From: Andreas Gerstenberg Date: Tue, 10 Oct 2017 13:59:53 +0000 (+0200) Subject: mbvd-besttoimpress initial X-Git-Tag: v0.1.0~2367 X-Git-Url: https://git.uhu-banane.de/?a=commitdiff_plain;h=bd417ac82e74f9a65da523eeffbe49828157b109;p=pixelpark%2Fhiera.git mbvd-besttoimpress initial --- diff --git a/customer/mbvd-besttoimpress/common.yaml b/customer/mbvd-besttoimpress/common.yaml index 3b0442d3..f16961bb 100644 --- a/customer/mbvd-besttoimpress/common.yaml +++ b/customer/mbvd-besttoimpress/common.yaml @@ -1,2 +1,50 @@ --- infra::role: base + +accounts::users: + deploy.byl: + uid: 40000 + shell: "bash" + apply: true + sudo: true + sudo_cmds: + - CHOWNBYL + - CHOWNJOB + keys: + developer_01: + key: "AAAAB3NzaC1yc2EAAAABIwAAAQEAxxoUXNNIYEmNiXjItCfTlSFoj4iG11R6R140yNgUeljp+QDktNcvmrQJbDXFritR8qmgCmF12S5IxsgOR/zMINSDQQqr2PNc+cdhVbZN4Q1OnPe2C+Qfw7Qqi6Z9CK96G2zoj7tb+9PixWIj9vuZnT293pKKvGc9aOBdizG1mb/3MPfMRWY8ImipZgD8XmNxNMK0JU4smAOXWlawFAAHCGMXr5nSi0UEJspYOU2ZOPbRHLEPh5dCD4vqc+OHwn2wXPrRUp+ZZhTRY8MweQUG4zwtGbIZDscNkVVT2/GwJNsOv3Bpq8Z7z98UFjUZ6/w6wEbI65FR3bavKg7i4hzDjQ==" + developer_02: + key: "AAAAB3NzaC1yc2EAAAABIwAAAQEA1AmC3BVC2E1vNqFz0pdqrNhZgsqRntFX8YUXec5yOCkXL+Pns6Z/g4THx44w/4pUpxo6+PcDIzWHKcrKYqpudm9keTjwKHUBsYZWJ1VsVUy1Zhk8iE5nMKt/lQAWVDMebVcaPGwJzwl0vqnQTwO6WWg6KTil6vY1qzUPEY6rg5l2qyqGg8hSRWmKrwTj7byP6PN/uqbkXvqPPz1Ygc/ouEJzzMGwaD4cEypXH/6AAsynFuRUzpPKD2LzKK+oVbe1BXpzteuEwHBbdwhCt1HFlAKX2GGXQqrJRh3hUZsbCHWqunrn7V3TZAM0Y3pGgShjzMEEGQF+pDIL59l62NfboQ==" + developer_03: + key: "AAAAB3NzaC1yc2EAAAADAQABAAABAQDebIoUpwJie2D91+IVOll7JbQxRQZVjCkqWThQ5b6kK6PwKyoDq++u9VkHKDIVXR86EJEbhTTzmAkxQTpRp5JP2ZDWtG7uAYtekykGycPAfOiVjp9TZM/RiPm8HQYr+2fCNVHVYqmMAnKllBVSLK/47pVhDtnYYuKwWaBFHFp746cMmmu1/pENGqXh868seO/ukSDu5uBNAU5/ycs/HWLeQCsgK+O4QB+giYDRiV0UPVWqAulz1Sxm7P3mo4pjbIMHSfHHFTVazmX6RIU+tkxd69/vGBURebg2lwx4QM3i87qOg5aPinZ3mfR+WKhOq/aNMGBIxRA61HKWe/DQb5F5" + developer_04: + key: "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" + developer_05: + key: "AAAAB3NzaC1yc2EAAAADAQABAAABAQDCRBmHRHAbDgYG42FW79RFMzkLrR1RKmfpnN8D/jimDsVRPla3E0TzNsLSq3jQ2m+vZMKWgmArV82enfT2UG50T96shFjbxoBGmVgEonY2KsjpO4pzhClH4K6/hLvr271iVEs6v/b1bdLmfYQySQAp1wMz/ENx+Ueo91jQAPR05V5vJTnn2SG8xFBQtpjbBKqqXqKMBpTuy1zVQVYB/fNHku40oyF1+3g87lqWXC4fq02ic8rlk8eGypW6m0buIodc8EzXtrl1OQJoNMfSVs7jRq8jhQFCFBjVex+tiafCWXAwoqK9hZaAjtAjH9rGdKA9S6ve/gkBkEWBysvAU+Rx" + developer_06: + key: "AAAB3NzaC1yc2EAAAADAQABAAABAQCy3+fzQ9xFm4Ximw5rxMyX3focvNAYX838r3DbaeoG68Sps6JTgAqdNebKzBJEuunGHuq8d537chgjAOcEYWy9bL9MH1fHSUJBSMTuCwTTnwM1hh3an82HFlWAmB0bN20cEGXWAVd6Vfl1EG9gyaP4VUwNsTLj0++/MxhXsCfgJY0r2JgJHtF1kzAWyIJXVKb8K+mEZnNrCgR02d8cgOWrITAZVHUnZuhPFhv6QuW8ClR4dEDL7bChewH3sIaIX0LFyCBNF8w/Q6PHJWj5HvllHhY4q9SVO/jjcvezaIrEeCmcJ2hpYZWh99ItwfLf+fKULl/Nc8eqXV8lAza8AUBj" + developer_07: + key: "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" + developer_08: + key: "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" + developer_09: + key: "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" + developer_10: + key: "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" + comment: "Developer from byl.de" + group: byl + groups: + - apache + +sudo::configs: + cmd_alias: + priority: "05" + content: | + Cmnd_Alias CHOWNBYL = /bin/chown -R byl\:byl /var/www/besttoimpress + Cmnd_Alias CHOWNJOB = /bin/chown -R byl\:byl /var/www/job + becomeApache: + priority: "06" + content: | + deploy.byl ALL=(apache) NOPASSWD: ALL + deploy.byl ALL=(byl) NOPASSWD: ALL + diff --git a/customer/mbvd-besttoimpress/job-besttoimpress-de.pixelpark.net.yaml b/customer/mbvd-besttoimpress/job-besttoimpress-de.pixelpark.net.yaml index ed97d539..95fd8f33 100644 --- a/customer/mbvd-besttoimpress/job-besttoimpress-de.pixelpark.net.yaml +++ b/customer/mbvd-besttoimpress/job-besttoimpress-de.pixelpark.net.yaml @@ -1 +1,79 @@ --- +infra::additional_classes: + - infra::profile::apache_php + +infra::additional_packages: + ImageMagick: {} + +apache::mpm_module: event +apache::default_vhost: false +repo::remi_php71: true + +php::extensions: + gd: {} + opcache: {} + mbstring: {} + xml: {} + mysqlnd: {} + pdo: {} + intl: {} + +php::settings: + Date/date.timezone: Europe/Berlin + PHP/expose_php: 'Off' + PHP/short_open_tag: 'Off' + +php::fpm::pools: + www: + ensure: absent + +infra::profile::apache_php::fpm_pool: + besttoimpress: + listen_owner: apache + listen_group: apache + +infra::profile::apache::htdigest: + server: + www: ENC[PKCS7,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] + +infra::profile::apache::pp_vhosts: + besttoimpress: + docroot: /var/www/besttoimpress + servername: job-besttoimpress-de.pixelpark.net + cert_servername: 'wildcard.pixelpark.net' + cert_customer: 'pixelpark' + ssl_cert: '/etc/pki/tls/certs/wildcard.pixelpark.net-cert.pem' + ssl_chain: '/etc/pki/tls/certs/wildcard.pixelpark.net-cert.pem' + ssl_key: '/etc/pki/tls/private/wildcard.pixelpark.net-key.pem' + rewrites: + - comment: 'Weiterleitung auf https' + rewrite_cond: + - '%%{ich-trickse}{HTTP:HTTPS} !=on [NC]' + rewrite_rule: + - '^(.*)$ https://job-besttoimpress-de.pixelpark.net$1 [R=301,L]' + setenvif_ssl: + - 'HTTPS on HTTPS=on' + docroot_owner: apache + docroot_group: apache + docroot_mode: '2775' + directories: + - directory_root: + provider: directory + path: '/var/www/besttoimpress/web' + addhandlers: + - { handler: "proxy:unix:/var/run/php5-fpm-besttoimpress.sock|fcgi://./" , extensions: '.php' } + options: + - FollowSymLinks + - MultiViews + allow_override: + - All + directoryindex: index.php index.html + - location1: + provider: location + path: '/' + auth_type: Digest + auth_name: server + auth_digest_provider: file + auth_digest_algorithm: MD5 + auth_user_file: '/etc/httpd/htdigest' + auth_require: 'valid-user' diff --git a/customer/mbvd-besttoimpress/stage-job-besttoimpress-de.pixelpark.net.yaml b/customer/mbvd-besttoimpress/stage-job-besttoimpress-de.pixelpark.net.yaml index ed97d539..f1e07a12 100644 --- a/customer/mbvd-besttoimpress/stage-job-besttoimpress-de.pixelpark.net.yaml +++ b/customer/mbvd-besttoimpress/stage-job-besttoimpress-de.pixelpark.net.yaml @@ -1 +1,79 @@ --- +infra::additional_classes: + - infra::profile::apache_php + +infra::additional_packages: + ImageMagick: {} + +apache::mpm_module: event +apache::default_vhost: false +repo::remi_php71: true + +php::extensions: + gd: {} + opcache: {} + mbstring: {} + xml: {} + mysqlnd: {} + pdo: {} + intl: {} + +php::settings: + Date/date.timezone: Europe/Berlin + PHP/expose_php: 'Off' + PHP/short_open_tag: 'Off' + +php::fpm::pools: + www: + ensure: absent + +infra::profile::apache_php::fpm_pool: + besttoimpress: + listen_owner: apache + listen_group: apache + +infra::profile::apache::htdigest: + server: + www: ENC[PKCS7,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] + +infra::profile::apache::pp_vhosts: + besttoimpress: + docroot: /var/www/besttoimpress + servername: stage-job-besttoimpress-de.pixelpark.net + cert_servername: 'wildcard.pixelpark.net' + cert_customer: 'pixelpark' + ssl_cert: '/etc/pki/tls/certs/wildcard.pixelpark.net-cert.pem' + ssl_chain: '/etc/pki/tls/certs/wildcard.pixelpark.net-cert.pem' + ssl_key: '/etc/pki/tls/private/wildcard.pixelpark.net-key.pem' + rewrites: + - comment: 'Weiterleitung auf https' + rewrite_cond: + - '%%{ich-trickse}{HTTP:HTTPS} !=on [NC]' + rewrite_rule: + - '^(.*)$ https://stage-job-besttoimpress-de.pixelpark.net$1 [R=301,L]' + setenvif_ssl: + - 'HTTPS on HTTPS=on' + docroot_owner: apache + docroot_group: apache + docroot_mode: '2775' + directories: + - directory_root: + provider: directory + path: '/var/www/besttoimpress/web' + addhandlers: + - { handler: "proxy:unix:/var/run/php5-fpm-besttoimpress.sock|fcgi://./" , extensions: '.php' } + options: + - FollowSymLinks + - MultiViews + allow_override: + - All + directoryindex: index.php index.html + - location1: + provider: location + path: '/' + auth_type: Digest + auth_name: server + auth_digest_provider: file + auth_digest_algorithm: MD5 + auth_user_file: '/etc/httpd/htdigest' + auth_require: 'valid-user' diff --git a/customer/mbvd-besttoimpress/stage-web-besttoimpress-de.pixelpark.net.yaml b/customer/mbvd-besttoimpress/stage-web-besttoimpress-de.pixelpark.net.yaml index 7d9b2347..659de0aa 100644 --- a/customer/mbvd-besttoimpress/stage-web-besttoimpress-de.pixelpark.net.yaml +++ b/customer/mbvd-besttoimpress/stage-web-besttoimpress-de.pixelpark.net.yaml @@ -1,2 +1,68 @@ --- -infra::role: base \ No newline at end of file +infra::additional_classes: + - infra::profile::wordpress + - apache::mod::headers + - infra::profile::mysql_server + +apache::default_vhost: false + +repo::remi_php71: true + +php::settings: + Date/date.timezone: Europe/Berlin + PHP/expose_php: 'Off' + +php::fpm::pools: + www: + ensure: absent + +php::extensions: + gd: {} + opcache: {} + mysqlnd: {} + soap: {} + mbstring: {} + xml: {} + suhosin: + settings: + suhosin.request.max_varname_length: 200 + suhosin.post.max_name_length: 200 + suhosin.get.max_name_length: 200 + suhosin.get.max_value_length: 2000 + suhosin.executor.include.whitelist: 'phar,vfs' + +mysql::server::root_password: ENC[PKCS7,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] +mysql::server::backup::backuppassword: ENC[PKCS7,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] +infra::profile::mysql_server::databases: + besttoimpress: + user: besttoimpress + password: ENC[PKCS7,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] + +infra::profile::apache::htdigest: + server: + www: ENC[PKCS7,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] + +infra::profile::wordpress::projects: + besttoimpress: + docroot: '/var/www/besttoimpress' + servername: stage-www-besttoimpress-de.pixelpark.net + serveraliases: + - stage-web-besttoimpress-de.pixelpark.net + cert_servername: 'wildcard.pixelpark.net' + cert_customer: 