Ajout : etc/nginx/net/velocampus/devel
authorLudovic CHEVALIER <ludovic.chevalier@heureux-cyclage.org>
Wed, 13 Feb 2019 10:11:19 +0000 (11:11 +0100)
committerLudovic CHEVALIER <ludovic.chevalier@heureux-cyclage.org>
Wed, 13 Feb 2019 10:11:19 +0000 (11:11 +0100)
16 files changed:
srv/ateliers/etc/nginx/net/velocampus/... [new symlink]
srv/ateliers/etc/nginx/net/velocampus/devel/... [new symlink]
srv/ateliers/etc/nginx/net/velocampus/devel/common.conf.m4 [new file with mode: 0644]
srv/ateliers/etc/nginx/net/velocampus/devel/install [new file with mode: 0755]
srv/ateliers/etc/nginx/net/velocampus/devel/server.conf.m4 [new file with mode: 0644]
srv/ateliers/etc/php5/fpm/net/velocampus/... [new symlink]
srv/ateliers/etc/php5/fpm/net/velocampus/devel/... [new symlink]
srv/ateliers/etc/php5/fpm/net/velocampus/devel/install [new symlink]
srv/ateliers/etc/php5/fpm/net/velocampus/devel/php-fpm.conf.m4 [new file with mode: 0644]
srv/ateliers/sys/php5/fpm/net/velocampus/... [new symlink]
srv/ateliers/sys/php5/fpm/net/velocampus/devel/... [new symlink]
srv/ateliers/sys/php5/fpm/net/velocampus/devel/home [new file with mode: 0644]
srv/ateliers/sys/php5/fpm/net/velocampus/devel/log/... [new symlink]
srv/ateliers/sys/php5/fpm/net/velocampus/devel/log/home [new file with mode: 0644]
srv/ateliers/sys/php5/fpm/net/velocampus/devel/socket [new file with mode: 0644]
srv/ateliers/sys/php5/fpm/net/velocampus/devel/user [new file with mode: 0644]

diff --git a/srv/ateliers/etc/nginx/net/velocampus/... b/srv/ateliers/etc/nginx/net/velocampus/...
new file mode 120000 (symlink)
index 0000000..951b30d
--- /dev/null
@@ -0,0 +1 @@
+../...
\ No newline at end of file
diff --git a/srv/ateliers/etc/nginx/net/velocampus/devel/... b/srv/ateliers/etc/nginx/net/velocampus/devel/...
new file mode 120000 (symlink)
index 0000000..951b30d
--- /dev/null
@@ -0,0 +1 @@
+../...
\ No newline at end of file
diff --git a/srv/ateliers/etc/nginx/net/velocampus/devel/common.conf.m4 b/srv/ateliers/etc/nginx/net/velocampus/devel/common.conf.m4
new file mode 100644 (file)
index 0000000..7530c69
--- /dev/null
@@ -0,0 +1,57 @@
+server_name
+    devel.velocampus.net
+    devel.velocampus.heureux-cyclage.org;
+root /home/www/data/net/velocampus/devel/www;
+
+rewrite /wp-admin$ $scheme://$host$uri/ permanent;
+       # Add trailing slash to */wp-admin requests.
+location = /wp-admin/ {
+       return 301 /wp-admin/index.php?$args;
+ }
+location / {
+       index index.html index.htm index.php;
+       try_files $uri $uri/ /index.php?$args;
+ }
+location ~* ^.+\.(css|gif|html|ico|jpeg|js|jpg|png|txt|xml)$ {
+       access_log off;
+       expires 30d;
+       log_not_found off;
+ }
+location ~ /\. {
+       access_log off;
+       deny all;
+       log_not_found off;
+ }
+location ~ \.php(|/.+)$ {
+       include /etc/nginx/conf.d/fastcgi.conf;
+       set $no_cache "0";
+       if ($request_method !~ ^(GET|HEAD)$) {
+        # NOTE: if non GET/HEAD, don't cache and mark user as uncacheable for 1 second via cookie.
+               set $no_cache "1";
+        }
+       if ($no_cache = "1") {
+        # NOTE: drop no cache cookie if need be (for some reason, add_header fails if included in prior if-block).
