diff --git a/pillar/webserver/sites.sls b/pillar/webserver/sites.sls index d95c242..536a1e3 100644 --- a/pillar/webserver/sites.sls +++ b/pillar/webserver/sites.sls @@ -1,174 +1,180 @@ # ------------------------------------------------------------- # Salt — Sites to provision on the legacy web server # - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - # Project: Nasqueron # License: Trivial work, not eligible to copyright # ------------------------------------------------------------- # ------------------------------------------------------------- # Domains we deploy # - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - web_domains: # # Directly managed by Nasqueron # nasqueron: - nasqueron.org # # Nasqueron members # nasqueron_members: - dereckson.be # # Projects ICT is managed by Nasqueron # espacewin: - espace-win.org wolfplex: - wolfplex.org # ------------------------------------------------------------- # Static sites # # Sites to deploy from the staging repository # - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - web_static_sites: nasqueron.org: - www - assets - docker - ftp - packages - trustspace wolfplex.org: - www # ------------------------------------------------------------- # PHP sites # # Username must be unique and use max 31 characters. # - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - php_fpm_instances: # PHP 7.2, generally installed as package/port prod: command: /usr/local/sbin/php-fpm web_php_sites: # Nasqueron members mediawiki.dereckson.be: domain: dereckson.be subdomain: mediawiki user: web-be-dereckson-mw php-fpm: prod www.dereckson.be: domain: dereckson.be subdomain: www user: web-be-dereckson-www source: wwwroot/dereckson.be/www target: /var/wwwroot/dereckson.be/www php-fpm: prod www51.dereckson.be: domain: dereckson.be subdomain: www51 user: web-be-dereckson-www51 php-fpm: prod # Directly managed by Nasqueron api.nasqueron.org: domain: nasqueron.org subdomain: api user: web-org-nasqueron-api-serverslog php-fpm: prod env: SERVERS_LOG_FILE: /srv/api/data/servers-log-all.json wikis.nasqueron.org: domain: nasqueron.org subdomain: wikis user: mediawiki php-fpm: prod skipCreateAccount: True env: MEDIAWIKI_ENTRY_POINT: /srv/mediawiki/index.php DB_HOST: localhost DB_USER: mediawiki-saas # Espace Win www.espace-win.org: domain: espace-win.org subdomain: www user: web-org-espacewin-www source: wwwroot/espace-win.org/www target: /var/wwwroot/espace-win.org/www php-fpm: prod + www51.espace-win.org: + domain: espace-win.org + subdomain: www51 + user: web-org-espacewin-www51 + php-fpm: prod + # Wolfplex Hackerspace www.wolfplex.org: domain: wolfplex.org subdomain: www user: web-org-wolfplex-www php-fpm: prod env: DATASTORE: /var/dataroot/wolfplex CREDENTIAL_PATH_DATASOURCES_SECURITYDATA: /var/dataroot/wolfplex/secrets.json # ------------------------------------------------------------- # States # # Sites with states documenting how to build them # - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - web_content_sls: # # Eglide # shellserver: # Third party sites hosted to Eglide - .com/paysannerebelle # Directly managed by Eglide project - .org/eglide # # Nasqueron servers # mastodon: - .org/nasqueron/social webserver-legacy: # Nasqueron members - .be/dereckson # Projects hosted - .space/hypership # Directly managed by Nasqueron - .org/nasqueron/api - .org/nasqueron/daeghrefn - .org/nasqueron/docs - .org/nasqueron/infra - .org/nasqueron/labs - .org/nasqueron/rain # Wolfplex Hackerspace - .org/wolfplex/api - .org/wolfplex/www # ------------------------------------------------------------- # Tweaks # - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - web_autochmod: - /var/wwwroot/dereckson.be/www diff --git a/pillar/webserver/wwwroot51.sls b/pillar/webserver/wwwroot51.sls index 72f209f..dfbd384 100644 --- a/pillar/webserver/wwwroot51.sls +++ b/pillar/webserver/wwwroot51.sls @@ -1,47 +1,52 @@ # ------------------------------------------------------------- # Salt — Sites to provision on the devserver wwwroot51 # - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - # Project: Nasqueron # License: Trivial work, not eligible to copyright # ------------------------------------------------------------- wwwroot51_basedir: /var/51-wwwroot wwwroot51_directories: api: user: dereckson group: dereckson repository: ssh://vcs@devcentral.nasqueron.org:5022/source/api.git dereckson-www: user: dereckson group: dereckson repository: git@bitbucket.org:dereckson/www.dereckson.be.git + espacewin-www: + user: dereckson + group: dereckson + repository: git@bitbucket.org:ewosp/www.espace-win.org.git + mediawiki-dereckson: user: dereckson group: dereckson rain: user: dereckson group: dereckson saas-mediawiki: user: dereckson group: mediawiki repository: ssh://vcs@devcentral.nasqueron.org:5022/source/saas-mediawiki.git tools: user: dereckson group: dereckson repository: ssh://vcs@devcentral.nasqueron.org:5022/source/tools.git wolfplex-api: user: dereckson group: dereckson repository: git@github.com:wolfplex/api-www.git www: user: dereckson group: dereckson repository: ssh://vcs@devcentral.nasqueron.org:5022/source/www.git diff --git a/roles/webserver-legacy/nginx/files/vhosts/espace-win.org/www.conf b/roles/webserver-legacy/nginx/files/vhosts/espace-win.org/www.conf new file mode 100644 index 0000000..54d79d9 --- /dev/null +++ b/roles/webserver-legacy/nginx/files/vhosts/espace-win.org/www.conf @@ -0,0 +1,81 @@ +# ------------------------------------------------------------- +# Webserver +# - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - +# Project: Nasqueron +# Site: www.espace-win.org +# License: Trivial work, not eligible to copyright +# Source file: roles/webserver-legacy/nginx/files/vhosts/espace-win.org/www.conf +# ------------------------------------------------------------- +# +# <auto-generated> +# This file is managed by our rOPS SaltStack repository. +# +# Changes to this file may cause incorrect behavior +# and will be lost if the state is redeployed. +# </auto-generated> + +server { + listen 80; + listen [::]:80; + server_name www.espace-win.org; + + include includes/tls; + ssl_certificate /usr/local/etc/letsencrypt/live/www.espace-win.org/fullchain.pem; + ssl_certificate_key /usr/local/etc/letsencrypt/live/www.espace-win.org/privkey.pem; + + error_log /var/log/www/espace-win.org/www-error.log; + access_log /var/log/www/espace-win.org/www-access.log; + + root /var/wwwroot/espace-win.org/www; + + include includes/letsencrypt; + + location / { + # We need to install PHP 5, or to achieve PHP 7 migration + # before include Pluton. + return 503; + } +} + +# ------------------------------------------------------------- +# Domain and protocol redirections +# - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - + +server { + listen 80; + listen [::]:80; + server_name espace-win.org espace-win.net www.espace-win.net; + + include includes/tls; + ssl_certificate /usr/local/etc/letsencrypt/live/www.espace-win.org/fullchain.pem; + ssl_certificate_key /usr/local/etc/letsencrypt/live/www.espace-win.org/privkey.pem; + + include includes/letsencrypt; + + location / { + return 301 https://www.espace-win.org$request_uri; + } +} + +# ------------------------------------------------------------- +# Staging area +# - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - + +server { + listen 80; + listen [::]:80; + server_name www51.espace-win.org; + + include includes/tls; + ssl_certificate /usr/local/etc/letsencrypt/live/www.espace-win.org/fullchain.pem; + ssl_certificate_key /usr/local/etc/letsencrypt/live/www.espace-win.org/privkey.pem; + + error_log /var/log/www/espace-win.org/www51-error.log; + access_log /var/log/www/espace-win.org/www51-access.log; + + root /var/51-wwwroot/espacewin-www; + + include includes/letsencrypt; + + include includes/pluton; +}