Jumpstart your DevOps Journey

generic_server "web01" {
  hostname        = "web01.example.invalid"
  description     = "Front office box"
  os              = "win"
  connect_timeout = 60
  proxy           = generic_server.bastion
}

moved {
  to    = generic_server.web01
  names = ["oldweb", "web-01"]
}

removed {
  at = generic_server.decommissioned
}

pipeline "deploy-foo" {
  name = "Deploy Foo"
  when = "promote"

  step "PRE" {
    sh "Restart app" {
      host     = generic_server.alpha
      run      = "systemctl restart app"
      on_error = "continue"
    }
  }

  if "is prod" {
    cond = "bl eq 'PROD'"

    log "say it" {
      msg   = "hello"
      level = "warn"
    }
  }

  else {
    perl "run perl" {
      code = <<-EOT
        my $x = 1;
        return $x;
      EOT
    }
  }
}

project "foo" {
  variables = {
    "*"   = {
      db_host   = "foo-db"
      db_pass   = null
      "foo.bar" = "baz"
    }
    PROD  = {
      app_server = generic_server.foo-server
      _natures   = {
        "nature.java" = { heap = "2g" }
      }
    }
    COMUN = {}
  }
}

role "deploy-manager" {
  name        = "Deploy Manager"
  description = "Runs deployments"
  mailbox     = "deploys@example.invalid"

  grant {
    action = "action.job.create"
    bounds {
      bl = "PROD"
    }
  }

  grant {
    action = "action.job.delete"
    deny   = true
  }
}

user "alice" {
  email    = "alice@example.invalid"
  realname = "Alice Foo"
  groups   = [group.developers]
}

user "bob" {
  grant {
    id_role = role.deploy-manager
    type    = "project"
    mid     = [project.bar, project.baz]
  }
}