From: Andreas Gerstenberg Date: Wed, 7 Mar 2018 13:03:17 +0000 (+0100) Subject: mbvd-amg-pt-2018 initial X-Git-Tag: v0.1.0~1497^2~20 X-Git-Url: https://git.uhu-banane.de/?a=commitdiff_plain;h=7d1d0a2968389193895cda10a17b41c8492377a2;p=pixelpark%2Fhiera.git mbvd-amg-pt-2018 initial --- diff --git a/customer/mbvd-amg-pt-2018/common.yaml b/customer/mbvd-amg-pt-2018/common.yaml new file mode 100644 index 00000000..6e3b1090 --- /dev/null +++ b/customer/mbvd-amg-pt-2018/common.yaml @@ -0,0 +1,47 @@ +--- +infra::role: base +infra::additional_classes: + - infra::profile::ruby_passenger + - infra::profile::mysql_server + +accounts::users: + deploy.hamburg: + uid: 60201 + shell: "bash" + apply: true + sudo: true + sudo_cmds: + - CHOWNAMGPT + keys: + sten friedrich: + key: "AAAAB3NzaC1yc2EAAAADAQABAAABAQDdaOjZvSaf/wtaS5F8bu4+gIUXha2DiRBZo2pLx79N5fUkBK1mha8IHfQ40iRJwQzr1cKRswEi3Qo8pGYOzNoPs9ugw+r07eMrwLGoNGIFTCv0SaukmtwM+9S1z7hxyy21TztQCAcmgKN4l8jvMKFKb/3Qm+UkroHAf5B+VhlGL/IZXnuSXlTHgKcnS2HtbXlzWRkWHgyjwxT6UmSO31Eyg1SRJ9mFdxwjZo5lyzbBP/gqAQqzxoZX7U4Ty2loO6hqNusf25Byn2qK3x+dQGZ9g/t1luW2oTFavWwY0PR/djyL1ndlgZ69jCAY3YYvHRvoD91gJjHA582hVg4IkCHx" + sandra.streimelweger: + key: "AAAAB3NzaC1yc2EAAAADAQABAAABAQCx1a+GIaWp4/O1puvX9gYt5EMZcqNLyoxSU5sYNrIpuUYZ4mit2eVtsTbuE+gymXZ570v09sTI667p7I/cyoZ8HHsZ9x8yjDEDidKuRD7Sq+aqIdCcH3HLBZdEES8FvqyrcQNLbe4nPdqSrWievoR8VH6/wy7nhVb0A/UGID2XkZLVFJjlAfU22CxuererrCBASJo31ZkW/ScE1Lii2nBvs7PxL9+hyDnyP7fsVV/2fcy85c2reP3YO2jOTeVGnATPUNaL9KbonhxHr+SEWSvsE4tUlumxcqLa8wd/YQqrm0sO0GdqPEIfiUmhj24AltIxwmv/KnC8HODr7SQMyEsH" + tim.schroeder: + key: "AAAAB3NzaC1yc2EAAAADAQABAAABAQDIOt8MfbBxLSVZMrvWY3Yq24VMPbvx7I65Sdh8zqX2+QyJWv9vl9A6JMeXZbl20lXEmo0+q2HxxS/ZLq4v6ZyCdNCVIidTsYMo+w08+/QscWLwAv/rCMCdUOJnwpCAzr1DFMYJxRAEvy4AKppvsoYZ3KZkzKnmXbrN1267T+uKCyLhB/n+6rFVNc2Yso0OsUivg/Hcb2SWy9SUCpN85kubuQvLh4g8WmRGTB8CQtwYTA269KETZ86/gEErf8y2Sc9MwYEe91JW9hhnSVUKBDkEfxdU3Ctn3K5JHB49jq67spx1I0HDlB+M+u5TcIaU5gsPpgagY5NCIKGWgCmzANlZ" + jenkins: + key: "AAAAB3NzaC1yc2EAAAADAQABAAABAQCcA9sDPUizm9LRPYsSQSkkXRlGfhkZcCeQ8XDTbvHLjLlQdJznx3ezpxtmIgKLzMb3Hd3YNB+CAjD//iIDgJkwxNU2qGjm4vJT0WjQ2dwbPyVgN+Ik1nBhqWC2gD5UnDIVULYP5WUkgPPP1if64Q5fnfD9aTkUNOYJ4u9Th7As97e48S+/Z8vqw9EDcr3ZC+OzU7ezU65SHH4mpC1MvLW4EG0DU+omYDuMBusRA9SPx9uAebmoVVqZ23YmK5h9gh8Nc/Av5r6yfYKtkFt6CliGc7qZj56ONfHnP79CgVIlJ5NIHU2s27tTJmoDOHOkJZ11TuQp4HbuMAUAWHi6Aie7" + katrin.klimat: + key: "AAAAB3NzaC1yc2EAAAABJQAAAQEArwvfYXdwh249BWY+Go7ep3HWaU4saqufmzfsjlX7EpeQN10aRSLfi+roRpWfpGVPWOJe0aUQQCbuWPo7n/QKJQ6M4K/mhwcSHmGUpO8s6wAsWMgJFzL8AIFFOqlJbErc1JeQw6GfJUxS66ug+ozXHNElvN+rKUmTNJLSPOhfCQ7nbHVet2iD9DXRbJ/QV7gxDzozroDNn4O/+jlSxACkQzDdt9/5OGWDyRekPLzw+oEXVLcmQyJfP6ElKKdieFGX1MUyEEjZWFp2uvEbRVncOv08DFm5HOFDgofHw/pebkS6BvVaWIDarCAI60ZYN9XXR2lmi2A80xHdGOQ7TkgQFw==" + sidney.jansen: + key: "AAAAB3NzaC1yc2EAAAADAQABAAABAQDEr3bnmo47iQIMvpdFN6khFPBTItqapoy1L+Cj9XHXkkuOesuGNDw56AEomzgpRn+3GqXNENWgTd4nwUGCCbQLc4H2Uk3XXOk5oDZYpCOFSJ3T6uS6s7+kEky+68ocWjcI5oV+0g9dSDt5fpS13LDxnPNfmBYwJzfOjrtXddITVehjQf9Utft2M057VJ9cQNEjpAMehIsbqhWR2yuDUraVpc/wSOBjr52A88gfloO4U3JMKPsTu/vnTvJyG45UalhTScavB+6Y662uesi4XSjmv+ZUUnMToSh4jJU0Wh5QqVxz0Mqhj6w5SOqNSk5p97JJn14RvsbxiiEv0ZDvFVBn" + alma.daschke: + key: "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" + thomas.eggert: + key: "AAAAB3NzaC1yc2EAAAADAQABAAABAQCij22B0++p8jWTB5HOMEmQx2N5Cj29tzx5qpIMVMwKfIvIcXE3Az1WqXcNcnVifZRMxNWKCRn92S8DbCxt6CU7i0IDvX/eJZarLXENWzfFFv3RhuB6XMNSCJG0KQzERy0S+sBFcYU5jvi7ciTtOsmsNZ3IAUDWc4J+dg7BkeY0EAam0y0Qg3OzZVO/pZFsmyHC0VgLiEgcdGGpODOH+6A1V3MbKF1HoBizsdIAj315F3yuBsGSVlw8u70MphdMb+HpjlIl4EScz2lo5exEwnMsuj/6fNhldcOH2L3i/0k3EM0KKKD2DBBzlib31GlaSsZLnC1yJo20jKwq0TejuDId" + comment: "Deployuser Hamburg" + group: amgpt + # temporaer + groups: + - apache + +sudo::configs: + cmd_alias: + priority: "05" + content: | + Cmnd_Alias CHOWNAMGPT = /bin/chown -R amgpt\:amgpt /var/www/amgpt + becomeApache: + priority: "06" + content: | + deploy.hamburg ALL=(apache) NOPASSWD: ALL + deploy.hamburg ALL=(amgpt) NOPASSWD: ALL \ No newline at end of file diff --git a/customer/mbvd-amg-pt-2018/stage-web-amg-pt-de-2018.pixelpark.net.yaml b/customer/mbvd-amg-pt-2018/stage-web-amg-pt-de-2018.pixelpark.net.yaml index 3b0442d3..b263b65e 100644 --- a/customer/mbvd-amg-pt-2018/stage-web-amg-pt-de-2018.pixelpark.net.yaml +++ b/customer/mbvd-amg-pt-2018/stage-web-amg-pt-de-2018.pixelpark.net.yaml @@ -1,2 +1,50 @@ --- -infra::role: base +mysql::server::root_password: ENC[PKCS7,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] +mysql::server::backup::backuppassword: