diff --git a/docs/servers.md b/docs/servers.md index 374dc89228fc5866200d82e7c2d681d410130ba6..8206b7f1f45303cc0ca559e4003c1ed71c710b08 100644 --- a/docs/servers.md +++ b/docs/servers.md @@ -26,11 +26,6 @@ ### Services - aurweb -## bugs.archlinux.org - -### Services - - flyspray - ## bbs.archlinux.org ### Services diff --git a/docs/ssh-hostkeys.txt b/docs/ssh-hostkeys.txt index af305dbc3c91ba18ba813568c6523a0bd64ce283..b795552f33ad3779b5d73ad9f6a76876d2def365 100644 --- a/docs/ssh-hostkeys.txt +++ b/docs/ssh-hostkeys.txt @@ -73,12 +73,6 @@ 256 MD5:02:38:35:e8:5c:62:dc:56:29:be:fb:1c:96:2c:17:4c root@archlinux-packer (ED25519) 3072 MD5:0a:a1:a1:44:4e:65:8b:10:f3:54:83:eb:17:41:f1:0c root@archlinux-packer (RSA) -# bugs.archlinux.org -1024 SHA256:c8CCzrXjPnUEi0d0B2yLzMWK935TyjzoCOdcP12BwEM root@archlinux-packer (DSA) -256 SHA256:z9CfWniDILraPxPn4e8Sao/vaAseI29KyXEhGU3sNRk root@archlinux-packer (ECDSA) -256 SHA256:ZL2RVyqM9FsvoSNqyXg9J7keN4QxRMD6+m6i4dDYkao root@archlinux-packer (ED25519) -3072 SHA256:u1iIRQp0fVyM2pgTTca/nxG/iO1QxbfR2nGhnIkohfg root@archlinux-packer (RSA) - 1024 MD5:cf:10:49:2f:d2:35:99:35:59:8f:e2:54:b3:05:cb:a7 root@archlinux-packer (DSA) 256 MD5:d1:94:76:51:bb:7b:88:41:03:6d:12:63:a5:03:5f:58 root@archlinux-packer (ECDSA) 256 MD5:d6:d3:a9:2e:c1:7d:69:c1:9a:21:c9:6f:30:53:e6:74 root@archlinux-packer (ED25519) diff --git a/docs/ssh-known_hosts.txt b/docs/ssh-known_hosts.txt index 3c279639c80d47280e33c87ae6482e2ce264c56d..b1df104c8e6f535eaf93b883229a9415959bbba6 100644 --- a/docs/ssh-known_hosts.txt +++ b/docs/ssh-known_hosts.txt @@ -45,11 +45,6 @@ bugbuddy.archlinux.org ecdsa-sha2-nistp256 AAAAE2VjZHNhLXNoYTItbmlzdHAyNTYAAAAIb bugbuddy.archlinux.org ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIDwd8YdPeQGAAlc9PsejSUvZFqnJqIclEz40BkjarQWh bugbuddy.archlinux.org ssh-rsa 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 -# bugs.archlinux.org -bugs.archlinux.org ecdsa-sha2-nistp256 AAAAE2VjZHNhLXNoYTItbmlzdHAyNTYAAAAIbmlzdHAyNTYAAABBBEYyQCHa1ojANfKHvlFbEFQ8Gxvz/iGBnnvf/G1IntEe9iJnw9b63T43dtlQyLReCs5ZeeUUDNMS9g4wSuEjudE= -bugs.archlinux.org ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIOZLeVfVnG/ShEKO+Aud/MGPEFIbkvPJ+O5M79UXK++r -bugs.archlinux.org ssh-rsa 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 - # build.archlinux.org build.archlinux.org ecdsa-sha2-nistp256 AAAAE2VjZHNhLXNoYTItbmlzdHAyNTYAAAAIbmlzdHAyNTYAAABBBBQbDI6+yt8T1Jmm1u30rRo4QrT66L9lewUHuVy1vkwEn1kzcyS1gSy1Ze6DkseeZEqEap3kUg3VtMUA402rsv0= build.archlinux.org ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAILmifn4KBLX24gBH4RwdBzYwLCSyVM1UbjGWxdtvoN1k diff --git a/group_vars/all/root_access.yml b/group_vars/all/root_access.yml index abaf31982aa47d1f2ffaf233913bacfa6a4049be..bb9ff940bb002de712611253df878f7116895f7e 100644 --- a/group_vars/all/root_access.yml +++ b/group_vars/all/root_access.yml @@ -24,7 +24,6 @@ root_ssh_keys: - key: artafinde.pub - key: gromit.pub hosts: - - bugs.archlinux.org - wiki.archlinux.org - man.archlinux.org - gitlab.archlinux.org diff --git a/host_vars/bugs.archlinux.org/misc b/host_vars/bugs.archlinux.org/misc deleted file mode 100644 index 8bd008ceb86620a953b2211a873373a2ff6a7ab8..0000000000000000000000000000000000000000 --- a/host_vars/bugs.archlinux.org/misc +++ /dev/null @@ -1,3 +0,0 @@ -filesystem: btrfs -wireguard_address: 10.0.0.19 -wireguard_public_key: Y5sWHwa/Hy6A7ga6lOU8uD/i/ZHZEBlkw2EW/CFE4ys= diff --git a/host_vars/bugs.archlinux.org/vault_wireguard.yml b/host_vars/bugs.archlinux.org/vault_wireguard.yml deleted file mode 100644 index eb1e60e771cf85a8c9bb0e8b432205ff12c7cd92..0000000000000000000000000000000000000000 --- a/host_vars/bugs.archlinux.org/vault_wireguard.yml +++ /dev/null @@ -1,9 +0,0 @@ -$ANSIBLE_VAULT;1.1;AES256 -65663465326231333435623630613266643936316265316639646332393565643866313766346236 -3537343763393961653232333237353939623762636235370a613535633066643565393564633933 -37383366363731323965623837343563363364316333386565633837633335303233623234633137 -3433663038613537340a373439396663336163383566396335383164363338343061626432343439 -64666331623135313165346637366138313362613063636362373962663232623039313261653463 -38306662333366313433373136616232316634653763656139336261613063326539343962343463 -32323130303764306134333136393763323733333265636436643461643639633264393466323762 -39653437616632366264 diff --git a/hosts b/hosts index d26cd8ef2586a22bce072a609580f2c91c127e6c..2034453d0c884a6fa46b99e498ae92b5d49f9cc7 100644 --- a/hosts +++ b/hosts @@ -37,7 +37,6 @@ accounts.archlinux.org archlinux.org aur.archlinux.org bbs.archlinux.org -bugs.archlinux.org gemini.archlinux.org gitlab.archlinux.org homedir.archlinux.org @@ -59,7 +58,6 @@ homedir.archlinux.org [mysql_servers] aur.archlinux.org bbs.archlinux.org -bugs.archlinux.org wiki.archlinux.org [postgresql_servers] @@ -110,7 +108,6 @@ archlinux.org aur.archlinux.org bbs.archlinux.org bugbuddy.archlinux.org -bugs.archlinux.org dashboards.archlinux.org debuginfod.archlinux.org gluebuddy.archlinux.org diff --git a/playbooks/bugs.archlinux.org.yml b/playbooks/bugs.archlinux.org.yml deleted file mode 100644 index 8420bca55a681cb0c5a2f931bb6343f509a06c7f..0000000000000000000000000000000000000000 --- a/playbooks/bugs.archlinux.org.yml +++ /dev/null @@ -1,19 +0,0 @@ -- name: Setup bugs.archlinux.org - hosts: bugs.archlinux.org - remote_user: root - roles: - - { role: common } - - { role: sshd } - - { role: root_ssh } - - { role: certbot } - - { role: nginx } - - { role: mariadb } - - { role: sudo } - - { role: php7_fpm, php_extensions: ['mysqli'], zend_extensions: ['opcache'] } - - { role: flyspray } - - { role: borg_client, tags: ["borg"] } - - { role: postfix_null } - - { role: fail2ban } - - { role: prometheus_exporters } - - { role: promtail } - - { role: wireguard } diff --git a/playbooks/tasks/upgrade-servers.yml b/playbooks/tasks/upgrade-servers.yml index 201d8077642eca4f483617ff72283a1c62925d36..dd4d8f320c3b87c00941f82d3572ce99d08f4d15 100644 --- a/playbooks/tasks/upgrade-servers.yml +++ b/playbooks/tasks/upgrade-servers.yml @@ -16,7 +16,7 @@ delay: 10 - name: Upgrade and reboot all hetzner servers - hosts: all,!accounts.archlinux.org,!bugs.archlinux.org,!kape_servers,!equinix_metal + hosts: all,!accounts.archlinux.org,!kape_servers,!equinix_metal max_fail_percentage: 0 serial: 20% gather_facts: false diff --git a/roles/flyspray/defaults/main.yml b/roles/flyspray/defaults/main.yml deleted file mode 100644 index 19a66b52d259d94329a5577f76e27e5da4b7cb8e..0000000000000000000000000000000000000000 --- a/roles/flyspray/defaults/main.yml +++ /dev/null @@ -1,9 +0,0 @@ -flyspray_dir: '/srv/http/flyspray' -flyspray_commit: 'ce4a09c8cb5de0483bb9875135bd5645039765f9' -flyspray_domain: 'bugs.archlinux.org' -flyspray_nginx_conf: '/etc/nginx/nginx.d/flyspray.conf' -flyspray_user: 'flyspray' - -flyspray_db: 'flyspray' -flyspray_db_host: 'localhost' -flyspray_db_user: 'flyspray' diff --git a/roles/flyspray/files/close-flyspray-migrated-issues.py b/roles/flyspray/files/close-flyspray-migrated-issues.py deleted file mode 100644 index 93bf9fda6ac67091e7de870e176faa92929b5b99..0000000000000000000000000000000000000000 --- a/roles/flyspray/files/close-flyspray-migrated-issues.py +++ /dev/null @@ -1,88 +0,0 @@ -#!