forked from aliyun/ros-templates
-
Notifications
You must be signed in to change notification settings - Fork 1
/
Copy pathlnmp-basic.yml
428 lines (422 loc) · 15.2 KB
/
lnmp-basic.yml
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
175
176
177
178
179
180
181
182
183
184
185
186
187
188
189
190
191
192
193
194
195
196
197
198
199
200
201
202
203
204
205
206
207
208
209
210
211
212
213
214
215
216
217
218
219
220
221
222
223
224
225
226
227
228
229
230
231
232
233
234
235
236
237
238
239
240
241
242
243
244
245
246
247
248
249
250
251
252
253
254
255
256
257
258
259
260
261
262
263
264
265
266
267
268
269
270
271
272
273
274
275
276
277
278
279
280
281
282
283
284
285
286
287
288
289
290
291
292
293
294
295
296
297
298
299
300
301
302
303
304
305
306
307
308
309
310
311
312
313
314
315
316
317
318
319
320
321
322
323
324
325
326
327
328
329
330
331
332
333
334
335
336
337
338
339
340
341
342
343
344
345
346
347
348
349
350
351
352
353
354
355
356
357
358
359
360
361
362
363
364
365
366
367
368
369
370
371
372
373
374
375
376
377
378
379
380
381
382
383
384
385
386
387
388
389
390
391
392
393
394
395
396
397
398
399
400
401
402
403
404
405
406
407
408
409
410
411
412
413
414
415
416
417
418
419
420
421
422
423
424
425
426
427
428
ROSTemplateFormatVersion: '2015-09-01'
Description:
en: Deploy LNMP(Linux+Nginx+MySQL+PHP) stack on 1 ECS instance. *** WARNING ***
Only support CentOS-7.
zh-cn: 在1个ECS实例上部署 LNMP（Linux+Nginx+MySQL+PHP）堆栈；模板仅支持 CentOS-7。
Parameters:
ZoneId:
Type: String
Label:
en: Available Zone ID
zh-cn: 可用区ID
Description:
en: Availability Zone ID,<br><b>note： <font color='blue'>Before selecting, please
confirm that the Availability Zone supports the specification of creating
ECS resources</font></b>
zh-cn: 可用区ID。<br><b>注： <font color='blue'>选择可用区前请确认该可用区是否支持创建ECS资源的规格</font></b>
AssociationProperty: ALIYUN::ECS::Instance::ZoneId
ImageId:
Type: String
Label:
en: Image ID
zh-cn: 镜像ID
Description:
en: 'Server instance Image ID. see detail: <b><a href=''https://www.alibabacloud.com/help/doc-detail/112977.html''
target=''_blank''><font color=''blue''>Find the mirror</font></a></b>'
zh-cn: 服务器镜像，详见：<b><a href='https://help.aliyun.com/document_detail/112977.html'
target='_blank'><font color='blue'>查找镜像</font></a></b>
Default: centos_7
InstanceType:
Type: String
Label:
en: Instance Type
zh-cn: 实例类型
Description:
en: 'Fill in specifications that can be used under availability zone;</b></font><br>general
specifications：<font color=''red''><b>ecs.c5.large</b></font><br>note: a few
zones do not support general specifications<br>see detail: <a href=''https://www.alibabacloud.com/help/en/doc-detail/25378.html''
target=''_blank''><b><font color=''blue''>Instance Specification Family</font></a></b>'
zh-cn: 填写可用区下可使用的规格；<br>通用规格：<font color='red'><b>ecs.c5.large</b></font><br>注：可用区可能不支持通用规格<br>规格详见：<a
href='https://help.aliyun.com/document_detail/25378.html' target='_blank'><b><font
color='blue'>实例规格族</font></a></b>
AssociationProperty: ALIYUN::ECS::Instance::InstanceType
AssociationPropertyMetadata:
ZoneId: ZoneId
SystemDiskCategory:
Type: String
Label:
en: System Disk Category
zh-cn: 系统磁盘类型
Description:
en: '<font color=''blue''><b>Optional values:</b></font><br>[cloud_efficiency:
<font color=''green''>Efficient Cloud Disk</font>]<br>[cloud_ssd: <font color=''green''>SSD
