API tools faq
paste
chrisluiz16

Day 7

chrisluiz16
Jun 27th, 2023
64
0
Never
Add comment
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
YAML 18.18 KB | None | 0 0
raw download clone embed print report
  1.  
  2.  
  3. -------------------------------------------------------------- Task 1-------------------------------------------
  4.  
  5. #### variables ####
  6.  
  7. [ec2-user@ip-172-31-45-107 lamp-project]$ cat apache.vars
  8. ---
  9.  
  10. httpd_port: 80
  11. httpd_site: blog.chrisich.fun
  12. httpd_owner: apache
  13. httpd_group: apache
  14. packages:
  15.  - httpd
  16.   - php-fpm
  17. [ec2-user@ip-172-31-45-107 lamp-project]$
  18. [ec2-user@ip-172-31-45-107 lamp-project]$
  19. [ec2-user@ip-172-31-45-107 lamp-project]$ cat mariadb.vars
  20. ---
  21.  
  22. mysql_packages:
  23.  - mariadb105-server
  24.   - php8.1-mysqlnd
  25.   - python3-pip
  26. mysqlrootpasswd: mysqlroot123
  27. mysql_docroot: /var/lib/mysql
  28. blog_user: blog_user
  29. blog_passwd: blog123
  30. blog_db: blog_db
  31. [ec2-user@ip-172-31-45-107 lamp-project]$
  32. [ec2-user@ip-172-31-45-107 lamp-project]$ cat wordpress.vars
  33. ---
  34.  
  35. wordpress_url: https://wordpress.org/wordpress-6.2.tar.gz
  36.  
  37.  
  38.  
  39.  
  40.  
  41.  
  42.  
  43.  
  44. #### Playbook ####
  45.  
  46.  
  47. ---
  48.  
  49. - name : "Wordpress LAMP installation"
  50.   hosts: amazon
  51.   become: true
  52.   vars_files:
  53.    - apache.vars
  54.     - mariadb.vars
  55.     - wordpress.vars
  56.   tasks:
  57.     - name: "Installing Apache and php-fpm"
  58.       yum:
  59.         name: "{{ packages }}"
  60.         state: present
  61.       register: package_status
  62.       tags:
  63.        - lamp
  64.     - name: "Copying the httpd conf template to the remote machine"
  65.       template:
  66.         src: ./httpd.conf.tmpl
  67.         dest: /etc/httpd/conf/httpd.conf
  68.       register: conf_status
  69.       tags:
  70.        - lamp
  71.     - name: "Creating the document root /var/www/html/{{ httpd_site }}"
  72.       file:
  73.         path: "/var/www/html/{{ httpd_site }}"
  74.         state: directory
  75.         owner: "{{ httpd_owner }}"
  76.         group: "{{ httpd_group }}"
  77.       tags:
  78.        - lamp
  79.     - name: "Copying the virtual host template to /etc/httpd/conf.d/{{ httpd_site }}"
  80.       template:
  81.         src: ./virtualhost.conf.tmpl
  82.         dest: "/etc/httpd/conf.d/default.conf"
  83.       register: virtualhost_status
  84.       tags:
  85.        - lamp
  86.     - name: "Copying the contents to document root"
  87.       when: package_status.changed == true
  88.       copy:
  89.         src: ./www/
  90.         dest: "/var/www/html/{{ httpd_site }}"
  91.         owner: "{{ httpd_owner }}"
  92.         group: "{{ httpd_group }}"
  93.       register: index_status
  94.       tags:
  95.        - lamp
  96.     - name: "Service php-fpm restart/enable when condition meets"
  97.       when: package_status.changed == true or index_status.changed == true
  98.       service:
  99.         name: php-fpm
  100.         state: restarted
  101.         enabled: true
  102.       tags:
  103.        - lamp
  104.     - name: "Service httpd restart/enable when condition meets"
  105.       when: package_status.changed == true or conf_status.changed == true or virtualhost_status.changed == true
  106.       service:
  107.         name: httpd
  108.         state: restarted
  109.         enabled: true
  110.       tags:
  111.        - lamp
  112.     - name: "Installing mariadb required packages"
  113.       yum:
  114.         name: "{{ mysql_packages }}"
  115.         state: present
  116.       tags:
  117.        - lamp
  118.         - mysql
  119.     - name: "Restarting mariadb server"
  120.       service:
