From f67b90ceb32f9293e0ecb89df28de449475540fd Mon Sep 17 00:00:00 2001 From: Ludovic CHEVALIER Date: Wed, 13 Feb 2019 11:11:19 +0100 Subject: [PATCH] =?utf8?q?Ajout=C2=A0:=20etc/nginx/net/velocampus/devel?= MIME-Version: 1.0 Content-Type: text/plain; charset=utf8 Content-Transfer-Encoding: 8bit --- srv/ateliers/etc/nginx/net/velocampus/... | 1 + .../etc/nginx/net/velocampus/devel/... | 1 + .../nginx/net/velocampus/devel/common.conf.m4 | 57 +++++++++++++++++++ .../etc/nginx/net/velocampus/devel/install | 26 +++++++++ .../nginx/net/velocampus/devel/server.conf.m4 | 10 ++++ srv/ateliers/etc/php5/fpm/net/velocampus/... | 1 + .../etc/php5/fpm/net/velocampus/devel/... | 1 + .../etc/php5/fpm/net/velocampus/devel/install | 1 + .../fpm/net/velocampus/devel/php-fpm.conf.m4 | 37 ++++++++++++ srv/ateliers/sys/php5/fpm/net/velocampus/... | 1 + .../sys/php5/fpm/net/velocampus/devel/... | 1 + .../sys/php5/fpm/net/velocampus/devel/home | 1 + .../sys/php5/fpm/net/velocampus/devel/log/... | 1 + .../php5/fpm/net/velocampus/devel/log/home | 1 + .../sys/php5/fpm/net/velocampus/devel/socket | 1 + .../sys/php5/fpm/net/velocampus/devel/user | 1 + 16 files changed, 142 insertions(+) create mode 120000 srv/ateliers/etc/nginx/net/velocampus/... create mode 120000 srv/ateliers/etc/nginx/net/velocampus/devel/... create mode 100644 srv/ateliers/etc/nginx/net/velocampus/devel/common.conf.m4 create mode 100755 srv/ateliers/etc/nginx/net/velocampus/devel/install create mode 100644 srv/ateliers/etc/nginx/net/velocampus/devel/server.conf.m4 create mode 120000 srv/ateliers/etc/php5/fpm/net/velocampus/... create mode 120000 srv/ateliers/etc/php5/fpm/net/velocampus/devel/... create mode 120000 srv/ateliers/etc/php5/fpm/net/velocampus/devel/install create mode 100644 srv/ateliers/etc/php5/fpm/net/velocampus/devel/php-fpm.conf.m4 create mode 120000 srv/ateliers/sys/php5/fpm/net/velocampus/... create mode 120000 srv/ateliers/sys/php5/fpm/net/velocampus/devel/... create mode 100644 srv/ateliers/sys/php5/fpm/net/velocampus/devel/home create mode 120000 srv/ateliers/sys/php5/fpm/net/velocampus/devel/log/... create mode 100644 srv/ateliers/sys/php5/fpm/net/velocampus/devel/log/home create mode 100644 srv/ateliers/sys/php5/fpm/net/velocampus/devel/socket create mode 100644 srv/ateliers/sys/php5/fpm/net/velocampus/devel/user diff --git a/srv/ateliers/etc/nginx/net/velocampus/... b/srv/ateliers/etc/nginx/net/velocampus/... new file mode 120000 index 0000000..951b30d --- /dev/null +++ b/srv/ateliers/etc/nginx/net/velocampus/... @@ -0,0 +1 @@ +../... \ No newline at end of file diff --git a/srv/ateliers/etc/nginx/net/velocampus/devel/... b/srv/ateliers/etc/nginx/net/velocampus/devel/... new file mode 120000 index 0000000..951b30d --- /dev/null +++ b/srv/ateliers/etc/nginx/net/velocampus/devel/... @@ -0,0 +1 @@ +../... \ No newline at end of file diff --git a/srv/ateliers/etc/nginx/net/velocampus/devel/common.conf.m4 b/srv/ateliers/etc/nginx/net/velocampus/devel/common.conf.m4 new file mode 100644 index 0000000..7530c69 --- /dev/null +++ b/srv/ateliers/etc/nginx/net/velocampus/devel/common.conf.m4 @@ -0,0 +1,57 @@ +server_name + devel.velocampus.net + devel.velocampus.heureux-cyclage.org; +root /home/www/data/net/velocampus/devel/www; + +rewrite /wp-admin$ $scheme://$host$uri/ permanent; + # Add trailing slash to */wp-admin requests. +location = /wp-admin/ { + return 301 /wp-admin/index.php?$args; + } +location / { + index index.html index.htm index.php; + try_files $uri $uri/ /index.php?$args; + } +location ~* ^.+\.(css|gif|html|ico|jpeg|js|jpg|png|txt|xml)$ { + access_log off; + expires 30d; + log_not_found off; + } +location ~ /\. { + access_log off; + deny all; + log_not_found off; + } +location ~ \.php(|/.