Git initial commit

group_vars/environment.yml

@@ -0,0 +1,86 @@
+---
+ansible_python_interpreter: /usr/bin/python3
+cloud_name: "example-cloud"
+cloud_home: "/{{ cloud_name }}"
+cloud_host_group: "example-playbook"
+cloud_env: "example_env"
+cloud_env_path: "{{ cloud_home }}/{{ cloud_env }}"
+cloud_control_name: "cloud-control"
+cloud_apps: "/app"
+cloud_storage: "/storage"
+cloud_stage: "production"
+
+backup_folder: "/backup"
+backup_times_hour:
+  - 20
+
+basis_apps:
+  - passwd
+  - python3-jmespath
+  - python3-psycopg2
+  - vim
+
+domain_external: "my-domain.tld"
+cloud_python_envs: "{{ cloud_apps }}/py-env"
+
+admin_mail_address: "admin@{{ domain_external }}"
+noreply_mail_address: "noreply@{{ domain_external }}"
+letsencrypt_mail_address: "{{ admin_mail_address }}"
+
+development_mail_address: "development@{{ domain_external }}"
+development_mail_pass: MyVeryCoolPassword!
+
+auth_mail_address: "auth@{{ domain_external }}"
+auth_mail_pass: MyVeryCoolPassword!
+
+mail_domain: "mail.{{ domain_external }}"
+mail_port: 465
+mail_ssl: true
+
+shared_group: "cloud"
+
+backup_owner_ssh_key: "ssh-rsa SomeFancyRSAKeyThatIsPreDefined"
+
+users_admin:
+  - name: admin
+    displayname: Admin User
+    shell: /bin/bash
+    groups:
+      - admin
+      - adm
+      - systemd-journal
+      - staff
+      - sudo
+      - vpn
+    state: present
+    ssh_key: "ssh-rsa AdminUserSshKeyThatIsPreDefined"
+
+ssh_port: 22
+default_groups:
+  - ssh
+  - users
+  - systemd-journal
+  - "{{ shared_group }}"
+
+ssh_configs:
+  - Protocol 2
+  - "Port {{ ssh_port }}"
+  - PermitRootLogin prohibit-password
+  - PubkeyAuthentication yes
+  - PasswordAuthentication no
+  - PermitEmptyPasswords no
+  - ClientAliveInterval  1200
+  - ClientAliveCountMax 3
+
+fail2ban_bantime: 1h
+fail2ban_maxretry: 3
+fail2ban_nginx_filter:
+  - nginx-noscript
+  - nginx-nohome
+  - nginx-noproxy
+
+php_version: 8.0
+php_upload_max_filesize: 512M
+php_post_max_size: 512M
+php_memory_limit: 512M
+

group_vars/wordpress

@@ -0,0 +1,44 @@
+---
+wp_default_locations:
+  - location: "/favicon.ico"
+    options: |
+      log_not_found off;
+      access_log off;
+  - location: "/robots.txt"
+    options: |
+      allow all;
+      log_not_found off;
+      access_log off;         
+  - location: '~ \.php$'
+    options: |
+      include fastcgi.conf;
+      fastcgi_intercept_errors on;
+      fastcgi_pass php;
+      fastcgi_param  SCRIPT_FILENAME $document_root$fastcgi_script_name;
+  - location: '~* \.(js|css|png|jpg|jpeg|gif|ico)$'
+    options: |
+      expires max;
+      log_not_found off;
+  - location: "/"
+    options: |
+      try_files $uri $uri/ /index.php?$args;
+
+wp_web_sites:
+  - domain: "{{ domain_external }}"
+    state: present
+    owner: admin
+    root: "{{ cloud_apps }}/wordpress/{{ domain_external }}"
+    root_setup: false
+    wordpress: true
+    index:
+      - index.php
+    db:
+      type: mariadb
+      name: wordpress
+      user: wordpressuser
+      pass: FancyGiteaDbPasswordVeryLong
+    letsencrypt: true
+    locations: "{{ wp_default_locations }}"
+    options:
+      access_log: "/var/log/nginx/{{ domain_external }}-access.log"
+      error_log: "/var/log/nginx/{{ domain_external }}-error.log"