From: Andreas Gerstenberg <gerstenberg@pixelpark.com>
Date: Wed, 23 Aug 2017 12:29:58 +0000 (+0200)
Subject: telekom-ehealth initial
X-Git-Tag: v0.1.0~2544
X-Git-Url: https://git.uhu-banane.de/?a=commitdiff_plain;h=603c21398c24121e17173443ed8c8078b649c229;p=pixelpark%2Fhiera.git

telekom-ehealth initial
---

diff --git a/customer/telekom-ehealth/common.yaml b/customer/telekom-ehealth/common.yaml
new file mode 100644
index 00000000..2e61a3e0
--- /dev/null
+++ b/customer/telekom-ehealth/common.yaml
@@ -0,0 +1,45 @@
+---
+infra::role: base
+infra::additional_classes:
+  - infra::profile::mysql_server
+  - infra::profile::wordpress
+  - apache::mod::headers
+
+accounts::users:
+  katrin.klimat:
+    apply: true
+    group: apache
+  tim.schroeder:
+    apply: true
+    group: apache
+  sten.friedrich:
+    apply: true
+    group: apache
+
+apache::default_vhost: false
+
+
+repo::remi_php71: true
+
+php::settings:
+  Date/date.timezone: Europe/Berlin
+  PHP/expose_php: 'Off'
+
+php::fpm::pools:
+  www:
+    ensure: absent
+
+php::extensions:
+  gd: {}
+  opcache: {}
+  mysqlnd: {}
+  soap: {}
+  mbstring: {}
+  xml: {}
+  suhosin:
+    settings:
+      suhosin.request.max_varname_length: 200
+      suhosin.post.max_name_length: 200
+      suhosin.get.max_name_length: 200
+      suhosin.get.max_value_length: 2000
+      suhosin.executor.include.whitelist: 'phar,vfs'
diff --git a/customer/telekom-ehealth/test-www-ehealth-telematik-com.pixelpark.net.yaml b/customer/telekom-ehealth/test-www-ehealth-telematik-com.pixelpark.net.yaml
index 3b0442d3..6b2e59c9 100644
--- a/customer/telekom-ehealth/test-www-ehealth-telematik-com.pixelpark.net.yaml
+++ b/customer/telekom-ehealth/test-www-ehealth-telematik-com.pixelpark.net.yaml
@@ -1,2 +1,46 @@
 ---
-infra::role: base
+mysql::server::root_password: ENC[PKCS7,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]
+mysql::server::backup::backuppassword: ENC[PKCS7,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]
+infra::profile::mysql_server::databases:
+  ehealth:
+    user: ehealth
+    password: ENC[PKCS7,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]
+
+infra::profile::apache::htdigest:
+  server:
+    www: ENC[PKCS7,MIIBeQYJKoZIhvcNAQcDoIIBajCCAWYCAQAxggEhMIIBHQIBADAFMAACAQEwDQYJKoZIhvcNAQEBBQAEggEATSsvP+0lwJccTpEHjOH8RzDleGwgw3DPXfClbX/Q9vZTs4qgCw4C0oCsdCl1IzfG+psFFvVghx6OIRzwe0E7WqZlK7EFLI1DfLe4cfSC1EuAKPNO/ALloZFBdDX0Xv3WeP7nkjlV/zkOCGvgftykXS7g/bFQfobY9ev6bs8HbjefyJEM9uf7JonAOB46R7dYtKCl5DZIygpvZIAUYDKc/ZltXy6/d/YXzRW0OxA5SaBnJz2iR7jL4sqscNyig60cucJ+YjetAcVw4pb8JGQgmRPVlPkKUVGn8RM1r52gaM+G0ajWeNzzhuB38cLMZnA+mKRjmOO7RNfhvTjLaqD0+DA8BgkqhkiG9w0BBwEwHQYJYIZIAWUDBAEqBBAGjsvSfBFvrlnxORIHjLLOgBBG30Cw7Rlzs8tgP4/tOJbE]
+  server2:
+    www: ENC[PKCS7,MIIBeQYJKoZIhvcNAQcDoIIBajCCAWYCAQAxggEhMIIBHQIBADAFMAACAQEwDQYJKoZIhvcNAQEBBQAEggEAd9j+GdxoFgQHMAFDEy7/xC1ICHrQwlLIcLFnnqawLBzatEe6auH0TVX5pzF87P5ecuZr1oAtdUcWfAN3pC8sOK56qmGUi4Nsw0pbHcOp7s80quHLwzQTvVF5VgBVzgtsBpa0Kx8Fg8dt4fNv3rnwoynqgdVH/xEu9uoqLV4FhbT5qkPV2rsLNCWfCM2wRALzxU4pAdwXvPGsxvgjhco+roTD2mnQ6mDX8ojWU+JDr9yNKamdfeItE6Z3sXs77nS73rkpC/A54Rbt3d0o3R1X4EGEBfjq0nEMhqDIIUkOjMqiXJ0kugEW0aa/jl3yXwG1e3xKbRqiep6R57kXN8+0WzA8BgkqhkiG9w0BBwEwHQYJYIZIAWUDBAEqBBDsILAySf6LH63TEMSxziAOgBCBsbv6ZX0Gm/OB1L4sZF3P]
