Reorder roles of web1.desu.ltd, enable FastCGI, switch to prefork, and enable HTTP2

WEW
This commit is contained in:
Salt 2020-12-30 16:37:22 -06:00
parent 0fcbc3be6d
commit f1280f1e5e

View File

@ -12,16 +12,64 @@
- /var/www/www.9iron.club/files - /var/www/www.9iron.club/files
become: yes become: yes
tags: [ backup ] tags: [ backup ]
- role: certbot
vars:
certbot_admin_email: rehashedsalt@cock.li
certbot_create_if_missing: yes
certbot_create_method: standalone
certbot_create_standalone_stop_services:
- apache2
certbot_certs:
- domains:
- desu.ltd
- git.desu.ltd
- nc.desu.ltd
- web1.desu.ltd
- 9iron.club
- www.9iron.club
become: yes
tags: [ web, certbot ]
- role: php
vars:
php_enable_php_fpm: yes
php_memory_limit: 512M
php_packages_extra:
- libapache2-mod-php
- php-zip # For Nextcloud
- php-intl
- php-imagick
- php-redis
- php-bcmath
- php-gmp
- php-pgsql # For general DB stuff
# Nextcloud recommended opcache settings
php_opcache_max_accelerated_files: 10000
php_opcache_memory_consumption: 128
php_opcache_revalidate_freq: 2
become: yes
tags: [ web, php ]
- role: apache - role: apache
vars: vars:
apache_remove_default_vhost: yes apache_remove_default_vhost: yes
apache_packages_state: latest apache_packages_state: latest
apache_mods_enabled: apache_mods_enabled:
- headers.load - headers.load
- ssl.load - http2.load
- mpm_worker.load
- proxy.load - proxy.load
- proxy_fcgi.load
- proxy_http.load - proxy_http.load
- rewrite.load - rewrite.load
- ssl.load
apache_mods_disabled:
- mpm_prefork.load
- php7.4.load
apache_global_vhost_settings: |
DirectoryIndex index.php index.html
Protocols h2 http/1.1
<FilesMatch \.php$>
SetHandler "proxy:unix:/var/run/php/php-fpm.sock|fcgi://localhost/"
</FilesMatch>
apache_vhosts: apache_vhosts:
# desu.ltd # desu.ltd
- servername: nc.desu.ltd - servername: nc.desu.ltd
@ -76,41 +124,6 @@
certificate_chain_file: /etc/letsencrypt/live/desu.ltd/chain.pem certificate_chain_file: /etc/letsencrypt/live/desu.ltd/chain.pem
become: yes become: yes
tags: [ web, apache ] tags: [ web, apache ]
- role: certbot
vars:
certbot_admin_email: rehashedsalt@cock.li
certbot_create_if_missing: yes
certbot_create_method: standalone
certbot_create_standalone_stop_services:
- apache2
certbot_certs:
- domains:
- desu.ltd
- git.desu.ltd
- nc.desu.ltd
- web1.desu.ltd
- 9iron.club
- www.9iron.club
become: yes
tags: [ web, certbot ]
- role: php
vars:
php_memory_limit: 512M
php_packages_extra:
- libapache2-mod-php
- php-zip # For Nextcloud
- php-intl
- php-imagick
- php-redis
- php-bcmath
- php-gmp
- php-pgsql # For general DB stuff
# Nextcloud recommended opcache settings
php_opcache_max_accelerated_files: 10000
php_opcache_memory_consumption: 128
php_opcache_revalidate_freq: 2
become: yes
tags: [ web, php ]
- role: git - role: git
vars: vars:
git_repos: git_repos: