From: sascha.strassheim Date: Wed, 21 Mar 2018 16:18:20 +0000 (+0100) Subject: webstats05-7 setup X-Git-Tag: v0.1.0~1412 X-Git-Url: https://git.uhu-banane.de/?a=commitdiff_plain;h=e65912f3e3cd53cb01a7bb3283437ee6a8ccab98;p=pixelpark%2Fhiera.git webstats05-7 setup --- diff --git a/customer/pixelpark-piwik/webstats05.pixelpark.net.yaml b/customer/pixelpark-piwik/webstats05.pixelpark.net.yaml index 6f33c80a..edb3f062 100644 --- a/customer/pixelpark-piwik/webstats05.pixelpark.net.yaml +++ b/customer/pixelpark-piwik/webstats05.pixelpark.net.yaml @@ -1,5 +1,4 @@ --- - # https://intra.pixelpark.com/confluence/display/its/Shared+Piwik2+-+Betriebsdokumentation # modules @@ -15,15 +14,23 @@ accounts::users: apply: true # mysql credentials -mysql::server::root_password: ENC[PKCS7,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] -mysql::server::backup::backuppassword: ENC[PKCS7,MIIBiQYJKoZIhvcNAQcDoIIBejCCAXYCAQAxggEhMIIBHQIBADAFMAACAQEwDQYJKoZIhvcNAQEBBQAEggEAdvDOgLVXiQO6NTTiYVD9gHejshFRMRY8JxosomeTg+vRRcCswEM4qjORkV06itDFpi+li749FSTzOlgZlssln3T58G8BjRjFhZ3R0PPMId7bxTFDQ0DEGrRO8wwFrYpqEJ5n5GutHyTGE/uy/njyQ1ild4W6INEsNtfaBHL2SAOYC1wP70lbPi5wtPzUduxikKfNF8YvgFxAqqgkq5ly5ljP1hWLyLmKVS9cWEIrox0tVFJpi/BCuJXn+xyDa2yOCcgVjunO2BOfce4ujtd5lgMBX4WU0Mf+ExRt6dRcKoz0wDyW2SJAHUNAh3WdZLfAlY9JxCM0sfyf+bs25BrkezBMBgkqhkiG9w0BBwEwHQYJYIZIAWUDBAEqBBBJUqOG85PSCNc90Nh5vQFJgCBJLp4WswkdaOJoXvUPrP9I9pI49R3wixeo2TqDS/rdYg==] -mysql::server::backup::backupdir: /var/lib/backup/mysql - +mysql::server::root_password: ENC[PKCS7,MIIBiQYJKoZIhvcNAQcDoIIBejCCAXYCAQAxggEhMIIBHQIBADAFMAACAQEwDQYJKoZIhvcNAQEBBQAEggEAVHDVqgJqxFtCNHcwZfExeELeU2yqhlBC3M5JmiNfhcvQ2JHFmrkLtrueFa5pn0U916kdujgITCohqaW9Fq6/TxLEQTO//Ais+UiLABPDTNfAtRBiAzLT1MLJKWm6MhM2BDI1uOkSYDBDBPVepR9mu5N8Pf1/ysVFVKpz51T11AC+bC0hmgPsus0GSsB/sNrGbFqI9bsAr7kqggt/IwECg6ruMBxGzrnMOqVuc070s/F45J/PO9dreoc7o63kvHkKjC8xBRK9bn+Rjw2x4ebnppGeOtGoTvBpr0pbKruj4CHvKfrFbz6UqFlLHKSVrIbP/WBZTkrSLYdykREDBkJ7VzBMBgkqhkiG9w0BBwEwHQYJYIZIAWUDBAEqBBAlDXJFU8+iGNjNAweJ9ZE/gCBUe3xQqBe/9y/7qB/GqY85INsp3oD019x4DtWUf2fhaQ==] +mysql::server::backup::backuppassword: ENC[PKCS7,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] infra::profile::mysql_server::databases: webstats: user: webstats - password: ENC[PKCS7,MIIBeQYJKoZIhvcNAQcDoIIBajCCAWYCAQAxggEhMIIBHQIBADAFMAACAQEwDQYJKoZIhvcNAQEBBQAEggEAYRQ/6krPhNRFhUNR19mXhdENkJomXTDPellpuPz57HynAB/u81Alc4jrMfKGIM4fAg1C1S8d3WYTO4GN3Jbnb9Rz0t8l82+htA4VMF98odeZa5aL9blHzPYcGm74ehy0N8t7c6UQCwLteR6PmSOwS5dX7J1jWgCPwsM2SckHS4u2R+IQ2qDScP2SQNmO0PzHCzS+zafPpCuGU3cN0TOVZDAEObn+3Iai7cwrFlp/9p9gWmBQ4VJLdmEq35qvibixNZbC9lip6w5jhPna+Buo+e86COxw/ieZWNb17GNBa4Hv+pnfNvCFsV+RhvI3TiuC8fNiu0CDvznFOm3WyQPGWzA8BgkqhkiG9w0BBwEwHQYJYIZIAWUDBAEqBBDaaw+rVWehHOJmM6hz6L+6gBCD1Uck7oiWIVJDPBYtcDfV] + password: ENC[PKCS7,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] + replica: + user: replica + password: ENC[PKCS7,MIIBiQYJKoZIhvcNAQcDoIIBejCCAXYCAQAxggEhMIIBHQIBADAFMAACAQEwDQYJKoZIhvcNAQEBBQAEggEAFlBsN5YtIPymPwanaYh2zDL9GKdRE0ORkITqzSBHYb32vl7j9FV+PlEHwfT8cY3VOat8490TeHjXPCmnMgUWD26EHY7e0iGRjN9ImMnsxtrkv5+iGO7PKW0KH+DDWcAdbKJR419qC9KA+Hnjja7LOMN+YB5FUVqvlDxSsGAfeOi4wShtBJ4q/LSaOk8DfGLyH5FRlwOJ9RZbLc/ViahWNaXoxIXJOKdy0yAVXK8eV6TJubBBOrA6viynnBCiNnxV+WzQvlucPsgL0ODA0tRWAlOt5D5vemdb0hmvzkoydYDOmRn6mQFtqUfeLqknfELXFEGGADPMB2bm3JoabAQNkjBMBgkqhkiG9w0BBwEwHQYJYIZIAWUDBAEqBBA2rKFcOXBRKOPfrRIEM9cTgCB581nDsg3joJEb4b1MQonHd5YlKJIVipUNkSCqrDUi4g==] + +mysql::server::backup::backupdir: /var/lib/backup/mysql + +#infra::profile::galera_cluster::galera_servers: +# - 192.168.64.3 +# - 192.168.64.4 +# - 192.168.64.5 # php-fpm config php::fpm::pools: @@ -51,8 +58,8 @@ php::extensions: # htaccess cerdentials infra::profile::apache::htdigest: - testserver: - www: ENC[PKCS7,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] + webstats: + www: ENC[PKCS7,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] # apache vhost config using pixelpark wildcard ssl_cert apache::default_vhost: false @@ -60,9 +67,9 @@ apache::default_vhost: false infra::profile::apache::pp_vhosts: webstats05: docroot: /var/www/piwik - servername: www.webstats05.pixelpark.net + servername: webstats05.pixelpark.net serveraliases: - - webstats05.pixelpark.net + - www.webstats05.pixelpark.net cert_servername: 'wildcard.pixelpark.net' cert_customer: 'pixelpark' ssl_cert: '/etc/pki/tls/certs/wildcard.pixelpark.net-cert.pem' @@ -75,6 +82,11 @@ infra::profile::apache::pp_vhosts: - directory_root: provider: directory path: '/var/www/piwik' + auth_type: Digest + auth_name: 'webstats' + auth_digest_provider: file + auth_user_file: '/etc/httpd/htdigest' + auth_require: 'valid-user' addhandlers: - { handler: "proxy:unix:/var/run/php5-fpm-piwik.sock|fcgi://./" , extensions: '.php' } options: diff --git a/customer/pixelpark-piwik/webstats06.pixelpark.net.yaml b/customer/pixelpark-piwik/webstats06.pixelpark.net.yaml index 3b0442d3..4eb038f3 100644 --- a/customer/pixelpark-piwik/webstats06.pixelpark.net.yaml +++ b/customer/pixelpark-piwik/webstats06.pixelpark.net.yaml @@ -1,2 +1,104 @@ --- +# https://intra.pixelpark.com/confluence/display/its/Shared+Piwik2+-+Betriebsdokumentation + +# modules infra::role: base +infra::additional_classes: + - infra::profile::mysql_server + - infra::profile::postfix + - infra::profile::apache_php + +# users and deploy users +accounts::users: + jenkins: + apply: true + +# mysql credentials +mysql::server::root_password: ENC[PKCS7,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] +mysql::server::backup::backuppassword: ENC[PKCS7,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] + +infra::profile::mysql_server::databases: + webstats: + user: webstats + password: ENC[PKCS7,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] + replica: + user: replica + password: ENC[PKCS7,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] + +mysql::server::backup::backupdir: /var/lib/backup/mysql + +#infra::profile::galera_cluster::galera_servers: +# - 192.168.64.3 +# - 192.168.64.4 +# - 192.168.64.5 + +# php-fpm config +php::fpm::pools: + www: + ensure: absent + +repo::remi_php71: true + +infra::profile::apache_php::fpm_pool: + piwik: + listen_owner: apache + listen_group: apache + php_admin_value: + upload_max_filesize: 20M + post_max_size: 20M + +# php extension needed +php::extensions: + gd: {} + mysqlnd: {} + pecl-ssh2: {} + xml: {} + mbstring: {} + curl: {} + +# htaccess cerdentials +infra::profile::apache::htdigest: + webstats: + www: ENC[PKCS7,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] + +# apache vhost config using pixelpark wildcard ssl_cert +apache::default_vhost: false + +infra::profile::apache::pp_vhosts: + webstats06: + docroot: /var/www/piwik + servername: webstats06.pixelpark.net + serveraliases: + - www.webstats06.pixelpark.net + cert_servername: 'wildcard.pixelpark.net' + cert_customer: 'pixelpark' + ssl_cert: '/etc/pki/tls/certs/wildcard.pixelpark.net-cert.pem' + ssl_key: '/etc/pki/tls/private/wildcard.pixelpark.net-key.pem' + ssl_chain: '/etc/pki/tls/certs/wildcard.pixelpark.net-cert.pem' + docroot_owner: apache + docroot_group: pixel + docroot_mode: '2775' + directories: + - directory_root: + provider: directory + path: '/var/www/piwik' + auth_type: Digest + auth_name: 'webstats' + auth_digest_provider: file + auth_user_file: '/etc/httpd/htdigest' + auth_require: 'valid-user' + addhandlers: + - { handler: "proxy:unix:/var/run/php5-fpm-piwik.sock|fcgi://./" , extensions: '.php' } + options: + - FollowSymLinks + - MultiViews + allow_override: + - All + directoryindex: index.php index.html + rewrites: + - https: + comment: 'http to https alle anderen ' + rewrite_cond: + - '%%{ich-trickse}{HTTPS} !=on' + rewrite_rule: + - '(.*) https://%%{ich-trickse}{HTTP_HOST}%%{ich-trickse}{REQUEST_URI} [R=301,L]' diff --git a/customer/pixelpark-piwik/webstats07.pixelpark.net.yaml b/customer/pixelpark-piwik/webstats07.pixelpark.net.yaml index 3b0442d3..bf185661 100644 --- a/customer/pixelpark-piwik/webstats07.pixelpark.net.yaml +++ b/customer/pixelpark-piwik/webstats07.pixelpark.net.yaml @@ -1,2 +1,104 @@ --- +# https://intra.pixelpark.com/confluence/display/its/Shared+Piwik2+-+Betriebsdokumentation + +# modules infra::role: base +infra::additional_classes: + - infra::profile::mysql_server + - infra::profile::postfix + - infra::profile::apache_php + +# users and deploy users +accounts::users: + jenkins: + apply: true + +# mysql credentials +mysql::server::root_password: ENC[PKCS7,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] +mysql::server::backup::backuppassword: ENC[PKCS7,MIIBiQYJKoZIhvcNAQcDoIIBejCCAXYCAQAxggEhMIIBHQIBADAFMAACAQEwDQYJKoZIhvcNAQEBBQAEggEAitWrOns0L7eaAos+gwMc456icXADfl55J2BTe3jkuOjWAUDA4PY8WbJ1qf1nky6RSclHN3tTDCwCBgLhrCjq58tm0vanSHMcUEh1gs7XTxMaRcTD+upN+Sqnt+PwADlDMUUDVTIckkeUu9OuvFFJtU4+Ub0s2k77EvDa/ARTXBCGWBZLcx2dWGR1WrHcBV+m7iKcqMvSt9BHSz6akDP9bqL72rqxtEAhXR0trH9nE4q2MDBj5nVaakBVzvk3kMRLvmv255O628oOXFUKGAjRESsy/nnErgzV58r8M2wJxJ/er5HpXa/gkctGRZ1Nt5Fcj4cuVc+HQu/8CsMTJ9t2TzBMBgkqhkiG9w0BBwEwHQYJYIZIAWUDBAEqBBAKFzRjtTB3d0po6eaZtYhJgCBUDMCfhse0U+pv0GeWUIUslFRYQaXuYeJUOaOGE01ffg==] + +infra::profile::mysql_server::databases: + webstats: + user: webstats + password: ENC[PKCS7,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] + replica: + user: replica + password: ENC[PKCS7,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] + +mysql::server::backup::backupdir: /var/lib/backup/mysql + +#infra::profile::galera_cluster::galera_servers: +# - 192.168.64.3 +# - 192.168.64.4 +# - 192.168.64.5 + +# php-fpm config +php::fpm::pools: + www: + ensure: absent + +repo::remi_php71: true + +infra::profile::apache_php::fpm_pool: + piwik: + listen_owner: apache + listen_group: apache + php_admin_value: + upload_max_filesize: 20M + post_max_size: 20M + +# php extension needed +php::extensions: + gd: {} + mysqlnd: {} + pecl-ssh2: {} + xml: {} + mbstring: {} + curl: {} + +# htaccess cerdentials +infra::profile::apache::htdigest: + webstats: + www: ENC[PKCS7,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] + +# apache vhost config using pixelpark wildcard ssl_cert +apache::default_vhost: false + +infra::profile::apache::pp_vhosts: + webstats07: + docroot: /var/www/piwik + servername: webstats07.pixelpark.net + serveraliases: + - www.webstats07.pixelpark.net + cert_servername: 'wildcard.pixelpark.net' + cert_customer: 'pixelpark' + ssl_cert: '/etc/pki/tls/certs/wildcard.pixelpark.net-cert.pem' + ssl_key: '/etc/pki/tls/private/wildcard.pixelpark.net-key.pem' + ssl_chain: '/etc/pki/tls/certs/wildcard.pixelpark.net-cert.pem' + docroot_owner: apache + docroot_group: pixel + docroot_mode: '2775' + directories: + - directory_root: + provider: directory + path: '/var/www/piwik' + auth_type: Digest + auth_name: 'webstats' + auth_digest_provider: file + auth_user_file: '/etc/httpd/htdigest' + auth_require: 'valid-user' + addhandlers: + - { handler: "proxy:unix:/var/run/php5-fpm-piwik.sock|fcgi://./" , extensions: '.php' } + options: + - FollowSymLinks + - MultiViews + allow_override: + - All + directoryindex: index.php index.html + rewrites: + - https: + comment: 'http to https alle anderen ' + rewrite_cond: + - '%%{ich-trickse}{HTTPS} !=on' + rewrite_rule: + - '(.*) https://%%{ich-trickse}{HTTP_HOST}%%{ich-trickse}{REQUEST_URI} [R=301,L]'