+
+infra::profile::wordpress::projects:
+  ehealth:
+    docroot: '/var/www/ehealth'
+    servername: test-www-ehealth-telematik-com.pixelpark.net
+    cert_servername: 'wildcard.pixelpark.net'
+    cert_customer: 'pixelpark'
+    ssl_cert: '/etc/pki/tls/certs/wildcard.pixelpark.net-cert.pem'
+    ssl_key: '/etc/pki/tls/private/wildcard.pixelpark.net-key.pem'
+    ssl_chain: '/etc/pki/tls/certs/wildcard.pixelpark.net-cert.pem'
+    directories:
+      - provider: location
+        path: '/'
+        auth_type: Digest
+        auth_name: server
+        auth_digest_provider: file
+        auth_digest_algorithm: MD5
+        auth_user_file: '/etc/httpd/htdigest'
+        auth_require: 'valid-user'
+        require:
+          - local
+      - provider: location
+        path: '/wp-admin/'
+        auth_type: Digest
+        auth_name: server2
+        auth_digest_provider: file
+        auth_digest_algorithm: MD5
+        auth_user_file: '/etc/httpd/htdigest'
+        auth_require: 'valid-user'
+        require:
+          - local
+    setenvif_non_ssl:
+      - 'HTTPS on HTTPS=on'
diff --git a/customer/telekom-ehealth/www-ehealth-telematik-com.pixelpark.net.yaml b/customer/telekom-ehealth/www-ehealth-telematik-com.pixelpark.net.yaml
index 3b0442d3..0b54a93a 100644
--- a/customer/telekom-ehealth/www-ehealth-telematik-com.pixelpark.net.yaml
+++ b/customer/telekom-ehealth/www-ehealth-telematik-com.pixelpark.net.yaml
@@ -1,2 +1,49 @@
 ---
-infra::role: base
+mysql::server::root_password: ENC[PKCS7,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]
+mysql::server::backup::backuppassword: ENC[PKCS7,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]
+infra::profile::mysql_server::databases:
+  ehealth:
+    user: ehealth
+    password: ENC[PKCS7,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]
+
+infra::profile::apache::htdigest:
+  server:
+    www: ENC[PKCS7,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]
+  server2:
+    www: ENC[PKCS7,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]
+
+infra::profile::wordpress::projects:
+  ehealth:
+    docroot: '/var/www/ehealth'
+    servername: www.ehealth-telematik.com
+    serveraliases:
+      - ehealth-telematik.com
+      - www-ehealth-telematik-com.pixelpark.net
+    cert_servername: 'wildcard.pixelpark.net'
+    cert_customer: 'pixelpark'
+    ssl_cert: '/etc/pki/tls/certs/wildcard.pixelpark.net-cert.pem'
+    ssl_key: '/etc/pki/tls/private/wildcard.pixelpark.net-key.pem'
+    ssl_chain: '/etc/pki/tls/certs/wildcard.pixelpark.net-cert.pem'
+    directories:
+      - provider: location
+        path: '/'
+        auth_type: Digest
+        auth_name: server2
+        auth_digest_provider: file
+        auth_digest_algorithm: MD5
+        auth_user_file: '/etc/httpd/htdigest'
+        auth_require: 'valid-user'
+        require:
+          - local
+      - provider: location
+        path: '/wp-admin/'
+        auth_type: Digest
+        auth_name: server2
+        auth_digest_provider: file
+        auth_digest_algorithm: MD5
+        auth_user_file: '/etc/httpd/htdigest'
+        auth_require: 'valid-user'
+        require:
+          - local
+    setenvif_non_ssl:
+      - 'HTTPS on HTTPS=on'