lnmt-basic.yml

ROSTemplateFormatVersion: '2015-09-01'
Description:
  en: On the existing virtual proprietary network, switches, and security group base
    resources, the one-click deployment OF LNMT(Linux+Nginx+MySQL+Tomcat) development
    environment based on the Centos7 system, Nginx is mainly used to store static
    files, while Tomcat handles dynamic JSP requests.
  zh-cn: 在已有虚拟专有网络、交换机和安全组基础资源上，基于Centos7系统中一键部署LNMT(Linux+Nginx+MySQL+Tomcat)开发环境，其中Nginx主要用于存储静态文件，而Apache处理PHP动态请求。
Parameters:
  VPC:
    Type: String
    Label:
      en: Existing VPC Instance ID
      zh-cn: 现有VPC的实例ID
    Description:
      en: Please search the ID starting with (vpc-xxx)from console-Virtual Private
        Cloud
      zh-cn: 现有虚拟专有网络的实例ID,控制台-VPC-专有网络下查询
    AssociationProperty: ALIYUN::ECS::VPC::VPCId
  ZoneId:
    Type: String
    Label:
      en: VSwitch Availability Zone
      zh-cn: 交换机可用区
    Description:
      en: Availability Zone ID.<br><b>note：<font color='blue'>before selecting, please
        confirm that the Availability Zone supports the specification of creating
        ECS resources,which is recommended to be different from other VSwitch Availability
        Zone</font></b>
      zh-cn: 可用区ID。<br><b>注： <font color='blue'>选择前请确认该可用区是否支持创建ECS资源的规格，建议与其他交换机可用区不同</font></b>
    AssociationProperty: ALIYUN::ECS::Instance:ZoneId
  VSwitch:
    Type: String
    Label:
      en: VSwitch ID
      zh-cn: 网络交换机ID
    Description:
      en: Please search the business vswitch ID starting with(vsw-xxx)from console-Virtual
        Private Cloud-VSwitches
      zh-cn: 现有业务网络交换机的实例ID,控制台-VPC-专有网络-交换机下查询
    AssociationProperty: ALIYUN::ECS::VSwitch::VSwitchId
    AssociationPropertyMetadata:
      ZoneId: ${ZoneId}
  SecurityGroup:
    Type: String
    Label:
      en: Security Group ID
      zh-cn: 安全组ID
    Description:
      en: Please search the business security group ID starting with(sg-xxx)from console-ECS-Network
        & Security
      zh-cn: 现有业务安全组的实例ID,控制台-ECS-网络与安全-安全组下查询
    AssociationProperty: ALIYUN::ECS::SecurityGroup::SecurityGroupId
    AssociationPropertyMetadata:
      VpcId: ${VPC}
  ImageId:
    Type: String
    Label:
      en: Image
      zh-cn: 镜像
    Description:
      en: Image ID，Please use Centos7, see detail：<b><a href='https://www.alibabacloud.com/help/en/doc-detail/112977.html'
        target='_blank'><font color='blue'>Find the mirror</font></a></b>
      zh-cn: 镜像ID, 请使用Centos7, 详见：<b><a href='https://help.aliyun.com/document_detail/112977.html'
        target='_blank'><font color='blue'>查找镜像</font></a></b>
    AssociationProperty: ALIYUN::ECS::Image::ImageId
    AssociationPropertyMetadata:
      InstanceType: ${InstanceType}
      SupportedImageOwnerAlias:
        - system
        - self
        - others
    Default: centos_7_04_64_20G_alibase_201701015.vhd
  InstanceType:
    Type: String
    Label:
      en: Instance Type
      zh-cn: 实例规格
    Description:
      en: <font color='blue'><b>1.Before selecting the model please confirm that the