  121.         name: mariadb
  122.         state: restarted
  123.         enabled: true
  124.       tags:
  125.        - lamp
  126.         - mysql
  127.     - name: "Installing the pip3 module for mysql"
  128.       pip:
  129.         name: PyMySQL
  130.         state: present
  131.       tags:
  132.        - lamp
  133.         - mysql
  134.     - name: "Setting root password for mysql"
  135.       mysql_user:
  136.         login_user: root
  137.         login_password: ""
  138.         login_unix_socket: "{{ mysql_docroot }}/mysql.sock"
  139.         name: root
  140.         password: "{{ mysqlrootpasswd }}"
  141.       ignore_errors: true
  142.       tags:
  143.        - lamp
  144.         - mysql
  145.     - name: "Creating a datababe {{ blog_db }}"
  146.       mysql_db:
  147.         login_user: root
  148.         login_password: "{{ mysqlrootpasswd }}"
  149.         login_unix_socket: "{{ mysql_docroot }}/mysql.sock"
  150.         name: "{{ blog_db }}"
  151.       tags:
  152.        - lamp
  153.         - mysql
  154.     - name: "Creating an extra user {{ blog_user }}"
  155.       mysql_user:
  156.         login_user: root
  157.         login_password: "{{ mysqlrootpasswd }}"
  158.         login_unix_socket: "{{ mysql_docroot }}/mysql.sock"
  159.         name: "{{ blog_user}}"
  160.         password: "{{ blog_passwd }}"
  161.         host: "%"
  162.         priv: "{{ blog_db }}.*:ALL"
  163.       tags:
  164.        - lamp
  165.         - mysql
  166.     - name: "Wget the wordpress"
  167.       get_url:
  168.         url: "{{ wordpress_url }}"
  169.         dest: /tmp/wordpress.tar.gz
  170.       tags: wordpress
  171.     - name: "unarchive the worpress url"
  172.       unarchive:
  173.         src: /tmp/wordpress.tar.gz
  174.         dest: /tmp/
  175.         remote_src: true
  176.       tags: wordpress
  177.     - name: "Copying the wordpress contents to the docroot"
  178.       copy:
  179.         src: /tmp/wordpress/
  180.         dest: "/var/www/html/{{ httpd_site }}"
  181.         owner: "{{ httpd_owner }}"
  182.         group: "{{ httpd_group }}"
  183.         remote_src: true
  184.       tags: wordpress
  185.     - name: "Copying wp-config.php to remote server"
  186.       template:
  187.         src: ./wp-config.php.tmpl
  188.         dest: "/var/www/html/{{ httpd_site }}/wp-config.php"
  189.         owner: "{{ httpd_owner }}"
  190.         group: "{{ httpd_group }}"
  191.       tags: wordpress
  192.     - name: "Cleanup"
  193.       file:
  194.         name: "{{ item }}"
  195.         state: absent
  196.       with_items:
  197.        - /tmp/wordpress.tar.gz
  198.         - /tmp/wordpress
  199.       tags: wordpress
  200.      
  201.    
  202.    
  203. #### Output ####
  204.  
  205. [ec2-user@ip-172-31-45-107 lamp-project]$ ansible-vault encrypt apache.vars mariadb.vars wordpress.vars
  206. New Vault password:
  207. Confirm New Vault password:
  208. Encryption successful
  209.  
  210.  
  211.  
  212.  
  213.  
  214. [ec2-user@ip-172-31-45-107 lamp-project]$ ansible-playbook -i inventory lamp.yml -t lamp,mysql,wordpress --ask-vault-pass
  215. Vault password:
  217. PLAY [Wordpress LAMP installation] *************************************************************************************************************************
  218.  
  219. TASK [Gathering Facts] *************************************************************************************************************************************
  220. [WARNING]: Platform linux on host 172.31.42.193 is using the discovered Python interpreter at /usr/bin/python3.9, but future installation of another Python
  221. interpreter could change the meaning of that path. See https://docs.ansible.com/ansible-core/2.15/reference_appendices/interpreter_discovery.html for more
  222. information.
