🚀 SonarQube Production Setup using Ansible

Automated, production-ready deployment of SonarQube with PostgreSQL using Ansible. This project follows DevOps best practices, including modular roles, idempotent tasks, and secure configuration.

---

📌 Features

• ✅ Automated SonarQube installation
• ✅ PostgreSQL database setup
• ✅ Dynamic PostgreSQL version detection
• ✅ Secure DB authentication (peer + md5)
• ✅ Systemd service configuration
• ✅ Production-ready Ansible role structure
• ✅ Idempotent and reusable playbooks

---

🏗️ Architecture

Ansible Control Node
        │
        ▼
Target Server (Ubuntu)
 ├── SonarQube
 ├── PostgreSQL
 └── Systemd Services

---

📁 Project Structure

sonarqube-devops-setup
├── ansible
│   ├── ansible.cfg
│   ├── group_vars
│   │   └── all.yml
│   ├── inventory
│   │   └── hosts.ini
│   ├── playbook.yml
│   └── roles
│       └── sonarqube
│           ├── handlers
│           │   └── main.yml
│           ├── tasks
│           │   ├── config.yml
│           │   ├── install.yml
│           │   ├── main.yml
│           │   ├── postgres.yml
│           │   ├── service.yml
│           │   └── sysctl.yml
│           └── templates
│               ├── sonar.properties.j2
│               └── sonarqube.service.j2
├── assets
├── manual-installation
│   └── Manual_Installation.md
└── README.md

---

⚙️ Prerequisites

• Ubuntu 20.04 / 22.04

• Ansible is installed on the control node

• SSH access to the target server

• Minimum:

  • 4 GB RAM (recommended 6 GB)
  • 2 CPU

---

🚀 Installation Steps

1️⃣ Clone Repository

git clone https://github.com/your-username/sonarqube-devops-setup.git
cd sonarqube-devops-setup

---

2️⃣ Configure Inventory

Edit inventory/hosts.ini file:

[sonarqube]
your-server-ip ansible_user=ubuntu ansible_ssh_private_key_file=~/.ssh/id_rsa

---

3️⃣ Run Playbook

ansible-playbook playbook.yml

---

🔐 PostgreSQL Configuration

• Uses peer authentication for postgres user

• Uses md5 authentication for application users

• Automatically:

  • Creates database
  • Creates user
  • Grants privileges

---

🌐 Access SonarQube

After deployment:

http://your-server-ip:9000

Default Credentials:

Username: admin
Password: admin

---

🎬 Demo

vm.max_map_count=262144
fs.file-max=65536

---

🛠️ Troubleshooting

❌ PostgreSQL Connection Error

fe_sendauth: no password supplied

✔ Fix:

• Ensure pg_hba.conf is correctly configured
• Keep:

local all postgres peer
local all all md5

---

🔒 Security Best Practices

• Use strong DB passwords
• Restrict port 9000 using the firewall
• Enable HTTPS (Nginx reverse proxy recommended)
• Avoid running SonarQube as root

---

🚀 Future Improvements

• Docker-based deployment
• Kubernetes Helm chart
• CI/CD integration (GitHub Actions)
• SonarQube SSL setup
• Backup & restore automation

---

🤝 Contributing

Feel free to fork and contribute! Pull requests are welcome.

---

📜 License

This project is licensed under the MIT License.

---

⭐ Support

If you find this project helpful, please give it a star ⭐ on GitHub.

---

🌐 Connect With Me

---

💡 "Turning ideas into production-ready systems."