Cloud Disk</font>]<br>[cloud_essd: <font color=''green''>ESSD Cloud Disk</font>]<br>[cloud:
<font color=''green''>Cloud Disk</font>]<br>[ephemeral_ssd: <font color=''green''>Local
SSD Cloud Disk</font>]'
zh-cn: '<font color=''blue''><b>可选值：</b></font><br>[cloud_efficiency: <font
color=''green''>高效云盘</font>]<br>[cloud_ssd: <font color=''green''>SSD云盘</font>]<br>[cloud_essd:
<font color=''green''>ESSD云盘</font>]<br>[cloud: <font color=''green''>普通云盘</font>]<br>[ephemeral_ssd:
<font color=''green''>本地SSD盘</font>]'
Default: cloud_ssd
AllowedValues:
- cloud_efficiency
- cloud_ssd
- cloud
- cloud_essd
- ephemeral_ssd
InstancePassword:
Type: String
Label:
en: Instance Password
zh-cn: 实例密码
Description:
en: The 8-30 long login password of instance, consists of the uppercase, lowercase
letter and number. <br> special characters include()`~!@#$%^&*_-+=|{}[]:;'<>,.?/
zh-cn: 长度8-30，必须包含大写字母、小写字母、数字、特殊符号三个；<br>特殊字符包括：()`~!@#$%^&*_-+=|{}[]:;'<>,.?/
ConstraintDescription:
en: 'Length 8-30, must contain upper case letters, lower case letters, Numbers,
special symbols three; special characters include: ()`~!@#$%^&*_-+=|{}[]:;''<>,.?/'
zh-cn: 长度8-30，必须包含大写字母、小写字母、数字、特殊符号三种；特殊字符包括：()`~!@#$%^&*_-+=|{}[]:;' <>,.?/
AllowedPattern: '[0-9A-Za-z\_\-&:;''<>,=%`~!@#\(\)\$\^\*\+\|\{\}\[\]\.\?\/]+$'
MinLength: '8'
MaxLength: '30'
NoEcho: true
DBName:
Type: String
Label:
en: DB Name
zh-cn: 数据库名称
Description:
en: MySQL database name, [1, 64] English or Chinese characters, must start with
a letter or Chinese in size, can contain numbers, '_' or '.', '-'.
zh-cn: MySQL数据库名称，[1, 64] 英文或中文字符，必须以字母或中文开头，可以包含数字、下划线或“.”、“-”。
ConstraintDescription:
en: Consist of 2 to 64 characters of lowercase letters, underline. Must begin
with a letter and be end with an alphanumeric character
zh-cn: 由 2 到 64 个小写字母组成，下划线。必须以字母开头，以字母数字字符结尾
Default: MyDatabase
MinLength: 1
MaxLength: 64
DBUser:
Type: String
Label:
en: DB Username
zh-cn: 数据库用户名
Description:
en: Username for MySQL database access.It consists of lowercase letters, numbers
and underscores (_), and begins with a letter. Not longer than 16 characters.
zh-cn: MySQL数据库访问的用户名。它由小写字母、数字和下划线（_）组成，以字母开头。不超过16个字符。
ConstraintDescription:
en: Consist of 2 to 16 characters of lowercase letters, underline. Must begin
with a letter and be end with an alphanumeric character
zh-cn: 由 2 到 16 个小写字母组成，下划线。必须以字母开头，以字母数字字符结尾
Default: DefaultUser
MinLength: 2
MaxLength: 16
DBPassword:
Type: String
Label:
en: DB Password
zh-cn: 数据库密码
Description:
en: The MySQL password, consisting of letters, numbers, and underline(_), 8
to 32 characters in length
zh-cn: MySQL密码，数据库访问大小写字母、数字和下划线（_），8-32个字符
ConstraintDescription:
en: '[8, 32] characters consist of alphanumeric characters, hyphen and underline'
zh-cn: '[8, 32] 个字符由字母数字字符、连字符和下划线组成'
MinLength: 8
MaxLength: 32
NoEcho: true
DBRootPassword:
Type: String
Label:
en: DB Root Password
zh-cn: 数据库root用户密码
Description:
en: Root password for MySQL, consisting of letters, numbers, and underline(_),
8 to 32 characters in length
zh-cn: MySQL的root密码, 由字母、数字、下划线（_）组成，长度为8~32个字符
ConstraintDescription:
en: Consisting of letters, numbers, and underline(_), 8 to 32 characters in
length
zh-cn: 由字母、数字和下划线(_)组成，长度为8到32个字符
MinLength: 8
MaxLength: 32
NoEcho: true
NginxDownloadUrl:
Type: String
Label:
en: Nginx Source
zh-cn: Nginx源
Description:
en: nginx-.rpm source download path.
