On-Premise

# 온프레미스 서버 프로비저닝 Ansible Playbook
---
- name: On-Premise 웹 서버 구성
  hosts: webservers
  become: yes
  vars:
    app_name: myapp
    app_port: 8080

  tasks:
    - name: 시스템 패키지 업데이트
      apt:
        update_cache: yes
        upgrade: dist

    - name: Docker 설치
      apt:
        name:
          - docker.io
          - docker-compose
        state: present

    - name: Docker 서비스 시작
      systemd:
        name: docker
        state: started
        enabled: yes

    - name: 애플리케이션 디렉토리 생성
      file:
        path: /opt/{{ app_name }}
        state: directory
        mode: '0755'

    - name: Docker Compose 파일 배포
      template:
        src: docker-compose.yml.j2
        dest: /opt/{{ app_name }}/docker-compose.yml

    - name: 애플리케이션 실행
      docker_compose:
        project_src: /opt/{{ app_name }}
        state: present

    - name: 방화벽 포트 오픈
      ufw:
        rule: allow
        port: "{{ app_port }}"
        proto: tcp

# VMware vSphere 온프레미스 VM 프로비저닝
provider "vsphere" {
  user           = var.vsphere_user
  password       = var.vsphere_password
  vsphere_server = "vcenter.company.local"
  allow_unverified_ssl = true
}

data "vsphere_datacenter" "dc" {
  name = "Seoul-DC"
}

data "vsphere_datastore" "datastore" {
  name          = "SSD-Storage-01"
  datacenter_id = data.vsphere_datacenter.dc.id
}

data "vsphere_network" "network" {
  name          = "VM Network"
  datacenter_id = data.vsphere_datacenter.dc.id
}

resource "vsphere_virtual_machine" "app_server" {
  count            = 3
  name             = "app-server-${count.index + 1}"
  resource_pool_id = data.vsphere_compute_cluster.cluster.resource_pool_id
  datastore_id     = data.vsphere_datastore.datastore.id

  num_cpus = 4
  memory   = 8192
  guest_id = "ubuntu64Guest"

  network_interface {
    network_id = data.vsphere_network.network.id
  }

  disk {
    label            = "disk0"
    size             = 100
    thin_provisioned = true
  }

  clone {
    template_uuid = data.vsphere_virtual_machine.template.id
    customize {
      linux_options {
        host_name = "app-server-${count.index + 1}"
        domain    = "company.local"
      }
      network_interface {
        ipv4_address = "10.0.1.${10 + count.index}"
        ipv4_netmask = 24
      }
      ipv4_gateway = "10.0.1.1"
    }
  }
}

# 온프레미스 풀스택 애플리케이션 Docker Compose
version: '3.8'

services:
  nginx:
    image: nginx:alpine
    ports:
      - "80:80"
      - "443:443"
    volumes:
      - ./nginx.conf:/etc/nginx/nginx.conf
      - ./ssl:/etc/nginx/ssl
    depends_on:
      - app
    restart: always

  app:
    build: ./app
    environment:
      - DATABASE_URL=postgresql://user:pass@db:5432/myapp
      - REDIS_URL=redis://redis:6379
    depends_on:
      - db
      - redis
    restart: always
    deploy:
      replicas: 3

  db:
    image: postgres:15
    volumes:
      - postgres_data:/var/lib/postgresql/data
    environment:
      POSTGRES_USER: user
      POSTGRES_PASSWORD: ${DB_PASSWORD}
      POSTGRES_DB: myapp
    restart: always

  redis:
    image: redis:7-alpine
    volumes:
      - redis_data:/data
    restart: always

  prometheus:
    image: prom/prometheus
    ports:
      - "9090:9090"
    volumes:
      - ./prometheus.yml:/etc/prometheus/prometheus.yml

  grafana:
    image: grafana/grafana
    ports:
      - "3000:3000"
    depends_on:
      - prometheus

volumes:
  postgres_data:
  redis_data: