]> Frank Brehm's Git Trees - pixelpark/hiera.git/commitdiff
mbvd-shes-newsletter initial
authorAndreas Gerstenberg <gerstenberg@pixelpark.com>
Thu, 19 Apr 2018 12:03:45 +0000 (14:03 +0200)
committerAndreas Gerstenberg <gerstenberg@pixelpark.com>
Thu, 19 Apr 2018 12:03:45 +0000 (14:03 +0200)
customer/mbvd-shes-newsletter/common.yaml
customer/mbvd-shes-newsletter/production.yaml [deleted file]
customer/mbvd-shes-newsletter/stage-web-newsletter-shesmercedes-de.pixelpark.net.yaml
customer/mbvd-shes-newsletter/test.yaml [deleted file]
customer/mbvd-shes-newsletter/web-newsletter-shesmercedes-de.pixelpark.net.yaml

index cb51af5d2166e57edf904f678072913d6b85188c..cf5bea1b2800b4fd3c264a6fdf3a332f9a320703 100644 (file)
@@ -1,7 +1,7 @@
-
 ---
 infra::role: base
 infra::additional_classes:
+  - infra::profile::ruby_passenger
   - infra::profile::postfix
   - infra::profile::cron
 
@@ -9,5 +9,48 @@ postfix::myorigin: "pixelpark.net"
 infra::profile::postfix::virtual_aliases_source: 'maps/virtual-nullclient-mbvd'
 infra::profile::postfix::cert_servername: 'wildcard.pixelpark.net'
 
+accounts::users:
+  deploy.hamburg:
+    uid: 60201
+    shell: "bash"
+    apply: true
+    sudo: true
+    sudo_cmds:
+      - CHOWNSHES
+    keys:
+      jenkins:
+        key: "AAAAB3NzaC1yc2EAAAADAQABAAABAQCcA9sDPUizm9LRPYsSQSkkXRlGfhkZcCeQ8XDTbvHLjLlQdJznx3ezpxtmIgKLzMb3Hd3YNB+CAjD//iIDgJkwxNU2qGjm4vJT0WjQ2dwbPyVgN+Ik1nBhqWC2gD5UnDIVULYP5WUkgPPP1if64Q5fnfD9aTkUNOYJ4u9Th7As97e48S+/Z8vqw9EDcr3ZC+OzU7ezU65SHH4mpC1MvLW4EG0DU+omYDuMBusRA9SPx9uAebmoVVqZ23YmK5h9gh8Nc/Av5r6yfYKtkFt6CliGc7qZj56ONfHnP79CgVIlJ5NIHU2s27tTJmoDOHOkJZ11TuQp4HbuMAUAWHi6Aie7"
+      sandra.streimelweger:
+        key: "AAAAB3NzaC1yc2EAAAADAQABAAABAQCx1a+GIaWp4/O1puvX9gYt5EMZcqNLyoxSU5sYNrIpuUYZ4mit2eVtsTbuE+gymXZ570v09sTI667p7I/cyoZ8HHsZ9x8yjDEDidKuRD7Sq+aqIdCcH3HLBZdEES8FvqyrcQNLbe4nPdqSrWievoR8VH6/wy7nhVb0A/UGID2XkZLVFJjlAfU22CxuererrCBASJo31ZkW/ScE1Lii2nBvs7PxL9+hyDnyP7fsVV/2fcy85c2reP3YO2jOTeVGnATPUNaL9KbonhxHr+SEWSvsE4tUlumxcqLa8wd/YQqrm0sO0GdqPEIfiUmhj24AltIxwmv/KnC8HODr7SQMyEsH"
+      alma.daschke:
+        key: "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"
+      sidney.jansen:
+        key: "AAAAB3NzaC1yc2EAAAADAQABAAABAQDEr3bnmo47iQIMvpdFN6khFPBTItqapoy1L+Cj9XHXkkuOesuGNDw56AEomzgpRn+3GqXNENWgTd4nwUGCCbQLc4H2Uk3XXOk5oDZYpCOFSJ3T6uS6s7+kEky+68ocWjcI5oV+0g9dSDt5fpS13LDxnPNfmBYwJzfOjrtXddITVehjQf9Utft2M057VJ9cQNEjpAMehIsbqhWR2yuDUraVpc/wSOBjr52A88gfloO4U3JMKPsTu/vnTvJyG45UalhTScavB+6Y662uesi4XSjmv+ZUUnMToSh4jJU0Wh5QqVxz0Mqhj6w5SOqNSk5p97JJn14RvsbxiiEv0ZDvFVBn"
+
+    comment: "Deployuser Hamburg"
+    group: shes
+    groups:
+      - apache
+
+sudo::configs:
+  cmd_alias:
+    priority: "05"
+    content: |
+      Cmnd_Alias CHOWNSHES = /bin/chown -R shes\:shes /var/www/shes
+  becomeApache:
+    priority: "06"
+    content: |
+      deploy.hamburg ALL=(apache) NOPASSWD: ALL
+      deploy.hamburg ALL=(shes) NOPASSWD: ALL
 
