trellis/server.yml at master · Hooli-Ltd/trellis · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
---
- import_playbook: variable-check.yml
  vars:
    playbook: server.yml

- name: Test Connection and Determine Remote User
  hosts: web:&{{ env }}
  gather_facts: false
  roles:
    - { role: connection, tags: [connection, always] }

- name: WordPress Server - Install LEMP Stack with PHP and MariaDB MySQL
  hosts: web:&{{ env }}
  become: yes
  roles:
    - { role: common, tags: [common] }
    - {
        role: swapfile,
        swapfile_size: 1GB,
        swapfile_file: /swapfile,
        tags: [swapfile],
      }
    - { role: fail2ban, tags: [fail2ban] }
    - { role: ferm, tags: [ferm, letsencrypt] }
    - { role: ntp, tags: [ntp] }
    - { role: users, tags: [users] }
    - { role: sshd, tags: [sshd] }
    - { role: mariadb, tags: [mariadb] }
    - { role: ssmtp, tags: [ssmtp, mail] }
    - { role: php, tags: [php] }
    - {
        role: memcached,
        tags: [memcached],
        when: sites_using_memcached | count,
      }
    - { role: redis, tags: [redis], when: sites_using_redis | count }
    - { role: nginx, tags: [nginx] }
    - { role: logrotate, tags: [logrotate] }
    - { role: composer, tags: [composer] }
    - { role: wp-cli, tags: [wp-cli] }
    - {
        role: letsencrypt,
        tags: [letsencrypt],
        when: sites_using_letsencrypt | count,
      }
    - { role: wordpress-setup, tags: [wordpress, wordpress-setup, letsencrypt] }
    - { role: trellis-cve-2018-6389, tags: [nginx, wordpress, wordpress-setup] }
    - { role: wordfence, tags: [wordpress, wordfence] }
    - { role: bedrock-site-protect, tags: [htpasswd, wordpress] }
    - { role: do-agent, tags: [do-agent] }