20 changed files with 299 additions and 9 deletions
@ -0,0 +1,3 @@
|
||||
Package: * |
||||
Pin: release a=bullseye-backports |
||||
Pin-Priority: 50 |
@ -0,0 +1,30 @@
|
||||
-----BEGIN PGP PUBLIC KEY BLOCK----- |
||||
Version: GnuPG v1 |
||||
|
||||
mQINBFzteqwBEADSirbLWsjgkQmdWr06jXPN8049MCqXQIZ2ovy9uJPyLkHgOCta |
||||
8dmX+8Fkk5yNOLScjB1HUGJxAWJG+AhldW1xQGeo6loDfTW1mlfetq/zpW7CKbUp |
||||
qve9eYYulneAy/81M/UoUZSzHqj6XY39wzJCH20H+Qx3WwcqXgSU7fSFXyJ4EBYs |
||||
kWybbrAra5v29LUTBd7OvvS+Swovdh4T31YijUOUUL/gJkBI9UneVyV7/8DdUoVJ |
||||
a8ym2pZ6ALy+GZrWBHcCKD/rQjEkXJnDglu+FSUI50SzaC9YX31TTzEMJijiPi6I |
||||
MIZJMXLH7GpCIDcvyrLWIRYVJAQRoYJB4rmp42HTyed4eg4RnSiFrxVV5xQaDnSl |
||||
/8zSOdVMBVewp8ipv34VeRXgNTgRkhA2JmL+KlALMkPo7MbRkJF01DiOOsIdz3Iu |
||||
43oYg3QYmqxZI6kZNtXpUMnJeuRmMQJJN8yc9ZdOA9Ll2TTcIql8XEsjGcM7IWM9 |
||||
CP6zGwCcbrv72Ka+h/bGaLpwLbpkr5I8PjjSECn9fBcgnVX6HfKH7u3y11+Va1nh |
||||
a8ZEE1TuOqRxnVDQ+K4iwaZFgFYsBMKo2ghoU2ZbZxu14vs6Eksn6UFsm8DpPwfy |
||||
jtLtdje8jrbYAqAy5zIMLoW+I6Rb5sU3Olh9nI7NW4T5qQeemBcuRAwB4QARAQAB |
||||
tDdNb25nb0RCIDQuNCBSZWxlYXNlIFNpZ25pbmcgS2V5IDxwYWNrYWdpbmdAbW9u |
||||
Z29kYi5jb20+iQI+BBMBAgAoBQJc7XqsAhsDBQkJZgGABgsJCAcDAgYVCAIJCgsE |
||||
FgIDAQIeAQIXgAAKCRBlZAjjkM+x9SKmD/9BzdjFAgBPPkUnD5pJQgsBQKUEkDsu |
||||
cht6Q0Y4M635K7okpqJvXtZV5Mo+ajWZjUeHn4wPdVgzF2ItwVLRjjak3tIZfe3+ |
||||
ME5Y27Aej3LeqQC3Q5g6SnpeZwVEhWzU35CnyhQecP4AhDG3FO0gKUn3GkEgmsd6 |
||||
rnXAQLEw3VUYO8boxqBF3zjmFLIIaODYNmO1bLddJgvZlefUC62lWBBUs6Z7PBnl |
||||
q7qBQFhz9qV9zXZwCT2/vgGLg5JcwVdcJXwAsQSr1WCVd7Y79+JcA7BZiSg9FAQd |
||||
4t2dCkkctoUKgXsAH5fPwErGNj5L6iUnhFODPvdDJ7l35UcIZ2h74lqfEh+jh8eo |
||||
UgxkcI2y2FY/lPapcPPKe0FHzCxG2U/NRdM+sqrIfp9+s88Bj+Eub7OhW4dF3AlL |
||||
bh/BGHL9R8xAJRDLv8v7nsKkZWUnJaskeDFCKX3rjcTyTRWTG7EuMCmCn0Ou1hKc |
||||
R3ECvIq0pVfVh+qk0hu+A5Dvj6k3QDcTfse+KfSAJkYvRKiuRuq5KgYcX3YSzL6K |
||||
aZitMyu18XsQxKavpIGzaDhWyrVAig3XXF//zxowYVwuOikr5czgqizu87cqjpyn |
||||
S0vVG4Q3+LswH4xVTn3UWadY/9FkM167ecouu4g3op29VDi7hCKsMeFvFP6OOIls |
||||
G4vQ/QbzucK77Q== |
||||
=eD3N |
||||
-----END PGP PUBLIC KEY BLOCK----- |
Binary file not shown.
