mirror of
https://github.com/iiab/iiab.git
synced 2025-02-13 03:32:12 +00:00
188 lines
9.3 KiB
YAML
188 lines
9.3 KiB
YAML
# 2021-05-22: FYI nginx_high_php_limits is effectively now auto-enabled by
|
|
# www_options/tasks/main.yml#L100-L112 (as required by Moodle 3.11 w/ PHP 8) IF
|
|
# 'moodle_install: True'. Happens at the end of 4-server-options/tasks/main.yml
|
|
# See the 6 settings in /etc/php/{{ php_version }}/fpm/php.ini -- which Moodle
|
|
# should take advantage of soon, as it transitions from Apache to Moodle: #2785
|
|
|
|
# 2021-06-28: This ALSO now happens in /etc/php/{{ php_version }}/cli/php.ini
|
|
# (as required by Moodle's CLI installer) AND THIRDLY below (for now, until
|
|
# Moodle's ported to NGINX!) in /etc/php/{{ php_version }}/apache2/php.ini
|
|
|
|
#- name: "Set 'apache_install: True' and 'apache_enabled: True'"
|
|
# set_fact:
|
|
# apache_install: True
|
|
# apache_enabled: True
|
|
|
|
#- name: APACHE - run 'httpd' role
|
|
# include_role:
|
|
# name: httpd
|
|
|
|
- name: "Enact the equivalent of 'nginx_high_php_limits: True' in /etc/php/{{ php_version }}/{{ apache_service }}/php.ini for Moodle 3.11+"
|
|
lineinfile:
|
|
path: /etc/php/{{ php_version }}/{{ apache_service }}/php.ini # COMPARE /etc/php/{{ php_version }}/fpm/php.ini AND /etc/php/{{ php_version }}/cli/php.ini
|
|
regexp: "{{ item.regexp }}"
|
|
line: "{{ item.line }}"
|
|
with_items:
|
|
- { regexp: '^upload_max_filesize', line: 'upload_max_filesize = 500M ; default is 2M' }
|
|
- { regexp: '^post_max_size', line: 'post_max_size = 500M ; default is 8M' }
|
|
- { regexp: '^max_execution_time', line: 'max_execution_time = 300 ; default is 30' }
|
|
- { regexp: '^max_input_time', line: 'max_input_time = 300 ; default is 60' }
|
|
- { regexp: '^memory_limit', line: 'memory_limit = 512M ; default is 128M / Nextcloud requests 512M' }
|
|
- { regexp: '^max_input_vars', line: 'max_input_vars = 5000 ; default is 1000 / Moodle 3.11+ requires 5000+ with PHP 8+' }
|
|
|
|
# Apache's restarted prior to moodle_installer below, so no need right here!
|
|
|
|
|
|
- name: "Set 'postgresql_install: True' and 'postgresql_enabled: True'"
|
|
set_fact:
|
|
postgresql_install: True
|
|
postgresql_enabled: True
|
|
|
|
- name: POSTGRESQL - run 'postgresql' role (attempt to install & enable PostgreSQL)
|
|
include_role:
|
|
name: postgresql
|
|
|
|
|
|
# https://docs.moodle.org/19/en/PHP_settings_by_Moodle_version#PHP_Extensions_and_libraries
|
|
- name: Install libsodium23 + 8 PHP packages (run 'php -m' or 'php -i' to verify)
|
|
package:
|
|
name:
|
|
- php-apcu
|
|
- ghostscript
|
|
- libsodium23 # 2021-06-28: Likewise installed in nginx/tasks/install.yml via php{{ php_version }}-fpm AND httpd/tasks/install.yml via libapache2-mod-php{{ php_version }} AND wordpress/tasks/install.yml -- it can ALSO be auto-installed by phpX.Y-cgi OR phpX.Y-cli as confirmed by 'apt rdepends libsodium23' -- Recommended by Moodle 3.11+ at https://docs.moodle.org/311/en/Environment_-_PHP_extension_sodium -- whereas https://www.php.net/manual/en/sodium.installation.php says it's always bundled with PHP 7.2+ -- VERIFY USING 'php -i | grep sodium' AND 'apt list "*sodium*"'
|
|
#- php{{ php_version }}-common # 2021-06-27: Auto-installed as an apt dependency. REGARDLESS: php{{ php_version }}-common superset php{{ php_version }}-cli is auto-installed by php{{ php_version }}-fpm in nginx/tasks/install.yml
|
|
#- php{{ php_version }}-cli # 2021-06-27: Compare to php{{ php_version }}-common just above! 2020-06-15: In the past this included (below) mbstring? However this is not true on Ubuntu Server 20.04 LTS.
