229 lines
8.6 KiB
Ruby
229 lines
8.6 KiB
Ruby
# -*- mode: ruby -*-
|
|
# vi: set ft=ruby :
|
|
|
|
# All Vagrant configuration is done below. The "2" in Vagrant.configure
|
|
# configures the configuration version (we support older styles for
|
|
# backwards compatibility). Please don't change it unless you know what
|
|
# you're doing.
|
|
Vagrant.configure("2") do |config|
|
|
# The most common configuration options are documented and commented below.
|
|
# For a complete reference, please see the online documentation at
|
|
# https://docs.vagrantup.com.
|
|
|
|
config.vm.define "@@MOCHA_SUV_ID@@" do |box|
|
|
|
|
# Every Vagrant development environment requires a box. You can search for
|
|
# boxes at https://vagrantcloud.com/search.
|
|
# box.vm.box = "mocha/lunar64"
|
|
box.vm.box = "ubuntu/lunar64"
|
|
#box.vm.box = "default.box"
|
|
|
|
box.vm.hostname = "@@MOCHA_SUV_ID@@.privatesuv.com"
|
|
|
|
# Disable automatic box update checking. If you disable this, then
|
|
# boxes will only be checked for updates when the user runs
|
|
# `vagrant box outdated`. This is not recommended.
|
|
# box.vm.box_check_update = false
|
|
|
|
# Create a forwarded port mapping which allows access to a specific port
|
|
# within the machine from a port on the host machine. In the example below,
|
|
# accessing "localhost:8080" will access port 80 on the guest machine.
|
|
# NOTE: This will enable public access to the opened port
|
|
# box.vm.network "forwarded_port", guest: 80, host: 8080
|
|
|
|
# Create a forwarded port mapping which allows access to a specific port
|
|
# within the machine from a port on the host machine and only allow access
|
|
# via 127.0.0.1 to disable public access
|
|
# box.vm.network "forwarded_port", guest: 80, host: 8080, host_ip: "127.0.0.1"
|
|
|
|
# Create a private network, which allows host-only access to the machine
|
|
# using a specific IP.
|
|
#box.vm.network "private_network", type: "dhcp"
|
|
box.vm.network "private_network", ip: "@@MOCHA_SUV_ADDRESS@@"
|
|
|
|
# Create a public network, which generally matched to bridged network.
|
|
# Bridged networks make the machine appear as another physical device on
|
|
# your network.
|
|
# box.vm.network "public_network"
|
|
|
|
# Share an additional folder to the guest VM. The first argument is
|
|
# the path on the host to the actual folder. The second argument is
|
|
# the path on the guest to mount the folder. And the optional third
|
|
# argument is a set of non-required options.
|
|
# box.vm.synced_folder "../data", "/vagrant_data"
|
|
|
|
# Provider-specific configuration so you can fine-tune various
|
|
# backing providers for Vagrant. These expose provider-specific options.
|
|
# Example for VirtualBox:
|
|
#
|
|
# box.vm.provider "virtualbox" do |vb|
|
|
# # Display the VirtualBox GUI when booting the machine
|
|
# vb.gui = true
|
|
#
|
|
# # Customize the amount of memory on the VM:
|
|
# vb.memory = "1024"
|
|
# end
|
|
#
|
|
# View the documentation for the provider you are using for more
|
|
# information on available options.
|
|
box.vm.provider "virtualbox" do |vb|
|
|
vb.name = "mochasuv-@@MOCHA_SUV_ID@@"
|
|
end
|
|
|
|
# Enable provisioning with a shell script. Additional provisioners such as
|
|
# Ansible, Chef, Docker, Puppet and Salt are also available. Please see the
|
|
# documentation for more information about their specific syntax and use.
|
|
box.vm.provision "shell", inline: <<-SHELL
|
|
|
|
# create peristent mocha configuration dir
|
|
mkdir /etc/mocha
|
|
|
|
echo "pending:building:1/27:check for updates" > /etc/mocha/suvstatus
|
|
|
|
apt-get update
|
|
|
|
|
|
echo "pending:building:2/27:install dependencies" > /etc/mocha/suvstatus
|
|
|
|
apt-get install -y mariadb-server apache2 php php-mysql php-xml php-mbstring pwgen
|
|
|
|
echo "pending:building:3/27:apply web server configuration" > /etc/mocha/suvstatus
|
|
|
|
# enable apache modules
|
|
a2enmod rewrite
|
|
a2enmod ssl
|
|
|
|
systemctl restart apache2
|
|
|
|
# ssh - for development only - REMOVE if publishing for public use
|
|
sed -e "s/KbdInteractiveAuthentication no/KbdInteractiveAuthentication yes/" /etc/ssh/sshd_config > /etc/ssh/sshd_config
|
|
systemctl restart ssh
|
|
|
|
|
|
echo "pending:building:4/27:configure users" > /etc/mocha/suvstatus
|
|
|
|
# add webmasters group and webmaster user
|
|
addgroup webmasters
|
|
addgroup zqadmin
|
|
|
|
WEBMASTER_PASS="Solty/AyanamiREI^^96274"