@ -0,0 +1,80 @@
|
||||
--- |
||||
|
||||
# https://wiki.debian.org/DebianRepository/UseThirdParty |
||||
- name: Add MongoDB GPG key for version 4.4 |
||||
copy: |
||||
src: server-4.4.gpg |
||||
dest: /usr/share/keyrings/mongodb-server-4.4.gpg |
||||
force: yes |
||||
|
||||
- name: enable APT sources list |
||||
apt_repository: |
||||
repo: deb [signed-by=/usr/share/keyrings/mongodb-server-4.4.gpg] http://repo.mongodb.org/apt/debian buster/mongodb-org/4.4 main |
||||
state: present |
||||
filename: mongodb-org-4.4 |
||||
update_cache: yes |
||||
|
||||
- name: Install packages |
||||
apt: |
||||
name: mongodb-org |
||||
update_cache: yes |
||||
state: present |
||||
register: _mongodb_install_package |
||||
|
||||
- name: MongoDB service in enabled and started |
||||
systemd: |
||||
name: mongod |
||||
enabled: yes |
||||
state: started |
||||
when: _mongodb_install_package.changed |
||||
|
||||
- name: install dependency for monitoring |
||||
apt: |
||||
name: python-pymongo |
||||
state: present |
||||
|
||||
- name: Custom configuration |
||||
template: |
||||
src: mongodb_bullseye.conf.j2 |
||||
dest: "/etc/mongod.conf" |
||||
force: "{{ mongodb_force_config | bool | ternary('yes', 'no') }}" |
||||
notify: restart mongod |
||||
|
||||
- name: Configure logrotate |
||||
template: |
||||
src: logrotate_bullseye.j2 |
||||
dest: /etc/logrotate.d/mongodb |
||||
force: yes |
||||
backup: no |
||||
|
||||
- name: Munin plugins are present |
||||
copy: |
||||
src: "munin/{{ item }}" |
||||
dest: '/usr/local/share/munin/plugins/{{ item }}' |
||||
force: yes |
||||
with_items: |
||||
- mongo_btree |
||||
- mongo_collections |
||||
- mongo_conn |
||||
- mongo_docs |
||||
- mongo_lock |
||||
- mongo_mem |
||||
- mongo_ops |
||||
- mongo_page_faults |
||||
notify: restart munin-node |
||||
|
||||
- name: Enable core Munin plugins |
||||
file: |
||||
src: '/usr/local/share/munin/plugins/{{ item }}' |
||||
dest: /etc/munin/plugins/{{ item }} |
||||
state: link |
||||
with_items: |
||||
- mongo_btree |
||||
- mongo_collections |
||||
- mongo_conn |
||||
- mongo_docs |
||||
- mongo_lock |
||||
- mongo_mem |
||||
- mongo_ops |
||||
- mongo_page_faults |
||||
notify: restart munin-node |
@ -0,0 +1,15 @@
|
||||
# {{ ansible_managed }} |
||||
|
||||
/var/log/mongodb/mongod.log { |
||||
daily |
||||
missingok |
||||
rotate 365 |
||||
dateext |
||||
compress |
||||
delaycompress |
||||
notifempty |
||||
sharedscripts |
||||
postrotate |
||||
pidof mongod | xargs kill -USR1 |
||||
endscript |
||||
} |
@ -0,0 +1,39 @@
|
||||
# mongodb.conf - {{ ansible_managed }} |
||||
|
||||
# for documentation of all options, see: |
||||
# http://docs.mongodb.org/manual/reference/configuration-options/ |
||||
|
||||
# Where and how to store data. |
||||
storage: |
||||
dbPath: /var/lib/mongodb |
||||
journal: |
||||
enabled: true |
||||
# engine: |
||||
# mmapv1: |
||||
# wiredTiger: |
||||
|
||||
# where to write logging data. |
||||
systemLog: |
||||
destination: file |
||||
logRotate: reopen |
||||
logAppend: true |
||||
path: /var/log/mongodb/mongodb.log |
||||
|
||||
# network interfaces |
||||
net: |
||||
port: {{ mongodb_port }} |
