spk-blog initial insideforum-spk-de

diff --git a/customer/spk-blog/insideforum-spk-de.pixelpark.net.yaml b/customer/spk-blog/insideforum-spk-de.pixelpark.net.yaml
index 3b0442d3c925d4f4820fbb228ffd4a4ad755de38..ac73ae690d9e19e4952e50cdc943d03f9984b838 100644 (file)
--- a/customer/spk-blog/insideforum-spk-de.pixelpark.net.yaml
+++ b/customer/spk-blog/insideforum-spk-de.pixelpark.net.yaml
@@ -1,2 +1,68 @@
 ---
 infra::role: base
+
+accounts::users:
+  christian.stoehr:
+    apply: true
+    sudo: false
+    group: apache
+  michael.mente:
+    apply: true
+    sudo: false
+    group: apache
+    groups:
+      - pixel
+
+infra::additional_classes:
+  - infra::profile::wordpress
+  - apache::mod::headers
+  - infra::profile::cron
+
+repo::remi_php70: true
+
+php::settings:
+  Date/date.timezone: Europe/Berlin
+  PHP/expose_php: 'Off'
+
+php::extensions:
+  gd: {}
+  opcache: {}
+  mysqlnd: {}
+  soap: {}
+  mbstring: {}
+  xml: {}
+
+php::fpm::pools:
+  www:
+    ensure: absent
+
+apache::default_vhost: false
+
+infra::profile::wordpress::projects:
+  sparkasseblog:
+    docroot: /var/www/sparkasseblog
+    servername: insideforum.sparkasseblog.de
+    serveraliases:
+      - insideforum-spk-de.pixelpark.net
+    ssl: true
+    access_log_format: urchinpp
+    cert_servername: 'sparkasseblog.de'
+    cert_customer: 'sparkasse'
+    ssl_cert: '/etc/pki/tls/certs/sparkasseblog.de-cert.pem'
+    ssl_key: '/etc/pki/tls/private/sparkasseblog.de-key.pem'
+    ssl_chain: '/etc/pki/tls/certs/sparkasseblog.de-cert.pem'
+#    ssl_verify_client: optional
+#    ssl_crl: '/etc/pki/tls/certs/d-trust_ca_2-1_2015.crl'
+#    ssl_ca: '/etc/pki/tls/certs/spk-root-ca.pem'
+
+    directories:
+    setenvif:
+      - "HTTPS on HTTPS=on"
+
+#infra::profile::cron::cronjobs:
+#  fetchcrl:
+#    user: root
+#    command: 'wget ... && systemctl reload httpd'
+#    minute: 0
+#    hour: 5
+#    description: um 05:00 Uhr wird die Revocationlist geholt. somit muss der Webserver reloaded werden
\ No newline at end of file