test-webstats01/webstats05 piwik eq setup for testing

diff --git a/customer/pixelpark-piwik/test-webstats01.pixelpark.net.yaml b/customer/pixelpark-piwik/test-webstats01.pixelpark.net.yaml
index d179b5f66488aa218d5f52540a78e8c620bed822..9c73dd4913fef0ff98649e5dd795e04756138987 100644 (file)
--- a/customer/pixelpark-piwik/test-webstats01.pixelpark.net.yaml
+++ b/customer/pixelpark-piwik/test-webstats01.pixelpark.net.yaml
@@ -78,7 +78,7 @@ infra::profile::apache::pp_vhosts:
         provider: directory
         path: '/var/www/piwik'
         addhandlers:
-          - { handler: "proxy:unix:/var/run/php5-fpm-piwik.sock|fcgi://./" , extensions: '.php' }
+          - { handler: "proxy:unix:/var/run/php-fpm-piwik.sock|fcgi://./" , extensions: '.php' }
         options:
           - FollowSymLinks
           - MultiViews

diff --git a/customer/pixelpark-piwik/webstats05.pixelpark.net.yaml b/customer/pixelpark-piwik/webstats05.pixelpark.net.yaml
index 3b0442d3c925d4f4820fbb228ffd4a4ad755de38..d8c871ab5e5d7f751770413f49f742540a864cff 100644 (file)
--- a/customer/pixelpark-piwik/webstats05.pixelpark.net.yaml
+++ b/customer/pixelpark-piwik/webstats05.pixelpark.net.yaml
@@ -1,2 +1,92 @@
 ---
+
+# https://intra.pixelpark.com/confluence/display/its/Shared+Piwik2+-+Betriebsdokumentation
+
+# modules
 infra::role: base
+infra::additional_classes:
+  - infra::profile::mysql_server
+  - infra::profile::postfix
+  - infra::profile::apache_php
+
+# users and deploy users
+accounts::users:
+  jenkins:
+    apply: true
+
+# mysql credentials
+mysql::server::root_password: ENC[PKCS7,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]
+mysql::server::backup::backuppassword: ENC[PKCS7,MIIBiQYJKoZIhvcNAQcDoIIBejCCAXYCAQAxggEhMIIBHQIBADAFMAACAQEwDQYJKoZIhvcNAQEBBQAEggEAdvDOgLVXiQO6NTTiYVD9gHejshFRMRY8JxosomeTg+vRRcCswEM4qjORkV06itDFpi+li749FSTzOlgZlssln3T58G8BjRjFhZ3R0PPMId7bxTFDQ0DEGrRO8wwFrYpqEJ5n5GutHyTGE/uy/njyQ1ild4W6INEsNtfaBHL2SAOYC1wP70lbPi5wtPzUduxikKfNF8YvgFxAqqgkq5ly5ljP1hWLyLmKVS9cWEIrox0tVFJpi/BCuJXn+xyDa2yOCcgVjunO2BOfce4ujtd5lgMBX4WU0Mf+ExRt6dRcKoz0wDyW2SJAHUNAh3WdZLfAlY9JxCM0sfyf+bs25BrkezBMBgkqhkiG9w0BBwEwHQYJYIZIAWUDBAEqBBBJUqOG85PSCNc90Nh5vQFJgCBJLp4WswkdaOJoXvUPrP9I9pI49R3wixeo2TqDS/rdYg==]
+mysql::server::backup::backupdir: /var/lib/backup/mysql
+
+
+infra::profile::mysql_server::databases:
+  webstats:
+    user: webstats
+    password: ENC[PKCS7,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]
+
+# php-fpm config
+php::fpm::pools:
+  www:
+    ensure: absent
+
+repo::remi_php71: true
+
+infra::profile::apache_php::fpm_pool:
+  piwik:
+    listen_owner: apache
+    listen_group: apache
+    php_admin_value:
+      upload_max_filesize: 20M
+      post_max_size: 20M
+
+# php extension needed
+php::extensions:
+  gd: {}
+  mysqlnd: {}
+  pecl-ssh2: {}
+  xml: {}
+  mbstring: {}
+  curl: {}
+
+# htaccess cerdentials
+infra::profile::apache::htdigest:
+  testserver:
+    www: ENC[PKCS7,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]
+
+# apache vhost config using pixelpark wildcard ssl_cert
+apache::default_vhost: false
+
+infra::profile::apache::pp_vhosts:
+  test-webstats01:
+    docroot: /var/www/piwik
+    servername: www.webstats05.pixelpark.net
+    serveraliases:
+      - webstats05.pixelpark.net
+    cert_servername: 'wildcard.pixelpark.net'
+    cert_customer: 'pixelpark'
+    ssl_cert: '/etc/pki/tls/certs/wildcard.pixelpark.net-cert.pem'
+    ssl_key: '/etc/pki/tls/private/wildcard.pixelpark.net-key.pem'
+    ssl_chain: '/etc/pki/tls/certs/wildcard.pixelpark.net-cert.pem'
+    docroot_owner: apache
+    docroot_group: pixel
+    docroot_mode: '2775'
+    directories:
+      - directory_root:
+        provider: directory
+        path: '/var/www/piwik'
+        addhandlers:
+          - { handler: "proxy:unix:/var/run/php-fpm-piwik.sock|fcgi://./" , extensions: '.php' }
+        options:
+          - FollowSymLinks
+          - MultiViews
+        allow_override:
+          - All
+        directoryindex: index.php index.html
+    rewrites:
+      - https:
+        comment: 'http to https alle anderen '
+        rewrite_cond:
+          - '%%{ich-trickse}{HTTPS} !=on'
+        rewrite_rule:
+          - '(.*) https://%%{ich-trickse}{HTTP_HOST}%%{ich-trickse}{REQUEST_URI} [R=301,L]'