        current available zone under the model is in stock, some models need to be
        reported in advance</b></font><br><font color='blue'><b>2.List of optional
        models</font><br></b></font>[ecs.c5.large <font color='green'>2vCPU 4GiB Intranet
        bandwidth1Gbps In-grid sending and receiving packages30MillionPPS</font>]<br></b>[ecs.c5.xlarge
        <font color='green'>4vCPU 8GiB Intranet bandwidth1.5Gbps In-grid sending and
        receiving packages50MillionPPS</font>]<br></b>[ecs.c5.2xlarge <font color='green'>8vCPU
        16GiB Intranet bandwidth2.5Gbps In-grid sending and receiving packages80MillionPPS</font>]
      zh-cn: <font color='blue'><b>1.选择机型前请先确认当前可用区下该机型是否有货，部分机型需要提前报备</b></font><br><font
        color='blue'><b>2.可选机型列表</font><br></b></font>[ecs.c5.large <font color='green'>2vCPU
        4GiB 内网带宽1Gbps 内网收发包30万PPS</font>]<br></b>[ecs.c5.xlarge <font color='green'>4vCPU
        8GiB 内网带宽1.5Gbps 内网收发包50万PPS</font>]<br></b>[ecs.c5.2xlarge <font color='green'>8vCPU
        16GiB 内网带宽2.5Gbps 内网收发包80万PPS</font>]
    AssociationProperty: ALIYUN::ECS::Instance::InstanceType
    AssociationPropertyMetadata:
      ZoneId: ${ZoneId}
  SystemDiskCategory:
    Type: String
    Label:
      en: System Disk Type
      zh-cn: 系统盘类型
    Description:
      en: '<font color=''blue''><b>Optional values:</b></font><br>[cloud_efficiency:
        <font color=''green''>Efficient Cloud Disk</font>]<br>[cloud_ssd: <font color=''green''>SSD
        Cloud Disk</font>]<br>[cloud_essd: <font color=''green''>ESSD Cloud Disk</font>]<br>[cloud:
        <font color=''green''>Cloud Disk</font>]<br>[ephemeral_ssd: <font color=''green''>Local
        SSD Cloud Disk</font>]'
      zh-cn: '<font color=''blue''><b>可选值：</b></font><br>[cloud_efficiency: <font
        color=''green''>高效云盘</font>]<br>[cloud_ssd: <font color=''green''>SSD云盘</font>]<br>[cloud_essd:
        <font color=''green''>ESSD云盘</font>]<br>[cloud: <font color=''green''>普通云盘</font>]<br>[ephemeral_ssd:
        <font color=''green''>本地SSD盘</font>]'
    AssociationProperty: ALIYUN::ECS::Disk::SystemDiskCategory
    AssociationPropertyMetadata:
      InstanceType: ${InstanceType}
      ZoneId: ${ZoneId}
    AllowedValues:
    - cloud_efficiency
    - cloud_ssd
    - cloud
    - cloud_essd
    - ephemeral_ssd
  InstancePassword:
    Type: String
    Label:
      en: Instance Password
      zh-cn: 实例密码
    Description:
      en: Server login password, Length 8-30, must contain three(Capital letters,
        lowercase letters, numbers, ()`~!@#$%^&*_-+=|{}[]:;'<>,.?/ Special symbol
        in).
      zh-cn: 服务器登录密码,长度8-30，必须包含三项（大写字母、小写字母、数字、 ()`~!@#$%^&*_-+=|{}[]:;'<>,.?/ 中的特殊符号）。
    ConstraintDescription:
      en: Length 8-30, must contain three(Capital letters, lowercase letters, numbers,
        ()`~!@#$%^&*_-+=|{}[]:;'<>,.?/ Special symbol in).
      zh-cn: 长度8-30，必须包含三项（大写字母、小写字母、数字、 ()`~!@#$%^&*_-+=|{}[]:;'<>,.?/ 中的特殊符号）。
    AllowedPattern: '[0-9A-Za-z\_\-\&:;''<>,=%`~!@#\(\)\$\^\*\+\|\{\}\[\]\.\?\/]+$'
    MinLength: 8
    MaxLength: 30
    NoEcho: true
  NginxDownloadUrl:
    Type: String
    Label:
      en: Nginx Download Url
      zh-cn: Nginx下载地址
    Description:
      en: The download path of nginx-*.rpm
      zh-cn: nginx-*.rpm的下载路径
    Default: http://nginx.org/packages/centos/7/noarch/RPMS/nginx-release-centos-7-0.el7.ngx.noarch.rpm
  DBName:
    Type: String
    Label:
      en: DB Name
      zh-cn: 数据库名称
    Description:
      en: MySQL database name, [1, 64] English or Chinese characters, must start with
        a letter or Chinese in size, can contain numbers, '_' or '.', '-'.
      zh-cn: MySQL数据库名称，[1, 64] 英文或中文字符，必须以字母或中文开头，可以包含数字、下划线或“.”、“-”。
    ConstraintDescription:
      en: Must begin with a letter and contain only alphanumeric characters.
      zh-cn: 必须以字母开头并且只包含字母数字字符。
    Default: MyDatabase
    MinLength: 1
    MaxLength: 64
  DBUser:
    Type: String
    Label:
      en: DB UserName
      zh-cn: 数据库用户名
    Description:
      en: Username for MySQL database access.It consists of lowercase letters, numbers
        and underscores (_), and begins with a letter. Not longer than 16 characters.
      zh-cn: MySQL数据库访问的用户名。它由小写字母、数字和下划线（_）组成，以字母开头。不超过16个字符。
    ConstraintDescription:
      en: Must begin with a letter and contain only alphanumeric characters.
      zh-cn: 必须以字母开头并且只包含字母数字字符。
    Default: DefaultUser
    MinLength: 1
    MaxLength: 16
  DBPassword:
    Type: String
    Label:
      en: DB User Password
      zh-cn: 数据库用户密码
    Description:
      en: The MySQL user password, consisting of letters, numbers, and underline(_),
        8 to 32 characters in length
      zh-cn: MySQL用户密码，数据库访问大小写字母、数字和下划线（_），8-32个字符
    ConstraintDescription:
      en: Consisting of letters, numbers, and underline(_), 8 to 32 characters in
        length
      zh-cn: 由字母、数字和下划线(_)组成，长度为8到32个字符
    MinLength: 8
    MaxLength: 32
    NoEcho: true
  DBRootPassword:
    Type: String
    Label:
      en: DB Root Password
      zh-cn: 数据库管理员用户密码
    Description:
      en: Root user password for MySQL, consisting of letters, numbers, and underline(_),
        8 to 32 characters in length
      zh-cn: MySQL的root用户密码, 由字母、数字、下划线（_）组成，长度为8~32个字符
    ConstraintDescription:
      en: Consisting of letters, numbers, and underline(_), 8 to 32 characters in
        length
      zh-cn: 由字母、数字和下划线(_)组成，长度为8到32个字符
    MinLength: 8
    MaxLength: 32
    NoEcho: true
Resources:
  WebServer:
    Type: ALIYUN::ECS::Instance
    Properties:
      VpcId:
        Ref: VPC
      VSwitchId:
        Ref: VSwitch
      SecurityGroupId:
        Ref: SecurityGroup
      ImageId:
        Ref: ImageId
      InstanceType:
        Ref: InstanceType
      InternetMaxBandwidthOut: 80
      IoOptimized: optimized
      Password:
        Ref: InstancePassword
      SystemDiskCategory:
        Ref: SystemDiskCategory
      UserData:
        Fn::Replace:
        - ros-notify:
            Fn::GetAtt:
            - WebServerConditionHandle
            - CurlCli
        - Fn::Join:
          - ''
          - - "#!/bin/bash \n"
            - NginxUrl=
            - Ref: NginxDownloadUrl
            - '

