Ansibleãå©ç¨ããCentOS 6ã¨Cent OS 7ã«Apacheãå°å ¥ãã¦ã¿ãã 1. playbookãæ¸ãã¦ã¿ãã ãããããã¨ã¯ã - yumã§ apacheãå°å ¥ - httpdããã»ã¹ãèµ·å - iptablesã¾ãã¯ãfirewalldã§80portãè¨å® - iptables/firewalldã®å¤æ´ãããã°ãããã»ã¹åèµ·å ã§ãæ¸ãã¦ã¿ãå 容ã以ä¸ã --- - hosts: kobatest tasks: - name: install apache yum: name=httpd - name: CentOS6 start httpd service: name=httpd state=restarted when: (ansible_distribution == "CentOS" and ansible_distribution_major_version
In ansible, I can do this: file: dest=/foo/bar/somedir owner=root group=apache mode=0775 recurse=yes And it recursively sets the owner, group, and permissions to 0775 on all directories and files in that path. But I want to set directories to 0775, and files to 0664. Is there some way to make ansible do this?
WEBãµã¼ãã¼ã«ã¯ã¼ããã¬ã¹ãä¸ããéã«ããã¡ã¤ã«ã®ãã¼ããã·ã§ã³ã¯ã©ãããã°è¯ãã®ãæç¢ºãªçããç¡ãã£ãã®ã§ããããã¨æ¢ãã¦ã¿ãããCentOS 6 LAMP permissions â the right wayã«å®ç§ã§ã¯ãªããã¨æãããçãããã£ãã®ã§ãéè¦ãªé¨åãå¼ç¨ã»ç¿»è¨³ããå çã解説ãããã¨æãã¾ãã ãªãä»åã®è¨äºã§ã¯VPSãå°ç¨ãµã¼ãã¼ã®ããã«ãroot権éãæã¤ãã¨ãã§ãSSHã§ãã°ã¤ã³ã§ããç°å¢ãæ³å®ãã¦ãã¾ããã¾ãLinuxã®ãã£ã¹ããªãã¥ã¼ã·ã§ã³ã¯CentOS6ãhttpãµã¼ãã¼ã«ã¯Apacheãå©ç¨ãããã®ã¨ãã¾ãã rootãã°ã¤ã³ããæ°ãã«ã¦ã¼ã¶ã¼ã使ããVPSãå¥ç´ããã¡ãªããã®ä¸ã¤ã¨ãã¦root権éãä¸ãããããã¨ãæãããã¾ããããã«ããèªå好ã¿ã«ãµã¼ãã¼ããã¥ã¼ãã³ã°ãããã¨ãå¯è½ã¨ãªãã¾ãã ãããã ããã¨è¨ã£ã¦ãrootã®ã¾ã¾ã§ä½æ¥ããã®ã¯å±éºã
vagrantã§CakePHPã®ç°å¢ãä½ããã¨æã£ã¦è²ã ããã£ãã®ã§ã¡ã¢ã ã¡ãªã¿ã«ã²ã¹ãOSã¯CentOS7ã ãããã¨ããã㨠ãã¼ã«ã«ã®ï¼vagrant upãããã£ã¬ã¯ããªã®ï¼app/é ä¸ãå ±æãã©ã«ãã¨ãã¦ãã¦ã³ã appã«CakePHPãã¤ã³ã¹ãã¼ã« å ±æãã©ã«ãã¨ãã¦ãã¦ã³ããã/app/webrootãapacheã®ããã¥ã¡ã³ãã«ã¼ãã«ãã /appé ä¸ã¯apacheã¦ã¼ã¶ã§æ¸ãè¾¼ã¿ã§ããããã«ãã vagrantã®provisioningã§phpãapacheãCakePHPã®ã¤ã³ã¹ãã¼ã«ã¨è¨å®ãè¡ã ããããã¤ã³ã1 æåãapacheã§æ¸ãè¾¼ã¿ãã§ããããã«ã¨ãããã¨ã§ãsynced_folderã®ãªãã·ã§ã³ã§groupãapacheã«ããã°ã«ã¼ãåãã®ãã¼ããã·ã§ã³ãæå®ãã¦ã¿ãã config.vm.synced_folder "./app", "/app", c
