Compare commits
3 Commits
solution_a
...
master_abr
| Author | SHA1 | Date | |
|---|---|---|---|
| 13f20ad7a7 | |||
| dfa9b53b00 | |||
| 2da29d1c8e |
25
Readme.md
25
Readme.md
@@ -2,6 +2,13 @@
|
||||
|
||||
## Prérequis:
|
||||
|
||||
Récupérer les ressources du jour:
|
||||
|
||||
```bash
|
||||
cd
|
||||
git clone https://infra.opendoor.fr/git/tom/abr_day4.git
|
||||
```
|
||||
|
||||
## Atelier 1: Ajouter le support de php à la demande
|
||||
|
||||
Rajouter une variable booleenne apache_use_php.
|
||||
@@ -9,21 +16,11 @@ Rajouter une variable booleenne apache_use_php.
|
||||
Positionnée à "true", cette variable entraîne:
|
||||
- l'installation du paquet php-fpm
|
||||
- le lancement et l'activation du service php-fpm
|
||||
- l'ajout dans la configuration apache des directives suivantes:
|
||||
<code>
|
||||
- l'ajout dans le répertoire de configuration apache le fichier php-fpm.conf contenant des directives suivantes:
|
||||
|
||||
```apache
|
||||
<FilesMatch \.php$>
|
||||
SetHandler proxy:fcgi://localhost:9000
|
||||
</FilesMatch>
|
||||
</code>
|
||||
```
|
||||
|
||||
|
||||
### Remarques:
|
||||
|
||||
Il a fallu définir une nouvelle variable *php_fpm_service* pour gérer la différene de nom de service entre CentOS et Debian
|
||||
|
||||
Les variables ont été documentées dans le Readme.
|
||||
|
||||
|
||||
### Validation
|
||||
|
||||
Le playbook s'exécute correctement sur nos cibles. Suivant la valeur de apache_use_php, le service php-fpm est actif sur la cible
|
||||
@@ -1,6 +0,0 @@
|
||||
---
|
||||
- name: install apache via ansible playbook
|
||||
hosts: all
|
||||
|
||||
roles:
|
||||
- tco.apache_abrd4
|
||||
@@ -1,29 +0,0 @@
|
||||
---
|
||||
language: python
|
||||
python: "2.7"
|
||||
|
||||
# Use the new container infrastructure
|
||||
sudo: false
|
||||
|
||||
# Install ansible
|
||||
addons:
|
||||
apt:
|
||||
packages:
|
||||
- python-pip
|
||||
|
||||
install:
|
||||
# Install ansible
|
||||
- pip install ansible
|
||||
|
||||
# Check ansible version
|
||||
- ansible --version
|
||||
|
||||
# Create ansible.cfg with correct roles_path
|
||||
- printf '[defaults]\nroles_path=../' >ansible.cfg
|
||||
|
||||
script:
|
||||
# Basic role syntax check
|
||||
- ansible-playbook tests/test.yml -i tests/inventory --syntax-check
|
||||
|
||||
notifications:
|
||||
webhooks: https://galaxy.ansible.com/api/v1/notifications/
|
||||
@@ -1,42 +0,0 @@
|
||||
Role Name
|
||||
=========
|
||||
|
||||
Install apache,
|
||||
|
||||
Requirements
|
||||
------------
|
||||
|
||||
None
|
||||
|
||||
Role Variables
|
||||
--------------
|
||||
|
||||
apache_server_name: no default
|
||||
apache_document_root: no default
|
||||
apache_use_php: default false
|
||||
|
||||
see also files in vars subdirectory
|
||||
|
||||
Dependencies
|
||||
------------
|
||||
|
||||
None
|
||||
|
||||
Example Playbook
|
||||
----------------
|
||||
|
||||
Including an example of how to use your role (for instance, with variables passed in as parameters) is always nice for users too:
|
||||
|
||||
- hosts: servers
|
||||
roles:
|
||||
- tco.apache_abrd3
|
||||
|
||||
License
|
||||
-------
|
||||
|
||||
BSD
|
||||
|
||||
Author Information
|
||||