|
|
- php{{ php_version }}-curl # 2021-06-27: Likewise installed in nextcloud/tasks/install.yml, pbx/tasks/freepbx_dependencies.yml, wordpress/tasks/install.yml
|
|
- php{{ php_version }}-gd # 2021-06-27: Likewise installed in nextcloud/tasks/install.yml, pbx/tasks/freepbx_dependencies.yml
|
|
- php{{ php_version }}-intl # 2020-12-03: Required by Moodle 3.10+ -- Likewise installed in mediawiki/tasks/install.yml, nextcloud/tasks/install.yml, wordpress/tasks/install.yml
|
|
- php{{ php_version }}-mbstring # 2020-06-15: Required by Moodle 3.9+ -- Likewise installed in mediawiki/tasks/install.yml, nextcloud/tasks/install.yml, pbx/tasks/freepbx_dependencies.yml, wordpress/tasks/install.yml
|
|
- php{{ php_version }}-pgsql # 2021-06-27: Required for PostgreSQL
|
|
- php{{ php_version }}-json
|
|
- php{{ php_version }}-opcache
|
|
- php{{ php_version }}-readline
|
|
- php{{ php_version }}-soap # 2020-12-03: Recommended by Moodle 3.10+
|
|
- php{{ php_version }}-xml # 2021-06-28: Likewise installed in mediawiki/tasks/install.yml, nextcloud/tasks/install.yml, pbx/tasks/freepbx_dependencies.yml, wordpress/tasks/install.yml -- AND REGARDLESS dragged in later by Admin Console's use of php-pear for roles/cmdsrv/tasks/main.yml -- run 'php -m | grep -i xml' which in the end shows {libxml, SimpleXML, xml, xmlreader, xmlwriter}
|
|
- php{{ php_version }}-xmlrpc # 2021-06-27: Required per https://docs.moodle.org/19/en/PHP_settings_by_Moodle_version#PHP_Extensions_and_libraries BUT UNMAINTAINED FOR YEARS (POSSIBLE SECURITY RISK) SO MOVED TO PECL: https://php.watch/versions/8.0/xmlrpc
|
|
- php{{ php_version }}-zip # 2021-06-27: Likewise installed in nextcloud/tasks/install.yml, pbx/tasks/freepbx_dependencies.yml, wordpress/tasks/install.yml
|
|
state: present
|
|
|
|
- name: Does {{ moodle_base }}/config-dist.php exist? (indicating Moodle is/was installed)
|
|
stat:
|
|
path: "{{ moodle_base }}/config-dist.php" # /opt/iiab/moodle
|
|
register: moodle
|
|
|
|
- name: Clone (i.e. use git to download) {{ moodle_repo_url }} to {{ moodle_base }} (~288 MB)
|
|
git:
|
|
repo: "{{ moodle_repo_url }}"
|
|
dest: "{{ moodle_base }}"
|
|
depth: 1
|
|
force: yes
|
|
version: "MOODLE_{{ moodle_version }}_STABLE"
|
|
#version: master # TEMPORARY DURING MAY 2018 TESTING, installed 3.5beta+ = https://download.moodle.org/releases/development/
|
|
#ignore_errors: yes
|
|
when: internet_available and moodle.stat.exists is defined and not moodle.stat.exists
|
|
|
|
- name: Create dir {{ moodle_base }} owned by {{ apache_user }} (for config file?)