  223. ok: [172.31.42.193]
  224.  
  225. TASK [Installing Apache and php-fpm] ***********************************************************************************************************************
  226. changed: [172.31.42.193]
  227.  
  228. TASK [Copying the httpd conf template to the remote machine] ***********************************************************************************************
  229. changed: [172.31.42.193]
  230.  
  231. TASK [Creating the document root /var/www/html/blog.chrisich.fun] ******************************************************************************************
  232. changed: [172.31.42.193]
  233.  
  234. TASK [Copying the virtual host template to /etc/httpd/conf.d/blog.chrisich.fun] ****************************************************************************
  235. changed: [172.31.42.193]
  236.  
  237. TASK [Copying the contents to document root] ***************************************************************************************************************
  238. changed: [172.31.42.193]
  239.  
  240. TASK [Service php-fpm restart/enable when condition meets] *************************************************************************************************
  241. changed: [172.31.42.193]
  242.  
  243. TASK [Service httpd restart/enable when condition meets] ***************************************************************************************************
  244. changed: [172.31.42.193]
  245.  
  246. TASK [Installing mariadb required packages] ****************************************************************************************************************
  247. changed: [172.31.42.193]
  248.  
  249. TASK [Restarting mariadb server] ***************************************************************************************************************************
  250. changed: [172.31.42.193]
  251.  
  252. TASK [Installing the pip3 module for mysql] ****************************************************************************************************************
  253. ok: [172.31.42.193]
  254.  
  255. TASK [Setting root password for mysql] *********************************************************************************************************************
  256. changed: [172.31.42.193]
  257.  
  258. TASK [Creating a datababe blog_db] *************************************************************************************************************************
  259. changed: [172.31.42.193]
  260.  
  261. TASK [Creating an extra user blog_user] ********************************************************************************************************************
  262. changed: [172.31.42.193]
  263.  
  264. TASK [Wget the wordpress] **********************************************************************************************************************************
  265. changed: [172.31.42.193]
  266.  
  267. TASK [unarchive the worpress url] **************************************************************************************************************************
  268. changed: [172.31.42.193]
  269.  
  270. TASK [Copying the wordpress contents to the docroot] *******************************************************************************************************
  271. changed: [172.31.42.193]
  272.  
  273. TASK [Copying wp-config.php to remote server] **************************************************************************************************************
  274. changed: [172.31.42.193]
  275.  
  276. TASK [Cleanup] *********************************************************************************************************************************************
  277. changed: [172.31.42.193] => (item=/tmp/wordpress.tar.gz)
  278. changed: [172.31.42.193] => (item=/tmp/wordpress)
  279.  
  280. PLAY RECAP *************************************************************************************************************************************************
  281. 172.31.42.193              : ok=19   changed=17   unreachable=0    failed=0    skipped=0    rescued=0    ignored=0
  282.  
  283.  
  284.  
  285.  
  286. ------------------------------------------------------------ Task 2---------------------------------------------------------------------------------------------------
  287.  
  288.  
  289.  
  290. ---
  291.  