------------------
|
||||
|
||||
Thomas C <thomas@opendoor.fr>
|
||||
@@ -1,3 +0,0 @@
|
||||
---
|
||||
# defaults file for tco.apache_abrd3
|
||||
apache_use_php: false
|
||||
@@ -1,6 +0,0 @@
|
||||
---
|
||||
# handlers file for tco.apache_abrd3
|
||||
- name: restart apache
|
||||
ansible.builtin.service:
|
||||
name: "{{ apache_service_name }}"
|
||||
state: restarted
|
||||
@@ -1,52 +0,0 @@
|
||||
galaxy_info:
|
||||
author: your name
|
||||
description: your role description
|
||||
company: your company (optional)
|
||||
|
||||
# If the issue tracker for your role is not on github, uncomment the
|
||||
# next line and provide a value
|
||||
# issue_tracker_url: http://example.com/issue/tracker
|
||||
|
||||
# Choose a valid license ID from https://spdx.org - some suggested licenses:
|
||||
# - BSD-3-Clause (default)
|
||||
# - MIT
|
||||
# - GPL-2.0-or-later
|
||||
# - GPL-3.0-only
|
||||
# - Apache-2.0
|
||||
# - CC-BY-4.0
|
||||
license: license (GPL-2.0-or-later, MIT, etc)
|
||||
|
||||
min_ansible_version: 2.1
|
||||
|
||||
# If this a Container Enabled role, provide the minimum Ansible Container version.
|
||||
# min_ansible_container_version:
|
||||
|
||||
#
|
||||
# Provide a list of supported platforms, and for each platform a list of versions.
|
||||
# If you don't wish to enumerate all versions for a particular platform, use 'all'.
|
||||
# To view available platforms and versions (or releases), visit:
|
||||
# https://galaxy.ansible.com/api/v1/platforms/
|
||||
#
|
||||
# platforms:
|
||||
# - name: Fedora
|
||||
# versions:
|
||||
# - all
|
||||
# - 25
|
||||
# - name: SomePlatform
|
||||
# versions:
|
||||
# - all
|
||||
# - 1.0
|
||||
# - 7
|
||||
# - 99.99
|
||||
|
||||
galaxy_tags: []
|
||||
# List tags for your role here, one per line. A tag is a keyword that describes
|
||||
# and categorizes the role. Users find roles by searching for tags. Be sure to
|
||||
# remove the '[]' above, if you add tags to this list.
|
||||
#
|
||||
# NOTE: A tag is limited to a single word comprised of alphanumeric characters.
|
||||
# Maximum 20 tags per role.
|
||||
|
||||
dependencies: []
|
||||
# List your role dependencies here, one per line. Be sure to remove the '[]' above,
|
||||
# if you add dependencies to this list.
|
||||
@@ -1,83 +0,0 @@
|
||||
---
|
||||
# tasks file for tco.apache_abrd3
|
||||
- name: import OS variables
|
||||
include_vars: "{{ ansible_distribution | lower }}.yml"
|
||||
tags: always
|
||||
|
||||
- name: install apache
|
||||
ansible.builtin.package:
|
||||
name: "{{ apache_package_name }}"
|
||||
state: present
|
||||
|
||||
- name: conf httpd
|
||||
template:
|
||||
src: vhost.conf
|
||||
dest: "{{ apache_config_dir }}/vhost.conf"
|
||||
mode: 0640
|
||||
owner: root
|
||||
group: "{{ apache_group }}"
|
||||
notify: restart apache
|
||||
|
||||
- meta: flush_handlers
|
||||
|
||||
- name: activate apache
|
||||
service:
|
||||
name: "{{ apache_service_name }}"
|
||||
enabled: yes
|
||||
state: restarted
|
||||
|
||||
- name: setup firewall
|
||||
block:
|
||||
- name: install firewalld packages
|
||||
yum:
|
||||
name:
|
||||
- python3-firewall
|
||||
- firewalld
|
||||
state: present
|
||||
|
||||
- name: enable firewalld service
|
||||
service:
|
||||
name: firewalld
|
||||
enabled: true
|
||||
state: started
|
||||
|
||||
- name: open firewall port
|
||||
firewalld:
|
||||
service: "{{ item }}"
|
||||
permanent: yes
|
||||
immediate: yes
|
||||
state: enabled
|
||||
loop:
|
||||
- http
|
||||
- https
|
||||
ignore_errors: true
|
||||
when: ansible_distribution == 'CentOS'
|
||||
|
||||
- name: create documentroot
|
||||
file:
|
||||
name: "{{ apache_document_root }}{{ apache_server_name }}/"
|
||||
state: directory
|
||||
|
||||
- name: copy index file
|
||||
template:
|
||||
src: index.txt
|
||||
dest: "{{ apache_document_root }}{{ apache_server_name }}/index.html"
|
||||
mode: 0644
|
||||
|
||||
- name: configure php
|
||||
tags: php
|
||||
block:
|
||||
- ansible.builtin.package:
|
||||
name: php-fpm
|
||||
state: present
|
||||
|
||||
- ansible.builtin.service:
|
||||
name: "{{ php_fpm_service }}"
|
||||
state: started
|
||||
enabled: true
|
||||
|
||||
- ansible.builtin.template:
|
||||
src: php-fpm.conf
|
||||
dest: "{{ apache_config_dir }}/php-fpm.conf"
|
||||
notify: restart apache
|
||||
when: apache_use_php
|
||||
@@ -1 +0,0 @@
|
||||
<h1>hello World {{ apache_server_name }} </h1>
|
||||
@@ -1,3 +0,0 @@
|
||||
<FilesMatch \.php$>
|
||||
SetHandler proxy:fcgi://localhost:9000
|
||||
</FilesMatch>
|
||||
@@ -1,24 +0,0 @@
|
||||
<VirtualHost *:80>
|
||||
ServerName {{ apache_server_name }}
|
||||
ServerAlias www.{{ apache_server_name }}
|
||||
ServerAlias {{ inventory_hostname }}
|
||||
DocumentRoot {{ apache_document_root }}{{ apache_server_name }}
|
||||
CustomLog {{ apache_log_dir }}/{{ apache_server_name }}_access.log combined
|
||||
ErrorLog {{ apache_log_dir }}/{{ apache_server_name }}_error.log
|
||||
<Directory />
|
||||
Options none
|
||||
Allowoverride none
|
||||
Require all denied
|
||||
</Directory>
|
||||
|
||||
<Directory {{ apache_document_root }}{{ apache_server_name }}>
|
||||
Require all granted
|
||||
</Directory>
|
||||
<Directory {{ apache_document_root }}{{ apache_server_name }}/Private>
|
||||
Options indexes
|
||||
AuthName "stop"
|
||||
AuthType Basic
|
||||
AuthUserFile {{ apache_config_dir }}/passwd
|
||||
require valid-user
|
||||
</Directory>
|
||||
</VirtualHost>
|
||||
@@ -1,2 +0,0 @@
|
||||
localhost
|
||||
|
||||
@@ -1,5 +0,0 @@
|
||||
---
|
||||
- hosts: localhost
|
||||
remote_user: root
|
||||
roles:
|
||||
- tco.apache_abrd3
|
||||
@@ -1,8 +0,0 @@
|
||||
#/home/formation/sib_10_premier_playbook/centos.yml
|
||||
apache_package_name: httpd
|
||||
apache_service_name: httpd
|
||||
apache_log_dir: /var/log/httpd/
|
||||
apache_config_dir: /etc/httpd/conf.d/
|
||||
apache_group: apache
|
||||
apache_user: apache
|
||||
php_fpm_service: php-fpm
|
||||
@@ -1,8 +0,0 @@
|
||||
#/home/formation/sib_10_premier_playbook/debian.yml
|
||||
apache_package_name: apache2
|
||||
apache_service_name: apache2
|
||||
apache_log_dir: /var/log/apache2/
|
||||
apache_config_dir: /etc/apache2/sites-enabled/
|
||||
apache_group: www-data
|
||||
apache_user: www-data
|
||||
php_fpm_service: php7.3-fpm
|
||||
@@ -1,2 +0,0 @@
|
||||
---
|
||||
# vars file for tco.apache_abrd3
|
||||
Reference in New Issue
Block a user