ansible-php-postgres-playbook-template

Template da cui ricavare installazioni di servizi php con nginx come reverse proxy. Postgresql locale opzionale.

Variabili da istanziare nel proprio playbook

php_app_db_name: app_db
php_app_db_user: app_db_u
vault_php_app_db_pwd: # Usare un vault file per questa
# Add the users that must have ssh access to the system
users_system_users:
  - { login: 'user.name', name: "User Name", home: '{{ users_home_dir }}', createhome: 'yes', ssh_key: '{{ user_name_ssh_key }}', shell: '/bin/bash', admin: True, limited_sudoers_user: False }
# Users that can only sftp
users_system_users_adjunct:
  - { login: 'sftponly.user', group: '{{ sshd_sftp_chroot_match_group }}', name: "Sftponly User", home: '{{ users_home_dir }}', createhome: 'yes', ssh_key: '{{ sftponly_user_ssh_key }}', shell: '/bin/bash', admin: False, limited_sudoers_user: False, log_as_root: False }

  # Define the users ssh keys here
user_name_ssh_key:
php_app_php_required_packages:
  - 'php{{ php_version }}-gd'
  - 'php{{ php_version }}-json'
  - 'php{{ php_version }}-pgsql'
  - 'php{{ php_version }}-xml'
  - 'php{{ php_version }}-mbstring'
  - 'php{{ php_version }}-intl'
  - 'php{{ php_version }}-curl'
  - 'php{{ php_version }}-zip'
  - 'php{{ php_version }}-bz2'
  - 'php{{ php_version }}-gmp'
#  - 'php{{ php_version }}-ldap'
#  - 'php-imagick'
#  - 'php-redis'
#  - 'php-apcu'

php_app_php_global_settings:
  - { option: 'always_populate_raw_post_data', value: '-1' }
  - { option: 'allow_url_fopen', value: 'on' }
  - { option: 'max_execution_time', value: '240' }
  - { option: 'memory_limit', value: '{{ phpfpm_default_memory_limit }}' }
  - { option: 'max_input_vars', value: '1400' }
  - { option: 'post_max_size', value: '32M' }
  - { option: 'upload_max_filesize', value: '32M' }
#  - { option: 'opcache.enable', value: '1' }
#  - { option: 'opcache.enable_cli', value: '1' }
#  - { option: 'opcache.interned_strings_buffer', value: '8' }
#  - { option: 'opcache.max_accelerated_files', value: '10000' }
#  - { option: 'opcache.memory_consumption', value: '128' }
#  - { option: 'opcache.save_comments', value: '1' }
#  - { option: 'opcache.revalidate_freq', value: '1' }