Differential D3034

Create "web" and web domains groups
ClosedPublic
Actions

Authored by dereckson on Apr 16 2023, 21:08.

Details

Reviewers

dereckson

Maniphest Tasks

T1828: Provide Alkane, Nasqueron PaaS to serve PHP and static sites

Commits

rOPSc06ccc41de38: Create "web" and web domains groups

Summary

The "web" group is moved to webserver-core, as a part of the effort
to sync all our roles nginx configurations. This group is intended
to be used by all web-related resources needing access sharing.

The "one domain name, one account" for static sites content works well,
so we adopt it in webserver-alkane.

Units adopted in webserver-alkane will be moved from webserver-legacy
to avoid duplication.

Ref T1828

Test Plan

Deploy to web-001

Diff Detail

Repository

rOPS Nasqueron Operations

Lint

Lint Not Applicable

Unit

Tests Not Applicable

Event Timeline

dereckson requested review of this revision.Apr 16 2023, 21:08

dereckson created this revision.

Harbormaster completed remote builds in B4795: Diff 7746.Apr 16 2023, 21:08

dereckson accepted this revision.Apr 16 2023, 21:08

This revision is now accepted and ready to land.Apr 16 2023, 21:08

webserver-core

Complector

$ salt web-001 state.sls roles/webserver-core
[…]
----------
          ID: webserver_core_group
    Function: group.present
        Name: web
      Result: True
     Comment: New group web created
     Started: 21:15:06.125820
    Duration: 21.147 ms
     Changes:
              ----------
              gid:
                  9003
              members:
              name:
                  web
              passwd:
                  *
----------
          ID: /usr/local/etc/nginx/nginx.conf
    Function: file.managed
      Result: True
     Comment: File /usr/local/etc/nginx/nginx.conf updated
     Started: 21:15:06.151685
    Duration: 71.599 ms
     Changes:
              ----------
              diff:
                  ---
                  +++
                  @@ -12,7 +12,7 @@
                   #       and will be lost if the state is redeployed.
                   #   </auto-generated>

                  -user www;
                  +user www web;
                   worker_processes auto;
                   error_log /var/log/nginx/error.log;

[…]

webserver-alkane

Complector

$ salt web-001 state.sls roles/webserver-alkane
web-001:
----------
          ID: webserver_user_nasqueron.org
    Function: user.present
        Name: nasqueron.org
      Result: True
     Comment: New user nasqueron.org created
     Started: 21:21:48.577158
    Duration: 41.698 ms
     Changes:
              ----------
              fullname:
                  Websites account for nasqueron.org
              gid:
                  9003
              groups:
                  - web
              home:
              homephone:
                  None
              name:
                  nasqueron.org
[…]
Summary for web-001
-------------
Succeeded: 10 (changed=4)
Failed:     0
-------------
Total states run:     10
Total run time:  947.889 ms