  292. - name : "Wordpress LAMP installation"
  293.   hosts: amazon
  294.   become: true
  295.   vars_files:
  296.    - apache.vars
  297.     - mariadb.vars
  298.     - wordpress.vars
  299.   tasks:
  300.     - name: "Installing Apache and php-fpm"
  301.       yum:
  302.         name: "{{ packages }}"
  303.         state: present
  304.       register: package_status
  305.       tags:
  306.        - never
  307.         - lamp
  308.     - name: "Copying the httpd conf template to the remote machine"
  309.       template:
  310.         src: ./httpd.conf.tmpl
  311.         dest: /etc/httpd/conf/httpd.conf
  312.       register: conf_status
  313.       tags:
  314.        - never
  315.         - lamp
  316.     - name: "Creating the document root /var/www/html/{{ httpd_site }}"
  317.       file:
  318.         path: "/var/www/html/{{ httpd_site }}"
  319.         state: directory
  320.         owner: "{{ httpd_owner }}"
  321.         group: "{{ httpd_group }}"
  322.       tags:
  323.        - never
  324.         - lamp
  325.     - name: "Copying the virtual host template to /etc/httpd/conf.d/{{ httpd_site }}"
  326.       template:
  327.         src: ./virtualhost.conf.tmpl
  328.         dest: "/etc/httpd/conf.d/default.conf"
  329.       register: virtualhost_status
  330.       tags:
  331.        - never
  332.         - lamp
  333.     - name: "Copying the contents to document root"
  334.       when: package_status.changed == true
  335.       copy:
  336.         src: ./www/
  337.         dest: "/var/www/html/{{ httpd_site }}"
  338.         owner: "{{ httpd_owner }}"
  339.         group: "{{ httpd_group }}"
  340.       register: index_status
  341.       tags:
  342.        - never
  343.         - lamp
  344.     - name: "Service php-fpm restart/enable when condition meets"
  345.       when: package_status.changed == true or index_status.changed == true
  346.       service:
  347.         name: php-fpm
  348.         state: restarted
  349.         enabled: true
  350.       tags:
  351.        - never
  352.         - lamp
  353.     - name: "Service httpd restart/enable when condition meets"
  354.       when: package_status.changed == true or conf_status.changed == true or virtualhost_status.changed == true
  355.       service:
  356.         name: httpd
  357.         state: restarted
  358.         enabled: true
  359.       tags:
  360.        - never
  361.         - lamp
  362.     - name: "Installing mariadb required packages"
  363.       yum:
  364.         name: "{{ mysql_packages }}"
  365.         state: present
  366.       tags:
  367.        - never
  368.         - lamp
  369.         - mysql
  370.     - name: "Restarting mariadb server"
  371.       service:
  372.         name: mariadb
  373.         state: restarted
  374.         enabled: true
  375.       tags:
  376.        - never
  377.         - lamp
  378.         - mysql
  379.     - name: "Installing the pip3 module for mysql"
  380.       pip:
  381.         name: PyMySQL
  382.         state: present
  383.       tags:
  384.        - never
  385.         - lamp
  386.         - mysql
  387.     - name: "Setting root password for mysql"
  388.       mysql_user:
  389.         login_user: root
  390.         login_password: ""
  391.         login_unix_socket: "{{ mysql_docroot }}/mysql.sock"
  392.         name: root
  393.         password: "{{ mysqlrootpasswd }}"
  394.       ignore_errors: true
  395.       tags:
  396.        - never
  397.         - lamp
  398.         - mysql
  399.     - name: "Creating a datababe {{ blog_db }}"
  400.       mysql_db:
  401.         login_user: root
  402.         login_password: "{{ mysqlrootpasswd }}"
  403.         login_unix_socket: "{{ mysql_docroot }}/mysql.sock"
  404.         name: "{{ blog_db }}"
  405.       tags:
  406.        - never
  407.         - lamp
  408.         - mysql
  409.     - name: "Creating an extra user {{ blog_user }}"
  410.       mysql_user:
  411.         login_user: root
  412.         login_password: "{{ mysqlrootpasswd }}"
  413.         login_unix_socket: "{{ mysql_docroot }}/mysql.sock"
  414.         name: "{{ blog_user}}"
  415.         password: "{{ blog_passwd }}"
  416.         host: "%"
  417.         priv: "{{ blog_db }}.*:ALL"
  418.       tags:
  419.        - never
  420.         - lamp
  421.         - mysql
  422.     - name: "Wget the wordpress"
  423.       get_url:
  424.         url: "{{ wordpress_url }}"
  425.         dest: /tmp/wordpress.tar.gz
  426.       tags: never,wordpress
  427.     - name: "unarchive the worpress url"
  428.       unarchive:
  429.         src: /tmp/wordpress.tar.gz
  430.         dest: /tmp/
  431.         remote_src: true
  432.       tags: never,wordpress
  433.     - name: "Copying the wordpress contents to the docroot"
  434.       copy:
  435.         src: /tmp/wordpress/
  436.         dest: "/var/www/html/{{ httpd_site }}"
  437.         owner: "{{ httpd_owner }}"
  438.         group: "{{ httpd_group }}"
  439.         remote_src: true
  440.       tags: never,wordpress
  441.     - name: "Copying wp-config.php to remote server"
  442.       template:
  443.         src: ./wp-config.php.tmpl
  444.         dest: "/var/www/html/{{ httpd_site }}/wp-config.php"
  445.         owner: "{{ httpd_owner }}"
  446.         group: "{{ httpd_group }}"
  447.       tags: never,wordpress
  448.     - name: "Cleanup"
  449.       file:
  450.         name: "{{ item }}"
  451.         state: absent
  452.       with_items:
  453.        - /tmp/wordpress.tar.gz
  454.         - /tmp/wordpress
  455.       tags: never,wordpress
  456.      
