Add www.php.net property

Author: derickr

initServiceDownloads.yml

@@ -29,6 +29,7 @@
         name: install_composer
 
   roles:
+    - role: properties/www
     - role: properties/doc
     - role: properties/downloads
     - role: properties/gtk

inventory/php.net.zone

@@ -109,14 +109,13 @@ wiki			IN CNAME wiki-php-net.ax4z.com.
 ; windows.php.net is configured entirely as a physical host below
 
 ; www is kind of a big deal
-www-origin		IN CNAME php-web4.php.net.
 www                  300 IN CNAME www-php-net.ax4z.com.
 
 ;------------ Old hostnames that just get redirected (or retired?)
 
-; these redirect to www.php.net - could just use STAR-php-net.ax4z.com?
-secure			IN CNAME secure-php-net.ax4z.com.
-static			IN CNAME static-php-net.ax4z.com.
+; these redirect to www.php.net
+secure			IN CNAME STAR-php-net.ax4z.com.
+static			IN CNAME STAR-php-net.ax4z.com.
 
 ;------------ MX (mail) records
 
@@ -204,6 +203,7 @@ shared.internal       IN CNAME service2-ams.internal.php.net.
 qa.internal           IN CNAME service2-ams.internal.php.net.
 talks.internal        IN CNAME service2-ams.internal.php.net.
 people.internal       IN CNAME service2-ams.internal.php.net.
+www.internal          IN CNAME service2-ams.internal.php.net.
 
 ; Abandoned
 gtk.internal          IN CNAME service2-ams.internal.php.net.

inventory/php/group_vars/service.yml

@@ -55,6 +55,9 @@ doc_domain_alias: doc.internal.php.net
 analytics_domain: analytics.php.net
 analytics_domain_alias: analytics.internal.php.net
 
+www_domain: www.php.net
+www_domain_alias: www.internal.php.net
+
 systems_email: systems@php.net
 master_email: "{{ systems_email }}"
 

roles/properties/www/handlers/main.yml

@@ -0,0 +1,10 @@
+# This restarts the Apache service
+- name: restart apache
+  service:
+    name: apache2
+    state: restarted
+
+- name: reload apache
+  service:
+    name: apache2
+    state: reloaded

roles/properties/www/tasks/deploy.yml

@@ -0,0 +1,18 @@
+- name: Create local directory to store www content
+  file:
+    state: directory
+    dest: "{{ www_docroot }}/{{ www_domain }}"
+    mode: "755"
+
+- name: Copy update-www script to the server
+  template:
+    src: templates/update-www
+    dest: /local/systems/update-www
+    mode: "700"
+
+- name: Create a cron job to run every 5 minutes
+  cron:
+    name: Run update-www every 5 minutes
+    minute: "*/5"
+    job: /local/systems/update-www
+

roles/properties/www/tasks/main.yml

@@ -0,0 +1,23 @@
+# This role sets up the property www.php.net with Apache together with the php module
+# It uses self-signed SSL certs
+
+- name: Add Apache config for www.php.net
+  template:
+    src: templates/{{ www_config_file }}
+    dest: "/etc/apache2/sites-available/{{ www_config_file }}"
+  notify: reload apache
+
+- name: Enable config file
+  shell: "a2ensite {{ www_config_file }}"
+  args:
+    creates: "/etc/apache2/sites-enabled/{{ www_config_file }}"
+  notify: reload apache
+
+- name: Ensure Apache is started and enabled
+  service:
+    name: apache2
+    state: started
+    enabled: yes
+
+- include_tasks: deploy.yml
+

roles/properties/www/templates/robots.txt

@@ -0,0 +1,2 @@
+User-agent: *
+Disallow: /

roles/properties/www/templates/update-www

@@ -0,0 +1,7 @@
+#!/bin/sh
+
+rsync -rlptDC --timeout=600 --delete --delete-after \
+    --include='distributions/*.exe' --include='manual/en/' \
+    --include='manual/en/**' --include='manual/*.php' \
+    --include='manual/**' {{ rsync_address }}::phpweb \
+    {{ www_docroot }}

roles/properties/www/templates/www.php.net.conf

@@ -0,0 +1,42 @@
+<VirtualHost *:80>
+	ServerName {{ www_domain }}
+	ServerAlias php.net {{ www_domain_alias }}
+
+	ServerAdmin {{ systems_email }}
+	Redirect / https://{{ www_domain }}
+</VirtualHost>
+
+<IfModule mod_ssl.c>
+<VirtualHost *:443>
+	ServerAdmin {{ systems_email }}
+	ServerName {{ www_domain }}
+	ServerAlias php.net {{ www_domain_alias }}
+
+	DocumentRoot {{ www_docroot }}
+
+	# Logging
+	ErrorLog ${APACHE_LOG_DIR}/{{ www_domain }}-error.log
+	CustomLog ${APACHE_LOG_DIR}/{{ www_domain }}-access.log combined
+
+	# TLS Configuration with self-signed certificates
+	SSLEngine on
+	SSLCertificateFile /etc/ssl/certs/php-self-signed.crt
+	SSLCertificateKeyFile /etc/ssl/certs/php-self-signed.key
+
+	# Property Specific Changes
+    SetEnv MIRROR_LANGUAGE "en"
+    SetEnv MIRROR_STATS "0"
+
+	<Directory {{ www_docroot }}>
+		RewriteEngine On
+		RewriteBase /
+
+		# Redirect /downloads to /downloads.php
+		RewriteRule ^downloads$ %{DOCUMENT_ROOT}/downloads.php [QSA]
+	</Directory>
+
+	ErrorDocument 401 /error.php
+	ErrorDocument 403 /error.php
+	ErrorDocument 404 /error.php
+</VirtualHost>
+</IfModule>

roles/properties/www/vars/main.yml

@@ -0,0 +1,6 @@
+www_docroot: /var/www/sites/www.php.net
+www_config_file: www.php.net.conf
+
+# For the aliases where www was also configured, we set up redirects
+www_redirect_config_file: www-redirect.php.net.conf
+www_old_aliases: [ "static", "secure" ]