Activity

1. mrveiss

   added

   bugSomething isn't workingSomething isn't working

   infrastructure

   on Jan 14, 2026
2. mrveiss commented on Jan 19, 2026

   

   mrveiss

   on Jan 19, 2026

   OwnerAuthor

   More actions

   Implementation Progress

   Phase 1: Redis Password Configuration ✅

   Files Modified:

   1. ansible/inventory/group_vars/vault.yml - Added vault_redis_password with the correct password
   2. ansible/inventory/group_vars/database.yml - Enabled auth and referenced vault password:

      redis_security:
        auth_enabled: true
        password: "{{ vault_redis_password }}"

   3. ansible/roles/redis/templates/redis-stack.conf.j2 - Added requirepass directive:

      {% if redis_password is defined and redis_password %}
      requirepass {{ redis_password }}
      {% endif %}
      

   4. ansible/roles/redis/vars/main.yml - Added redis_password: "{{ vault_redis_password }}"
   5. ansible/roles/redis/tasks/main.yml - Updated Redis connectivity test to use password authentication

   Phase 2: Systemd Services Auto-Start ✅

   6. ansible/roles/npu_worker/tasks/main.yml - Added state: started to systemd task (Redis task already had this)

   Checklist

   • vault.yml updated with Redis password
   • database.yml auth enabled
   • Redis template has requirepass directive
   • Redis role variables reference vault password
   • Redis systemd task verified (already correct)
   • NPU worker systemd task updated with state: started
   • Deploy and verify on VMs

   Next Steps

   Run Ansible playbooks to deploy changes:

   # Deploy Redis configuration
   ansible-playbook -i ansible/inventory/production.yml ansible/playbooks/deploy-database.yml --tags redis
   
   # Deploy NPU worker configuration
   ansible-playbook -i ansible/inventory/production.yml ansible/site.yml --limit npu-worker --tags npu_worker
3. mrveiss commented on Jan 19, 2026

   

   mrveiss

   on Jan 19, 2026

   OwnerAuthor

   More actions

   Implementation Complete ✅

   Commit: 971c20ae - fix(ansible): Add Redis password and ensure systemd services auto-start (#724)

   Summary of Changes

   File	Change
   ansible/inventory/group_vars/database.yml	Enabled auth_enabled: true and added password reference
   ansible/roles/redis/templates/redis-stack.conf.j2	Added requirepass directive
   ansible/roles/redis/vars/main.yml	Added redis_password variable
   ansible/roles/redis/tasks/main.yml	Updated connectivity test with password auth
   ansible/roles/npu_worker/tasks/main.yml	Added state: started to systemd task

   Note on vault.yml

   The vault.yml file is correctly gitignored for security reasons. The Redis password has been configured locally but should be:

   1. Encrypted with ansible-vault before deployment, OR
   2. Managed via a secure secrets management system

   Deployment Instructions

   # Deploy Redis configuration
   ansible-playbook -i ansible/inventory/production.yml ansible/playbooks/deploy-database.yml --tags redis
   
   # Deploy NPU worker configuration
   ansible-playbook -i ansible/inventory/production.yml ansible/site.yml --limit npu-worker --tags npu_worker

   Verification After Deployment

   # Check Redis service
   ssh autobot@172.16.168.23 "systemctl is-enabled redis-stack-server && systemctl status redis-stack-server"
   
   # Check NPU worker service
   ssh autobot@172.16.168.22 "systemctl is-enabled autobot-npu-worker && systemctl status autobot-npu-worker"
   
   # Test Redis authentication
   ssh autobot@172.16.168.23 "redis-cli -a '\$REDIS_PASSWORD' ping"
4. mrveiss

   closed this as completedon Jan 19, 2026
5. mrveiss commented on Jan 19, 2026

   

   mrveiss

   on Jan 19, 2026

   OwnerAuthor

   More actions

   Correction: Ansible playbooks should be run from the lifecycle manager node, not locally.

   Deployment Instructions (from lifecycle manager)

   # SSH to lifecycle manager first
   ssh autobot@lifecycle-manager
   
   # Then run the playbooks
   ansible-playbook -i ansible/inventory/production.yml ansible/playbooks/deploy-database.yml --tags redis
   ansible-playbook -i ansible/inventory/production.yml ansible/site.yml --limit npu-worker --tags npu_worker

   Alternatively, sync the ansible directory to the lifecycle manager first:

   ./scripts/utilities/sync-to-vm.sh lifecycle-manager ansible/ /home/autobot/autobot/ansible/
6. mrveiss

   added a commit that references this issue on Jan 29, 2026

   fix(ansible): Add Redis password and ensure systemd services auto-sta…

   ...

   971c20a