Provide Alkane, Nasqueron PaaS to serve PHP and static sites
Open, HighPublic
Actions

Assigned To

Authored By

	dereckson
	Apr 11 2023, 17:29

Description

Alkane is a modern and state-of-art PaaS to automate hosting of PHP and static sites.

It provides the following features:

nginx, php-fpm
pools separated by application or group of applications
Up-to-date PHP versions
Automate the deployment, for example:
- You commit, it's pulled from Git
- You commit, Jenkins build it, it's pulled from Jenkins artifacts
- Human-controlled releases for when automated deployment isn't the best fit
Secrets live in Vault
Databases live on their own cluster (db-A for PostgreSQL, db-B for MySQL)
SaaS services can live here too, e.g. saas-mediawiki

It supersedes webserver-legacy role, with a commitment to continue to provide a simple hosting solution, not requiring to create Docker images.

ASCII logo can be C2H6 or CH3-CH3:

    H     H
    |     |
H - C --- C - H
    |     |
    H     H

rOPS Nasqueron Operations
	D3190	rOPS8effa7c1f156 Align nginx configuration to production for webserver-alkane
	D3160	rOPSeb74395dc14d Configure nginx for webserver-alkane
	D3109	rOPS80bbd2e7386b Ensure IPv6 routes are announced on OVH
	D3108	rOPSc86d854a756b Migrate PHP and static sites pillar
	D3072	rOPSc41b4c1ef73e Change owner of .env to php-fpm user
	D3068	rOPS8e263846862b Generate .env or wp-config.php credentials files for Alkane PHP sites
	D3045	rOPS3c7022acb345 Serve PHP sites on Alkane PaaS
	D3048	rOPSf2ea2bcb8e74 Upgrade devserver and shellserver to PHP 8.2
	D3041	rOPS7c85d13220a2 Migrate directories unit to webserver-alkane role
	D3037	rOPS8d65727e47af Align nginx directories
	D3034	rOPSc06ccc41de38 Create "web" and web domains groups
	D3013	rOPS994e6d196f17 Deploy Alkane on webserver-alkane role
	D2999	rOPS63531c98b75b Consolidate nginx configuration into webserver-core role

Status	Subtype	Assigned	Task
Open	Epic	None	T1898 Decommission Ysul
Open		dereckson	T1803 Move and migrate Ysul production services elsewhere
Open		dereckson	T1828 Provide Alkane, Nasqueron PaaS to serve PHP and static sites
Resolved		dereckson	T1826 Create Alkane utility
Resolved		dereckson	T1827 Don't read body as String
Open		dereckson	T1825 Documentation for Alkane
Resolved		dereckson	T1829 Don't listen to world SSH for IntraNought servers
Resolved		dereckson	T1853 Setup IPv6 connectivity on web-001

dereckson triaged this task as High priority.Apr 11 2023, 17:29

dereckson created this task.

dereckson moved this task from Backlog to Working on on the Servers board.

MySQL at db-B-001 is ready, with tooling to migrate databases from Ysul
Consolidate the nginx configuration across all the roles, to have a common basis in webserver-core
Easter week-end was the opportunity to write T1826, a Rust tool to help sites deployment

Write units on the top of webserver-core in webserver-alkane, with care to offer the same workflow for PHP and static sites
Prepare Vault policy
Look if it's currently easy enough for a PHP application to read from Vault ; if not, provide keruald/secrets or keruald/vault or something like that
Deploy on web-01