mainnet.openeth: deploy OpenEthereum node to the host

We need some variety and redundancy in how we sync Eth1:
https://github.com/status-im/infra-nimbus/issues/80

Signed-off-by: Jakub Sokołowski <jakub@status.im>

ansible/group_vars/nimbus-openeth-mainnet.yml

@@ -0,0 +1,37 @@
+---
+# OpenEthereum
+openethereum_service_name: 'nimbus-openeth'
+openethereum_chain: 'foundation'
+openethereum_mode: 'active'
+openethereum_pruning: 'auto'
+openethereum_identity: 'Status Nimbus Sync Node'
+# Allow connections from our VPN
+openethereum_websocket_origins: ['all']
+# Memory settings
+openethereum_cache_size_ratio: 0.6
+openethereum_cont_mem_ratio: 0.8
+# APIs
+openethereum_rpc_apis: [web3, eth, pubsub, net, parity, parity_pubsub, traces]
+
+# Ports and Addresses
+openethereum_p2p_port: 30303
+openethereum_rpc_port: 8545
+openethereum_rpc_addr: '0.0.0.0'
+openethereum_websocket_port: 8546
+openethereum_websocket_addr: '0.0.0.0'
+openethereum_metrics_port: 3000
+
+# Open Ports
+open_ports_default_comment: 'OpenEthereum'
+open_ports_default_chain: 'VPN'
+open_ports_list:
+  - { port: '{{ openethereum_p2p_port }}', chain: 'SERVICES' }
+  - { port: '{{ openethereum_metrics_port }}', ipset: 'metrics.hq' }
+  - { port: '{{ openethereum_rpc_port }}', ipset: 'nimbus.pyrmont' }
+  - { port: '{{ openethereum_rpc_port }}', ipset: 'nimbus.prater' }
+  - { port: '{{ openethereum_rpc_port }}', ipset: 'nimbus.eth1' }
+  - { port: '{{ openethereum_rpc_port }}', ipset: 'rocket.prod' }
+  - { port: '{{ openethereum_websocket_port }}', ipset: 'nimbus.pyrmont' }
+  - { port: '{{ openethereum_websocket_port }}', ipset: 'nimbus.prater' }
+  - { port: '{{ openethereum_websocket_port }}', ipset: 'nimbus.eth1' }
+  - { port: '{{ openethereum_websocket_port }}', ipset: 'rocket.prod' }

ansible/openeth.yml

@@ -0,0 +1,18 @@
+---
+- name: Verify Ansible versions
+  hosts: all
+  tags: always
+  become: false
+  run_once: true
+  gather_facts: false
+  tasks:
+    - local_action: command ./versioncheck.py
+      changed_when: false
+
+- name: Configure OpenEthereum nodes
+  become: true
+  hosts:
+    - nimbus-openeth-mainnet
+  roles:
+    - { role: open-ports,              tags: open-ports }
+    - { role: infra-role-openethereum, tags: openethereum }

ansible/requirements.yml

@@ -113,3 +113,8 @@
   src: git@github.com:status-im/infra-role-geth-exporter.git
   version: 30e6a08e9b2badffbd32472fff640aefef26fd37
   scm: git
+
+- name: infra-role-openethereum
+  src: git@github.com:status-im/infra-role-openethereum.git
+  version: ddcac93d54dbb04fe6a971e7c1d1817cfe7b2b10
+  scm: git