|
|
ZQADMIN_PASS="Solty/AyanamiREI^^96274"
|
|
|
|
useradd -G webmasters -p "$(openssl passwd -6 $WEBMASTER_PASS)" webmaster
|
|
useradd -G zqadmin -p "$(openssl passwd -6 $ZQADMIN_PASS)" zqadmin
|
|
|
|
echo "pending:building:5/27:import machine template" > /etc/mocha/suvstatus
|
|
SHELL
|
|
|
|
box.vm.provision "file", source: "site.conf", destination: "$HOME/mochadev.conf"
|
|
box.vm.provision "file", source: "localhost.key", destination: "$HOME/localhost.key"
|
|
box.vm.provision "file", source: "localhost.crt", destination: "$HOME/localhost.crt"
|
|
box.vm.provision "file", source: "mocha-libexec", destination: "$HOME/mocha-libexec"
|
|
box.vm.provision "file", source: "sql", destination: "$HOME/sql"
|
|
|
|
# initial provision of site
|
|
box.vm.provision "shell", inline: <<-SHELL
|
|
|
|
# **************************************************************
|
|
# SITE CONFIGURATION AND SSL
|
|
# **************************************************************
|
|
mv /home/vagrant/mochadev.conf /etc/apache2/sites-available/mochadev.conf
|
|
|
|
mv /home/vagrant/localhost.key /etc/ssl/certs
|
|
mv /home/vagrant/localhost.crt /etc/ssl/certs
|
|
|
|
# **************************************************************
|
|
# APACHE2 CONFIGURATION
|
|
# **************************************************************
|
|
|
|
echo "pending:building:6/27:apply machine template" > /etc/mocha/suvstatus
|
|
# block port 80
|
|
sed -i -e "s/Listen 80/#Listen 80/" /etc/apache2/ports.conf
|
|
|
|
# disable default site and enable mochadev site
|
|
a2dissite 000-default
|
|
a2ensite mochadev
|
|
|
|
# reload configuration
|
|
systemctl reload apache2
|
|
|
|
echo "pending:building:7/27:install utilities" > /etc/mocha/suvstatus
|
|
|
|
mkdir /usr/share/mocha
|
|
mkdir /usr/lib/mocha
|
|
|
|
echo "mocha_suv" > /etc/mocha/dbname
|
|
echo "mocha_suv" > /etc/mocha/dbuser
|
|
|
|
mv /home/vagrant/mocha-libexec/mocha /usr/bin/mocha
|
|
mv /home/vagrant/mocha-libexec/mocha-* /usr/lib/mocha
|
|
mv /home/vagrant/mocha-libexec/internal /usr/lib/mocha
|
|
mv /home/vagrant/mocha-libexec/spot_register_for_shutdown /usr/lib/mocha
|
|
|
|
mv /home/vagrant/sql /usr/lib/mocha/sql
|
|
|
|
chmod a+x /usr/bin/mocha
|
|
chmod --recursive a+x /usr/lib/mocha
|
|
|
|
chown --recursive zqadmin /usr/lib/mocha /usr/share/mocha /etc/mocha
|
|
chgrp --recursive zqadmin /usr/lib/mocha /usr/share/mocha /etc/mocha
|
|
|
|
echo "pending:building:8/27:reset suv" > /etc/mocha/suvstatus
|
|
SHELL
|
|
|
|
# reset the site to the default upon launching the VM
|
|
# remove the run: "always" if you do not desire this behavior
|
|
box.vm.provision "file", source: "libraries", destination: "$HOME/libraries"
|
|
box.vm.provision "file", source: "site", destination: "$HOME/html"
|
|
box.vm.provision "file", source: "site/.htaccess", destination: "$HOME/html/.htaccess"
|
|
box.vm.provision "shell", inline: <<-SHELL
|
|
|
|
if [ "@@MOCHA_ALWAYS_PROVISION@@" != "true" ]; then
|
|
rm -rf /var/www/html
|
|
cp -r /home/vagrant/html /var/www
|
|
|
|
rm -rf /usr/share/mocha/libraries
|
|
cp -r /home/vagrant/libraries /usr/share/mocha/libraries
|
|
fi
|
|
|
|
SHELL
|
|
box.vm.provision "shell", run: "always", inline: <<-SHELL
|
|
|
|
if [ "@@MOCHA_ALWAYS_PROVISION@@" == "true" ]; then
|
|
rm -rf /var/www/html
|
|
cp -r /home/vagrant/html /var/www
|
|
|
|
rm -rf /usr/share/mocha/libraries
|
|
cp -r /home/vagrant/libraries /usr/share/mocha/libraries
|
|
|
|
rm -rf /etc/mocha/*
|
|
|
|
echo "!! WARNING !! This is a TRANSIENT SUV !!"
|
|
echo ">> Data you change on this instance WILL NOT BE SAVED"
|
|
echo ">> You MUST migrate your changes manually before shutting down if you wish to save them"
|
|
else
|
|
echo "!! This is a PERSISTENT SUV !!"
|
|
echo ">> Data you change on this instance will be kept INDEFINITELY"
|
|
echo ">> UNTIL you manually reset it with 'mocha suv reset'"
|
|
fi
|
|
|
|
chown --recursive webmaster /var/www
|
|
chgrp --recursive webmasters /var/www
|
|
|
|
chmod a+x /etc/mocha
|
|
|
|
# create the initial mocha user and get a randomly generated password
|
|
mocha up
|
|
|
|
echo "running:buildcompleted" > /etc/mocha/suvstatus
|
|
|
|
SHELL
|
|
end
|
|
|
|
#config.trigger.after :up do |trigger|
|
|
# trigger.info = "Open newly provisioned SUV in firefox"
|
|
# trigger.run = {inline: "bash -c 'firefox https://@@MOCHA_SUV_HOSTNAME@@/super/d/home.htmld' &"}
|
|
#end
|
|
|
|
end
|