_blocks = ["0.0.0.0/0"]
  }

  ingress {
    from_port   = 443
    to_port     = 443
    protocol    = "tcp"
    cidr_blocks = ["0.0.0.0/0"]
  }

  egress {
    from_port       = 0
    to_port         = 0
    protocol        = "-1"
    cidr_blocks     = ["0.0.0.0/0"]
  }
}

output "PUBLIC_IP" {
  value = aws_instance.web.public_ip
}
output "INSTANCE_ID" {
  value = aws_instance.web.id
}

terraform init
terraform apply
terraform destroy

#docker run -d -p 8080:8080 kyivtank/jenkins
docker run -d -p 8080:8080 -p 50000:50000 -v /docker/var/jenkins_home:/var/jenkins_home --restart=always kyivtank/jenkins

pipeline {
    agent any
       triggers {
        pollSCM "* * * * *"
       }
    environment {
        AWS_ACCESS_KEY_ID     = credentials('jenkins-aws-secret-key-id')
        AWS_SECRET_ACCESS_KEY = credentials('jenkins-aws-secret-access-key')
        AWS_DEFAULT_REGION = 'eu-central-1'
        AWS_DEFAULT_OUTPUT = 'table'
        GODADDY_DOMAIN = 'socioniks.club'
        GODADDY_API_KEY = credentials ('jenkins-godaddy-key')
        GODADDY_API_SECRET = credentials('jenkins-godaddy-secret')
        ANSIBLE_HOST_KEY_CHECKING = 'false'
        ANSIBLE_FORCE_COLOR = 'true'
    }
    stages {
        stage('Terraform') {
            steps {
                echo '=== AWS EC2 ==='
                dir("${env.WORKSPACE}/terraform") {
                 wrap([$class: 'AnsiColorBuildWrapper', 'colorMapName': 'xterm']) {
                  sh "terraform init"
                  sh "terraform apply -auto-approve"
                 }
                 sh 'aws ec2 wait instance-running --instance-ids `terraform output INSTANCE_ID`'
                 sh 'terraform output PUBLIC_IP > terraform.ip'
                }
            }
        }
        stage('GoDaddy') {
            steps {
                echo '=== DNS A record update ==='
                wrap([$class: 'AnsiColorBuildWrapper', 'colorMapName': 'xterm']) {
                 sh 'scripts/update_godaddy_dns.sh'
                }
            }
        }
        stage('Ansible') {
            steps {
                echo '=== Try ssh ==='
                wrap([$class: 'AnsiColorBuildWrapper', 'colorMapName': 'xterm']) {
                 withCredentials(bindings: [sshUserPrivateKey(credentialsId: 'aws2020', keyFileVariable: 'private_key')]){
                  sh "scripts/deploy_all.sh"
                 }
                }
            }
        }
    }
}

export GODADDY_DOMAIN=socioniks.club
certbot certonly --standalone --noninteractive --agree-tos --email noc@$GODADDY_DOMAIN -d $GODADDY_DOMAIN"

wp_apache: apache2
wp_admin_email: noc@socioniks.club
wp_site_url: socioniks.club

---
- name: restart apache
  service: name={{ wp_apache }} state=stopped

- name: Get Let's Encrypt Certificates
  shell: "certbot certonly --standalone --noninteractive --agree-tos --email {{ wp_admin_email }} -d {{ wp_site_url }}"
  args:
    creates: /etc/letsencrypt/live/{{ wp_site_url }}

- name: Schedule SSL certificate renewal
  cron:
    name: SSL Cert Renewal
    minute: 0
    hour: 20
    day: '*/10'
    user: root
    job: "/usr/bin/certbot renew"

export GODADDY_API_KEY=dKxxxxxxxxx
export GODADDY_API_SECRET=8Exxxxxxxx
export GODADDY_DOMAIN=socioniks.club
IP=`terraform output INSTANCE_ID`
echo "Changing IP to $IP for domain $GODADDY_DOMAIN"
curl --silent -X PUT "https://api.godaddy.com/v1/domains/$GODADDY_DOMAIN/records/A/@" -H "accept: application/json" -H "Content-Type: application/json" -H "Authorization: sso-key $GODADDY_API_KEY:$GODADDY_API_SECRET" -d "[ { \"data\": \"$IP\", \"port\": 1, \"priority\": 1, \"protocol\": \"string\", \"service\": \"string\", \"ttl\": 3600, \"weight\": 1 }]"

sudo wp user create liutyi noc@socioniks.club --first_name=Oleksandr --last_name=Liutyi --role=administrator --user_pass=password --allow-root --path=/var/www/html