+               add_header Set-Cookie "_mcnc=1; Max-Age=2; Path=/";
+               add_header X-Microcachable "0";
+        }
+       if ($http_cookie ~* "_mcnc") {
+        # NOTE: bypass cache if no-cache cookie is set
+               set $no_cache "1";
+        }
+       fastcgi_cache_bypass $no_cache;
+       fastcgi_cache_use_stale updating;
+       fastcgi_cache_valid 200 10s;
+       fastcgi_cache_valid 404 10m;
+       fastcgi_ignore_headers Cache-Control Expires Set-Cookie;
+       fastcgi_index index.php;
+       fastcgi_no_cache $no_cache;
+       fastcgi_param REDIRECT_STATUS 200;
+               # NOTE: PHP only, required if PHP was built with --enable-force-cgi-redirect
+       fastcgi_pass_header Cookie;
+       fastcgi_pass_header Set-Cookie;
+       fastcgi_split_path_info ^(.+\.php)(/.+)$;
+       try_files $fastcgi_script_name =404;
+               # Check for path info security issue
+       fastcgi_pass unix:CAT(sys/php5/fpm/net/velocampus/devel/socket);
+ }
+# vim: ft=sh
diff --git a/srv/ateliers/etc/nginx/net/velocampus/devel/install b/srv/ateliers/etc/nginx/net/velocampus/devel/install
new file mode 100755 (executable)
index 0000000..9ea837d
--- /dev/null
@@ -0,0 +1,26 @@
+#!/bin/sh -eu
+# SYNTAX: $path
+# DESCRIPTION: install
+
+# ACTION: initialize from .../lib/tool/admin/
+       tool=$(readlink -e "${0%/install}"/...)/lib/tool/admin
+       . "$tool"/lib/install.sh
+# ACTION: initialize $sv from ./sys/$sv/
+       sv=${cmd##*/etc/}
+       sv=${sv%%/*}
+# ACTION: initialize $site from ./etc/$sv/$site/install
+       site=${cmd##*/"$sv"/}
+       site=${site%/install}
+# ACTION: install from ./etc/nginx/\$site/install
+       "$tool"/etc/nginx/\$site/install "$site"
+# TODO: invoke php install script /etc/php5/fpm/net/velocampus/devel/install
+# ACTION: install from ./etc/nginx/net/velocampus/devel
+       pool=$("$tool"/cat sys/php5/fpm/net/velocampus/devel/user)
+       user=$("$tool"/cat sys/nginx/net/velocampus/devel/user)
+       home=$("$tool"/cat sys/nginx/net/velocampus/devel/home)
+       "$tool"/ssh-sudo adduser "$pool" "$user"
+       "$tool"/etc/mysql/user/install "$pool"
+       "$tool"/etc/mysql/database/install "$pool"
+       "$tool"/install etc/nginx/net/velocampus/devel
+       wwwuser=$("$tool"/cat sys/nginx/net/velocampus/devel/user)
+       "$tool"/ssh-sudo adduser "$wwwuser" sftp
diff --git a/srv/ateliers/etc/nginx/net/velocampus/devel/server.conf.m4 b/srv/ateliers/etc/nginx/net/velocampus/devel/server.conf.m4
new file mode 100644 (file)
index 0000000..7ff3e74
--- /dev/null
@@ -0,0 +1,10 @@
+define(`DOMAIN',`net/velocampus')dnl
+define(`SITE',`DOMAIN/devel')dnl
+server {
+       listen 80;
+       include /etc/nginx/conf.d/letsencrypt.conf;
+       include /etc/nginx/SITE/common.conf;
+       access_log /home/www/log/SITE/access.log main;
+       error_log  /home/www/log/SITE/error.log warn;
+ }
+
diff --git a/srv/ateliers/etc/php5/fpm/net/velocampus/... b/srv/ateliers/etc/php5/fpm/net/velocampus/...
new file mode 120000 (symlink)
index 0000000..951b30d
--- /dev/null
@@ -0,0 +1 @@
+../...
\ No newline at end of file
diff --git a/srv/ateliers/etc/php5/fpm/net/velocampus/devel/... b/srv/ateliers/etc/php5/fpm/net/velocampus/devel/...
new file mode 120000 (symlink)
index 0000000..951b30d
--- /dev/null
@@ -0,0 +1 @@
+../...