||||
bindIp: {{ mongodb_bind }} |
||||
|
||||
#security: |
||||
|
||||
#operationProfiling: |
||||
|
||||
#replication: |
||||
|
||||
#sharding: |
||||
|
||||
## Enterprise-Only Options: |
||||
|
||||
#auditLog: |
||||
|
||||
#snmp: |
@ -0,0 +1,97 @@
|
||||
--- |
||||
|
||||
- name: "Set variables (Debian 10 or later)" |
||||
set_fact: |
||||
php_cli_defaults_ini_file: /etc/php/7.4/cli/conf.d/z-evolinux-defaults.ini |
||||
php_cli_custom_ini_file: /etc/php/7.4/cli/conf.d/zzz-evolinux-custom.ini |
||||
php_apache_defaults_ini_file: /etc/php/7.4/apache2/conf.d/z-evolinux-defaults.ini |
||||
php_apache_custom_ini_file: /etc/php/7.4/apache2/conf.d/zzz-evolinux-custom.ini |
||||
php_fpm_defaults_ini_file: /etc/php/7.4/fpm/conf.d/z-evolinux-defaults.ini |
||||
php_fpm_custom_ini_file: /etc/php/7.4/fpm/conf.d/zzz-evolinux-custom.ini |
||||
php_fpm_debian_default_pool_file: /etc/php/7.4/fpm/pool.d/www.conf |
||||
php_fpm_default_pool_file: /etc/php/7.4/fpm/pool.d/www-evolinux-defaults.conf |
||||
php_fpm_default_pool_custom_file: /etc/php/7.4/fpm/pool.d/www-evolinux-zcustom.conf |
||||
php_fpm_default_pool_socket: /var/run/php/php7.4-fpm.sock |
||||
php_fpm_service_name: php7.4-fpm |
||||
|
||||
# Packages |
||||
|
||||
- name: "Set package list (Debian 9 or later)" |
||||
set_fact: |
||||
php_stretch_packages: |
||||
- php-cli |
||||
- php-gd |
||||
- php-intl |
||||
- php-imap |
||||
- php-ldap |
||||
- php-mysql |
||||
# php-mcrypt is no longer packaged for PHP 7.2 |
||||
- php-pgsql |
||||
- php-sqlite3 |
||||
- php-gettext |
||||
- php-curl |
||||
- php-ssh2 |
||||
- php-zip |
||||
- composer |
||||
- libphp-phpmailer |
||||
|
||||
- include: sury_pre.yml |
||||
when: php_sury_enable |
||||
|
||||
- name: "Install PHP packages (Debian 9 or later)" |
||||
apt: |
||||
name: '{{ php_stretch_packages }}' |
||||
state: present |
||||
|
||||
- name: "Install mod_php packages (Debian 9 or later)" |
||||
apt: |
||||
name: |
||||
- libapache2-mod-php |
||||
- php |
||||
state: present |
||||
when: php_apache_enable |
||||
|
||||
- name: "Install PHP FPM packages (Debian 9 or later)" |
||||
apt: |
||||
name: |
||||
- php-fpm |
||||
- php |
||||
state: present |
||||
when: php_fpm_enable |
||||
|
||||
# Configuration |
||||
|
||||
- name: Enforce permissions on PHP directory |
||||
file: |
||||
dest: "{{ item }}" |
||||
mode: "0755" |
||||
with_items: |
||||
- /etc/php |
||||
- /etc/php/7.4 |
||||
|
||||
- include: config_cli.yml |
||||
- name: Enforce permissions on PHP cli directory |
||||
file: |
||||
dest: /etc/php/7.4/cli |
||||
mode: "0755" |
||||
|
||||
- include: config_fpm.yml |
||||
when: php_fpm_enable |
||||
|
||||
- name: Enforce permissions on PHP fpm directory |
||||
file: |
||||
dest: /etc/php/7.4/fpm |
||||
mode: "0755" |
||||
when: php_fpm_enable |
||||
|
||||
- include: config_apache.yml |
||||
when: php_apache_enable |
||||
|
||||
- name: Enforce permissions on PHP apache2 directory |
||||
file: |
||||
dest: /etc/php/7.4/apache2 |
||||
mode: "0755" |
||||
when: php_apache_enable |
||||
|
||||
- include: sury_post.yml |
||||
when: php_sury_enable |
Loading…
Reference in new issue