https://github.com/lily-g1/web_environment_with_ansible

automated configuration of a web hosting environment with ansible
https://github.com/lily-g1/web_environment_with_ansible

ansible ansible-roles apache bind9-dns configuration-management devops letsencrypt linux-admin linux-environment mysql ssl-certificates sysadmin virtual-hosts webhosting

Last synced: about 1 month ago
JSON representation

automated configuration of a web hosting environment with ansible

• Host: GitHub
• URL: https://github.com/lily-g1/web_environment_with_ansible
• Owner: Lily-G1
• Created: 2024-06-13T03:45:07.000Z (7 months ago)
• Default Branch: main
• Last Pushed: 2024-06-26T23:03:56.000Z (6 months ago)
• Last Synced: 2024-10-14T07:22:49.383Z (3 months ago)
• Topics: ansible, ansible-roles, apache, bind9-dns, configuration-management, devops, letsencrypt, linux-admin, linux-environment, mysql, ssl-certificates, sysadmin, virtual-hosts, webhosting
• Language: Jinja
• Homepage:
• Size: 38.1 KB
• Stars: 0
• Watchers: 1
• Forks: 0
• Open Issues: 0
• Metadata Files:
  • Readme: README.md

Awesome Lists containing this project

README

        
# Web Hosting Environment with Ansible

This repository contains an ansible playbook that automates the configuration of a Linux web hosting infrastructure featuring Apache web server, MySQL & BIND9 DNS   

Various components of the playbook have been seperated into 'roles' for better management, organization and reusability.  

- **base**: Runs the basic tasks involved. These include the installation of packages and dependencies required  

- **mysql**: This role contains tasks that perform a secure MySQL configuration. Ansible used to have a dedicated module for this but it is now deprecated. These tasks 'manually' perform the same actions such as : disable remote root login, create root user + password, remove default test database, etc  

- **dns**: configures Bind9 for our domain. This involves creating a hosted zone, setting up DNS records and specifying forwarders  

- **web-server**: creates a directory that hosts site files, sets permissions, and creates virtual host files  

- **letsencrypt**: runs steps needed to request a SSL certfiicate from letsencrypt. I used this [tutorial](https://www.digitalocean.com/community/tutorials/how-to-acquire-a-let-s-encrypt-certificate-using-ansible-on-ubuntu-18-04) from Digital Ocean to accomplish this  

- **security**: configures firewall settings for the server  

- **play.yml** runs the entire playbook  

- All variables are stored in the '**group_vars**' directory  

## Improvement:

- Enhance security by using ansible-vault to store sensitive information such as passwords  

- Include an Intrusion Detection system to monitor network traffic & protect against malicious activities