diff --git a/customers/base/apache-configmap.yml b/customers/base/apache-configmap.yml new file mode 100644 index 0000000..9a5f2ca --- /dev/null +++ b/customers/base/apache-configmap.yml @@ -0,0 +1,69 @@ +apiVersion: v1 +kind: ConfigMap +metadata: + name: apache-configmap +data: + 000-default.conf: | + LoadModule remoteip_module /usr/lib/apache2/modules/mod_remoteip.so + LoadModule headers_module /usr/lib/apache2/modules/mod_headers.so + + ServerAdmin webmaster@localhost + DocumentRoot /var/www/html + # Log format config + LogFormat "%{X-Forwarded-For}i %l %u %t \"%r\" %>s %b \"%{Referer}i\" \"%{User-Agent}i\"" common + SetEnvIf X-Forwarded-For "^.*\..*\..*\..*" forwarded + + # Header config + RemoteIPHeader X-Forwarded-For + RemoteIPInternalProxy 37.156.195.14 + RemoteIPInternalProxy 37.156.195.19 + RemoteIPInternalProxy 37.156.195.84 + RemoteIPInternalProxy 37.156.195.92 + #ErrorDocument 404 /404.html + ErrorLog ${APACHE_LOG_DIR}/error.log + CustomLog ${APACHE_LOG_DIR}/access.log combined env=forwarded + + ErrorLog ${APACHE_LOG_DIR}/error.log + CustomLog ${APACHE_LOG_DIR}/access.log combined + + LimitRequestBody 0 + Require all granted + AllowOverride All + Options FollowSymLinks MultiViews + + + Dav off + + + + + ServerAdmin webmaster@localhost + DocumentRoot /var/www/html + # Log format config + LogFormat "%{X-Forwarded-For}i %l %u %t \"%r\" %>s %b \"%{Referer}i\" \"%{User-Agent}i\"" common + SetEnvIf X-Forwarded-For "^.*\..*\..*\..*" forwarded + + # Header config + RemoteIPHeader X-Forwarded-For + RemoteIPInternalProxy 37.156.195.14 + RemoteIPInternalProxy 37.156.195.19 + RemoteIPInternalProxy 37.156.195.84 + RemoteIPInternalProxy 37.156.195.92 + #ErrorDocument 404 /404.html + ErrorLog ${APACHE_LOG_DIR}/error.log + CustomLog ${APACHE_LOG_DIR}/access.log combined env=forwarded + SSLEngine On + SSLCertificateFile /etc/ssl/certs/ssl-cert-snakeoil.pem + SSLCertificateKeyFile /etc/ssl/private/ssl-cert-snakeoil.key + + LimitRequestBody 0 + Require all granted + AllowOverride All + Options FollowSymLinks MultiViews + + + Dav off + + + + # vim: syntax=apache ts=4 sw=4 sts=4 sr noet diff --git a/customers/base/apache-php-configmap.yml b/customers/base/apache-php-configmap.yml new file mode 100644 index 0000000..02de97d --- /dev/null +++ b/customers/base/apache-php-configmap.yml @@ -0,0 +1,162 @@ +apiVersion: v1 +kind: ConfigMap +metadata: + name: apache-php-configmap +data: + php.ini: | + [PHP] + allow_url_fopen = On + allow_url_include = Off + auto_append_file = + auto_globals_jit = On + auto_prepend_file = + default_charset = "UTF-8" + default_mimetype = "text/html" + default_socket_timeout = 60 + disable_classes = + disable_functions = pcntl_alarm,pcntl_fork,pcntl_waitpid,pcntl_wait,pcntl_wifexited,pcntl_wifstopped,pcntl_wifsignaled,pcntl_wifcontinued,pcntl_wexitstatus,pcntl_wtermsig,pcntl_wstopsig,pcntl_signal,pcntl_signal_get_handler,pcntl_signal_dispatch,pcntl_get_last_error,pcntl_strerror,pcntl_sigprocmask,pcntl_sigwaitinfo,pcntl_sigtimedwait,pcntl_exec,pcntl_getpriority,pcntl_setpriority,pcntl_async_signals,pcntl_unshare, + display_errors = Off + display_startup_errors = Off + doc_root = + enable_dl = Off + engine = On + error_reporting = E_ALL & ~E_DEPRECATED & ~E_STRICT + expose_php = Off + file_uploads = On + ignore_repeated_errors = Off + ignore_repeated_source = Off + implicit_flush = Off + log_errors = On + log_errors_max_len = 1024 + max_execution_time = 86400 + max_file_uploads = 20 + max_input_time = 86400 + memory_limit = <%= @php_memory_limit_mb %>M + output_buffering = Off + post_max_size = 30G + precision = 14 + register_argc_argv = Off + report_memleaks = On + request_order = "GP" + serialize_precision = -1 + short_open_tag = Off + unserialize_callback_func = + upload_max_filesize = 30G + user_dir = + variables_order = "GPCS" + zend.enable_gc = On + zend.exception_ignore_args = On + zlib.output_compression = Off + [CLI Server] + cli_server.color = On + [Date] + ; Nothing here + [filter] + ; Nothing here + [iconv] + ; Nothing here + [imap] + ; Nothing here + [intl] + ; Nothing here + [sqlite3] + ; Nothing here + [Pcre] + ; Nothing here + [Pdo] + ; Nothing here + [Pdo_mysql] + pdo_mysql.default_socket= + [Phar] + ; Nothing here + [mail function] + SMTP = localhost + smtp_port = 25 + mail.add_x_header = Off + [ODBC] + odbc.allow_persistent = On + odbc.check_persistent = On + odbc.max_persistent = -1 + odbc.max_links = -1 + odbc.defaultlrl = 4096 + odbc.defaultbinmode = 1 + [MySQLi] + mysqli.max_persistent = -1 + mysqli.allow_persistent = On + mysqli.max_links = -1 + mysqli.default_port = 3306 + mysqli.default_socket = + mysqli.default_host = + mysqli.default_user = + mysqli.default_pw = + mysqli.reconnect = Off + [mysqlnd] + mysqlnd.collect_statistics = On + mysqlnd.collect_memory_statistics = Off + [OCI8] + ; Nothing here + [PostgreSQL] + pgsql.allow_persistent = On + pgsql.auto_reset_persistent = Off + pgsql.max_persistent = -1 + pgsql.max_links = -1 + pgsql.ignore_notice = 0 + pgsql.log_notice = 0 + [bcmath] + bcmath.scale = 0 + [browscap] + ; Nothing here + [Session] + session.save_handler = files + session.use_strict_mode = 0 + session.use_cookies = 1 + session.use_only_cookies = 1 + session.name = PHPSESSID + session.auto_start = 0 + session.cookie_lifetime = 0 + session.cookie_path = / + session.cookie_domain = + session.cookie_httponly = + session.cookie_samesite = + session.serialize_handler = php + session.gc_probability = 0 + session.gc_divisor = 1000 + session.gc_maxlifetime = 1440 + session.referer_check = + session.cache_limiter = nocache + session.cache_expire = 180 + session.use_trans_sid = 0 + session.sid_length = 26 + session.trans_sid_tags = "a=href,area=href,frame=src,form=" + session.sid_bits_per_character = 5 + [Assertion] + zend.assertions = -1 + [COM] + ; Nothing here + [mbstring] + ; Nothing here + [gd] + ; Nothing here + [exif] + ; Nothing here + [Tidy] + tidy.clean_output = Off + [soap] + soap.wsdl_cache_enabled=1 + soap.wsdl_cache_dir="/tmp" + soap.wsdl_cache_ttl=86400 + soap.wsdl_cache_limit = 5 + [sysvshm] + ; Nothing here + [ldap] + ldap.max_links = -1 + [dba] + ; Nothing here + [opcache] + ; Nothing here + [curl] + ; Nothing here + [openssl] + ; Nothing here + [ffi] + ; Nothing here diff --git a/customers/base/apcu-configmap.yml b/customers/base/apcu-configmap.yml new file mode 100644 index 0000000..c25ee99 --- /dev/null +++ b/customers/base/apcu-configmap.yml @@ -0,0 +1,8 @@ +apiVersion: v1 +kind: ConfigMap +metadata: + name: apcu-configmap +data: + apcu.ini: | + extension=apcu.so + apc.enable_cli=1 diff --git a/customers/base/cli-php-configmap.yml b/customers/base/cli-php-configmap.yml new file mode 100644 index 0000000..73b995c --- /dev/null +++ b/customers/base/cli-php-configmap.yml @@ -0,0 +1,162 @@ +apiVersion: v1 +kind: ConfigMap +metadata: + name: cli-php-configmap +data: + php.ini: | + [PHP] + allow_url_fopen = On + allow_url_include = Off + auto_append_file = + auto_globals_jit = On + auto_prepend_file = + default_charset = "UTF-8" + default_mimetype = "text/html" + default_socket_timeout = 60 + disable_classes = + disable_functions = + display_errors = Off + display_startup_errors = Off + doc_root = + enable_dl = Off + engine = On + error_reporting = E_ALL & ~E_DEPRECATED & ~E_STRICT + expose_php = On + file_uploads = On + ignore_repeated_errors = Off + ignore_repeated_source = Off + implicit_flush = Off + log_errors = On + log_errors_max_len = 1024 + max_execution_time = 86400 + max_file_uploads = 20 + max_input_time = 86400 + memory_limit = -1 + output_buffering = Off + post_max_size = 16G + precision = 14 + register_argc_argv = Off + report_memleaks = On + request_order = "GP" + serialize_precision = -1 + short_open_tag = Off + unserialize_callback_func = + upload_max_filesize = 16G + user_dir = + variables_order = "GPCS" + zend.enable_gc = On + zend.exception_ignore_args = On + zlib.output_compression = Off + [CLI Server] + cli_server.color = On + [Date] + ; Nothing here + [filter] + ; Nothing here + [iconv] + ; Nothing here + [imap] + ; Nothing here + [intl] + ; Nothing here + [sqlite3] + ; Nothing here + [Pcre] + ; Nothing here + [Pdo] + ; Nothing here + [Pdo_mysql] + pdo_mysql.default_socket= + [Phar] + ; Nothing here + [mail function] + SMTP = localhost + smtp_port = 25 + mail.add_x_header = Off + [ODBC] + odbc.allow_persistent = On + odbc.check_persistent = On + odbc.max_persistent = -1 + odbc.max_links = -1 + odbc.defaultlrl = 4096 + odbc.defaultbinmode = 1 + [MySQLi] + mysqli.max_persistent = -1 + mysqli.allow_persistent = On + mysqli.max_links = -1 + mysqli.default_port = 3306 + mysqli.default_socket = + mysqli.default_host = + mysqli.default_user = + mysqli.default_pw = + mysqli.reconnect = Off + [mysqlnd] + mysqlnd.collect_statistics = On + mysqlnd.collect_memory_statistics = Off + [OCI8] + ; Nothing here + [PostgreSQL] + pgsql.allow_persistent = On + pgsql.auto_reset_persistent = Off + pgsql.max_persistent = -1 + pgsql.max_links = -1 + pgsql.ignore_notice = 0 + pgsql.log_notice = 0 + [bcmath] + bcmath.scale = 0 + [browscap] + ; Nothing here + [Session] + session.save_handler = files + session.use_strict_mode = 0 + session.use_cookies = 1 + session.use_only_cookies = 1 + session.name = PHPSESSID + session.auto_start = 0 + session.cookie_lifetime = 0 + session.cookie_path = / + session.cookie_domain = + session.cookie_httponly = + session.cookie_samesite = + session.serialize_handler = php + session.gc_probability = 0 + session.gc_divisor = 1000 + session.gc_maxlifetime = 1440 + session.referer_check = + session.cache_limiter = nocache + session.cache_expire = 180 + session.use_trans_sid = 0 + session.sid_length = 26 + session.trans_sid_tags = "a=href,area=href,frame=src,form=" + session.sid_bits_per_character = 5 + [Assertion] + zend.assertions = -1 + [COM] + ; Nothing here + [mbstring] + ; Nothing here + [gd] + ; Nothing here + [exif] + ; Nothing here + [Tidy] + tidy.clean_output = Off + [soap] + soap.wsdl_cache_enabled=1 + soap.wsdl_cache_dir="/tmp" + soap.wsdl_cache_ttl=86400 + soap.wsdl_cache_limit = 5 + [sysvshm] + ; Nothing here + [ldap] + ldap.max_links = -1 + [dba] + ; Nothing