oliverdavies.uk-drupal-old/tools/ansible/vars/provision_vars.yml

296 lines
21 KiB
YAML

---
security_ssh_permit_root_login: 'yes'
php_default_version_debian: '{{ php_version }}'
php_enable_php_fpm: true
php_version: 7.4
php_webserver_daemon: nginx
php_packages:
- 'php{{ php_version }}-cli'
- 'php{{ php_version }}-common'
- 'php{{ php_version }}-fpm'
- 'php{{ php_version }}-gd'
- 'php{{ php_version }}-mbstring'
- 'php{{ php_version }}-mysql'
- 'php{{ php_version }}-pdo'
- 'php{{ php_version }}-xml'
app_mysql_user: '{{ vault_app_mysql_user }}'
app_mysql_password: '{{ vault_app_mysql_password }}'
mysql_packages:
- mariadb-client
- mariadb-server
- python-mysqldb
mysql_databases:
- name: oliverdavies_uk
nginx_remove_default_vhost: true
nginx_server_tokens: 'off'
nginx_vhosts:
- listen: 80
server_name: d8.oliverdavies.uk
return: 301 https://d8.oliverdavies.uk$request_uri
filename: d8.oliverdavies.uk.80.conf
- listen: 443 ssl
server_name: d8.oliverdavies.uk
root: '{{ project_root_path }}/{{ ansistrano_current_dir }}/{{ project_web_dir }}'
index: index.php
extra_parameters: |
rewrite /about / permanent;
rewrite /blog/2010/04/05/style-drupal-6s-taxonomy-lists-php-css-and-jquery /blog/style-drupal-6s-taxonomy-lists-php-css-and-jquery permanent;
rewrite /blog/2010/04/28/using-imagecache-and-imagecrop-my-portfolio /blog/using-imagecache-and-imagecrop-my-portfolio permanent;
rewrite /blog/2010/05/06/conditional-email-addresses-webform /blog/conditional-email-addresses-webform permanent;
rewrite /blog/2010/05/10/quickly-create-zen-subthemes-using-zenophile /blog/quickly-create-zen-subthemes-using-zenophile permanent;
rewrite /blog/2010/05/25/create-slideshow-multiple-images-using-fancy-slide /blog/create-slideshow-multiple-images-using-fancy-slide permanent;
rewrite /blog/2010/05/29/quickly-import-multiples-images-using-imagefieldimport-module /blog/quickly-import-multiples-images-using-imagefieldimport-module permanent;
rewrite /blog/2010/06/02/improve-jpg-quality-imagecache-and-imageapi /blog/improve-jpg-quality-imagecache-and-imageapi permanent;
rewrite /blog/2010/06/23/create-block-social-media-icons-using-cck-views-and-nodequeue /blog/create-block-social-media-icons-using-cck-views-and-nodequeue permanent;
rewrite /blog/2010/06/25/10-useful-drupal-6-modules /blog/10-useful-drupal-6-modules permanent;
rewrite /blog/2010/06/28/create-flickr-photo-gallery-using-feeds-cck-and-views /blog/create-flickr-photo-gallery-using-feeds-cck-and-views permanent;
rewrite /blog/2010/07/01/change-content-type-multiple-nodes-using-sql /blog/change-content-type-multiple-nodes-using-sql permanent;
rewrite /blog/2010/07/02/create-virtual-hosts-mac-os-x-using-virtualhostx /blog/create-virtual-hosts-mac-os-x-using-virtualhostx permanent;
rewrite /blog/2010/07/07/add-taxonomy-term-multiple-nodes-using-sql /blog/add-taxonomy-term-multiple-nodes-using-sql permanent;
rewrite /blog/2010/07/12/review-teleport-module /blog/review-teleport-module permanent;
rewrite /blog/2010/08/10/review-adminhover-module /blog/review-adminhover-module permanent;
rewrite /blog/2010/08/11/create-better-photo-gallery-drupal-part-1 /blog/create-better-photo-gallery-drupal-part-1 permanent;
rewrite /blog/2010/08/17/create-better-photo-gallery-drupal-part-2 /blog/create-better-photo-gallery-drupal-part-2 permanent;
