Files
@ 2d7abfa9286a
Branch filter:
Location: majic-ansible-roles/roles/php_website/molecule/default/playbook.yml - annotation
2d7abfa9286a
3.2 KiB
text/x-yaml
MAR-181: Deploy Prosody modules (in order to use the LDAP authentcation):
- Replaces the rolled-out-by-hand authentication module, making it
less dependent on upstream repository.
- Replaces the rolled-out-by-hand authentication module, making it
less dependent on upstream repository.
1b6495e2ba42 1b6495e2ba42 1b6495e2ba42 14eb78a4f466 1b6495e2ba42 1b6495e2ba42 1b6495e2ba42 7dd7757be724 1b6495e2ba42 1b6495e2ba42 7dd7757be724 7dd7757be724 1b6495e2ba42 1b6495e2ba42 1b6495e2ba42 1b6495e2ba42 7dd7757be724 7dd7757be724 1b6495e2ba42 1b6495e2ba42 1b6495e2ba42 1b6495e2ba42 3dd7f39302f8 1b6495e2ba42 1b6495e2ba42 3dd7f39302f8 1b6495e2ba42 1b6495e2ba42 1b6495e2ba42 1b6495e2ba42 1b6495e2ba42 1b6495e2ba42 1b6495e2ba42 1b6495e2ba42 1b6495e2ba42 7dd7757be724 7dd7757be724 1b6495e2ba42 1b6495e2ba42 3dd7f39302f8 3dd7f39302f8 1b6495e2ba42 3dd7f39302f8 3dd7f39302f8 1b6495e2ba42 398dcbce5d84 398dcbce5d84 1b6495e2ba42 1b6495e2ba42 3dd7f39302f8 3dd7f39302f8 14eb78a4f466 3dd7f39302f8 3dd7f39302f8 3dd7f39302f8 3dd7f39302f8 3dd7f39302f8 3dd7f39302f8 3dd7f39302f8 3dd7f39302f8 3dd7f39302f8 3dd7f39302f8 3dd7f39302f8 3dd7f39302f8 3dd7f39302f8 3dd7f39302f8 3dd7f39302f8 3dd7f39302f8 3dd7f39302f8 3dd7f39302f8 3dd7f39302f8 3dd7f39302f8 3dd7f39302f8 3dd7f39302f8 3dd7f39302f8 3dd7f39302f8 3dd7f39302f8 3dd7f39302f8 3dd7f39302f8 3dd7f39302f8 3dd7f39302f8 3dd7f39302f8 3dd7f39302f8 3dd7f39302f8 3dd7f39302f8 3dd7f39302f8 3dd7f39302f8 3dd7f39302f8 3dd7f39302f8 3dd7f39302f8 3dd7f39302f8 3dd7f39302f8 3dd7f39302f8 3dd7f39302f8 3dd7f39302f8 3dd7f39302f8 3dd7f39302f8 | ---
- hosts: all
become: true
vars:
# common
ca_certificates:
testca: "{{ lookup('file', 'tests/data/x509/ca/level1.cert.pem') }}"
# web_server
default_https_tls_certificate: "{{ lookup('file', 'tests/data/x509/server/php-website_https.cert.pem') }}"
default_https_tls_key: "{{ lookup('file', 'tests/data/x509/server/php-website_https.key.pem') }}"
roles:
- role: php_website
fqdn: parameters-mandatory
https_tls_certificate: "{{ lookup('file', 'tests/data/x509/server/parameters-mandatory_https.cert.pem') }}"
https_tls_key: "{{ lookup('file', 'tests/data/x509/server/parameters-mandatory_https.key.pem') }}"
- role: php_website
additional_fpm_config:
"env[PATH]": "\"/usr/local/bin:/usr/bin:/bin\""
"security.limit_extensions": ".php .myphp"
additional_nginx_config:
- comment: Custom missing page.
value: error_page 404 /404.myphp;
admin_uid: 5000
deny_files_regex:
- '^/secretfile.txt'
environment_indicator:
background_colour: "#ff0000"
text_colour: "#00ff00"
text: "parameters-optional"
fqdn: parameters-optional.local
index: myindex.php
https_tls_certificate: "{{ lookup('file', 'tests/data/x509/server/parameters-optional_https.cert.pem') }}"
https_tls_key: "{{ lookup('file', 'tests/data/x509/server/parameters-optional_https.key.pem') }}"
php_file_regex: "\\.myphp$"
php_rewrite_urls:
- ^/rewrite1/(.*)$ /rewrite.myphp?url=$1 last
- ^/rewrite2/(.*)$ /rewrite.myphp?url=$1 last
rewrites:
- '^/rewrite_to_index1/(.*) /myindex.php last'
- '^/rewrite_to_index2/(.*) /myindex.php last'
packages:
- "php-ldap"
- "php-json"
uid: 5001
website_mail_recipients: user
- hosts: all
become: true
tasks:
# parameters-mandatory application
- name: Set-up directory where PHP files are hosted at
file:
path: /var/www/parameters-mandatory/htdocs
state: directory
owner: admin-parameters-mandatory
group: web-parameters-mandatory
mode: 0750
- name: Deploy a couple of PHP pages for testing purposes
copy:
src: "tests/data/php/mandatory/{{ item }}"
dest: "/var/www/parameters-mandatory/htdocs/{{ item }}"
owner: admin-parameters-mandatory
group: web-parameters-mandatory
mode: 0640
with_items:
- index.php
- index.php3
# parameters-optional application
- name: Set-up directory where PHP files are hosted at
file:
path: /var/www/parameters-optional.local/htdocs
state: directory
owner: admin-parameters-optional_local
group: web-parameters-optional_local
mode: 0750
- name: Deploy a couple of PHP pages for testing purposes
copy:
src: "tests/data/php/optional/{{ item }}"
dest: "/var/www/parameters-optional.local/htdocs/{{ item }}"
owner: admin-parameters-optional_local
group: web-parameters-optional_local
mode: 0640
with_items:
- myindex.php
- myindex.myphp
- path.myphp
- secretfile.txt
- info.myphp
- 404.myphp
- rewrite.myphp
|