---

additional_nginx_config: {}

deny_files_regex: []

index: index.php

packages: []

php_file_regex: \.php$

php_rewrite_urls: []

rewrites: []

https_tls_certificate: "{{ lookup('file', tls_certificate_dir + '/' + fqdn + '_https.pem') }}"

---

dependencies:

  - common

  - web_server

---

- name: Create

  hosts: localhost

  connection: local

  no_log: "{{ not lookup('env', 'MOLECULE_DEBUG') | bool }}"

  vars:

    molecule_file: "{{ lookup('env', 'MOLECULE_FILE') }}"

    molecule_instance_config: "{{ lookup('env', 'MOLECULE_INSTANCE_CONFIG') }}"

    molecule_yml: "{{ lookup('file', molecule_file) | molecule_from_yaml }}"

  tasks:

---

- name: Destroy

  hosts: localhost

  connection: local

  no_log: "{{ not lookup('env', 'MOLECULE_DEBUG') | bool }}"

  vars:

    molecule_file: "{{ lookup('env', 'MOLECULE_FILE') }}"

    molecule_instance_config: "{{ lookup('env',' MOLECULE_INSTANCE_CONFIG') }}"

    molecule_yml: "{{ lookup('file', molecule_file) | molecule_from_yaml }}"

  tasks:

  name: vagrant

  provider:

    name: virtualbox

lint:

  name: yamllint

platforms:

  - name: php-website-jessie64

    groups:

      - parameters-mandatory

---

- hosts: all

  vars:

    # common

    ca_certificates:

      testca: "{{ lookup('file', 'tests/data/x509/ca.cert.pem') }}"

    # web_server

      additional_nginx_config:

        - comment: Custom missing page.

          value: error_page 404 /404.myphp;

      admin_uid: 5000

      deny_files_regex:

        - '^/secretfile.txt'

      environment_indicator:

        background_colour: "#ff0000"

        text_colour: "#00ff00"

        text: "parameters-optional"

      fqdn: parameters-optional.local

      index: myindex.php

        - php5-json

        - libmariadb-client-lgpl-dev-compat

      uid: 5001

      website_mail_recipients: user

- hosts: all

  tasks:

    # parameters-mandatory application

    - name: Set-up directory where PHP files are hosted at

      file:

        path: /var/www/parameters-mandatory/htdocs

        state: directory

---

- name: Prepare

  hosts: all

  tasks:

    - name: Install python for Ansible

      raw: test -e /usr/bin/python || (apt -y update && apt install -y python-minimal)

- hosts: all

  tasks:

    - name: Update all caches to avoid errors due to missing remote archives

      apt:

    - name: Set-up /etc/hosts entries

      lineinfile:

        dest: /etc/hosts

        line: "{{ ansible_eth0.ipv4.address }} parameters-mandatory parameters-optional.local php-website"

    - name: Install curl for testing redirects and webpage content

      apt:

        name: curl

    - name: Install swaks for testing mail forwarding

      apt:

        name: swaks

    - name: Install Postfix for testing mail forwarding (Exim4 not covered)

      apt:

        name: postfix

    - name: Set-up group for an additional user

      group:

        name: user

        state: present

import testinfra.utils.ansible_runner

testinfra_hosts = testinfra.utils.ansible_runner.AnsibleRunner(

import re

import time

import testinfra.utils.ansible_runner

testinfra_hosts = testinfra.utils.ansible_runner.AnsibleRunner(

def test_website_group(host):

    """

    Tests if website group has been created correctly.

    """

import re

import time

import testinfra.utils.ansible_runner

testinfra_hosts = testinfra.utils.ansible_runner.AnsibleRunner(

def test_website_group(host):

    """

    Tests if website group has been created correctly.

    """

- name: Create PHP website admin user

  user:

    name: "{{ admin }}"

    uid: "{{ admin_uid | default(omit) }}"

    group: "{{ user }}"

    shell: /bin/bash

    home: "{{ home }}"

    state: present

- name: Set-up directory for storing user profile configuration files

  file:

    path: "{{ home }}/.profile.d"

- name: Create PHP website user

  user:

    name: "{{ user }}"

    uid: "{{ uid | default(omit) }}"

    group: "{{ user }}"

    comment: "umask=0007"

    state: present

    home: "{{ home }}"

- name: Add nginx user to website group

  user:

    name: "www-data"

    group: "{{ user }}"

    mode: 0640

- name: Install extra packages for website

  apt:

    name: "{{ item }}"

  with_items: "{{ packages }}"

- name: Set-up MariaDB mysql_config symbolic link for compatibility (workaround for Debian bug 766996)

  file:

    src: "/usr/bin/mariadb_config"

    dest: "/usr/bin/mysql_config"