forked from AFPy/infra
94 lines
3.1 KiB
YAML
94 lines
3.1 KiB
YAML
---
|
|
|
|
- hosts: passbolt
|
|
roles: [common, tschifftner.exim4_sendonly, laxathom.passbolt]
|
|
tasks:
|
|
- name: Create passbolt backup directory
|
|
file:
|
|
path: /srv/backups/
|
|
owner: root
|
|
group: root
|
|
mode: 0700
|
|
state: directory
|
|
tags: backup
|
|
|
|
- name: Setup mysql passbolt backup
|
|
cron:
|
|
name: passbolt mysql backup
|
|
minute: 20
|
|
hour: 5
|
|
job: '/usr/bin/mysqldump passbolt > /srv/backups/passbolt.sql'
|
|
tags: backup
|
|
|
|
vars:
|
|
passbolt_version: "2.12.0"
|
|
passbolt_tmpdir: "/srv/passbolt-tmp/"
|
|
passbolt_homedir: "/srv/passbolt/"
|
|
passbolt_webroot: "/srv/passbolt/www/"
|
|
passbolt_use_ssl: True
|
|
passbolt_url: "https://passbolt.afpy.org"
|
|
passbolt_domain: "passbolt.afpy.org"
|
|
passbolt_gpgkey_length: 4096
|
|
passbolt_gpgkey_sublength: 4096
|
|
passbolt_gpgkey_email: "passbolt@afpy.org"
|
|
passbolt_dbpass: "{{ vault_passbolt_dbpass }}"
|
|
passbolt_smtp_sender_email: "passbolt@afpy.org"
|
|
|
|
passbolt_php_fpm_includedir: /etc/php/7.3/fpm/pool.d/
|
|
passbolt_php_fpm_listen: /var/run/php/fpm.sock
|
|
passbolt_php_fpm_user: passbolt
|
|
passbolt_php_fpm_group: passbolt
|
|
passbolt_php_fpm_listen_owner: www-data
|
|
passbolt_php_fpm_listen_group: www-data
|
|
|
|
passbolt_dbport: 3306
|
|
mysql_root_username: root
|
|
mysql_root_password: "{{ vault_mysql_root_password }}"
|
|
mysql_databases:
|
|
- name: passbolt
|
|
encoding: utf8mb4
|
|
collation: utf8mb4_unicode_ci
|
|
mysql_users:
|
|
- name: passbolt
|
|
password: "{{ vault_passbolt_dbpass }}"
|
|
priv: "passbolt.*:ALL"
|
|
mysql_packages:
|
|
- mariadb-server
|
|
- mariadb-client
|
|
- python-mysqldb
|
|
mysql_bind_address: '127.0.0.1'
|
|
php_memory_limit: "512M"
|
|
php_date_timezone: "Europe/Paris"
|
|
php_webserver_daemon: "nginx"
|
|
php_enable_php_fpm: true
|
|
php_enable_webserver: false
|
|
nginx_sites:
|
|
passbolt_http:
|
|
- listen 80
|
|
- server_name "{{ passbolt_domain }}"
|
|
- access_log /var/log/nginx/passbolt.afpy.org-access.log
|
|
- error_log /var/log/nginx/passbolt.afpy.org-error.log
|
|
- location / {
|
|
return 301 https://{{ passbolt_domain }}$request_uri;
|
|
}
|
|
|
|
passbolt:
|
|
- listen 443 ssl
|
|
- server_name passbolt.afpy.org
|
|
- server_tokens off
|
|
- access_log /var/log/nginx/passbolt.afpy.org-access.log
|
|
- error_log /var/log/nginx/passbolt.afpy.org-error.log
|
|
- include snippets/letsencrypt-{{ passbolt_domain }}.conf
|
|
- root {{ passbolt_webroot }}/webroot/
|
|
- location / { try_files $uri /index.php$is_args$args; }
|
|
- location ~ \.php(/|$) {
|
|
fastcgi_pass unix:{{ passbolt_php_fpm_listen }};
|
|
fastcgi_split_path_info ^(.+\.php)(/.*)$;
|
|
fastcgi_read_timeout 500;
|
|
include fastcgi_params;
|
|
fastcgi_param SCRIPT_FILENAME $realpath_root$fastcgi_script_name;
|
|
fastcgi_param SERVER_NAME $http_host;
|
|
fastcgi_param DOCUMENT_ROOT $realpath_root;
|
|
internal;
|
|
}
|