here + [opcache] + ; Nothing here + [curl] + ; Nothing here + [openssl] + ; Nothing here + [ffi] + ; Nothing here diff --git a/customers/base/kustomization.yaml b/customers/base/kustomization.yaml index 0871204..62ca38d 100644 --- a/customers/base/kustomization.yaml +++ b/customers/base/kustomization.yaml @@ -1,4 +1,8 @@ resources: + - apache-configmap.yml + - apache-php-configmap.yml + - apcu-configmap.yml + - cli-php-configmap.yml - nextcloud-configmap.yml - nextcloud-deployment.yml - nextcloud-ingress.yml diff --git a/customers/base/nextcloud-configmap.yml b/customers/base/nextcloud-configmap.yml index 2b25262..d9343ce 100644 --- a/customers/base/nextcloud-configmap.yml +++ b/customers/base/nextcloud-configmap.yml @@ -3,387 +3,6 @@ kind: ConfigMap metadata: name: nextcloud-configmap data: - 000-default.conf: | - LoadModule remoteip_module /usr/lib/apache2/modules/mod_remoteip.so - LoadModule headers_module /usr/lib/apache2/modules/mod_headers.so - - ServerAdmin webmaster@localhost - DocumentRoot /var/www/html - # Log format config - LogFormat "%{X-Forwarded-For}i %l %u %t \"%r\" %>s %b \"%{Referer}i\" \"%{User-Agent}i\"" common - SetEnvIf X-Forwarded-For "^.*\..*\..*\..*" forwarded - - # Header config - RemoteIPHeader X-Forwarded-For - RemoteIPInternalProxy 37.156.195.14 - RemoteIPInternalProxy 37.156.195.19 - RemoteIPInternalProxy 37.156.195.84 - RemoteIPInternalProxy 37.156.195.92 - #ErrorDocument 404 /404.html - ErrorLog ${APACHE_LOG_DIR}/error.log - CustomLog ${APACHE_LOG_DIR}/access.log combined env=forwarded - - ErrorLog ${APACHE_LOG_DIR}/error.log - CustomLog ${APACHE_LOG_DIR}/access.log combined - - LimitRequestBody 0 - Require all granted - AllowOverride All - Options FollowSymLinks MultiViews - - - Dav off - - - - - ServerAdmin webmaster@localhost - DocumentRoot /var/www/html - # Log format config - LogFormat "%{X-Forwarded-For}i %l %u %t \"%r\" %>s %b \"%{Referer}i\" \"%{User-Agent}i\"" common - SetEnvIf X-Forwarded-For "^.*\..*\..*\..*" forwarded - - # Header config - RemoteIPHeader X-Forwarded-For - RemoteIPInternalProxy 37.156.195.14 - RemoteIPInternalProxy 37.156.195.19 - RemoteIPInternalProxy 37.156.195.84 - RemoteIPInternalProxy 37.156.195.92 - #ErrorDocument 404 /404.html - ErrorLog ${APACHE_LOG_DIR}/error.log - CustomLog ${APACHE_LOG_DIR}/access.log combined env=forwarded - SSLEngine On - SSLCertificateFile /etc/ssl/certs/ssl-cert-snakeoil.pem - SSLCertificateKeyFile /etc/ssl/private/ssl-cert-snakeoil.key - - LimitRequestBody 0 - Require all granted - AllowOverride All - Options FollowSymLinks MultiViews - - - Dav off - - - - # vim: syntax=apache ts=4 sw=4 sts=4 sr noet - apache.php.ini: | - [PHP] - allow_url_fopen = On - allow_url_include = Off - auto_append_file = - auto_globals_jit = On - auto_prepend_file = - default_charset = "UTF-8" - default_mimetype = "text/html" - default_socket_timeout = 60 - disable_classes = - disable_functions = pcntl_alarm,pcntl_fork,pcntl_waitpid,pcntl_wait,pcntl_wifexited,pcntl_wifstopped,pcntl_wifsignaled,pcntl_wifcontinued,pcntl_wexitstatus,pcntl_wtermsig,pcntl_wstopsig,pcntl_signal,pcntl_signal_get_handler,pcntl_signal_dispatch,pcntl_get_last_error,pcntl_strerror,pcntl_sigprocmask,pcntl_sigwaitinfo,pcntl_sigtimedwait,pcntl_exec,pcntl_getpriority,pcntl_setpriority,pcntl_async_signals,pcntl_unshare, - display_errors = Off - display_startup_errors = Off - doc_root = - enable_dl = Off - engine = On - error_reporting = E_ALL & ~E_DEPRECATED & ~E_STRICT - expose_php = Off - file_uploads = On - ignore_repeated_errors = Off - ignore_repeated_source = Off - implicit_flush = Off - log_errors = On - log_errors_max_len = 1024 - max_execution_time = 86400 - max_file_uploads = 20 - max_input_time = 86400 - memory_limit = <%= @php_memory_limit_mb %>M - output_buffering = Off - post_max_size = 30G - precision = 14 - register_argc_argv = Off - report_memleaks = On - request_order = "GP" - serialize_precision = -1 - short_open_tag = Off - unserialize_callback_func = - upload_max_filesize = 30G - user_dir = - variables_order = "GPCS" - zend.enable_gc = On - zend.exception_ignore_args = On - zlib.output_compression = Off - [CLI Server] - cli_server.color = On - [Date] - ; Nothing here - [filter] - ; Nothing here - [iconv] - ; Nothing here - [imap] - ; Nothing here - [intl] - ; Nothing here - [sqlite3] - ; Nothing here - [Pcre] - ; Nothing here - [Pdo] - ; Nothing here - [Pdo_mysql] - pdo_mysql.default_socket= - [Phar] - ; Nothing here - [mail function] - SMTP = localhost - smtp_port = 25 - mail.add_x_header = Off - [ODBC] - odbc.allow_persistent = On - odbc.check_persistent = On - odbc.max_persistent = -1 - odbc.max_links = -1 - odbc.defaultlrl = 4096 - odbc.defaultbinmode = 1 - [MySQLi] - mysqli.max_persistent = -1 - mysqli.allow_persistent = On - mysqli.max_links = -1 - mysqli.default_port = 3306 - mysqli.default_socket = - mysqli.default_host = - mysqli.default_user = - mysqli.default_pw = - mysqli.reconnect = Off - [mysqlnd] - mysqlnd.collect_statistics = On - mysqlnd.collect_memory_statistics = Off - [OCI8] - ; Nothing here - [PostgreSQL] - pgsql.allow_persistent = On - pgsql.auto_reset_persistent = Off - pgsql.max_persistent = -1 - pgsql.max_links = -1 - pgsql.ignore_notice = 0 - pgsql.log_notice = 0 - [bcmath] - bcmath.scale = 0 - [browscap] - ; Nothing here - [Session] - session.save_handler = files - session.use_strict_mode = 0 - session.use_cookies = 1 - session.use_only_cookies = 1 - session.name = PHPSESSID - session.auto_start = 0 - session.cookie_lifetime = 0 - session.cookie_path = / - session.cookie_domain = - session.cookie_httponly = - session.cookie_samesite = - session.serialize_handler = php - session.gc_probability = 0 - session.gc_divisor = 1000 - session.gc_maxlifetime = 1440 - session.referer_check = - session.cache_limiter = nocache - session.cache_expire = 180 - session.use_trans_sid = 0 - session.sid_length = 26 - session.trans_sid_tags = "a=href,area=href,frame=src,form=" - session.sid_bits_per_character = 5 - [Assertion] - zend.assertions = -1 - [COM] - ; Nothing here - [mbstring] - ; Nothing here - [gd] - ; Nothing here - [exif] - ; Nothing here - [Tidy] - tidy.clean_output = Off - [soap] - soap.wsdl_cache_enabled=1 - soap.wsdl_cache_dir="/tmp" - soap.wsdl_cache_ttl=86400 - soap.wsdl_cache_limit = 5 - [sysvshm] - ; Nothing here - [ldap] - ldap.max_links = -1 - [dba] - ; Nothing here - [opcache] - ; Nothing here - [curl] - ; Nothing here - [openssl] - ; Nothing here - [ffi] - ; Nothing here - apcu.ini: | - extension=apcu.so - apc.enable_cli=1 - cli.php.ini: | - [PHP] - allow_url_fopen = On - allow_url_include = Off - auto_append_file = - auto_globals_jit = On - auto_prepend_file = - default_charset = "UTF-8" - default_mimetype = "text/html" - default_socket_timeout = 60 - disable_classes = - disable_functions = - display_errors = Off - display_startup_errors = Off - doc_root = - enable_dl = Off - engine = On - error_reporting = E_ALL & ~E_DEPRECATED & ~E_STRICT - expose_php = On - file_uploads = On - ignore_repeated_errors = Off - ignore_repeated_source = Off - implicit_flush = Off - log_errors = On - log_errors_max_len = 1024 - max_execution_time = 86400 - max_file_uploads = 20 - max_input_time = 86400 - memory_limit = -1 - output_buffering = Off - post_max_size = 16G - precision = 14 - register_argc_argv = Off - report_memleaks = On - request_order = "GP" - serialize_precision = -1 - short_open_tag = Off - unserialize_callback_func = - upload_max_filesize = 16G - user_dir = - variables_order = "GPCS" - zend.enable_gc = On - zend.exception_ignore_args = On - zlib.output_compression = Off - [CLI Server] - cli_server.color = On - [Date] - ; Nothing here - [filter] - ; Nothing here - [iconv] - ; Nothing here - [imap] - ; Nothing here - [intl] - ; Nothing here - [sqlite3] - ; Nothing here - [Pcre] - ; Nothing here - [Pdo] - ; Nothing here - [Pdo_mysql] - pdo_mysql.default_socket= - [Phar] - ; Nothing here - [mail function] - SMTP = localhost - smtp_port = 25 - mail.add_x_header = Off - [ODBC] - odbc.allow_persistent = On - odbc.check_persistent = On - odbc.max_persistent = -1 - odbc.max_links = -1 - odbc.defaultlrl = 4096 - odbc.defaultbinmode = 1 - [MySQLi] - mysqli.max_persistent = -1 - mysqli.allow_persistent = On - mysqli.max_links = -1 - mysqli.default_port = 3306 - mysqli.default_socket = - mysqli.default_host = - mysqli.default_user = - mysqli.default_pw = - mysqli.reconnect = Off - [mysqlnd] - mysqlnd.collect_statistics = On - mysqlnd.collect_memory_statistics = Off - [OCI8] - ; Nothing here - [PostgreSQL] - pgsql.allow_persistent = On - pgsql.auto_reset_persistent = Off - pgsql.max_persistent = -1 - pgsql.max_links = -1 - pgsql.ignore_notice = 0 - pgsql.log_notice = 0 - [bcmath] - bcmath.scale = 0 - [browscap] - ; Nothing here - [Session] - session.save_handler = files - session.use_strict_mode = 0 - session.use_cookies = 1 - session.use_only_cookies = 1 - session.name = PHPSESSID - session.auto_start = 0 - session.cookie_lifetime = 0 - session.cookie_path = / - session.cookie_domain = - session.cookie_httponly = - session.cookie_samesite = - session.serialize_handler = php - session.gc_probability = 0 - session.gc_divisor = 1000 - session.gc_maxlifetime = 1440 - session.referer_check = - session.cache_limiter = nocache - session.cache_expire = 180 - session.use_trans_sid = 0 - session.sid_length = 26 - session.trans_sid_tags = "a=href,area=href,frame=src,form=" - session.sid_bits_per_character = 5 - [Assertion] - zend.assertions = -1 - [COM] - ; Nothing here - [mbstring] - ; Nothing here - [gd] - ; Nothing here - [exif] - ; Nothing here - [Tidy] - tidy.clean_output = Off - [soap] - soap.wsdl_cache_enabled=1 - soap.wsdl_cache_dir="/tmp" - soap.wsdl_cache_ttl=86400 - soap.wsdl_cache_limit = 5 - [sysvshm] - ; Nothing here - [ldap] - ldap.max_links = -1 - [dba] - ; Nothing here - [opcache] - ; Nothing here - [curl] - ; Nothing here - [openssl] - ; Nothing here - [ffi] - ; Nothing here config.php: | true,/config_is_read_only\1 => false,/" /var/www/html/config/config.php > /var/www/html/config/config.php.tmp mv /var/www/html/config/config.php.tmp /var/www/html/config/config.php