'pixelpark' + ssl_cert: '/etc/pki/tls/certs/wildcard.pixelpark.net-cert.pem' + ssl_key: '/etc/pki/tls/private/wildcard.pixelpark.net-key.pem' + ssl_chain: '/etc/pki/tls/certs/wildcard.pixelpark.net-cert.pem' + directories: + - provider: location + path: '/' + auth_type: Digest + auth_name: server + auth_digest_provider: file + auth_digest_algorithm: MD5 + auth_user_file: '/etc/httpd/htdigest' + auth_require: 'valid-user' + require: + - local + setenvif_non_ssl: + - 'HTTPS on HTTPS=on' \ No newline at end of file diff --git a/customer/mbvd-besttoimpress/web-besttoimpress-de.pixelpark.net.yaml b/customer/mbvd-besttoimpress/web-besttoimpress-de.pixelpark.net.yaml index ed97d539..9bad5799 100644 --- a/customer/mbvd-besttoimpress/web-besttoimpress-de.pixelpark.net.yaml +++ b/customer/mbvd-besttoimpress/web-besttoimpress-de.pixelpark.net.yaml @@ -1 +1,69 @@ --- +infra::additional_classes: + - infra::profile::wordpress + - apache::mod::headers + - infra::profile::mysql_server + +apache::default_vhost: false + +repo::remi_php71: true + +php::settings: + Date/date.timezone: Europe/Berlin + PHP/expose_php: 'Off' + +php::fpm::pools: + www: + ensure: absent + +php::extensions: + gd: {} + opcache: {} + mysqlnd: {} + soap: {} + mbstring: {} + xml: {} + suhosin: + settings: + suhosin.request.max_varname_length: 200 + suhosin.post.max_name_length: 200 + suhosin.get.max_name_length: 200 + suhosin.get.max_value_length: 2000 + suhosin.executor.include.whitelist: 'phar,vfs' + +mysql::server::root_password: ENC[PKCS7,MIIBiQYJKoZIhvcNAQcDoIIBejCCAXYCAQAxggEhMIIBHQIBADAFMAACAQEwDQYJKoZIhvcNAQEBBQAEggEACyzu7mAps0fiunHc6PF02zA819fUITMqvmMVCoHGFNouD9fSxPh2/nkxby4+WrF1KWSQLOPv8avj48tIW0ijH1ByZZeFRbKhdGKckfb6EJR/4DJZLMgMd1nhNW1cpG84YWLOP5I7eqjoKYutJ7pEOXcbql4CfKTT6+tzt7r3WKVaOkZhj0dcdpmZVzQx/kxsh1jXq/uoZB1GaoBipwAg1hO5o78U57G0OFz6A8YfTssvZ54iFT2tHXrjM1qVKf00V8lHda+2T1EKgi9HR0R6gxARUrbChqunAnj16F8B2kwnwRqT3xm3riSK7tQ/Q0pY6bsozYjlcBYdtGS6JWl1jTBMBgkqhkiG9w0BBwEwHQYJYIZIAWUDBAEqBBACxtHQb+aoq2DxgGquirBlgCCgGAUiRjthpaFIFq0JNfK+fquWa+KOjOjg6OYo/C4Ikg==] +mysql::server::backup::backuppassword: ENC[PKCS7,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] +infra::profile::mysql_server::databases: + besttoimpress: + user: besttoimpress + password: ENC[PKCS7,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] + +infra::profile::apache::htdigest: + server: + www: ENC[PKCS7,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] + +infra::profile::wordpress::projects: + besttoimpress: + docroot: '/var/www/besttoimpress' + servername: www.besttoimpress.de + serveraliases: + - web-besttoimpress-de.pixelpark.net + - www-besttoimpress-de.pixelpark.net + cert_servername: 'wildcard.pixelpark.net' + cert_customer: 'pixelpark' + ssl_cert: '/etc/pki/tls/certs/wildcard.pixelpark.net-cert.pem' + ssl_key: '/etc/pki/tls/private/wildcard.pixelpark.net-key.pem' + ssl_chain: '/etc/pki/tls/certs/wildcard.pixelpark.net-cert.pem' + directories: + - provider: location + path: '/' + auth_type: Digest + auth_name: server + auth_digest_provider: file + auth_digest_algorithm: MD5 + auth_user_file: '/etc/httpd/htdigest' + auth_require: 'valid-user' + require: + - local + setenvif_non_ssl: + - 'HTTPS on HTTPS=on' \ No newline at end of file