ajout playbook creation site

[lhc/ansible.git] / tasks / config_pool_php.yml

diff --git a/tasks/config_pool_php.yml b/tasks/config_pool_php.yml
new file mode 100644 (file)
index 0000000..f20d74b
--- /dev/null
+++ b/tasks/config_pool_php.yml
@@ -0,0 +1,85 @@
+- name: Ajout de l'utilisateur php_SIGLE_SITE
+  ansible.builtin.user:
+    name: "php_{{ SIGLE }}_{{ SITE }}"
+    home: "/etc/php/{{ php_version }}/fpm/{{ TLD }}/{{ DOMAIN }}/{{ SITE }}"
+    shell: /bin/false
+    system: true
+    append: true
+    create_home: false
+    password: '!'
+#    group: "php_{{ SIGLE }}_{{ SITE }}"
+
+- name: Boucle d'ajout du user php dans plusieurs groupe
+  ansible.builtin.user:
+    name: "php_{{ SIGLE }}_{{ SITE }}"
+    groups: "{{ item }}"
+    append: true
+  loop:
+    - www-data
+
+- name: Boucle création ou modifications des répertoires log d'un pool php
+  ansible.builtin.file:
+    path: "{{ item.path }}"
+    state: "{{ item.state }}"
+    owner: "{{ item.owner }}"
+    group: "{{ item.group }}"
+    mode: "{{ item.mode }}"
+  loop_control:
+    label: "{{ item.path }}"
+  loop:
+    - path: "/home/sites/log/php/fpm/{{ TLD }}"
+      state: directory
+      owner: 'root'
+      group: 'root'
+      mode: '1751'
+    - path: "/home/sites/log/php/fpm/{{ TLD }}/{{ DOMAIN }}"
+      state: directory
+      owner: "php_{{ SIGLE }}_{{ SITE }}"
+      group: "php_{{ SIGLE }}_{{ SITE }}"
+      mode: '1751'
+    - path: "/home/sites/log/php/fpm/{{ TLD }}/{{ DOMAIN }}/{{ SITE }}"
+      state: directory
+      owner: "php_{{ SIGLE }}_{{ SITE }}"
+      group: "php_{{ SIGLE }}_{{ SITE }}"
+      mode: '750'
+
+- name: Boucle création ou modifications des répertoires config d'un pool php
+  ansible.builtin.file:
+    path: "{{ item.path }}"
+    state: "{{ item.state }}"
+    owner: "{{ item.owner }}"
+    group: "{{ item.group }}"
+    mode: "{{ item.mode }}"
+  loop_control:
+    label: "{{ item.path }}"
+  loop:
+    - path: "/etc/php/{{ php_version }}/fpm/{{ TLD }}/{{ DOMAIN }}/{{ SITE }}"
+      state: directory # If directory, all intermediate subdirectories will be created if they do not exist.
+      owner: 'root'
+      group: 'root'
+      mode: '750'
+    - path: "/run/php_{{ php_version }}/fpm"
+      state: directory
+      owner: 'root'
+      group: 'root'
+      mode: '2755'
+
+- name: Création de la conf server nginx
+  ansible.builtin.template:
+    src: "templates/php_{{ SITE }}_conf.j2"
+    dest: "/etc/php/{{ php_version}}/fpm/{{ TLD }}/{{ DOMAIN }}/{{ SITE }}/php-fpm.conf"
+    owner: "root"
+    group: "root"
+    mode: '640' # or u=rwx,g=r,o=
+  when: SITE == 'nuage' or SITE == 'paheko'
+
+- name: ATTENTION la config php n'a pas été créer
+  ansible.builtin.debug:
+    msg: "Il n'y a pas de templates php pour votre site, il faudra le créer manuellement"
+  when: SITE != 'nuage' or SITE != 'paheko'
+
+# - name: recharger PHP service
+#   ansible.builtin.service:
+#     name: "php{{ php_version }}-fpm"
+#     state: reloaded
+#   when: SITE != 'nuage' or SITE != 'paheko'