joereynolds / meta

The infrastructure for my sites

To Run

ansible-playbook --ask-sudo-pass -i production play.yml

What is it?

The infrastructure for my sites.

It's roughly laid out like this

Ansible -> Reverse proxy -> Containers 

Containers are stored in separate repositories and contain everything they need.

meta's Issues

mailutils

Add jenkins

add lynis

Recursively clone repos

Joereynoldsaudio as an example has submodules which aren't currently pulled down. Fix this.

Clone repositories

joereynoldsaudio
boganspunkrock
util.joereynoldsaudio
the metronome (wherever that is)

Install php 7.x curl

Problem 1
- php-http/curl-client v1.7.0 requires ext-curl * -> the requested PHP extension curl is missing from your system.
- php-http/curl-client v1.7.0 requires ext-curl * -> the requested PHP extension curl is missing from your system.
- Installation request for php-http/curl-client v1.7.0 -> satisfiable by php-http/curl-client[v1.7.0].

Add apache config files

Bogans

<VirtualHost *:80>
    ServerName bogans.joereynoldsaudio.com
    ServerAlias www.bogans.joereynoldsaudio.com
	DocumentRoot /var/www/bogans


    RewriteEngine on
    RewriteRule ^/rsrc/(.*)    -                    [L,QSA]

	ErrorLog ${APACHE_LOG_DIR}/error.log
	CustomLog ${APACHE_LOG_DIR}/access.log combined
</VirtualHost>

Util

<VirtualHost *:80>
    ServerName util.joereynoldsaudio.com
    ServerAlias www.util.joereynoldsaudio.com
	DocumentRoot /var/www/util


    RewriteEngine on
    RewriteRule ^/rsrc/(.*)    -                    [L,QSA]

	ErrorLog ${APACHE_LOG_DIR}/error.log
	CustomLog ${APACHE_LOG_DIR}/access.log combined
</VirtualHost>

JoeReynoldsAudio

<IfModule mod_ssl.c>
	<VirtualHost _default_:443>
		DocumentRoot /var/www/joereynoldsaudio

		ErrorLog ${APACHE_LOG_DIR}/error.log
		CustomLog ${APACHE_LOG_DIR}/access.log combined

		SSLEngine on
		SSLCertificateFile	/etc/ssl/certs/ssl-cert-snakeoil.pem
		SSLCertificateKeyFile /etc/ssl/private/ssl-cert-snakeoil.key

		<FilesMatch "\.(cgi|shtml|phtml|php)$">
				SSLOptions +StdEnvVars
		</FilesMatch>
		<Directory /usr/lib/cgi-bin>
				SSLOptions +StdEnvVars
		</Directory>

		BrowserMatch "MSIE [2-6]" \
				nokeepalive ssl-unclean-shutdown \
				downgrade-1.0 force-response-1.0
		# MSIE 7 and newer should be able to use keepalive
		BrowserMatch "MSIE [17-9]" ssl-unclean-shutdown

	</VirtualHost>
</IfModule>

Add monitorix

Add fail2ban

add 'joe' to sudoers

Add automysqldump package

add user joe to www-data

Add rsync to some other server?

create /var/www directory

Use minio for storage

Add php7.1

Add autoymysqlbackup credentials

Install php7.x ext-xml

Problem 1
- symfony/symfony v3.3.6 requires ext-xml * -> the requested PHP extension xml is missing from your system.
- symfony/symfony v3.3.6 requires ext-xml * -> the requested PHP extension xml is missing from your system.
- Installation request for symfony/symfony v3.3.6 -> satisfiable by symfony/symfony[v3.3.6].

create 'joe' user

Sysdig/Prometheus for monitoring?

git

stop default apache from running

It's all in containers, we can just remove it altogether if we want

Add Lets Encrypt SSL certificate

postfix for email

Add git email and author

Currently they're unconfigured