zh-cn: nginx-*.rpm源下载路径
Default: http://nginx.org/packages/centos/7/noarch/RPMS/nginx-release-centos-7-0.el7.ngx.noarch.rpm
Resources:
EcsVpc:
Type: ALIYUN::ECS::VPC
Properties:
CidrBlock: 192.168.0.0/16
Metadata:
ALIYUN::ROS::Designer:
id: 598ced8b-0ba4-40a8-a781-1d48e26ca15f
EcsSecurityGroup:
Type: ALIYUN::ECS::SecurityGroup
Properties:
VpcId:
Ref: EcsVpc
SecurityGroupEgress:
- DestCidrIp: 0.0.0.0/0
IpProtocol: all
NicType: intranet
PortRange: -1/-1
Priority: 1
SecurityGroupIngress:
- IpProtocol: all
NicType: intranet
PortRange: -1/-1
Priority: 1
SourceCidrIp: 0.0.0.0/0
Metadata:
ALIYUN::ROS::Designer:
id: 7a621d9a-c803-4121-ba09-30dc9a417423
EcsVSwitch:
Type: ALIYUN::ECS::VSwitch
Properties:
ZoneId:
Ref: ZoneId
VpcId:
Ref: EcsVpc
CidrBlock: 192.168.1.0/24
Metadata:
ALIYUN::ROS::Designer:
id: dae2dd74-1b30-4975-8b70-4877f4c2d9d3
WebServer:
Type: ALIYUN::ECS::Instance
Properties:
VpcId:
Fn::GetAtt:
- EcsVpc
- VpcId
VSwitchId:
Ref: EcsVSwitch
SecurityGroupId:
Ref: EcsSecurityGroup
ImageId:
Ref: ImageId
InstanceType:
Ref: InstanceType
InternetMaxBandwidthOut: 80
IoOptimized: optimized
Password:
Ref: InstancePassword
SystemDiskCategory:
Ref: SystemDiskCategory
UserData:
Fn::Replace:
- ros-notify:
Fn::GetAtt:
- WebServerConditionHandle
- CurlCli
- Fn::Join:
- ''
- - "#!/bin/bash \n"
- NginxUrl=
- Ref: NginxDownloadUrl
- '
'
- dbname=
- Ref: DBName
- '
'
- dbuser=
- Ref: DBUser
- '
'
- dbpassword=
- Ref: DBPassword
- '
'
- dbrootpassword=
- Ref: DBRootPassword
- '
'
- "export HOME=/root \n"
- "export HOSTNAME=`hostname` \n"
- "systemctl stop firewalld.service \n"
- "systemctl disable firewalld.service \n"
- "sed -i 's/^SELINUX=/# SELINUX=/' /etc/selinux/config \n"
- "sed -i '/# SELINUX=/a SELINUX=disabled' /etc/selinux/config \n"
- "setenforce 0 \n"
- "yum install yum-priorities -y \n"
- "yum -y install aria2 \n"
- "aria2c $NginxUrl \n"
- "rpm -ivh nginx-*.rpm \n"
- "yum -y install nginx \n"
- "systemctl start nginx.service \n"
- "systemctl enable nginx.service \n"
- "yum -y install php-fpm \n"
- "systemctl start php-fpm.service \n"
- "systemctl enable php-fpm.service \n"
- "sed -i '/FastCGI/,/htaccess/s/ #/ /' /etc/nginx/conf.d/default.conf\
\ \n"
- "sed -i '/FastCGI/s/^ / #/' /etc/nginx/conf.d/default.conf \n"
- "sed -i '/htaccess/s/^ / #/' /etc/nginx/conf.d/default.conf \n"
- "sed -i '/SCRIPT_FILENAME/s/\\/scripts/\\/usr\\/share\\/nginx\\/html\\\
//' /etc/nginx/conf.d/default.conf \n"
- "yum -y install mariadb mariadb-server \n"
- "systemctl start mariadb.service \n"
- "systemctl enable mariadb.service \n"
- "yum -y install php php-mysql php-gd libjpeg* php-ldap php-odbc php-pear\
\ php-xml php-xmlrpc php-mbstring php-bcmath php-mhash php-mcrypt \n"
- "MDSRING=`find / -name mbstring.so` \n"
- "echo extension=$MDSRING >> /etc/php.ini \n"
- "systemctl restart mariadb.service \n"
- "mysqladmin -u root password \"$dbrootpassword\" \n"
- "$(mysql $dbname -u root --password=\"$dbrootpassword\" >/dev/null 2>&1\
\ </dev/null); (( $? != 0 )) \n"
- "echo CREATE DATABASE $dbname \\; > /tmp/setup.mysql \n"
- "echo GRANT ALL ON $dbname.* TO \"$dbuser\"@\"localhost\" IDENTIFIED\