rewrite /blog/2010/08/20/review-image-caption-module /blog/review-image-caption-module permanent;
rewrite /blog/2010/09/26/south-wales-drupal-user-group /blog/south-wales-drupal-user-group permanent;
rewrite /blog/2010/10/10/create-and-apply-patches /blog/create-and-apply-patches permanent;
rewrite /blog/2010/10/13/create-better-photo-gallery-drupal-part-3 /blog/create-better-photo-gallery-drupal-part-3 permanent;
rewrite /blog/2010/10/22/create-better-photo-gallery-drupal-part-21 /blog/create-better-photo-gallery-drupal-part-21 permanent;
rewrite /blog/2010/11/04/use-regular-expressions-search-and-replace-coda-or-textmate /blog/use-regular-expressions-search-and-replace-coda-or-textmate permanent;
rewrite /blog/2011/02/14/easily-embed-typekit-fonts-your-drupal-website /blog/easily-embed-typekit-fonts-your-drupal-website permanent;
rewrite /blog/2011/03/15/display-number-facebook-fans-php /blog/display-number-facebook-fans-php permanent;
rewrite /blog/2011/03/31/proctor-stevenson /blog/proctor-stevenson permanent;
rewrite /blog/2011/05/20/proctors-hosting-next-drupal-meetup /blog/proctors-hosting-next-drupal-meetup permanent;
rewrite /blog/2011/05/23/imagefield-import-archive /blog/imagefield-import-archive permanent;
rewrite /blog/2011/08/28/create-multigroups-drupal-7-using-field-collections /blog/create-multigroups-drupal-7-using-field-collections permanent;
rewrite /blog/2011/10/19/install-and-configure-subversion-svn-server-ubuntu /blog/install-and-configure-subversion-svn-server-ubuntu permanent;
rewrite /blog/2012/01/04/site-upgraded-drupal-7 /blog/site-upgraded-drupal-7 permanent;
rewrite /blog/2012/02/01/use-authorized-keys-create-passwordless-ssh-connection /blog/use-authorized-keys-create-passwordless-ssh-connection permanent;
rewrite /blog/2012/04/16/create-omega-subtheme-less-css-preprocessor-using-omega-tools-and-drush /blog/create-omega-subtheme-less-css-preprocessor-using-omega-tools-and-drush permanent;
rewrite /blog/2012/04/17/installing-nagios-centos /blog/installing-nagios-centos permanent;
rewrite /blog/2012/04/19/adding-custom-theme-templates-drupal-7 /blog/adding-custom-theme-templates-drupal-7 permanent;
rewrite /blog/2012/05/23/add-date-popup-calendar-custom-form /blog/add-date-popup-calendar-custom-form permanent;
rewrite /blog/2012/05/23/checkout-specific-revision-svn-command-line /blog/checkout-specific-revision-svn-command-line permanent;
rewrite /blog/2012/05/23/forward-one-domain-another-using-mod-rewrite-and-htaccess /blog/forward-one-domain-another-using-mod-rewrite-and-htaccess permanent;
rewrite /blog/2012/05/23/prevent-apache-displaying-text-files-within-web-browser /blog/prevent-apache-displaying-text-files-within-web-browser permanent;
rewrite /blog/2012/05/23/writing-info-file-drupal-7-theme /blog/writing-info-file-drupal-7-theme permanent;
rewrite /blog/2012/05/24/dividing-drupals-process-and-preprocess-functions-separate-files /blog/dividing-drupals-process-and-preprocess-functions-separate-files permanent;
rewrite /blog/2012/07/12/my-new-drupal-modules /blog/my-new-drupal-modules permanent;
rewrite /blog/2012/07/14/install-nomensa-media-player-drupal /blog/install-nomensa-media-player-drupal permanent;
rewrite /blog/2012/07/27/writing-article-linux-journal /blog/writing-article-linux-journal permanent;
