webstats05-7 setup

diff --git a/customer/pixelpark-piwik/webstats05.pixelpark.net.yaml b/customer/pixelpark-piwik/webstats05.pixelpark.net.yaml
index 6f33c80a8470628dbcea7e3e9cb367a321f9f2a0..edb3f062c36666a37a908a0f341d30040b5131d2 100644 (file)
--- a/customer/pixelpark-piwik/webstats05.pixelpark.net.yaml
+++ b/customer/pixelpark-piwik/webstats05.pixelpark.net.yaml
@@ -1,5 +1,4 @@
 ---
-
 # https://intra.pixelpark.com/confluence/display/its/Shared+Piwik2+-+Betriebsdokumentation
 
 # modules
@@ -15,15 +14,23 @@ accounts::users:
     apply: true
 
 # mysql credentials
-mysql::server::root_password: ENC[PKCS7,MIIBiQYJKoZIhvcNAQcDoIIBejCCAXYCAQAxggEhMIIBHQIBADAFMAACAQEwDQYJKoZIhvcNAQEBBQAEggEAHgDLELOh/mCadQRPS9GhmhikdJ2G1OU1gbvmeWb02bJhCqXf3S7HCQ/4YK1FVoAb0etss4V4siXPgPtSGY/lrXeFhuCZFvd7lL9LRg14UuqPByAPHpEq68tB+PlQ2bEwIA/jw/ypRWS99uKQbD1dH1jQVINL9Q8pqirI2N1qLcRmWJipeI7DbHtKdYk/6PPItUdDWQiPQ9wCJPtX4tfTm+qdnIO1wX3BpuUaDJ1T+CxeO8OoV8RYTDv3qq3gAe/FApC37Y3AnhfLe97nmzwvGyxX2Luvh2TWA6ePJ9prjNANsGjEktemDxAOkAgE9invHuaMXmmd5ZBJmCsLh0wYtTBMBgkqhkiG9w0BBwEwHQYJYIZIAWUDBAEqBBCMjyzaYIsrhr0SINIjI6s0gCAL/RNCnMumjiaspSFiUofyzC51PZdR9O17A+7HSklPDQ==]
-mysql::server::backup::backuppassword: ENC[PKCS7,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]
-mysql::server::backup::backupdir: /var/lib/backup/mysql
-
+mysql::server::root_password: ENC[PKCS7,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]
+mysql::server::backup::backuppassword: ENC[PKCS7,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]
 
 infra::profile::mysql_server::databases:
   webstats:
     user: webstats
-    password: ENC[PKCS7,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]
+    password: ENC[PKCS7,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]
+  replica:
+    user: replica
+    password: ENC[PKCS7,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]
+
+mysql::server::backup::backupdir: /var/lib/backup/mysql
+
+#infra::profile::galera_cluster::galera_servers:
+#  - 192.168.64.3
+#  - 192.168.64.4
+#  - 192.168.64.5
 
 # php-fpm config
 php::fpm::pools:
@@ -51,8 +58,8 @@ php::extensions:
 
 # htaccess cerdentials
 infra::profile::apache::htdigest:
-  testserver:
-    www: ENC[PKCS7,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]
+  webstats:
+    www: ENC[PKCS7,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]
 
 # apache vhost config using pixelpark wildcard ssl_cert
 apache::default_vhost: false
@@ -60,9 +67,9 @@ apache::default_vhost: false
 infra::profile::apache::pp_vhosts:
   webstats05:
     docroot: /var/www/piwik
-    servername: www.webstats05.pixelpark.net
+    servername: webstats05.pixelpark.net
     serveraliases:
-      - webstats05.pixelpark.net
+      - www.webstats05.pixelpark.net
     cert_servername: 'wildcard.pixelpark.net'
     cert_customer: 'pixelpark'
     ssl_cert: '/etc/pki/tls/certs/wildcard.pixelpark.net-cert.pem'
@@ -75,6 +82,11 @@ infra::profile::apache::pp_vhosts:
       - directory_root:
         provider: directory
         path: '/var/www/piwik'
+        auth_type: Digest
+        auth_name: 'webstats'
+        auth_digest_provider: file
+        auth_user_file: '/etc/httpd/htdigest'
+        auth_require: 'valid-user'
         addhandlers:
           - { handler: "proxy:unix:/var/run/php5-fpm-piwik.sock|fcgi://./" , extensions: '.php' }
         options:

