HTTP setup

ansible/inventories/automotive.yaml

@@ -0,0 +1,7 @@
+---
+automotive:
+  children:
+    web:
+      hosts:
+        automotive.sse.cloud.isti.cnr.it:
+        #automotive2.sse.cloud.isti.cnr.it:

ansible/inventories/group_vars/all/vault.yaml

@@ -1,9 +1,14 @@
 $ANSIBLE_VAULT;1.1;AES256
-36323030396532326432653332633031386532393564653565623231343037376432626337353666
-3136663234656635613337653036356366363431346263630a313034633838663263663662653639
-64333761373334633465363632646366656430626362623630343830383735663830303462623630
-6465323036343965640a393536313637623930613431643962613237363733653163613366643837
-64616462626165396632353365666334363035393864386534363831643631646530663739323538
-61646635343264393737336666653330383863623362663166306632653939376463653362363431
-33366334306330643266303730653863633363303964316361626665363262343833323063343932
-31313938626338326431
+31646131636537653763323564346131333639656663326334316561633266333335623331383034
+3163376161306433323865646334373931393638363663360a666562373631373365623932613031
+37343563333730303535393636373533643734656462313631626130326134363031353263356133
+3266333534323539650a613262613434636162633536353963366161623438663437636138393036
+35666136623034333265313664663266353666396334663135333234313835663735306631363137
+61633638313530373562633135333939333863303339343532656236353431343237303663373430
+37623339643232666335343437393966303231386235626439306438313439363939663564333539
+38346665356638373265346633303031356333303862626139346432633237663330333930646630
+34663236326462386634326435373134666663613633323932383338616662333438623565366536
+63633439616137383438636637623135623339303736353364313462303062383331373164353632
+31653337653938306164653235656662343266316238326230393733303031366532643166646263
+33653934396131626330656432643164616136323831353835656538363131313934346234336561
+3363

ansible/inventories/group_vars/automotive/automotive.yaml

@@ -0,0 +1,21 @@
+---
+docker_network_name: wp_net
+
+mysql_docker_tag: 9.7.0
+docker_mysql_hostname: web_db
+
+db_name: automotive_test_db
+db_user: automotive_test_db_u
+db_password:  "{{ automotive_mysql_user_password }}"
+db_root_password: "{{ automotive_mysql_root_password }}"
+
+
+nginx_docker_tag: 1.31.1
+nginx_server_name: automotive.sse.cloud.isti.cnr.it
+ssl: false
+
+wordpress_docker_tag: 7.0.0-php8.2-apache
+
+docker_base_volume_path: /usr/data/wp
+docker_wordpress_hostname: automotive_test
+

ansible/playbooks/bootstrap.yml

@@ -56,5 +56,5 @@
       file: path=/home/ansible/.ssh owner=ansible group=ansible mode=0700 state=directory
 
     - name: Add the mandatory ssh keys to the ansible user
-      template: src=library/templates/ansible_auth_keys.j2 dest=/home/ansible/.ssh/authorized_keys owner=ansible group=ansible mode=0644
+      template: src=templates/ansible_auth_keys.j2 dest=/home/ansible/.ssh/authorized_keys owner=ansible group=ansible mode=0644
 

ansible/playbooks/templates/nginx.j2

@@ -0,0 +1,16 @@
+server {
+    listen 80;
+    listen [::]:80;
+    server_name {{ nginx_server_name }};
+
+    root   /var/www/html;
+    index  index.php;
+
+    location / {
+        proxy_pass http://{{ docker_wordpress_hostname }}:80;
+        proxy_set_header Host $host;
+        proxy_set_header X-Real-IP $remote_addr;
+        proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
+        proxy_set_header X-Forwarded-Proto $scheme;
+    }
+} 

ansible/playbooks/wordpress.yaml

@@ -0,0 +1,13 @@
+---
+- name: Install and configure Wordpress
+  hosts: web
+  become : True
+  collections:
+    - chrissayon.wordpress_docker
+
+  roles:
+    - geerlingguy.docker
+    - chrissayon.wordpress_docker.network
+    - chrissayon.wordpress_docker.mysql
+    - chrissayon.wordpress_docker.wordpress
+    - chrissayon.wordpress_docker.nginx

ansible/requirements.yml

@@ -9,12 +9,27 @@ roles:
   #   scm: git
   #   version: v2.0.0
 
+  # Required by wordpress_docker
+  - name: geerlingguy.docker
+
+
+
 collections:
   - name: bodsch.dns
     source: https://github.com/bodsch/ansible-collection-dns.git
     type: git
     version: 1.4.1
 
+  - name: dsglaser.cis_security
+    version: 1.5.4 
+
+  - name: chrissayon.wordpress_docker
+    version: 1.0.2
+
+# dockerless wordpress
+#  - name: iamgini.wordpress
+#    version: 1.0.0
+
   # - name: community.postgresql
   #   version: "3.2.0"
   # - name: ansible.posix