rewrite /blog/2012/08/18/display-custom-menu-drupal-7-theme-template-file /blog/display-custom-menu-drupal-7-theme-template-file permanent;
rewrite /blog/2012/09/06/reflections-speaking-unifieddiff /blog/reflections-speaking-unifieddiff permanent;
rewrite /blog/2012/10/25/my-sublime-text-2-settings /blog/my-sublime-text-2-settings permanent;
rewrite /blog/2012/11/15/accessible-bristol-site-launched /blog/accessible-bristol-site-launched permanent;
rewrite /blog/2012/11/17/open-sublime-text-2-mac-os-x-command-line /blog/open-sublime-text-2-mac-os-x-command-line permanent;
rewrite /blog/2012/12/06/use-sass-and-compass-drupal-7-using-sassy /blog/use-sass-and-compass-drupal-7-using-sassy permanent;
rewrite /blog/2013/01/09/checking-if-user-logged-drupal-right-way /blog/checking-if-user-logged-drupal-right-way permanent;
rewrite /blog/2013/02/16/creating-and-using-custom-tokens-drupal-7 /blog/creating-and-using-custom-tokens-drupal-7 permanent;
rewrite /blog/2013/03/02/quickest-way-install-sublime-text-2-ubuntu /blog/quickest-way-install-sublime-text-2-ubuntu permanent;
rewrite /blog/2013/04/20/leaving-nomensa-joining-precedent /blog/leaving-nomensa-joining-precedent permanent;
rewrite /blog/2013/04/27/display-git-branch-or-tag-names-your-bash-prompt /blog/display-git-branch-or-tag-names-your-bash-prompt permanent;
rewrite /blog/2013/06/13/some-useful-links-using-simpletest-drupal /blog/some-useful-links-using-simpletest-drupal permanent;
rewrite /blog/2013/07/17/creating-local-and-staging-sites-drupals-domain-module-enabled /blog/creating-local-and-staging-sites-drupals-domain-module-enabled permanent;
rewrite /blog/2013/07/26/going-drupalcon /blog/going-drupalcon permanent;
rewrite /blog/2013/09/06/create-a-zen-sub-theme-using-drush /blog/create-a-zen-sub-theme-using-drush permanent;
rewrite /blog/2013/11/19/dont-bootstrap-drupal-use-drush /blog/dont-bootstrap-drupal-use-drush permanent;
rewrite /blog/2013/11/27/useful-vagrant-commands /blog/useful-vagrant-commands permanent;
rewrite /blog/2013/12/24/quickly-apply-patches-using-git-and-curl-or-wget /blog/quickly-apply-patches-using-git-and-curl-or-wget permanent;
rewrite /blog/2013/12/31/download-different-versions-drupal-drush /blog/download-different-versions-drupal-drush permanent;
rewrite /blog/2014/01/15/some-useful-git-aliases /blog/some-useful-git-aliases permanent;
rewrite /blog/2014/02/09/drupalcamp-london-2014 /blog/drupalcamp-london-2014 permanent;
rewrite /blog/2014/03/03/what-git-flow /blog/what-git-flow permanent;
rewrite /blog/2014/05/03/drupal-association /blog/drupal-association permanent;
rewrite /blog/2014/05/06/thanks /blog/thanks permanent;
rewrite /blog/2014/05/21/git-format-patch /blog/git-format-patch permanent;
rewrite /blog/2014/07/02/drush-make-drupalbristol /blog/drush-make-drupalbristol permanent;
rewrite /blog/2014/10/06/fix-vagrant-loading-wrong-virtual-machine /blog/fix-vagrant-loading-wrong-virtual-machine permanent;
rewrite /blog/2014/10/21/updating-features-and-adding-components-using-drush /blog/updating-features-and-adding-components-using-drush permanent;
rewrite /blog/2014/11/18/include-css-fonts-using-sass-each-loop /blog/include-css-fonts-using-sass-each-loop permanent;