  457.  
  458.  
  459. #### Output {checking whether playbook is running without tags} ####
  460.  
  461. [ec2-user@ip-172-31-45-107 lamp-project]$ ansible-playbook -i inventory  lamp.yml  --ask-vault-pass
  462. Vault password:
  464. PLAY [Wordpress LAMP installation] *************************************************************************************************************************
  465.  
  466. TASK [Gathering Facts] *************************************************************************************************************************************
  467. [WARNING]: Platform linux on host 172.31.42.193 is using the discovered Python interpreter at /usr/bin/python3.9, but future installation of another Python
  468. interpreter could change the meaning of that path. See https://docs.ansible.com/ansible-core/2.15/reference_appendices/interpreter_discovery.html for more
  469. information.
  470. ok: [172.31.42.193]
  471.  
  472. PLAY RECAP *************************************************************************************************************************************************
  473. 172.31.42.193              : ok=1    changed=0    unreachable=0    failed=0    skipped=0    rescued=0    ignored=0
  474.  
  475.  
  476.  
  477.  
  478.  
  479.  
  480.  
  481.  
  482.  
  483.  
  484. ------------------------------------------------------------ Task 3 --vault-password-file ---------------------------------------------------------------------------------------------------
  485.  
  486. [ec2-user@ip-172-31-45-107 lamp-project]$ cat passwd.sh
  487. #!/bin/bash
  488.  
  489. aws secretsmanager get-secret-value --secret-id ansible_vault | jq --raw-output .SecretString | jq -r ".vault_passwd"
  490.  
  491.  
  492.  
  493. #### output ####
  494. [ec2-user@ip-172-31-45-107 lamp-project]$ ansible-playbook -i inventory  -t wordpress lamp.yml  --vault-password-file=passwd.sh
  495.  
  496. PLAY [Wordpress LAMP installation] *************************************************************************************************************************
  497.  
  498. TASK [Gathering Facts] *************************************************************************************************************************************
  499. [WARNING]: Platform linux on host 172.31.42.193 is using the discovered Python interpreter at /usr/bin/python3.9, but future installation of another Python
  500. interpreter could change the meaning of that path. See https://docs.ansible.com/ansible-core/2.15/reference_appendices/interpreter_discovery.html for more
  501. information.
  502. ok: [172.31.42.193]
  503.  
  504. TASK [Wget the wordpress] **********************************************************************************************************************************
  505. changed: [172.31.42.193]
  506.  
  507. TASK [unarchive the worpress url] **************************************************************************************************************************
  508. changed: [172.31.42.193]
  509.  
  510. TASK [Copying the wordpress contents to the docroot] *******************************************************************************************************
  511. ok: [172.31.42.193]
  512.  
  513. TASK [Copying wp-config.php to remote server] **************************************************************************************************************
  514. ok: [172.31.42.193]
  515.  
  516. TASK [Cleanup] *********************************************************************************************************************************************
  517. changed: [172.31.42.193] => (item=/tmp/wordpress.tar.gz)
  518. changed: [172.31.42.193] => (item=/tmp/wordpress)
  519.  
  520. PLAY RECAP *************************************************************************************************************************************************
  521. 172.31.42.193              : ok=6    changed=3    unreachable=0    failed=0    skipped=0    rescued=0    ignored=0
  522.  
Advertisement
Add Comment
Please, Sign In to add comment
Public Pastes
We use cookies for various purposes including analytics. By continuing to use Pastebin, you agree to our use of cookies as described in the Cookies Policy.  OK, I Understand
Not a member of Pastebin yet?
Sign Up, it unlocks many cool features!