+)$ { + include /etc/nginx/conf.d/fastcgi.conf; + set $no_cache "0"; + if ($request_method !~ ^(GET|HEAD)$) { + # NOTE: if non GET/HEAD, don't cache and mark user as uncacheable for 1 second via cookie. + set $no_cache "1"; + } + if ($no_cache = "1") { + # NOTE: drop no cache cookie if need be (for some reason, add_header fails if included in prior if-block). + add_header Set-Cookie "_mcnc=1; Max-Age=2; Path=/"; + add_header X-Microcachable "0"; + } + if ($http_cookie ~* "_mcnc") { + # NOTE: bypass cache if no-cache cookie is set + set $no_cache "1"; + } + fastcgi_cache_bypass $no_cache; + fastcgi_cache_use_stale updating; + fastcgi_cache_valid 200 10s; + fastcgi_cache_valid 404 10m; + fastcgi_ignore_headers Cache-Control Expires Set-Cookie; + fastcgi_index index.php; + fastcgi_no_cache $no_cache; + fastcgi_param REDIRECT_STATUS 200; + # NOTE: PHP only, required if PHP was built with --enable-force-cgi-redirect + fastcgi_pass_header Cookie; + fastcgi_pass_header Set-Cookie; + fastcgi_split_path_info ^(.+\.php)(/.+)$; + try_files $fastcgi_script_name =404; + # Check for path info security issue + fastcgi_pass unix:CAT(sys/php5/fpm/net/velocampus/devel/socket); + } +# vim: ft=sh diff --git a/srv/ateliers/etc/nginx/net/velocampus/devel/install b/srv/ateliers/etc/nginx/net/velocampus/devel/install new file mode 100755 index 0000000..9ea837d --- /dev/null +++ b/srv/ateliers/etc/nginx/net/velocampus/devel/install @@ -0,0 +1,26 @@ +#!/bin/sh -eu +# SYNTAX: $path +# DESCRIPTION: install + +# ACTION: initialize from .../lib/tool/admin/ + tool=$(readlink -e "${0%/install}"/...)/lib/tool/admin + . "$tool"/lib/install.sh +# ACTION: initialize $sv from ./sys/$sv/ + sv=${cmd##*/etc/} + sv=${sv%%/*} +# ACTION: initialize $site from ./etc/$sv/$site/install + site=${cmd##*/"$sv"/} + site=${site%/install} +# ACTION: install from ./etc/nginx/\$site/install + "$tool"/etc/nginx/\$site/install "$site" +# TODO: invoke php install script /etc/php5/fpm/net/velocampus/devel/install +# ACTION: install from ./etc/nginx/net/velocampus/devel + pool=$("$tool"/cat sys/php5/fpm/net/velocampus/devel/user) + user=$("$tool"/cat sys/nginx/net/velocampus/devel/user) + home=$("$tool"/cat sys/nginx/net/velocampus/devel/home) + "$tool"/ssh-sudo adduser "$pool" "$user" + "$tool"/etc/mysql/user/install "$pool" + "$tool"/etc/mysql/database/install "$pool" + "$tool"/install etc/nginx/net/velocampus/devel + wwwuser=$("$tool"/cat sys/nginx/net/velocampus/devel/user) + "$tool"/ssh-sudo adduser "$wwwuser" sftp diff --git a/srv/ateliers/etc/nginx/net/velocampus/devel/server.conf.m4 b/srv/ateliers/etc/nginx/net/velocampus/devel/server.conf.m4 new file mode 100644 index 0000000..7ff3e74 --- /dev/null +++ b/srv/ateliers/etc/nginx/net/velocampus/devel/server.conf.m4 @@ -0,0 +1,10 @@ +define(`DOMAIN',`net/velocampus')dnl +define(`SITE',`DOMAIN/devel')dnl +server { + listen 80; + include /etc/nginx/conf.d/letsencrypt.conf; + include /etc/nginx/SITE/common.conf; + access_log /home/www/log/SITE/access.log main; + error_log /home/www/log/SITE/error.log warn; + } + diff --git a/srv/ateliers/etc/php5/fpm/net/velocampus/... b/srv/ateliers/etc/php5/fpm/net/velocampus/... new file mode 120000 index 0000000..951b30d --- /dev/null +++ b/srv/ateliers/etc/php5/fpm/net/velocampus/... @@ -0,0 +1 @@ +../... \ No newline at end of file diff --git a/srv/ateliers/etc/php5/fpm/net/velocampus/devel/... b/srv/ateliers/etc/php5/fpm/net/velocampus/devel/... new file mode 120000 index 0000000..951b30d --- /dev/null +++ b/srv/ateliers/etc/php5/fpm/net/velocampus/devel/... @@ -0,0 +1 @@ +../... \ No newline at end of file diff --git a/srv/ateliers/etc/php5/fpm/net/velocampus/devel/install