rewrite /blog/2014/11/20/using-remote-files-when-developing-locally-with-stage-file-proxy-module /blog/using-remote-files-when-developing-locally-with-stage-file-proxy-module permanent;
rewrite /blog/2014/11/27/pantheon-settings-files /blog/pantheon-settings-files permanent;
rewrite /blog/2014/12/20/include-local-drupal-settings-file-environment-configuration-and-overrides /blog/include-local-drupal-settings-file-environment-configuration-and-overrides permanent;
rewrite /blog/2015/04/03/how-to-define-a-minimum-drupal-core-version /blog/how-to-define-a-minimum-drupal-core-version permanent;
rewrite /blog/2015/06/18/updating-forked-repositories-on-github /blog/updating-forked-repositories-on-github permanent;
rewrite /blog/2015/07/19/sculpin-twig-resources /blog/sculpin-twig-resources permanent;
rewrite /blog/2015/07/21/automating-sculpin-jenkins /blog/automating-sculpin-jenkins permanent;
rewrite /blog/2015/12/22/programmatically-load-an-entityform-in-drupal-7 /blog/programmatically-load-an-entityform-in-drupal-7 permanent;
rewrite /blog/2016/02/15/announcing-the-drupal-vm-generator /blog/announcing-the-drupal-vm-generator permanent;
rewrite /blog/2016/05/03/simplifying-drupal-migrations-with-xautoload /blog/simplifying-drupal-migrations-with-xautoload permanent;
rewrite /blog/2016/07/15/building-gmail-filters-with-php /blog/building-gmail-filters-with-php permanent;
rewrite /blog/2016/12/30/drupal-vm-generator-291-released /blog/drupal-vm-generator-291-released permanent;
rewrite /blog/2017/01/07/easier-sculpin-commands-with-composer-and-npm-scripts /blog/easier-sculpin-commands-with-composer-and-npm-scripts permanent;
rewrite /blog/2017/01/31/nginx-redirects-with-query-string-arguments /blog/nginx-redirects-with-query-string-arguments permanent;
rewrite /blog/2017/05/05/fixing-drupal-simpletest-docker /blog/2017/05/05/fixing-drupal-simpletest-issues-inside-docker-containers permanent;
rewrite /blog/2017/05/05/fixing-drupal-simpletest-issues-inside-docker-containers /blog/fixing-drupal-simpletest-issues-inside-docker-containers permanent;
rewrite /blog/2017/06/09/introducing-the-drupal-meetups-twitterbot /blog/introducing-the-drupal-meetups-twitterbot permanent;
rewrite /blog/2017/11/07/tdd-test-driven-drupal /blog/tdd-test-driven-drupal permanent;
rewrite /blog/2017/11/07/writing-drupal-module-test-driven-development-tdd /blog/2017/11/07/tdd-test-driven-drupal permanent;
rewrite /blog/2018/01/30/drupalcamp-bristol-2018 /blog/drupalcamp-bristol-2018 permanent;
rewrite /blog/2018/02/05/using-tailwind-css-in-your-drupal-theme /blog/using-tailwind-css-in-your-drupal-theme permanent;
rewrite /blog/2018/02/27/looking-forward-to-drupalcamp-london /blog/looking-forward-to-drupalcamp-london permanent;
rewrite /blog/2018/02/27/queuing-private-messages-in-drupal-8 /blog/queuing-private-messages-in-drupal-8 permanent;
rewrite /blog/2018/02/28/building-the-new-phpsw-website /blog/building-the-new-phpsw-website permanent;
rewrite /blog/2018/03/02/yay-the-mediacurrent-contrib-half-hour-is-back /blog/yay-the-mediacurrent-contrib-half-hour-is-back permanent;
rewrite /blog/2018/03/04/tweets-from-drupalcamp-london /blog/tweets-from-drupalcamp-london permanent;
rewrite /blog/2018/05/06/creating-a-custom-phpunit-command-for-docksal /blog/creating-a-custom-phpunit-command-for-docksal permanent;