ã½ãã詳細説æ Apache çã®HTTPãµã¼ãã¼ãåºåããNCSAå½¢å¼ã®ãã°ãè¦ããã表示ããã½ããã§ãã æå®ããããã°ãã¡ã¤ã«ãèªã¿è¾¼ãã§ãã»ãã·ã§ã³ç¶æ ãè§£æããæ¥ä»ãã¨ã«ä¸è¦§è¡¨ç¤ºãã¾ãã ã¾ããä»»æã®ã¢ãã¬ã¹ããã©ã«ã群ã«å¯¾ããã¢ã¯ã»ã¹è§£æ ( ãã°è§£æ ) ãè¡ãã¾ãã å種ã®ã¢ã¯ã»ã¹æ å ±ãåºæºã«å¤æ§ãªéè¨ãè¡ããããããç¸äºã«è¿½è·¡ãã¦è¡¨ç¤ºã§ããã®ã§ãç¹å®ã¢ã¯ã»ã¹å ã®åä½è¿½è·¡ãæ¤ç´¢ãµã¤ãã®ç»é²ã»åç §ç¶æ³çã詳細ãã¤åå¥ãªãã°åæãå¯è½ã¨ãã¾ãã IISã®å ´åã§ããconvlog ã§ãã°å½¢å¼ã夿ããã°ä½¿ç¨ã§ãã¾ãã
ãæ¹è¨æ°çãåºç¤Ruby on Railsããèªè ãµãã¼ããã¼ã¸ > Railsæ¬çªç°å¢æ§ç¯ã¬ã¤ã 以ä¸ãasagao.oiax.jp ã¨ãããã¹ãåã§Railsã¢ããªã±ã¼ã·ã§ã³asagaoãå ¬éãããã¨ããåæã§æé ãè¨è¿°ãã¾ãããèªåã®ãã¹ãåï¼ãã¡ã¤ã³åï¼ã§èªã¿æ¿ãã¦ãã ããã 対象ã¨ããOSã¯æ¬¡ã®3ã¤ã§ã: CentOS 6.2 ï¼ãBasic Serverãã¿ã¤ãã§ã¤ã³ã¹ãã¼ã«ããããã®ï¼ Ubuntu Server 12.04 LTS Ubuntu Server 10.04 LTS ãªã¢ã¼ããã·ã³ã«sudo権éãæã¤ã¦ã¼ã¶ã¼ã§SSHæ¥ç¶ããã³ãã³ããé ã«å®è¡ãã¦ãã ããããªãã% ã¯ã³ãã³ãããã³ããã示ãã¾ãããããã®æåã¯å ¥åããªãã§ãã ããã Phusion Passengerã®ã¤ã³ã¹ãã¼ã« % sudo gem install passenger --no-ri --n
Apacheã®è¨å®ãã¡ã¤ã«httpd.confã®ä¸ã§ç°å¢å¤æ°ã使ç¨ããæ¹æ³ãã¡ã¢ã ä¾ãã°ãHTTPD_LOGS=/httpd/logsã¨ç°å¢å¤æ°ã«å®ç¾©ãã¦ããã¾ãã httpd.confä¸ã«æ¬¡ã®ãããªä½¿ãæ¹ã§ç°å¢å¤æ°ã使ãã¾ãã åããããªç°å¢ã大éã«ä½ãã¨ãã«ä¾¿å©ã§ãããè¨å®ãã¡ã¤ã«ã¯å ¨é¨åããä¸ã¤ ç°å¢ãã¨ã«ç°ãªãã¨ããã¯ç°å¢å¤æ°ã§å®ç¾©ã Windowsã®å ´å CustomLog "|D:\Apache\Apache\bin\rotatelogs %HTTPD_LOGS%\access_log 43200" common Linuxã®å ´å CustomLog "|/Apache/Apache/bin/rotatelogs $HTTPD_LOGS/access_log 43200" common setEnvã§å¤æ°ãè¨å®ããã£ã¦ããã®ã¯Apacheã®ããã¥ã¢ã«ã«è¼ã£ã¦ ãããã§ãããå¤