ENC[PKCS7,MIIBiQYJKoZIhvcNAQcDoIIBejCCAXYCAQAxggEhMIIBHQIBADAFMAACAQEwDQYJKoZIhvcNAQEBBQAEggEAvIpTkvGAvKQz9d6FKL34IB/LmASIAzp5hr5xeSh/fAG3sT7DCuRLeV8Iw9+q/VAuvxNybE8nrqT7AF10WMsiVo6LqQFLhQwxzuzWDIY7NwaYSUx6ZfAQma1VP1djWfg6r4AEXSlUuDYYf1tB/qWvilSjnsn6Iqg/owKcGf7KZ0EaHKuisDWKBlMnw/2NLM+hOKVsYR3tSxglg3ufjIahgZiJiXQUUcvbkbQdHYXEt6SF94saMkl5Bmi1W4C9bDcbHC7P5cgoAmPc7WrPbZjw97QLy+Z1lrD9hDgrD+yBv78rQSueBRg1DTPKjkZrTpQpVrDsyNqnCEVCOlyyifxAsDBMBgkqhkiG9w0BBwEwHQYJYIZIAWUDBAEqBBBv7IzYIRflDMGxsx+70KTOgCB4vZlNmBzCY8ZTgKlvwE8kRjtW6UdEIopA0GjC3xFNKQ==] +infra::profile::mysql_server::databases: + amgpt: + user: amgpt + password: ENC[PKCS7,MIIBiQYJKoZIhvcNAQcDoIIBejCCAXYCAQAxggEhMIIBHQIBADAFMAACAQEwDQYJKoZIhvcNAQEBBQAEggEAOYhV2e/DNUa4f0Al1fPcj/aLN58K+ft6KIfld2OiweuB2in4t0+4kACQjviL9dczXuG9ntjMhakiCn4CNGMxh/CvBBC8vlYLNXoXsYrClWLyN412ad6hoXO4DQK/nZc6raYypwDsq7fN11DRALazNH4f+txKQEI1J0DclMvuG5TQ7HduWuxQwnaRMaYRObf95uiuoh09aejhAJMzem3KXamtL97rTDoDDeKc1yz5ypQht0QwjhR5bLoAcrbgncRqmv/ApDG6MQtzYgvz5+64dCn/VdJzpvR0s3RNq1QT9bEWL2i2ui6YoTVMtvStjvfb3xIpnjou0A5d+zH5wDFvGzBMBgkqhkiG9w0BBwEwHQYJYIZIAWUDBAEqBBByCXYGFogCvROTy+zSivgSgCD4lak5QJ3dDgjAJ42DKVTdKgxrFSC5LX/ImYvgEUYOXw==] + +infra::profile::apache::htdigest: + server: + www: ENC[PKCS7,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] + +sudo::configs: + deploy.hamburg: + priority: "06" + content: | + deploy.hamburg ALL=(apache) NOPASSWD: ALL + +infra::profile::ruby_passenger::projects: + amgpt: + servername: stage-web-amg-pt-de-2018.pixelpark.net + serveraliases: + - stage-www-amg-pt-de-2018.pixelpark.net + cert_servername: 'wildcard.pixelpark.net' + cert_customer: 'pixelpark' + ssl_cert: '/etc/pki/tls/certs/wildcard.pixelpark.net-cert.pem' + ssl_key: '/etc/pki/tls/private/wildcard.pixelpark.net-key.pem' + ssl_chain: '/etc/pki/tls/certs/wildcard.pixelpark.net-cert.pem' + passenger_user: amgpt + passenger_app_env: stage + approot_owner: apache + approot: /var/www/amgpt + ruby_version: 'ruby-2.2.5' + directories: + - provider: directory + path: '/var/www/amgpt/public' + options: + - FollowSymLinks + - MultiViews + allow_override: + - All + directoryindex: index.php index.html + - provider: location + path: '/' + auth_type: Digest + auth_name: server + auth_digest_provider: file + auth_digest_algorithm: MD5 + auth_user_file: '/etc/httpd/htdigest' + auth_require: 'valid-user' diff --git a/customer/mbvd-amg-pt-2018/web-amg-pt-de-2018.pixelpark.net.yaml b/customer/mbvd-amg-pt-2018/web-amg-pt-de-2018.pixelpark.net.yaml index 3b0442d3..52bcd9fa 100644 --- a/customer/mbvd-amg-pt-2018/web-amg-pt-de-2018.pixelpark.net.yaml +++ b/customer/mbvd-amg-pt-2018/web-amg-pt-de-2018.pixelpark.net.yaml @@ -1,2 +1,58 @@ --- -infra::role: base +mysql::server::root_password: ENC[PKCS7,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] +mysql::server::backup::backuppassword: ENC[PKCS7,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] +infra::profile::mysql_server::databases: + amgpt: + user: amgpt + password: ENC[PKCS7,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] + +infra::profile::apache::htdigest: + server: + www: ENC[PKCS7,MIIBeQYJKoZIhvcNAQcDoIIBajCCAWYCAQAxggEhMIIBHQIBADAFMAACAQEwDQYJKoZIhvcNAQEBBQAEggEATcaUG4i8EpA77VcBEyIPJfKLSyIpEgSvHSdCy6071ZSitiW44SGYzcMR28iz0n4VzuspOpJZxBdziArf3fV+ZJY8lXw7GLIBRCqTPD2P+updZw4kTGfDFCeUijQqQFw10xShU7HagDcC3O+wdq009IqHNt8+BWYXCuwB5fTyvk4U170/hmknjfdFXvK0uXMc/Q78XtjsAtG8bYOKrOLwslsFTQAG+iGEX4nSLJTW87z8dN/ndJ6trGNwpN9RSoFOLJSL3YGtfr+fGnPOrLxsI+mCe3060OOTf9txdqu5hL1iqt/hwLHn/d66vM0FOW93y2zCx6OXvaii7pvIVvoD3zA8BgkqhkiG9w0BBwEwHQYJYIZIAWUDBAEqBBAQKqiqATlPRSzd+5KfQEPigBD4Hh1nhtt0JyeARjh+RiBv] + +sudo::configs: + deploy.hamburg: + priority: "06" + content: | + deploy.hamburg ALL=(apache) NOPASSWD: ALL + +infra::profile::ruby_passenger::projects: + amgpt: + servername: web-amg-pt-de-2018.pixelpark.net + serveraliases: + - www-amg-pt-de-2018.pixelpark.net + - www.amg-pt.de + - amg-pt.de + cert_servername: 'wildcard.pixelpark.net' + cert_customer: 'pixelpark' + ssl_cert: '/etc/pki/tls/certs/wildcard.pixelpark.net-cert.pem' + ssl_key: '/etc/pki/tls/private/wildcard.pixelpark.net-key.pem' + ssl_chain: '/etc/pki/tls/certs/wildcard.pixelpark.net-cert.pem' + passenger_user: amgpt + passenger_app_env: live + approot_owner: apache + approot: /var/www/amgpt + ruby_version: 'ruby-2.2.5' + directories: + - provider: directory + path: '/var/www/amgpt/public' + options: + - FollowSymLinks + - MultiViews + allow_override: + - All + directoryindex: index.php index.html + - provider: location + path: '/' + auth_type: Digest + auth_name: server + auth_digest_provider: file + auth_digest_algorithm: MD5 + auth_user_file: '/etc/httpd/htdigest' + auth_require: 'valid-user' +# rewrites: +# - comment: 'Weiterleitung auf www' # Weiterleitung auf https macht die App selbst +# rewrite_cond: +# - '%%{ich-trickse}{HTTP_HOST} !^www\.amg-pt\.de$ [NC]' +# rewrite_rule: +# - '^(.*)$ http://www.amg-pt.de$1 [R=301,L]'