rewrite /blog/announcing-the-drupal-vm-config-generator /blog/announcing-the-drupal-vm-generator permanent;
rewrite /blog/drush-make-drupalbristol /talks/drush-make-drupalbristol permanent;
rewrite /blog/system-users-null-users /blog/null-users-and-system-users-in-drupal permanent;
rewrite /blog/tweets-from-drupalcamp-london /blog/tweets-drupalcamp-london permanent;
rewrite /blog /articles permanent;
rewrite /blog.xml /feed permanent;
rewrite /blog/* /blog/:splat permanent;
rewrite /book /test-driven-drupal permanent;
rewrite /consulting / permanent;
rewrite /cv https://cv.oliverdavies.uk permanent;
rewrite /drupal https://www.drupal.org/u/opdavies permanent;
rewrite /drupalgive https://www.drupal.org/u/opdavies permanent;
rewrite /experience https://cv.oliverdavies.uk permanent;
rewrite /git-flow /talks/git-flow permanent;
rewrite /github https://github.com/opdavies permanent;
rewrite /joindin https://joind.in/user/opdavies permanent;
rewrite /linkedin https://www.linkedin.com/in/opdavies permanent;
rewrite /packagist https://packagist.org/packages/opdavies permanent;
rewrite /services /experience permanent;
rewrite /slides/bristol-dug/drupal-vm-generator http://opdavies.github.io/slides-drupal-vm-generator permanent;
rewrite /slides/phpsw/building-static-websites-with-sculpin https://opdavies.github.io/slides-phpsw-sculpin permanent;
rewrite /speakerdeck https://speakerdeck.com/opdavies permanent;
rewrite /speaking /talks permanent;
rewrite /talks/2012/09/05/what-is-this-drupal-thing-unified-diff /talks/what-is-this-drupal-thing permanent;
rewrite /talks/2013/07/10/drupal-ldap-swdug /talks/drupal-ldap permanent;
rewrite /talks/2014/03/01/git-flow-drupalcamp-london-2014 /talks/git-flow permanent;
rewrite /talks/2014/07/02/drush-make-drupalbristol-drupal-bristol /talks/drush-make-drupalbristol permanent;
rewrite /talks/2014/08/19/drupal-association-swdug /talks/drupal-association permanent;
rewrite /talks/2015/01/18/drupalorg-2015-drupalcamp-brighton-2015 /talks/drupalorg-in-2015-whats-coming-next permanent;
rewrite /talks/2015/02/28/drupalorg-2015-drupalcamp-london-2015 /talks/drupalorg-in-2015-whats-coming-next permanent;
rewrite /talks/2015/04/08/drupal-8-phpsw /talks/drupal-8 permanent;
rewrite /talks/2015/07/25/test-drive-twig-with-sculpin-drupalcamp-north-2015 /talks/test-drive-twig-with-sculpin permanent;
rewrite /talks/2015/08/25/dancing-for-drupal-umbristol /talks/dancing-for-drupal permanent;
rewrite /talks/2015/10/14/sculpin-phpsw /talks/sculpin permanent;
rewrite /talks/2016/03/05/drupal-8-module-development-drupalcamp-london-2016 /talks/getting-started-with-drupal-8-module-development permanent;
rewrite /talks/2016/03/09/drupal-vm-generator-nwdug /talks/drupal-vm-generator permanent;
rewrite /talks/2016/04/02/drupal-vm-generator-drupal-bristol /talks/drupal-vm-generator permanent;
rewrite /talks/2016/06/11/drupal-8-rejoining-the-herd-php-south-coast-2016 /talks/drupal-8-rejoining-the-herd permanent;
rewrite /talks/2016/07/23/drupal-vm-meet-symfony-console-drupalcamp-bristol-2016 /talks/drupal-vm-meet-symfony-console permanent;
rewrite /talks/2016/11/09/drupal-development-with-composer-phpsw /talks/drupal-development-with-composer permanent;
rewrite /talks/2016/11/17/goodbye-drush-make-hello-composer-drupal-bristol /talks/goodbye-drush-make-hello-composer permanent;