-# vim: et list
+infra::additional_files:
+  '/var/www':
+    ensure: 'directory'
+    owner: apache
+    group: apache
+    mode: '0775'
+  '/var/www/shes':
+    ensure: 'directory'
+    owner: apache
+    group: apache
+    mode: '0775'
diff --git a/customer/mbvd-shes-newsletter/production.yaml b/customer/mbvd-shes-newsletter/production.yaml
deleted file mode 100644 (file)
index 6f7e27b..0000000
+++ /dev/null
@@ -1,7 +0,0 @@
-
----
-
-
-
-
-# vim: et list
index 6f7e27b0616149d3c2bcdb6665fbb877c874bf48..7f0a1a7effb5500f007d99d0f11dbe2c30d7d77a 100644 (file)
@@ -1,7 +1,43 @@
-
 ---
+infra::profile::apache::htdigest:
+  server:
+    www: ENC[PKCS7,MIIBeQYJKoZIhvcNAQcDoIIBajCCAWYCAQAxggEhMIIBHQIBADAFMAACAQEwDQYJKoZIhvcNAQEBBQAEggEADDxIgoiLCSt5Z0q++YBL/xsOYl6O6yT0EokwHV5sBiIk4tIvLsbNk6IiBigdtENX2tY9pcP9W06eCapebOh43VL1mv0d3kd22Pqg6NPZ0iX6I+2+G51Ttp1PIFRBhpiBAUt54GPPBiAwJqmTq1YK+buXcWcaI5Rgo3jhe+rqjGIFH6+bl0AN/9Ah78z+bHaiXER0+LLqegYhVc/xZQix/XGYF5rRXNKTy2Pu+TxU0jArap3bEYpHxsREykbugM05upe444eg25xLes4j2xQSP1ZblV6o+4QqoliTAo7jEML59eaPv9SD2Ddm1al5+UStU2Q/ryTVRVBa+yXOSTzCeTA8BgkqhkiG9w0BBwEwHQYJYIZIAWUDBAEqBBBrKrDhjnsu7kexmMsL/CUwgBBbSvtMUbNi4Mh0Asv5TiL5]
 
+sudo::configs:
+  deploy.hamburg:
+    priority: "06"
+    content: |
+      deploy.hamburg ALL=(apache) NOPASSWD: ALL
 
-
-
-# vim: et list
+infra::profile::ruby_passenger::projects:
+  shes:
+    servername: stage-web-newsletter-shesmercedes-de.pixelpark.net
+    serveraliases:
+      - stage-newsletter-shesmercedes-de.pixelpark.net
+    cert_servername: 'wildcard.pixelpark.net'
+    cert_customer: 'pixelpark'
+    ssl_cert: '/etc/pki/tls/certs/wildcard.pixelpark.net-cert.pem'
+    ssl_key: '/etc/pki/tls/private/wildcard.pixelpark.net-key.pem'
+    ssl_chain: '/etc/pki/tls/certs/wildcard.pixelpark.net-cert.pem'
+    passenger_user: shes
+    passenger_app_env: stage
+    approot_owner: apache
+    approot: /var/www/shes
+    ruby_version: 'ruby-2.3.1'
+    directories:
+      - provider: directory
+        path: '/var/www/shes/public'
+        options:
+          - FollowSymLinks
+          - MultiViews
+        allow_override:
+          - All
+        directoryindex: index.html
+      - provider: location
+        path: '/'
+        auth_type: Digest
+        auth_name: server
+        auth_digest_provider: file
+        auth_digest_algorithm: MD5
+        auth_user_file: '/etc/httpd/htdigest'
+        auth_require: 'valid-user'
diff --git a/customer/mbvd-shes-newsletter/test.yaml b/customer/mbvd-shes-newsletter/test.yaml
deleted file mode 100644 (file)
index 6f7e27b..0000000
+++ /dev/null
@@ -1,7 +0,0 @@
-
----
-
-
-
-
-# vim: et list
index 6f7e27b0616149d3c2bcdb6665fbb877c874bf48..1b14ff4d4e52f5731fc8e833b558fa0cf7b37bb9 100644 (file)
@@ -1,7 +1,44 @@
-
 ---
+infra::profile::apache::htdigest:
+  server:
+    www: ENC[PKCS7,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]
 
+sudo::configs:
+  deploy.hamburg:
+    priority: "06"
+    content: |
+      deploy.hamburg ALL=(apache) NOPASSWD: ALL
 
-
-
-# vim: et list
+infra::profile::ruby_passenger::projects:
+  shes:
+    servername: web-newsletter-shesmercedes-de.pixelpark.net
+    serveraliases:
+      - newsletter-shesmercedes-de.pixelpark.net
+      - newsletter.shesmercedes.de
+    cert_servername: 'wildcard.pixelpark.net'
+    cert_customer: 'pixelpark'
+    ssl_cert: '/etc/pki/tls/certs/wildcard.pixelpark.net-cert.pem'
+    ssl_key: '/etc/pki/tls/private/wildcard.pixelpark.net-key.pem'
+    ssl_chain: '/etc/pki/tls/certs/wildcard.pixelpark.net-cert.pem'
+    passenger_user: shes
+    passenger_app_env: live
+    approot_owner: apache
+    approot: /var/www/shes
+    ruby_version: 'ruby-2.3.1'
+    directories:
+      - provider: directory
+        path: '/var/www/shes/public'
+        options:
+          - FollowSymLinks
+          - MultiViews
+        allow_override:
+          - All
+        directoryindex: index.html
+      - provider: location
+        path: '/'
+        auth_type: Digest
+        auth_name: server
+        auth_digest_provider: file
+        auth_digest_algorithm: MD5
+        auth_user_file: '/etc/httpd/htdigest'
+        auth_require: 'valid-user'