ãã®ææ¸ã¯å 容ãå¤ããªã£ã¦ãã¾ãã ã¤ã³ã¹ãã¼ã« ãã¼ã¸ã§æ°ããææ¸ãæ¢ãã¦ãã ããã è¦ç´ Redmineçã®Ruby on Railsã¢ããªã±ã¼ã·ã§ã³ã"Phusion Passenger(mod_rails for Apache)":http://www.modrails.com/ ãå©ç¨ãã¦Apacheä¸ã§ç¨¼åãããæé ã説æãã¾ãã éç¨ã®ç°¡ç´ åãè¤æ°ã¤ã³ã¹ã¿ã³ã¹ã並å稼åããããã¨ã«ããã¬ã¹ãã³ã¹ã®æ¹åãæå¾ ã§ãã¾ãã ã¤ã³ã¹ãã¼ã«ã®æµãã¯æ¬¡ã®éãã gem install passenger passenger-install-apache2-module httpd.confã®å¤æ´ Phusion Passengerã¨ã¯ Railsã¢ããªã±ã¼ã·ã§ã³ãå®è¡ããããã®Apacheã¢ã¸ã¥ã¼ã«ã§ãã ç¹å¾´ Apacheåç¬ã§Railsã¢ããªã±ã¼ã·ã§ã³ãå®è¡å¯è½ã§ããApacheã®ã¢
WEBã¢ããªã±ã¼ã·ã§ã³ã®ã¦ã¼ã¶ã¼ãéå®ããã¦ããã°iptablesãAWSã®security groupã¨ãã§IPãã£ã«ã¿ãªã³ã°ãã¦ãã¾ãã®ã§ãããããã§ãªãå ´åã«httpãã¼ããå ¨éæ¾ãã¦ãã¾ãã¨ãå ¨ä¸çããã¢ã¿ãã¯ãæ¾é¡ãªç¶æ ã«ãªã£ã¦ãã¾ãã¾ãã æµ·å¤ããã®ã¢ã¯ã»ã¹ãããã¯ããã¨ããææ®µã¯ä»ã«ãè²ã ã¨ããã¾ãããä»åã¯ãã®ä¸ã¤ã§ããWeb Application Firewallãã¤ã³ã¹ãã¼ã«ãã¦ã¿ã¾ãã CentOS6.5ã§æ¢ã«Apacheãåãã¦ããç¶æ ã§Web Application Firewallã§ããmod_securityãå ¥ãã¦ã¿ã¾ããã ã¤ã³ã¹ãã¼ã« ãã¡ããåèã«ãã¾ãããyumã§ã¤ã³ã¹ãã¼ã«ãã¦ããã¾ãã http://oki2a24.com/2013/09/27/yum-install-epel-modsecurity/ ã©ãããepelãªãã¸ããªã使ç¨ããã°ã
人æ°è¨äºã©ã³ãã³ã° Apacheã®ãã¼ã¸ã§ã³ç¢ºèªæ¹æ³ 223ä»¶ã®ãã¥ã¼ dnf ã«EPELãªãã¸ããªã追å ãã Rocky Linux 8, 9, 10 215ä»¶ã®ãã¥ã¼ ããã©ã«ãã²ã¼ãã¦ã§ã¤ã®è¨å® routeã³ãã³ã 192ä»¶ã®ãã¥ã¼ firewalldã®è¨å® Rocky Linux 161ä»¶ã®ãã¥ã¼ dnfã®ã¢ãããã¼ãããã¾ããããªãå ´åã«ãã£ãã·ã¥ãã¯ãªã¢ãã 160ä»¶ã®ãã¥ã¼ findã§æå®ãµã¤ãºãã大ãããããã¯å°ãããã¡ã¤ã«ãæ¢ã 138ä»¶ã®ãã¥ã¼ ã¿ã¤ã ã¾ã¼ã³ãæ¥æ¬æ¨æºæ(JST)ã«å¤æ´ãã Rocky Linux 8, 9, 10 118ä»¶ã®ãã¥ã¼ ããã©ã«ãã²ã¼ãã¦ã§ã¤ã®è¨å® ip ã³ãã³ã (iproute2) 98ä»¶ã®ãã¥ã¼ NetworkManagerã«ããresolv.confã®èªåçæãæå¶ãã 97ä»¶ã®ãã¥ã¼ Rocky Linux ã®OSãã¼ã¸ã§ã³ã確èª
ãªãªã¼ã¹ãé害æ å ±ãªã©ã®ãµã¼ãã¹ã®ãç¥ãã
ææ°ã®äººæ°ã¨ã³ããªã¼ã®é ä¿¡
å¦çãå®è¡ä¸ã§ã
j次ã®ããã¯ãã¼ã¯
kåã®ããã¯ãã¼ã¯
lãã¨ã§èªã
eã³ã¡ã³ãä¸è¦§ãéã
oãã¼ã¸ãéã
{{#tags}}- {{label}}
{{/tags}}