Frank Brehm's Git Trees - pixelpark/hiera.git/blob

   1 ---
   2 infra::role: base
   3 infra::additional_classes:
   4   - infra::profile::mysql_server
   5   - infra::profile::apache_php
   6
   7 mysql::server::root_password: ENC[PKCS7,MIIBiQYJKoZIhvcNAQcDoIIBejCCAXYCAQAxggEhMIIBHQIBADAFMAACAQEwDQYJKoZIhvcNAQEBBQAEggEArinO03Q8KKBxcnJce0HDyPRWkm8XbcR7dlatca1ijdoLPAKzKpjo9mjBFjN26VMSf5s46VAHF5kXFGWJrUcnLGW5MT3Z3AI7Y68N4A2apnK7A1GV+094b7GsgCeRTRxobiwQ96Rg+/xHRpqfPy2SfVK4iiJISeShPoT2SgiUFjYOK9hUJJFasUT4rzDznkdDCWhDpZJ37ShznSUBkegfKfPfFefKyq8OGhJdYGx1bOEkER9bC/veoNt5AbZ6IKW2W3Qwn0NzUZ7nz7LA0jo1FJqv9wLSIRZoX4R3iUszQPJ9tveafm73WammiFQDXXF3MNfBOcSC+zxqgyu6fR8mxjBMBgkqhkiG9w0BBwEwHQYJYIZIAWUDBAEqBBCApmPFz3/3zqHrUP3j7KE4gCApiQZYaSkrLYUCLrZZ6P+w6tOhoDuT1XKr5lgXu0KVxQ==]
   8 mysql::server::backup::backuppassword: ENC[PKCS7,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]
   9 infra::profile::mysql_server::databases:
  10   mercedes_ecard:
  11     user: mercedes_ecard
  12     password: ENC[PKCS7,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]
  13
  14 infra::profile::apache::htdigest:
  15   server:
  16     www: ENC[PKCS7,MIIBeQYJKoZIhvcNAQcDoIIBajCCAWYCAQAxggEhMIIBHQIBADAFMAACAQEwDQYJKoZIhvcNAQEBBQAEggEATfeqDHFdDjuRDCtsARPCaQWRiVeRmmYXT2KOSD6ad1s4vs2g+2kDi2hq0jj/AMLY6mCLB3+uRPPIQD4//zwHADNHeBWv6I465Rbvhpr22aFPt2pXjBWypB72uqtwo+Lu1ibBDPtJnozwxO8TYyQmCKmdy2o/Iq73lJLqbCdCHwNzV5q0aoMw6Xr4ogrFDXlQXZvZA9L9HnASmMQVG4yopsW3P/lmM1wUElBHMhjHjHIjKvOEOEp/u4oKboFf+sI6dCm02EV2qV9iBh3cB563fJb3ziFMqMpogUNa2yiDWOWefWkQG2nYTR/unlFSGryArGze2GCxQScfTlqmvJyeZTA8BgkqhkiG9w0BBwEwHQYJYIZIAWUDBAEqBBAs/bQmwAZZ6rGvmET7++7kgBCfIBV6Lmnu1jM7qScq7hDN]
  17
  18 accounts::users:
  19   dennis.klein:
  20     apply: true
  21     sudo: true
  22   labworks:
  23     uid: 60174
  24     apply: true
  25     group: apache
  26
  27 repo::remi_php56: true
  28
  29 php::extensions:
  30   opcache: {}
  31   mbstring: {}
  32   mysqlnd: {}
  33
  34 infra::profile::apache_php::fpm_pool:
  35   christmas:
  36     listen_owner: apache
  37     listen_group: apache
  38
  39 php::fpm::pools:
  40   www:
  41     ensure: absent
  42
  43 apache::default_vhost: false
  44
  45 infra::profile::apache::pp_vhosts:
  46   christmas:
  47     docroot: /var/www/christmas
  48     servername: christmas-greetings.vans.mercedes-benz.com
  49     # es werden LB und WAF verwendet - SSL Certs liegen im Loadbalancer
  50     ssl: false
  51     docroot_owner: apache
  52     docroot_group: apache
  53     docroot_mode: '0775'
  54     directories:
  55       - directory_root:
  56         provider: directory
  57         path: '/var/www/christmas'
  58         addhandlers:
  59           - { handler: "proxy:unix:/var/run/php5-fpm-christmas.sock|fcgi://./" , extensions: '.php' }
  60         options:
  61           - FollowSymLinks
  62           - MultiViews
  63         allow_override:
  64           - All
  65         directoryindex: 'index.php'
  66       - location_admin:
  67         provider: location
  68         path: '/admin'
  69         auth_type: Digest
  70         auth_name: server
  71         auth_digest_provider: file
  72         auth_digest_algorithm: MD5
  73         auth_user_file: '/etc/httpd/htdigest'
  74         auth_require: 'valid-user'
  75     rewrites:
  76       - alias:
  77         comment: 'Weiterleitung auf echte URL'
  78         rewrite_cond:
  79           - '%%{ich-trickse}{HTTP_HOST} !^christmas-greetings\.vans\.mercedes-benz\.com$ [NC]'
  80         rewrite_rule:
  81           - '^(.*)$ https://christmas-greetings.vans.mercedes-benz.com$1 [L,R=301]'
  82       - alias1:
  83         comment: 'Weiterleitung auf https'
  84         rewrite_cond:
  85           - '%%{ich-trickse}{HTTP:HTTPS} !=on [NC]'
  86         rewrite_rule:
  87           - '^(.*)$ https://christmas-greetings.vans.mercedes-benz.com$1 [L,R=301]'
  88     setenvif_ssl:
  89       - 'HTTPS on HTTPS=on'
  90     access_log_format: lb_combined