diff --git a/customer/pixelpark-piwik/webstats06.pixelpark.net.yaml b/customer/pixelpark-piwik/webstats06.pixelpark.net.yaml
index 3b0442d3c925d4f4820fbb228ffd4a4ad755de38..4eb038f324081061580bf6e7f2f59f27ece99381 100644 (file)
--- a/customer/pixelpark-piwik/webstats06.pixelpark.net.yaml
+++ b/customer/pixelpark-piwik/webstats06.pixelpark.net.yaml
@@ -1,2 +1,104 @@
 ---
+# https://intra.pixelpark.com/confluence/display/its/Shared+Piwik2+-+Betriebsdokumentation
+
+# modules
 infra::role: base
+infra::additional_classes:
+  - infra::profile::mysql_server
+  - infra::profile::postfix
+  - infra::profile::apache_php
+
+# users and deploy users
+accounts::users:
+  jenkins:
+    apply: true
+
+# mysql credentials
+mysql::server::root_password: ENC[PKCS7,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]
+mysql::server::backup::backuppassword: ENC[PKCS7,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]
+
+infra::profile::mysql_server::databases:
+  webstats:
+    user: webstats
+    password: ENC[PKCS7,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]
+  replica:
+    user: replica
+    password: ENC[PKCS7,MIIBiQYJKoZIhvcNAQcDoIIBejCCAXYCAQAxggEhMIIBHQIBADAFMAACAQEwDQYJKoZIhvcNAQEBBQAEggEAViwSZ/m7WBri3puyB7BW/5m8OjuPYT2zBVD4BMJY41vNXh6ANRsKTzrumSU05mVQ0Bwl2tcbDlsPKWRdjQzZOMky1dwDaaKz9DBab3FJd0BsbnZf3eBjp7KzX2jzgGd8Comzcq52h5kbyxdZXXDsoEMiil7wQ7PXY0lEG0464ca7sEZ01x61JqH3CngADMSgXMrPV6lWtE8/roJvpZ8mCJP41agiqHLEgBPrSOlRlR7nsMF12CItJMaDyX0GNTSQUF9t63Py3DVd4MKUc8rveMmYLzoIi5uAAdE2KJZ33NtmTxR8+Ihh6IoFfFZve+paV00iQyTdhzVEgtWygA2ETzBMBgkqhkiG9w0BBwEwHQYJYIZIAWUDBAEqBBB0WiQHaIx0t441Y5mVsx5ngCCStZLguJtiJP4PvhBvhF0yfLIR2dFiQxE19YZrbsUaGw==]
+
+mysql::server::backup::backupdir: /var/lib/backup/mysql
+
+#infra::profile::galera_cluster::galera_servers:
+#  - 192.168.64.3
+#  - 192.168.64.4
+#  - 192.168.64.5
+
+# php-fpm config
+php::fpm::pools:
+  www:
+    ensure: absent
+
+repo::remi_php71: true
+
+infra::profile::apache_php::fpm_pool:
+  piwik:
+    listen_owner: apache
+    listen_group: apache
+    php_admin_value:
+      upload_max_filesize: 20M
+      post_max_size: 20M
+
+# php extension needed
+php::extensions:
+  gd: {}
+  mysqlnd: {}
+  pecl-ssh2: {}
+  xml: {}
+  mbstring: {}
+  curl: {}
+
+# htaccess cerdentials
+infra::profile::apache::htdigest:
+  webstats:
+    www: ENC[PKCS7,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]
+
+# apache vhost config using pixelpark wildcard ssl_cert
+apache::default_vhost: false
+
+infra::profile::apache::pp_vhosts:
+  webstats06:
+    docroot: /var/www/piwik
+    servername: webstats06.pixelpark.net
+    serveraliases:
+      - www.webstats06.pixelpark.net
+    cert_servername: 'wildcard.pixelpark.net'
+    cert_customer: 'pixelpark'
+    ssl_cert: '/etc/pki/tls/certs/wildcard.pixelpark.net-cert.pem'
+    ssl_key: '/etc/pki/tls/private/wildcard.pixelpark.net-key.pem'
+    ssl_chain: '/etc/pki/tls/certs/wildcard.pixelpark.net-cert.pem'
+    docroot_owner: apache
+    docroot_group: pixel
+    docroot_mode: '2775'
+    directories:
+      - directory_root:
+        provider: directory
+        path: '/var/www/piwik'
+        auth_type: Digest
+        auth_name: 'webstats'
+        auth_digest_provider: file
+        auth_user_file: '/etc/httpd/htdigest'
+        auth_require: 'valid-user'
+        addhandlers:
+          - { handler: "proxy:unix:/var/run/php5-fpm-piwik.sock|fcgi://./" , extensions: '.php' }
+        options:
+          - FollowSymLinks
+          - MultiViews
+        allow_override:
+          - All
+        directoryindex: index.php index.html
+    rewrites:
+      - https:
+        comment: 'http to https alle anderen '
+        rewrite_cond:
+          - '%%{ich-trickse}{HTTPS} !=on'
+        rewrite_rule:
+          - '(.*) https://%%{ich-trickse}{HTTP_HOST}%%{ich-trickse}{REQUEST_URI} [R=301,L]'

