stouts / stouts.sentry

Ansible role which manage Sentry

Stouts.sentry

Ansible role which install and setup Sentry

Recomended

• Stouts.nginx
• Stouts.docker
• Stouts.postfix

Variables

The role variables and default values.

sentry_enabled: true                                        # Enable the role
sentry_version: 8.22
sentry_secret_key: replaceme                                # Setup secret key for Sentry installation

sentry_home: /opt/sentry
sentry_hostname: "{{inventory_hostname}}"
sentry_single_organization: true

sentry_plugins: []                                          # Setup plugins
sentry_config_additional: []                                # List of additional options

# Postgresql
sentry_postgres_host: postgres
sentry_postgres_port: ""
sentry_db_name: postgres
sentry_db_user: postgres
sentry_db_password: postgres
sentry_db_options: {autocommit: 1}

# Redis
sentry_redis_host: redis
sentry_redis_password: ""
sentry_redis_db: 0
sentry_redis_port: 6379

# Memcached
sentry_memcached_host: memcached
sentry_memcached_port: 11211

# AMPQ
sentry_broker_url: "redis://{{sentry_redis_host}}:{{sentry_redis_port}}"

# Filestorage
sentry_filestore_location: "{{sentry_home}}/files"
sentry_filestore_backend: "filesystem"
sentry_filestore_access_key: ""
sentry_filestore_secret_key: ""
sentry_filestore_bucket_name: ""


# SSL
sentry_use_ssl: false
sentry_nginx: true
sentry_nginx_port: 80
sentry_nginx_ssl_redirect: "{{sentry_use_ssl}}"                 # 80 -> 443
sentry_nginx_ssl_certificate:                                   # SSL certificate file - also turns on HTTPS on Nginx
sentry_nginx_ssl_certificate_key:                               # Key file for SSL cert
sentry_nginx_timeout: 15s
sentry_nginx_body_size: 150k
sentry_nginx_access_log: /var/log/sentry-access.log
sentry_nginx_error_log: /var/log/sentry-error.log

# Emails
sentry_mail_backend: smtp
sentry_mail_enable_replies: false
sentry_mail_from: "sentry@{{sentry_hostname}}"         # From email
sentry_mail_host: localhost
sentry_mail_reply_hostname: ""
sentry_mail_password: ""
sentry_mail_port: 25
sentry_mail_use_tls: false
sentry_mail_username: ""
sentry_mail_mailgun_api_key: ""

# Social auth settings
sentry_twitter_consumer_key: ""
sentry_twitter_consumer_secret: ""
sentry_facebook_app_id: ""
sentry_facebook_api_secret: ""
sentry_google_oauth2_client_id: ""
sentry_google_oauth2_client_secret: ""
sentry_github_app_id: ""
sentry_github_api_secret: ""
sentry_trello_api_key: ""
sentry_trello_api_secret: ""
sentry_bitbucket_consumer_key: ""
sentry_bitbucket_consumer_secret: ""

# Web
sentry_web_host: 127.0.0.1
sentry_web_port: 9000
sentry_web_options: {}

# Setup docker containers
sentry_redis: true
sentry_postgres: true
sentry_memcached: true

# Initial users
sentry_admins:
  - email: "admin@{{sentry_hostname}}"
    password: "admin"

sentry_auth_register: false
sentry_beacon: true

Usage

Add Stouts.sentry to your roles and set vars in your playbook file.

Example:

- hosts: all
  sudo: true

  roles:
  - Stouts.python
  - Stouts.docker
  - Stouts.nginx
  - Stouts.sentry

License

Licensed under the MIT License. See the LICENSE file for details.

Feedback, bug-reports, requests, ...

Are welcome!

If you wish to express your appreciation for the role, you are welcome to send a postcard to:

Kirill Klenov
pos. Severny 8-3
MO, Istra, 143500
Russia

stouts.sentry's Issues

sentry.runner.importer.ConfigurationError: Exception: Error: REDIS_PORT_6379_TCP_ADDR (or SENTRY_REDIS_HOST) is undefined, did you forget to `--link` a redis container?

@

Stouts.docker not found

Hey, Stouts.docker as indicated on the readme is not in ansible-galaxy so the import fails and must be fetched from git - and the link on the readme to it actually takes you to Stouts.python.

Outdated version (1.3.1) in ansible galaxy

Ansible galaxy seems to install outdated version 1.3.1, is it possible to update it?

Cannot find role Ansibles.build-essential

I get this error when using this site.yml file

- hosts: all
  roles:
      - Stouts.foundation
      - Stouts.python
      - Stouts.postfix
      - Stouts.sentry

  vars:
      postfix_smtp_sasl_user: "[email protected]"
      postfix_smtp_sasl_password: "password"

ERROR: cannot find role in /home/javaguirre/code/ansible/provision/sentry/roles/Ansibles.build-essential or /home/javaguirre/code/ansible/provision/sentry/Ansibles.build-essential or /home/javaguirre/code/ansible/provision/sentry/ansible/vendor/roles/Ansibles.build-essential
Ansible failed to complete successfully. Any error output should be
visible above. Please fix these errors and try again.

Long not updated galaxy version

1.8.0 | 3 years ago

nginx does not support proxying

In a scenario with a load-balancer in front of a sentry instance, where the LB sends an X-Forwarded-Proto, but that protocol differs from the one used between LB and nginx, Sentry can sporadically redirect using a wrong protocol as per getsentry/sentry#429, because of this proxy_set_header directive

The solution would be to use nginx realip module and provide a configurable field to specify trusted proxies list.

Services not found

Not sure whats causing it as the scripts are in the place
TASK [Stouts.sentry : Ensure Sentry is started] ********************************
failed: [sentry] => (item=sentry-web) => {"failed": true, "item": "sentry-web", "msg": "systemd could not find the requested service "'sentry-web'": "}
failed: [sentry] => (item=sentry-worker) => {"failed": true, "item": "sentry-worker", "msg": "systemd could not find the requested service "'sentry-worker'": "}
Running on debian 8.3

upstream prematurely closed connection while reading response header from upstream

Make v1.6.4 available on Ansible Galaxy

The latest version on Ansible Galaxy is still v1.6.1

Could we please get v1.6.4? In particular it is for the change in @1e548335515ea608cc0df50ccca640547015c37e#diff-36ca9d0f2cd11e460433409381b7f923

Without it, I can't use any sentry more recent than 7.4.3 (and I need 7.5 so that I can set up API keys in the Organisation section!)

Not debian compliant

Hey!

The requirements are not debian compliant. At least the ppa for the redis etc.