|
|
file:
|
|
state: directory
|
|
path: "{{ moodle_base }}"
|
|
owner: "{{ apache_user }}" # www-data
|
|
recurse: yes
|
|
|
|
- name: Create dir {{ content_base }}/dbdata/moodle owned by {{ apache_user }}
|
|
file:
|
|
state: directory
|
|
path: "{{ content_base }}/dbdata/moodle" # /library
|
|
owner: "{{ apache_user }}"
|
|
|
|
- name: Create dir {{ moodle_data }} ({{ apache_user }}:{{ apache_user }}, '0770')
|
|
file:
|
|
state: directory
|
|
path: "{{ moodle_data }}" # /library/moodle
|
|
owner: "{{ apache_user }}"
|
|
group: "{{ apache_user }}"
|
|
#mode: '0770' # Regardless, permissions end up as: drwxrwsrwx
|
|
|
|
#- name: Remove stock /etc/{{ apache_conf_dir }}/moodle.conf
|
|
# file:
|
|
# path: "/etc/{{ apache_conf_dir }}/moodle.conf" # apache2/sites-available
|
|
# state: absent
|
|
|
|
# 2021-02-01: Not nec if we can hopefully migrate from Apache to NGINX soon!
|
|
#- name: Install /etc/{{ apache_conf_dir }}/022-moodle.conf from template
|
|
# template:
|
|
# src: 022-moodle.j2
|
|
# dest: "/etc/{{ apache_conf_dir }}/022-moodle.conf"
|
|
|
|
# roles/postgresql/templates/postgresql-iiab.service WAS INSTALLED HERE:
|
|
# /etc/systemd/system/postgresql-iiab.service
|
|
- name: Start 'postgresql-iiab' systemd service, to configure Moodle's DB
|
|
systemd:
|
|
name: postgresql-iiab
|
|
state: started
|
|
|
|
- name: Create PostgreSQL db user Admin/changeme
|
|
postgresql_user:
|
|
name: Admin
|
|
password: changeme
|
|
encrypted: yes # Required by PostgreSQL 10+ e.g. Ubuntu 18.04's PostgreSQL 10.3+, see https://github.com/iiab/iiab/issues/759
|
|
role_attr_flags: NOSUPERUSER,NOCREATEROLE,NOCREATEDB
|
|
state: present
|
|
become: yes
|
|
become_user: postgres
|
|
|
|
- name: 'Create database: {{ moodle_database_name }}'
|
|
postgresql_db:
|
|
name: "{{ moodle_database_name }}"
|
|
encoding: utf8
|
|
owner: Admin
|
|
template: template1
|
|
state: present
|
|
become: yes
|
|
become_user: postgres
|
|
|
|
- name: Install {{ moodle_base }}/moodle_installer from template ('0755')
|
|
template:
|
|
src: moodle_installer
|
|
dest: "{{ moodle_base }}"
|
|
mode: '0755'
|
|
|
|
- name: (Re)Start 'postgresql-iiab' systemd service
|
|
systemd:
|
|
name: postgresql-iiab
|
|
state: restarted
|
|
#enabled: yes # Service ends up enabled regardless
|
|
|
|
#- name: (Re)Start '{{ apache_service }}' systemd service
|
|
# systemd:
|
|
# name: "{{ apache_service }}"
|
|
# state: restarted
|
|
|
|
- name: Does {{ moodle_base }}/config.php exist?
|
|
stat:
|
|
path: "{{ moodle_base }}/config.php"
|
|
register: config
|
|
|
|
- name: Execute {{ moodle_base }}/moodle_installer -- REQUIRES 'max_input_vars = 5000' (or higher) in /etc/php/{{ php_version }}/cli/php.ini with PHP 8+ (as set up by www_options/tasks/main.yml) -- WHEREAS Moodle uses /etc/php/{{ php_version }}/{{ apache_service }}/php.ini or /etc/php/{{ php_version }}/fpm/php.ini during regular operation
|
|
shell: "{{ moodle_base }}/moodle_installer"
|
|
when: config.stat.exists is defined and not config.stat.exists
|
|
|
|
# 2021-02-01: Let's stick with Moodle's default (640)
|
|
#- name: Make {{ moodle_base }}/config.php readable, with permission '0644'
|
|
# #command: chown -R {{ apache_user }} {{ moodle_base }}
|
|
# file:
|
|
# path: "{{ moodle_base }}/config.php" # /opt/iiab/moodle
|
|
# mode: '0644'
|
|
|
|
|
|
# RECORD Moodle AS INSTALLED
|
|
|
|
- name: "Set 'moodle_installed: True'"
|
|
set_fact:
|
|
moodle_installed: True
|
|
|
|
- name: "Add 'moodle_installed: True' to {{ iiab_state_file }}"
|
|
lineinfile:
|
|
path: "{{ iiab_state_file }}" # /etc/iiab/iiab_state.yml
|
|
regexp: '^moodle_installed'
|
|
line: 'moodle_installed: True'
|