---
infra::role: base
+infra::additional_classes:
+ - infra::profile::apache_php
+
+repo::remi_php70: true
+php::settings:
+ Date/date.timezone: Europe/Berlin
+ PHP/expose_php: 'Off'
+
+accounts::users:
+ sftp1:
+ apply: true
+ jenkins:
+ apply: true
+ group: apache
+
+infra::profile::apache::htdigest:
+ nl-frontend:
+ preview: "Dwnkip1!"
+ Limitierung:
+ extern: "pixel2012"
+
+infra::profile::apache::pp_vhosts:
+ design-berlin:
+ servername: design-berlin.pixelpark.net
+ docroot: '/srv/www/design-berlin.pixelpark.net'
+ serveraliases:
+ - www.design-berlin.pixelpark.net
+ port: 80
+ custom_fragment: 'ProxyPassMatch ^/(.*\.php(/.*)?)$ fcgi://127.0.0.1:9000/srv/www/design-berlin.pixelpark.net/$1'
+ cert_servername: 'wildcard.pixelpark.net'
+ cert_customer: 'pixelpark'
+ ssl_cert: '/etc/pki/tls/certs/wildcard.pixelpark.net-cert.pem'
+ ssl_chain: '/etc/pki/tls/certs/wildcard.pixelpark.net-cert.pem'
+ ssl_key: '/etc/pki/tls/private/wildcard.pixelpark.net-key.pem'
+ custom_fragment: 'ProxyPassMatch ^/(.*\.php(/.*)?)$ fcgi://127.0.0.1:9000/srv/www/design-berlin.pixelpark.net/$1'
+ directories:
+ - directory1:
+ provider: directory
+ path: '/srv/www/design-berlin.pixelpark.net'
+ options:
+ - Indexes
+ - FollowSymLinks
+ - MultiViews
+ - location1:
+ provider: location
+ path: '/'
+ auth_type: Digest
+ auth_name: Limitierung
+ auth_digest_provider: file
+ auth_digest_algorithm: MD5
+ auth_user_file: '/etc/httpd/htdigest'
+ auth_require: 'valid-user'
+ mbvd-internal-nl:
+ servername: mbvd-internal-nl.pixelpark.net
+ serveraliases:
+ - mbvd-internal-nl.cloud.pixelpark.net
+ cert_servername: 'wildcard.pixelpark.net'
+ cert_customer: 'pixelpark'
+ ssl_cert: '/etc/pki/tls/certs/wildcard.pixelpark.net-cert.pem'
+ ssl_chain: '/etc/pki/tls/certs/wildcard.pixelpark.net-cert.pem'
+ ssl_key: '/etc/pki/tls/private/wildcard.pixelpark.net-key.pem'
+ docroot: '/srv/www/mbvd-internal-nl.pixelpark.net'
+ docroot_owner: 'jenkins'
+ docroot_group: 'apache'
+ docroot_mode: '0750'
+ directories:
+ - directory_root:
+ provider: directory
+ path: '/srv/www/mbvd-internal-nl.pixelpark.net'
+ - location_root:
+ provider: location
+ path: '/'
+ auth_type: Digest
+ auth_name: nl-frontend
+ auth_digest_provider: file
+ auth_digest_algorithm: MD5
+ auth_user_file: '/etc/httpd/htdigest'
+ require:
+ requires:
+ - 'valid-user'
+ - 'ip 217.66.49 217.66.50 217.66.51'
+ enforce: any
+ rewrites_non_ssl:
+ - http_to_https:
+ comment: 'Alles auf https umleiten'
+ rewrite_rule:
+ - ^(.*)$ https://mbvd-internal-nl.pixelpark.net$1 [R=301,QSA,L]
+ mbvd-wholesale-nl:
+ servername: mbvd-wholesale-nl.pixelpark.net
+ serveraliases:
+ - mbvd-wholesale-nl.cloud.pixelpark.net
+ cert_servername: 'wildcard.pixelpark.net'
+ cert_customer: 'pixelpark'
+ ssl_cert: '/etc/pki/tls/certs/wildcard.pixelpark.net-cert.pem'
+ ssl_chain: '/etc/pki/tls/certs/wildcard.pixelpark.net-cert.pem'
+ ssl_key: '/etc/pki/tls/private/wildcard.pixelpark.net-key.pem'
+ docroot: '/srv/www/mbvd-wholesale-nl.pixelpark.net'
+ docroot_owner: 'jenkins'
+ docroot_group: 'apache'
+ docroot_mode: '0750'
+ directories:
+ - directory1:
+ provider: directory
+ path: '/srv/www/mbvd-wholesale-nl.pixelpark.net'
+ - location_root:
+ provider: location
+ path: '/'
+ auth_type: Digest
+ auth_name: nl-frontend
+ auth_digest_provider: file
+ auth_digest_algorithm: MD5
+ auth_user_file: '/etc/httpd/htdigest'
+ require:
+ requires:
+ - 'valid-user'
+ - 'ip 217.66.49 217.66.50 217.66.51'
+ enforce: any