public
Description:
Homepage: http://www.jestro.com
Clone URL: git://github.com/jestro/puppet-lamp.git
jnewland (author)
Mon Nov 24 11:18:14 -0800 2008
commit  2475fe5a87933e03c9e4ada8345d28ed5a3581fb
tree    1ed522b8ee9607b262f77b929c94810bcde43fd7
parent  62405bdadb9717f8f7215cb71bfcf2985538ed5a
name age message
file README.textile Loading commit data...
directory files/
directory manifests/
README.textile

Wordpress Puppet Manifests for CentOS 5

Intended for use with http://github.com/jestro/wordpress-capistrano

Initial Setup


  # Login to your slice as root
  ssh root@HOSTNAME

  #Change your root password
  passwd

  #install ruby
  yum install -y ruby ruby-devel ruby-libs ruby-rdoc ruby-ri curl

  #install rubygems
  cd /tmp
  curl -OL http://rubyforge.org/frs/download.php/45905/rubygems-1.3.1.tgz
  tar xfz rubygems-*
  cd rubygems-*
  sudo ruby setup.rb
  cd ..

  #install puppet
  sudo gem install facter puppet

  #setup puppet dir
  sudo mkdir /var/puppet

  #download this repo to /etc/puppet
  cd /tmp
  curl -L http://github.com/jestro/puppet-wordpress/tarball/master | tar xz
  rm -rf /etc/puppet
  mv jestro-puppet-wordpress* /etc/puppet
  rm -rf jestro-puppet-wordpress-*

  sudo puppet /etc/puppet/manifests/site.pp

Todo:

  • Users
  • Groups
  • Sudoers
  • SSH Config / Keys
  • iptables

  iptables -A INPUT -i lo -j ACCEPT
  iptables -A INPUT -i ! lo -d 127.0.0.0/8 -j REJECT
  iptables -A INPUT -m state --state ESTABLISHED,RELATED -j ACCEPT
  iptables -A OUTPUT -j ACCEPT
  iptables -A INPUT -p tcp --dport 80 -j ACCEPT
  iptables -A INPUT -p tcp --dport 443 -j ACCEPT
  iptables -A INPUT -p tcp -m state --state NEW --dport 22 -j ACCEPT
  iptables -A INPUT -p icmp -m icmp --icmp-type 8 -j ACCEPT
  iptables -A INPUT -j REJECT
  iptables -A FORWARD -j REJECT