Frank Brehm's Git Trees - pixelpark/hiera.git/blob

   1 ---
   2 site::role: base
   3 site::additional_classes:
   4   - site::profile::mysql_server
   5   - site::profile::apache_php
   6
   7 mysql::server::root_password: ENC[PKCS7,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]
   8 mysql::server::backup::backuppassword: ENC[PKCS7,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]
   9 site::profile::mysql_server::databases:
  10   mercedes_ecard:
  11     user: mercedes_ecard
  12     password: ENC[PKCS7,MIIBiQYJKoZIhvcNAQcDoIIBejCCAXYCAQAxggEhMIIBHQIBADAFMAACAQEwDQYJKoZIhvcNAQEBBQAEggEAPRfO6ClGW2/tV0jFlSw//K08vXxvoxYV+cOZbcs/zY8VrSa0+VXbNEKuwFuSeaM9Ae1MwdW+OnJevNG8oNWtswOYU6OVd0Jq0LqaF5J2lQ6KFtnWT186QyulnewLOq953JX2QJup+2nfOCJD0/ArvaxYFJFpfssNaRPU/8w1olXa0Gxa64xTo0ef1hQFkTl9vKJ65/yUPYysxHLRy7G4wugg4W28J2s3FKCLfktdS3yeKAgPMtJiY9BTPcFKMnsFclgL7S77p+ZfWn4k7WBKtKqF2cHAtvwhBk8zLdEY233rmUqqYI4Idwelo6MQxcCinBWuqWmtTrOG6hS58J/RbzBMBgkqhkiG9w0BBwEwHQYJYIZIAWUDBAEqBBD+PfDTa2yU4pG6uU7KCZ8sgCA3wBRxbMV01RTLfxlk8zQlpf2t++oDGsxfZIImL66Gaw==]
  13
  14 site::profile::apache::htdigest:
  15   server:
  16     www: ENC[PKCS7,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]
  17
  18 accounts::users:
  19   labworks:
  20     uid: 60174
  21     apply: true
  22     group: apache
  23     sudo_cmds:
  24       - RESTARTPHPFPM
  25
  26 sudo::configs:
  27   cmd_alias:
  28     priority: "05"
  29     content: |
  30       Cmnd_Alias RESTARTPHPFPM =  /bin/systemctl * php-fpm.service
  31
  32 repo::remi_php56: true
  33
  34 php::extensions:
  35   opcache: {}
  36   mbstring: {}
  37   mysqlnd: {}
  38
  39 site::profile::apache_php::fpm_pool:
  40   christmas:
  41     listen_owner: apache
  42     listen_group: apache
  43
  44 php::fpm::pools:
  45   www:
  46     ensure: absent
  47
  48 apache::default_vhost: false
  49
  50 site::profile::apache::pp_vhosts:
  51   christmas:
  52     docroot: /var/www/christmas
  53     servername: christmas-greetings.vans.mercedes-benz.com
  54     # es werden LB und WAF verwendet - SSL Certs liegen im Loadbalancer
  55     ssl: false
  56     docroot_owner: apache
  57     docroot_group: apache
  58     docroot_mode: '0775'
  59     directories:
  60       - directory_root:
  61         provider: directory
  62         path: '/var/www/christmas'
  63         addhandlers:
  64           - { handler: "proxy:unix:/var/run/php5-fpm-christmas.sock|fcgi://./" , extensions: '.php' }
  65         options:
  66           - FollowSymLinks
  67           - MultiViews
  68         allow_override:
  69           - All
  70         directoryindex: 'index.php'
  71       - location_root:
  72         provider: location
  73         path: '/'
  74         auth_type: Digest
  75         auth_name: server
  76         auth_digest_provider: file
  77         auth_digest_algorithm: MD5
  78         auth_user_file: '/etc/httpd/htdigest'
  79         auth_require: 'valid-user'
  80     rewrites:
  81       - alias:
  82         comment: 'Weiterleitung auf echte URL'
  83         rewrite_cond:
  84           - '%%{ich-trickse}{HTTP_HOST} !^christmas-greetings\.vans\.mercedes-benz\.com$ [NC]'
  85         rewrite_rule:
  86           - '^(.*)$ https://christmas-greetings.vans.mercedes-benz.com$1 [L,R=301]'
  87       - alias1:
  88         comment: 'Weiterleitung auf https'
  89         rewrite_cond:
  90           - '%%{ich-trickse}{HTTP:HTTPS} !=on [NC]'
  91         rewrite_rule:
  92           - '^(.*)$ https://christmas-greetings.vans.mercedes-benz.com$1 [L,R=301]'
  93     setenvif_ssl:
  94       - 'HTTPS on HTTPS=on'
  95     access_log_format: lb_combined