b/srv/ateliers/etc/php5/fpm/net/velocampus/devel/install new file mode 120000 index 0000000..a5c2ecf --- /dev/null +++ b/srv/ateliers/etc/php5/fpm/net/velocampus/devel/install @@ -0,0 +1 @@ +.../lib/tool/admin/etc/php5/fpm/$pool/install \ No newline at end of file diff --git a/srv/ateliers/etc/php5/fpm/net/velocampus/devel/php-fpm.conf.m4 b/srv/ateliers/etc/php5/fpm/net/velocampus/devel/php-fpm.conf.m4 new file mode 100644 index 0000000..80d3548 --- /dev/null +++ b/srv/ateliers/etc/php5/fpm/net/velocampus/devel/php-fpm.conf.m4 @@ -0,0 +1,37 @@ +define(`POOL',patsubst(__file__,`^.*/fpm/\(.*\)/[^/]*$',`\1'))dnl +[POOL] +access.log = CAT(sys/php5/fpm/POOL/log/home)/access.log +catch_workers_output = no +chdir = / +env[HOSTNAME] = $HOSTNAME +env[TEMP] = /tmp +env[TMPDIR] = /tmp +env[TMP] = /tmp +group = CAT(sys/php5/fpm/POOL/user) +#listen = 127.0.0.1:9000 +listen = CAT(sys/php5/fpm/POOL/socket) +#listen.allowed_clients = 127.0.0.1 +listen.group = CAT(sys/nginx/user) +listen.mode = 0660 +#listen.owner = www-data +listen.backlog = -1 +#php_admin_value[extension] = pdo_mysql.so +php_admin_value[extension] = mysql.so +php_admin_value[extension] = curl.so +php_value[allow_url_fopen] = On +ping.path = /ping +pm = dynamic +pm.max_children = 15 +pm.max_requests = 200 +pm.max_spare_servers = 5 +pm.min_spare_servers = 1 +pm.start_servers = 1 +pm.status_path = /status +pm.process_idle_timeout = 60s +request_slowlog_timeout = 5s +request_terminate_timeout = 120s +rlimit_core = unlimited +rlimit_files = 131072 +slowlog = CAT(sys/php5/fpm/POOL/log/home)/slow.log +user = CAT(sys/php5/fpm/POOL/user) +security.limit_extensions = .php diff --git a/srv/ateliers/sys/php5/fpm/net/velocampus/... b/srv/ateliers/sys/php5/fpm/net/velocampus/... new file mode 120000 index 0000000..951b30d --- /dev/null +++ b/srv/ateliers/sys/php5/fpm/net/velocampus/... @@ -0,0 +1 @@ +../... \ No newline at end of file diff --git a/srv/ateliers/sys/php5/fpm/net/velocampus/devel/... b/srv/ateliers/sys/php5/fpm/net/velocampus/devel/... new file mode 120000 index 0000000..951b30d --- /dev/null +++ b/srv/ateliers/sys/php5/fpm/net/velocampus/devel/... @@ -0,0 +1 @@ +../... \ No newline at end of file diff --git a/srv/ateliers/sys/php5/fpm/net/velocampus/devel/home b/srv/ateliers/sys/php5/fpm/net/velocampus/devel/home new file mode 100644 index 0000000..a320e00 --- /dev/null +++ b/srv/ateliers/sys/php5/fpm/net/velocampus/devel/home @@ -0,0 +1 @@ +/etc/php5/fpm/net/velocampus/devel \ No newline at end of file diff --git a/srv/ateliers/sys/php5/fpm/net/velocampus/devel/log/... b/srv/ateliers/sys/php5/fpm/net/velocampus/devel/log/... new file mode 120000 index 0000000..951b30d --- /dev/null +++ b/srv/ateliers/sys/php5/fpm/net/velocampus/devel/log/... @@ -0,0 +1 @@ +../... \ No newline at end of file diff --git a/srv/ateliers/sys/php5/fpm/net/velocampus/devel/log/home b/srv/ateliers/sys/php5/fpm/net/velocampus/devel/log/home new file mode 100644 index 0000000..d8b5732 --- /dev/null +++ b/srv/ateliers/sys/php5/fpm/net/velocampus/devel/log/home @@ -0,0 +1 @@ +/home/www/log/php5/fpm/net/velocampus/devel \ No newline at end of file diff --git a/srv/ateliers/sys/php5/fpm/net/velocampus/devel/socket b/srv/ateliers/sys/php5/fpm/net/velocampus/devel/socket new file mode 100644 index 0000000..220a14d --- /dev/null +++ b/srv/ateliers/sys/php5/fpm/net/velocampus/devel/socket @@ -0,0 +1 @@ +/run/php5/fpm/veloc_devel \ No newline at end of file diff --git a/srv/ateliers/sys/php5/fpm/net/velocampus/devel/user b/srv/ateliers/sys/php5/fpm/net/velocampus/devel/user new file mode 100644 index 0000000..fc22bc7 --- /dev/null +++ b/srv/ateliers/sys/php5/fpm/net/velocampus/devel/user @@ -0,0 +1 @@ +php_veloc_devel \ No newline at end of file -- 2.20.1