\ BY \"'$dbpassword'\" \\; >> /tmp/setup.mysql \n"
- "mysql -u root --password=\"$dbrootpassword\" < /tmp/setup.mysql \n"
- "$(mysql $dbname -u root --password=\"$dbrootpassword\" >/dev/null 2>&1\
\ </dev/null); (( $? != 0 )) \n"
- "cd /root \n"
- "systemctl restart php-fpm.service \n"
- "systemctl restart nginx.service \n"
- "echo \\<?php > /usr/share/nginx/html/test.php \n"
- "echo \\$conn=mysql_connect\\(\"'127.0.0.1'\", \"'$dbuser'\", \"'$dbpassword'\"\
\\)\\; >> /usr/share/nginx/html/test.php \n"
- "echo if \\(\\$conn\\){ >> /usr/share/nginx/html/test.php \n"
- "echo echo \\\"LNMP platform connect to mysql is successful\\!\\\"\
\\; >> /usr/share/nginx/html/test.php \n"
- "echo }else{ >> /usr/share/nginx/html/test.php \n"
- "echo echo \\\"LNMP platform connect to mysql is failed\\!\\\"\\; >>\
\ /usr/share/nginx/html/test.php \n"
- "echo } >> /usr/share/nginx/html/test.php \n"
- "echo phpinfo\\(\\)\\; >> /usr/share/nginx/html/test.php \n"
- "echo \\?\\> >> /usr/share/nginx/html/test.php \n"
- 'ros-notify -d ''{"data" : "Install LNMP stack."}''
'
Metadata:
ALIYUN::ROS::Designer:
id: 0af5b81e-0e55-4e6a-ba96-45cf7a730510
WebServerConditionHandle:
Type: ALIYUN::ROS::WaitConditionHandle
Properties: {}
Metadata:
ALIYUN::ROS::Designer:
id: ec1625d7-b79b-496d-ba3a-5c46be0c1181
WebServerWaitCondition:
Type: ALIYUN::ROS::WaitCondition
Properties:
Count: 1
Handle:
Ref: WebServerConditionHandle
Timeout: 1800
DependsOn: WebServer
Metadata:
ALIYUN::ROS::Designer:
id: b528acf3-d6df-43bd-b17e-a22cd32f72e7
Outputs:
NginxWebsiteURL:
Description: URL for newly created Nginx home page.
Value:
Fn::Join:
- ''
- - http://
- Fn::GetAtt:
- WebServer
- PublicIp
- :80/test.php
Metadata:
ALIYUN::ROS::Interface:
ParameterGroups:
- Parameters:
- ZoneId
- ImageId
- InstanceType
- SystemDiskCategory
- InstancePassword
Label:
default: ECS
- Parameters:
- DBName
- DBUser
- DBPassword
- DBRootPassword
Label:
default: Database
- Parameters:
- NginxDownloadUrl
Label:
default: Nginx
TemplateTags:
- acs:example:网站:部署LNMP(Linux+Nginx+MySQL+PHP)环境
ALIYUN::ROS::Designer:
05871fb7-6c4d-4dc1-abb9-084ad7c14d1c:
source:
id: 0af5b81e-0e55-4e6a-ba96-45cf7a730510
target:
id: 7a621d9a-c803-4121-ba09-30dc9a417423
z: 1
0af5b81e-0e55-4e6a-ba96-45cf7a730510:
position:
x: 386
y: 163
size:
height: 60
width: 60
z: 2
598ced8b-0ba4-40a8-a781-1d48e26ca15f:
embeds:
- dae2dd74-1b30-4975-8b70-4877f4c2d9d3
- 7a621d9a-c803-4121-ba09-30dc9a417423
position:
x: 192
y: 50
size:
height: 314
width: 318.0537109375
z: 0
7a621d9a-c803-4121-ba09-30dc9a417423:
position:
x: 229
y: 163
size:
height: 60
width: 60
z: 1
a828cca7-7ef3-4441-b51d-1ed7c419ad0d:
source:
id: b528acf3-d6df-43bd-b17e-a22cd32f72e7
target:
id: ec1625d7-b79b-496d-ba3a-5c46be0c1181
z: 1
b528acf3-d6df-43bd-b17e-a22cd32f72e7:
position:
x: 567
y: 252
size:
height: 60
width: 60
z: 0
dae2dd74-1b30-4975-8b70-4877f4c2d9d3:
embeds:
- 0af5b81e-0e55-4e6a-ba96-45cf7a730510
position:
x: 347
y: 123
size:
height: 151
width: 122
z: 1
ec1625d7-b79b-496d-ba3a-5c46be0c1181:
position:
x: 567
y: 98
size:
height: 60
width: 60
z: 0