diff --git a/customer/pixelpark-piwik/webstats07.pixelpark.net.yaml b/customer/pixelpark-piwik/webstats07.pixelpark.net.yaml
index 3b0442d3c925d4f4820fbb228ffd4a4ad755de38..bf1856615042f5c5005aaa7c189ef3fbad906eff 100644 (file)
--- a/customer/pixelpark-piwik/webstats07.pixelpark.net.yaml
+++ b/customer/pixelpark-piwik/webstats07.pixelpark.net.yaml
@@ -1,2 +1,104 @@
 ---
+# https://intra.pixelpark.com/confluence/display/its/Shared+Piwik2+-+Betriebsdokumentation
+
+# modules
 infra::role: base
+infra::additional_classes:
+  - infra::profile::mysql_server
+  - infra::profile::postfix
+  - infra::profile::apache_php
+
+# users and deploy users
+accounts::users:
+  jenkins:
+    apply: true
+
+# mysql credentials
+mysql::server::root_password: ENC[PKCS7,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]
+mysql::server::backup::backuppassword: ENC[PKCS7,MIIBiQYJKoZIhvcNAQcDoIIBejCCAXYCAQAxggEhMIIBHQIBADAFMAACAQEwDQYJKoZIhvcNAQEBBQAEggEAitWrOns0L7eaAos+gwMc456icXADfl55J2BTe3jkuOjWAUDA4PY8WbJ1qf1nky6RSclHN3tTDCwCBgLhrCjq58tm0vanSHMcUEh1gs7XTxMaRcTD+upN+Sqnt+PwADlDMUUDVTIckkeUu9OuvFFJtU4+Ub0s2k77EvDa/ARTXBCGWBZLcx2dWGR1WrHcBV+m7iKcqMvSt9BHSz6akDP9bqL72rqxtEAhXR0trH9nE4q2MDBj5nVaakBVzvk3kMRLvmv255O628oOXFUKGAjRESsy/nnErgzV58r8M2wJxJ/er5HpXa/gkctGRZ1Nt5Fcj4cuVc+HQu/8CsMTJ9t2TzBMBgkqhkiG9w0BBwEwHQYJYIZIAWUDBAEqBBAKFzRjtTB3d0po6eaZtYhJgCBUDMCfhse0U+pv0GeWUIUslFRYQaXuYeJUOaOGE01ffg==]
+
+infra::profile::mysql_server::databases:
+  webstats:
+    user: webstats
+    password: ENC[PKCS7,MIIBeQYJKoZIhvcNAQcDoIIBajCCAWYCAQAxggEhMIIBHQIBADAFMAACAQEwDQYJKoZIhvcNAQEBBQAEggEAXDHcsAdvvArPSF/+LL+jRjm76fVvD2XRrAG8WPR9XWvYkEc7/IQE+9Fp0NVDiZOd31zI7A8LjQ/0Fw2z6FjqkHnkQzR68ftzS77RnQuTZjDpedFchDoyjhu9fX02RMwhvGlnAAwNXFbptcrL9QDxI0fr1MWD0+5782WbhOEYqCh0dkQTpJv9m1in48UJcvmjCVBd/6gisKK1C3pa6u60202LWYnc+gxbXnF+HP5j4Gkzwn9ChFkjmkNZl+DhNnhcX/PAp25uNdPycnaNVDD3BXgsW4bQ7TjJq5Qz9LfaVRD50Z79x3IGyUECPMGS+Z2jJGVSjVtbR5knjc8cESSNSTA8BgkqhkiG9w0BBwEwHQYJYIZIAWUDBAEqBBC+Fro6CQyefG6MT8IwDdWGgBArsdXyh7snClQymrXTkooz]
+  replica:
+    user: replica
+    password: ENC[PKCS7,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]
+