\ No newline at end of file
diff --git a/srv/ateliers/etc/php5/fpm/net/velocampus/devel/install b/srv/ateliers/etc/php5/fpm/net/velocampus/devel/install
new file mode 120000 (symlink)
index 0000000..a5c2ecf
--- /dev/null
@@ -0,0 +1 @@
+.../lib/tool/admin/etc/php5/fpm/$pool/install
\ No newline at end of file
diff --git a/srv/ateliers/etc/php5/fpm/net/velocampus/devel/php-fpm.conf.m4 b/srv/ateliers/etc/php5/fpm/net/velocampus/devel/php-fpm.conf.m4
new file mode 100644 (file)
index 0000000..80d3548
--- /dev/null
@@ -0,0 +1,37 @@
+define(`POOL',patsubst(__file__,`^.*/fpm/\(.*\)/[^/]*$',`\1'))dnl
+[POOL]
+access.log = CAT(sys/php5/fpm/POOL/log/home)/access.log
+catch_workers_output = no
+chdir = /
+env[HOSTNAME] = $HOSTNAME
+env[TEMP] = /tmp
+env[TMPDIR] = /tmp
+env[TMP] = /tmp
+group = CAT(sys/php5/fpm/POOL/user)
+#listen = 127.0.0.1:9000
+listen = CAT(sys/php5/fpm/POOL/socket)
+#listen.allowed_clients = 127.0.0.1
+listen.group = CAT(sys/nginx/user)
+listen.mode = 0660
+#listen.owner = www-data
+listen.backlog = -1
+#php_admin_value[extension] = pdo_mysql.so
+php_admin_value[extension] = mysql.so
+php_admin_value[extension] = curl.so
+php_value[allow_url_fopen] = On
+ping.path = /ping
+pm = dynamic
+pm.max_children = 15
+pm.max_requests = 200
+pm.max_spare_servers = 5
+pm.min_spare_servers = 1
+pm.start_servers = 1
+pm.status_path = /status
+pm.process_idle_timeout = 60s
+request_slowlog_timeout = 5s
+request_terminate_timeout = 120s
+rlimit_core = unlimited
+rlimit_files = 131072
+slowlog = CAT(sys/php5/fpm/POOL/log/home)/slow.log
+user = CAT(sys/php5/fpm/POOL/user)
+security.limit_extensions = .php
diff --git a/srv/ateliers/sys/php5/fpm/net/velocampus/... b/srv/ateliers/sys/php5/fpm/net/velocampus/...
new file mode 120000 (symlink)
index 0000000..951b30d
--- /dev/null
@@ -0,0 +1 @@
+../...
\ No newline at end of file
diff --git a/srv/ateliers/sys/php5/fpm/net/velocampus/devel/... b/srv/ateliers/sys/php5/fpm/net/velocampus/devel/...
new file mode 120000 (symlink)
index 0000000..951b30d
--- /dev/null
@@ -0,0 +1 @@
+../...
\ No newline at end of file
diff --git a/srv/ateliers/sys/php5/fpm/net/velocampus/devel/home b/srv/ateliers/sys/php5/fpm/net/velocampus/devel/home
new file mode 100644 (file)
index 0000000..a320e00
--- /dev/null
@@ -0,0 +1 @@
+/etc/php5/fpm/net/velocampus/devel
\ No newline at end of file
diff --git a/srv/ateliers/sys/php5/fpm/net/velocampus/devel/log/... b/srv/ateliers/sys/php5/fpm/net/velocampus/devel/log/...
new file mode 120000 (symlink)
index 0000000..951b30d
--- /dev/null
@@ -0,0 +1 @@
+../...
\ No newline at end of file
diff --git a/srv/ateliers/sys/php5/fpm/net/velocampus/devel/log/home b/srv/ateliers/sys/php5/fpm/net/velocampus/devel/log/home
new file mode 100644 (file)
index 0000000..d8b5732
--- /dev/null
@@ -0,0 +1 @@
+/home/www/log/php5/fpm/net/velocampus/devel
\ No newline at end of file
diff --git a/srv/ateliers/sys/php5/fpm/net/velocampus/devel/socket b/srv/ateliers/sys/php5/fpm/net/velocampus/devel/socket
new file mode 100644 (file)
index 0000000..220a14d
--- /dev/null
@@ -0,0 +1 @@
+/run/php5/fpm/veloc_devel
\ No newline at end of file
diff --git a/srv/ateliers/sys/php5/fpm/net/velocampus/devel/user b/srv/ateliers/sys/php5/fpm/net/velocampus/devel/user
new file mode 100644 (file)
index 0000000..fc22bc7
--- /dev/null
@@ -0,0 +1 @@
+php_veloc_devel
\ No newline at end of file