              '
            - dbname=
            - Ref: DBName
            - '

              '
            - dbuser=
            - Ref: DBUser
            - '

              '
            - dbpassword=
            - Ref: DBPassword
            - '

              '
            - dbrootpassword=
            - Ref: DBRootPassword
            - '

              '
            - "export HOME=/root \n"
            - "export HOSTNAME=`hostname` \n"
            - "systemctl stop firewalld.service \n"
            - "systemctl disable firewalld.service \n"
            - "sed -i 's/^SELINUX=/# SELINUX=/' /etc/selinux/config \n"
            - "sed -i '/# SELINUX=/a SELINUX=disabled' /etc/selinux/config \n"
            - "setenforce 0 \n"
            - "yum install yum-priorities -y \n"
            - "yum -y install aria2 \n"
            - "aria2c $NginxUrl \n"
            - "rpm -ivh nginx-*.rpm \n"
            - "yum -y install nginx \n"
            - "systemctl enable nginx.service \n"
            - "yum -y install mariadb mariadb-server \n"
            - "systemctl start mariadb.service \n"
            - "systemctl enable mariadb.service \n"
            - "systemctl enable httpd.service \n"
            - "systemctl restart mariadb.service \n"
            - "yum -y install java-1.8.0-openjdk java-1.8.0-openjdk-devel \n"
            - "cd /root \n"
            - "yum -y install tomcat tomcat-webapps tomcat-admin-webapps \n"
            - "systemctl start tomcat.service \n"
            - "mkdir -p /var/lib/tomcat/webapps/web/ \n"
            - "echo \"<html>\" >> /var/lib/tomcat/webapps/web/index.jsp \n"
            - "echo \"<head>\" >> /var/lib/tomcat/webapps/web/index.jsp \n"
            - "echo \"       <title>LNMT page</title>\" >> /var/lib/tomcat/webapps/web/index.jsp\
              \ \n"
            - "echo \"</head>\" >> /var/lib/tomcat/webapps/web/index.jsp \n"
            - "echo \"<body>\" >> /var/lib/tomcat/webapps/web/index.jsp \n"
            - "echo \"       <%\" >> /var/lib/tomcat/webapps/web/index.jsp \n"
            - "echo '       out.println(\"Welcome to LNMT page.\");' >> /var/lib/tomcat/webapps/web/index.jsp\
              \ \n"
            - "echo \"       %>\" >> /var/lib/tomcat/webapps/web/index.jsp \n"
            - "echo \"</body>\" >> /var/lib/tomcat/webapps/web/index.jsp \n"
            - "echo \"</html>\" >> /var/lib/tomcat/webapps/web/index.jsp \n"
            - "mysqladmin -u root password \"$dbrootpassword\" \n"
            - "$(mysql $dbname -u root --password=\"$dbrootpassword\" >/dev/null 2>&1\
              \ </dev/null); (( $? != 0 )) \n"
            - "echo CREATE DATABASE $dbname \\; > /tmp/setup.mysql \n"
            - "echo GRANT ALL ON $dbname.* TO \"$dbuser\"@\"localhost\" IDENTIFIED\
              \ BY \"'$dbpassword'\" \\; >> /tmp/setup.mysql \n"
            - "mysql -u root --password=\"$dbrootpassword\" < /tmp/setup.mysql \n"
            - "$(mysql $dbname -u root --password=\"$dbrootpassword\" >/dev/null 2>&1\
              \ </dev/null); (( $? != 0 )) \n"
            - "wget -P /tmp https://ros-template-resources.oss-cn-beijing.aliyuncs.com/LNMT/nginx.conf\
              \ \n"
            - "mv /etc/nginx/nginx.conf /etc/nginx/nginx.conf.bak \n"
            - "cp /tmp/nginx.conf  /etc/nginx/ \n"
            - "mkdir -p /home/nginx/default \n"
            - "cp /usr/share/nginx/html/index.html  /home/nginx/default/ \n"
            - 'chmod +x /etc/rc.d/rc.local

              '
            - "systemctl restart nginx.service \n"
            - 'ros-notify -d ''{"data" : "Install LNMT stack."}''

              '
  WebServerConditionHandle:
    Type: ALIYUN::ROS::WaitConditionHandle
    Properties: {}
  WebServerWaitCondition:
    Type: ALIYUN::ROS::WaitCondition
    Properties:
      Count: 1
      Handle:
        Ref: WebServerConditionHandle
      Timeout: 1800
    DependsOn: WebServer
Outputs:
  JSP file path:
    Description: This is the path to store the Tomcat JSP files.
    Value: /var/lib/tomcat/webapps
  Nginx static file path:
    Description: This is the path to store the Nginx static files.
    Value: /home/nginx/default
  WebURL:
    Description: URL for Tomcat JSP page.
    Value:
      Fn::Join:
      - ''
      - - http://
        - Fn::GetAtt:
          - WebServer
          - PublicIp
        - /web/index.jsp
Metadata:
  ALIYUN::ROS::Interface:
    ParameterGroups:
    - Parameters:
      - VPC
      - ZoneId
      - VSwitch
      - SecurityGroup
      Label:
        default:
          en: Infrastructure Configuration
          zh-cn: 基础资源配置配置
    - Parameters:
      - InstanceType
      - ImageId
      - SystemDiskCategory
      - InstancePassword
      - NginxDownloadUrl
      - DBName
      - DBUser
      - DBPassword
      - DBRootPassword
      Label:
        default:
          en: LNMT Configuration
          zh-cn: LNMT配置
    TemplateTags:
    - acs:example:网站:部署LNMT(Linux+Nginx+MySQL+Tomcat)环境