+mysql::server::backup::backupdir: /var/lib/backup/mysql
+
+#infra::profile::galera_cluster::galera_servers:
+#  - 192.168.64.3
+#  - 192.168.64.4
+#  - 192.168.64.5
+
+# php-fpm config
+php::fpm::pools:
+  www:
+    ensure: absent
+
+repo::remi_php71: true
+
+infra::profile::apache_php::fpm_pool:
+  piwik:
+    listen_owner: apache
+    listen_group: apache
+    php_admin_value:
+      upload_max_filesize: 20M
+      post_max_size: 20M
+
+# php extension needed
+php::extensions:
+  gd: {}
+  mysqlnd: {}
+  pecl-ssh2: {}
+  xml: {}
+  mbstring: {}
+  curl: {}
+
+# htaccess cerdentials
+infra::profile::apache::htdigest:
+  webstats:
+    www: ENC[PKCS7,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]
+
+# apache vhost config using pixelpark wildcard ssl_cert
+apache::default_vhost: false
+
+infra::profile::apache::pp_vhosts:
+  webstats07:
+    docroot: /var/www/piwik
+    servername: webstats07.pixelpark.net
+    serveraliases:
+      - www.webstats07.pixelpark.net
+    cert_servername: 'wildcard.pixelpark.net'
+    cert_customer: 'pixelpark'
+    ssl_cert: '/etc/pki/tls/certs/wildcard.pixelpark.net-cert.pem'
+    ssl_key: '/etc/pki/tls/private/wildcard.pixelpark.net-key.pem'
+    ssl_chain: '/etc/pki/tls/certs/wildcard.pixelpark.net-cert.pem'
+    docroot_owner: apache
+    docroot_group: pixel
+    docroot_mode: '2775'
+    directories:
+      - directory_root:
+        provider: directory
+        path: '/var/www/piwik'
+        auth_type: Digest
+        auth_name: 'webstats'
+        auth_digest_provider: file
+        auth_user_file: '/etc/httpd/htdigest'
+        auth_require: 'valid-user'
+        addhandlers:
+          - { handler: "proxy:unix:/var/run/php5-fpm-piwik.sock|fcgi://./" , extensions: '.php' }
+        options:
+          - FollowSymLinks
+          - MultiViews
+        allow_override:
+          - All
+        directoryindex: index.php index.html
+    rewrites:
+      - https:
+        comment: 'http to https alle anderen '
+        rewrite_cond:
+          - '%%{ich-trickse}{HTTPS} !=on'
+        rewrite_rule:
+          - '(.*) https://%%{ich-trickse}{HTTP_HOST}%%{ich-trickse}{REQUEST_URI} [R=301,L]'