pillar.example

# Vhosting configuration
vhosting:
  # Server-wide settings. Configs you put here have effect on all associated services
  server:
    # Which webserver to use. Supported are nginx and Apache
    webserver: nginx
    # Which edition of the webserver to use. Currently supported: vanilla & zendserver
    edition: vanilla

    # Enable LetsEncrypt support
    #letsencrypt: True

    # Enable PageSpeed support
    #pagespeed: True
#  config:
#    php:
#      # Put in the section names (if required) and insert the config like so:
#      PHP:
#        error_reporting: 'E_ALL'
#        short_open_tags: false

  # Vhosts are per-user allowing multiple users to have multiple websites
  users:
    # Each user can have 1 or more *services* assigned
    example:
      # The vhosts for this user (if any)
      vhost:
        # The domain, without www and must be unique troughout this configuration
        example.com:
          php: False
          # The docroot is by default /srv/http/USER/domains/DOMAIN but can be overruled
          webroot: /var/www

        #morecontrol.eu:
        #  # This vhost wants to provide its own template
        #  template_file: salt://vhosting/templates/minimal.tmpl
        #  #template_engine: jinja # default

        example.org:
          php: False
          # This vhost follows the defaults, but does have a few additional HTTP aliases
          aliases:
            - example.eu
            - example.biz

        redirectme.com:
          # This is a 'redirect vhost' which is just sending traffic to a different domain. Its vhost is very simple
          redirect_to: 'http://www.example.com'

        proxyme.com:
          # This is a 'proxy vhost' which is just sending traffic to a different domain but masks the destination
          proxy_pass: 'http://www.example.com'

        ssl-demo-one.example:
          php: False
          ssl:
            # The configuration for SSL for this vhost
            key: ssl-demo-one.example.key
            cert: ssl-demo-one.example.pem

        ssl-demo-two.example:
          php: False
          ssl:
            # The configuration for SSL for this vhost
            key: ssl-demo-two.example.key
            cert: ssl-demo-two.example.pem
            forward: True

        ssl-demo-three.example:
          php: False
          ssl:
            # The configuration for SSL for this vhost
            key: ssl-demo-three.example.key
            cert: ssl-demo-three.example.pem
            forward: True
            http2: True

        ssl-demo-four.example:
          php: False
          ssl:
            # The configuration for SSL for this vhost
            key: ssl-demo-four.example.key
            cert: ssl-demo-four.example.pem
            forward: True
            http2: True
            protocols: # Only support TLSv1.3 for this vhost
              - TLSv1.3

        ssl-demo-five.example:
          php: False
          ssl:
            # The configuration for SSL for this vhost
            key: ssl-demo-five.example.key
            cert: ssl-demo-five.example.pem
            forward: True
            http2: True
            # Only use secure ciphers as recommended by https://cipherli.st/
            ciphers: "EECDH+AESGCM:EDH+AESGCM"


        #demo-with-ca.example:
        #  ssl:
        #    # The configuration for SSL for this vhost
        #    key: demo-with-ca.example.key
        #    cert: demo-with-ca.example.pem
        #    ca: comodo_chain.pem
        #    forward: True
        #    http2: True

        #ssl-site-via-letsencrypt.com:
        #  ssl:
        #    # The configuration for SSL for this vhost
        #    key: site-letsencrypt.key
        #    cert: site-letsencrypt.pem
        #    forward: True
        #    http2: True
        #    letsencrypt: True

        # Pagespeed example
        #pagespeed-example.com:
        #  pagespeed:
        #    enable: True

        # Pagespeed example with different cache path
        #pagespeed-example-path.com:
        #  pagespeed:
        #    enable: True
        #    file_cache_path: '/tmp/pagespeed'

        # Pagespeed example with specific config
        #pagespeed-example-config.com:
        #  pagespeed:
        #    enable: True
        #    config:
        #      DisableFilters: 'rewrite_images,combine_css'

        # Add extra config to the location section (nginx only)
        extra-location-config.com:
          php: False
          extra_location_config:
            - 'root /var/www/another;'

        # Default vhost with special directory structure
        deployable.com:
          php: False
          deploy_structure: True

        # Ordinary vhost but with a specific IP to listen on
        customip.com:
          php: False
          listen_ip: 127.0.0.1

        # Enable gzip on this vhost
        enablegzip.net:
          php: False
          gzip:
            enable: True

        # Enable and customize gzip for this vhost
        customgzip.net:
          php: False
          gzip:
            enable: True
            options:
              comp_level: 4
              gzip_buffers: '6 10k'
              types:
                - 'text/css'
                - 'text/javascript'
                - 'text/xml'
                - 'text/plain'
                - 'text/x-component'
                - 'application/javascript'
                - 'application/json'
                - 'application/xml'
                - 'application/rss+xml'
                - 'font/truetype'
                - 'font/opentype'
                - 'application/vnc.ms-fontobject'
                - 'image/svg+xml'

        # Custom PHP version to use for this vhost
        vhost-with-php.net:
          php_version: 7.3

      # The databases for this user (if any)
      mysql_database:
        # The databases, where it will automatically create user + db + grant for the given DB name (below)
        foo:
          password: 'topsecret'
        bar:
          password: 'verysecure'

      # Cronjobs for this user (if any)
      cronjob:
        backup_db_example_com:
          hour: 1
          minute: 0
          cmd: '/srv/http/example/domains/example.com/scripts/db-backup.sh'

# Another user with their own vhosts
    otheruser:
      vhost:
        otherdomain.eu:
          php: False
          deploy_structure: True
        moredomains.com:
          php: False
          aliases:
            - get-more-domains.now