From: sascha.strassheim Date: Mon, 19 Feb 2018 15:49:18 +0000 (+0100) Subject: test-webstats01/webstats05 piwik eq setup for testing X-Git-Tag: v0.1.0~1600^2~1^2 X-Git-Url: https://git.uhu-banane.de/?a=commitdiff_plain;h=4c95915cadd8eb8c10a5195415cc83cba598784a;p=pixelpark%2Fhiera.git test-webstats01/webstats05 piwik eq setup for testing --- diff --git a/customer/pixelpark-piwik/test-webstats01.pixelpark.net.yaml b/customer/pixelpark-piwik/test-webstats01.pixelpark.net.yaml index d179b5f6..9c73dd49 100644 --- a/customer/pixelpark-piwik/test-webstats01.pixelpark.net.yaml +++ b/customer/pixelpark-piwik/test-webstats01.pixelpark.net.yaml @@ -78,7 +78,7 @@ infra::profile::apache::pp_vhosts: provider: directory path: '/var/www/piwik' addhandlers: - - { handler: "proxy:unix:/var/run/php5-fpm-piwik.sock|fcgi://./" , extensions: '.php' } + - { handler: "proxy:unix:/var/run/php-fpm-piwik.sock|fcgi://./" , extensions: '.php' } options: - FollowSymLinks - MultiViews diff --git a/customer/pixelpark-piwik/webstats05.pixelpark.net.yaml b/customer/pixelpark-piwik/webstats05.pixelpark.net.yaml index 3b0442d3..d8c871ab 100644 --- a/customer/pixelpark-piwik/webstats05.pixelpark.net.yaml +++ b/customer/pixelpark-piwik/webstats05.pixelpark.net.yaml @@ -1,2 +1,92 @@ --- + +# https://intra.pixelpark.com/confluence/display/its/Shared+Piwik2+-+Betriebsdokumentation + +# modules infra::role: base +infra::additional_classes: + - infra::profile::mysql_server + - infra::profile::postfix + - infra::profile::apache_php + +# users and deploy users +accounts::users: + jenkins: + apply: true + +# mysql credentials +mysql::server::root_password: ENC[PKCS7,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] +mysql::server::backup::backuppassword: ENC[PKCS7,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] +mysql::server::backup::backupdir: /var/lib/backup/mysql + + +infra::profile::mysql_server::databases: + webstats: + user: webstats + password: ENC[PKCS7,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] + +# php-fpm config +php::fpm::pools: + www: + ensure: absent + +repo::remi_php71: true + +infra::profile::apache_php::fpm_pool: + piwik: + listen_owner: apache + listen_group: apache + php_admin_value: + upload_max_filesize: 20M + post_max_size: 20M + +# php extension needed +php::extensions: + gd: {} + mysqlnd: {} + pecl-ssh2: {} + xml: {} + mbstring: {} + curl: {} + +# htaccess cerdentials +infra::profile::apache::htdigest: + testserver: + www: ENC[PKCS7,MIIBiQYJKoZIhvcNAQcDoIIBejCCAXYCAQAxggEhMIIBHQIBADAFMAACAQEwDQYJKoZIhvcNAQEBBQAEggEAvvNvfGimCTFyzZJPDD6UoxqXfQRTQU3tRNHzc5l4mi5QOyDVzwHjc+4QlQNzHesLbyByzg3x6xyyixN/uHju7lAN91pvsL1HdNMUtS+/JJODWD4XRnt4/HQw5vnNh1CtrVUhmz2IVZ8Ea6csH9aOAwhkS3+zpP6Gpmvq88yMC44bmZ+A1qGCCNDA3eWxtw6rbcg0/HQTJ4iqs7/6V3jQYzsjZoMln3rkCEKdtKwm0ELmilx+CnRqbHVoX/aRGO6KtqRFgoNLAkp04RpHAmUvDl4NcclLNXnxANNv4ZOajQs/uyw6fVwctzybWv35RpGli2YlGXHosHJg3BUvmPagTjBMBgkqhkiG9w0BBwEwHQYJYIZIAWUDBAEqBBAQVotz+HJLzDaia2SBSEBTgCAJvTomNEI2zOl3z7//M8O5IrYHqgu6LCiD4jxoKI1bvA==] + +# apache vhost config using pixelpark wildcard ssl_cert +apache::default_vhost: false + +infra::profile::apache::pp_vhosts: + test-webstats01: + docroot: /var/www/piwik + servername: www.webstats05.pixelpark.net + serveraliases: + - webstats05.pixelpark.net + cert_servername: 'wildcard.pixelpark.net' + cert_customer: 'pixelpark' + ssl_cert: '/etc/pki/tls/certs/wildcard.pixelpark.net-cert.pem' + ssl_key: '/etc/pki/tls/private/wildcard.pixelpark.net-key.pem' + ssl_chain: '/etc/pki/tls/certs/wildcard.pixelpark.net-cert.pem' + docroot_owner: apache + docroot_group: pixel + docroot_mode: '2775' + directories: + - directory_root: + provider: directory + path: '/var/www/piwik' + addhandlers: + - { handler: "proxy:unix:/var/run/php-fpm-piwik.sock|fcgi://./" , extensions: '.php' } + options: + - FollowSymLinks + - MultiViews + allow_override: + - All + directoryindex: index.php index.html + rewrites: + - https: + comment: 'http to https alle anderen ' + rewrite_cond: + - '%%{ich-trickse}{HTTPS} !=on' + rewrite_rule: + - '(.*) https://%%{ich-trickse}{HTTP_HOST}%%{ich-trickse}{REQUEST_URI} [R=301,L]'