rewrite /talks/2017/01/18/getting-your-data-into-drupal-8-drupal-bristol /talks/getting-your-data-into-drupal-8 permanent;
rewrite /talks/2017/03/04/getting-your-data-into-drupal-8-drupalcamp-london-2017 /talks/getting-your-data-into-drupal-8 permanent;
rewrite /talks/archive /talks permanent;
rewrite /talks/deploying-php-applications-with-fabric /talks/deploying-php-fabric permanent;
rewrite /talks/drupal-vm-generator-2 /talks/drupal-vm-generator permanent;
rewrite /talks/drupalorg-2015-2 /talks/drupalorg-2015 permanent;
rewrite /talks/drupalorg-in-2015-whats-coming-next /talks/drupalorg-2015 permanent;
rewrite /talks/getting-started-with-drupal-8-module-development /drupal-8-module-development permanent;
rewrite /talks/sculpin /talks/building-static-websites-sculpin permanent;
rewrite /talks/using-laravel-collections-outside-laravel /talks/using-illuminate-collections-outside-laravel permanent;
rewrite /terms-and-conditions /terms permanent;
rewrite /twitter https://twitter.com/opdavies permanent;
rewrite /work /experience permanent;
rewrite /youtube https://www.youtube.com/channel/UCkeK0qF9HHUPQH_fvn4ghqQ permanent;
ssl_certificate /etc/letsencrypt/live/d8.oliverdavies.uk/fullchain.pem;
ssl_certificate_key /etc/letsencrypt/live/d8.oliverdavies.uk/privkey.pem;
location = /favicon.ico {
log_not_found off;
access_log off;
}
location = /robots.txt {
allow all;
log_not_found off;
access_log off;
}
# Very rarely should these ever be accessed outside of your lan
location ~* \.(txt|log)$ {
allow 192.168.0.0/16;
deny all;
}
location ~ \..*/.*\.php$ {
return 403;
}
location ~ ^/sites/.*/private/ {
return 403;
}
# Block access to scripts in site files directory
location ~ ^/sites/[^/]+/files/.*\.php$ {
deny all;
}
# Allow "Well-Known URIs" as per RFC 5785
location ~* ^/.well-known/ {
allow all;
}
# Block access to "hidden" files and directories whose names begin with a
# period. This includes directories used by version control systems such
# as Subversion or Git to store control files.
location ~ (^|/)\. {
return 403;
}
location / {
try_files $uri /index.php?$query_string; # For Drupal >= 7
}
location @rewrite {
rewrite ^/(.*)$ /index.php?q=$1;
}
# Don't allow direct access to PHP files in the vendor directory.
location ~ /vendor/.*\.php$ {
deny all;
return 404;
}
location ~ '\.php$|^/update.php' {
try_files $uri =404;
fastcgi_split_path_info ^(.+?\.php)(|/.*)$;
include fastcgi_params;
fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
fastcgi_param PATH_INFO $fastcgi_path_info;
fastcgi_param QUERY_STRING $query_string;
fastcgi_intercept_errors on;
fastcgi_pass localhost:9000;
}
# Fighting with Styles? This little gem is amazing.
# location ~ ^/sites/.*/files/imagecache/ { # For Drupal <= 6
location ~ ^/sites/.*/files/styles/ { # For Drupal >= 7
try_files $uri @rewrite;
}
# Handle private files through Drupal.
location ~ ^(/[a-z\-]+)?/system/files/ { # For Drupal >= 7
try_files $uri /index.php?$query_string;
}
location ~* \.(js|css|png|jpg|jpeg|gif|ico|svg)$ {
try_files $uri @rewrite;
expires max;
log_not_found off;
}
# Enforce clean URLs
if ($request_uri ~* "^(.*/)index\.php(.*)") {
return 307 $1$2;
}
certbot_create_if_missing: true
certbot_create_method: standalone
certbot_admin_email: oliver+certbot@oliverdavies.uk
certbot_certs:
- domains: [d8.oliverdavies.uk]