/usr/bin/python -""" - -url -https://bugs.archlinux.org/task/35831 - -post data - -action: details.close -task_id: 35831 -resolution_reason: 12 -closure_comment: https://gitlab.archlinux.org/archlinux/netctl/issues/2 -mark100: 1 -""" - -import argparse -import json - -import requests - - -class Session(object): - - def __init__(self, user, password): - self.user = user - self.password = password - self.login_page = 'https://bugs.archlinux.org/index.php?do=authenticate' - self.bug_url = 'https://bugs.archlinux.org/task/{}' - - self.opener = requests.Session() - self.opener.headers.update({'User-agent': 'Mozilla/5.0'}) - - # need this twice - once to set cookies, once to log in... - self.login() - self.login() - - def is_issue_closed(self, issue_id): - response = self.opener.get(self.bug_url.format(issue_id)) - return '<div id="taskclosed">' in response.text - - def close_issue(self, issue_id: int, gitlab_url: str): - response = self.opener.post(self.bug_url.format(issue_id), data={ - "action": "details.close", - "task_id": issue_id, - "resolution_reason": 12, - "closure_comment": gitlab_url, - "mark100": 1, - }) - assert response.status_code == 200 - - def login(self): - "handle login, populate the cookie jar" - login_data = {'user_name': self.user, - 'password': self.password, - 'remember_login': 'on'} - response = self.opener.get(self.login_page, params=login_data, allow_redirects=False) - return response.text - - -URL = 'https://bugs.archlinux.org/task/{}' - - - -def parse_args(): - parser = argparse.ArgumentParser(prog='close-flyspray-issues') - parser.add_argument('filename', help="id-mapping json file") - parser.add_argument('--username') - parser.add_argument('--password') - - return parser.parse_args() - -def main(): - args = parse_args() - session = Session(args.username, args.password) - bugs_mapping = json.load(open(args.filename)) - for flyspray_id, gitlab_url in bugs_mapping.items(): - print(flyspray_id, gitlab_url) - if session.is_issue_closed(flyspray_id): - continue - - session.close_issue(flyspray_id, gitlab_url) - - -if __name__ == "__main__": - main() - - - diff --git a/roles/flyspray/files/migrated-tasks.map b/roles/flyspray/files/migrated-tasks.map deleted file mode 100644 index 6ea28549028dcb4cf9eb2d5089b36764198bbb15..0000000000000000000000000000000000000000 --- a/roles/flyspray/files/migrated-tasks.map +++ /dev/null @@ -1,96 +0,0 @@ -# archlinux-keyring -/task/56061 https://gitlab.archlinux.org/archlinux/archlinux-keyring/issues/17; -/task/68501 https://gitlab.archlinux.org/archlinux/archlinux-keyring/issues/18; -/task/37122 https://gitlab.archlinux.org/archlinux/archlinux-keyring/issues/19; -/task/37123 https://gitlab.archlinux.org/archlinux/archlinux-keyring/issues/20; -/task/37124 https://gitlab.archlinux.org/archlinux/archlinux-keyring/issues/21; -/task/37125 https://gitlab.archlinux.org/archlinux/archlinux-keyring/issues/22; -/task/37126 https://gitlab.archlinux.org/archlinux/archlinux-keyring/issues/23; -/task/37127 https://gitlab.archlinux.org/archlinux/archlinux-keyring/issues/24; -/task/37128 https://gitlab.archlinux.org/archlinux/archlinux-keyring/issues/25; -/task/37129 https://gitlab.archlinux.org/archlinux/archlinux-keyring/issues/26; -/task/38209 https://gitlab.archlinux.org/archlinux/archlinux-keyring/issues/27; -/task/41524 https://gitlab.archlinux.org/archlinux/archlinux-keyring/issues/28; -/task/41536 https://gitlab.archlinux.org/archlinux/archlinux-keyring/issues/29; -/task/52337 https://gitlab.archlinux.org/archlinux/archlinux-keyring/issues/30; -/task/52338 https://gitlab.archlinux.org/archlinux/archlinux-keyring/issues/31; -/task/52766 https://gitlab.archlinux.org/archlinux/archlinux-keyring/issues/32; -/task/55623 https://gitlab.archlinux.org/archlinux/archlinux-keyring/issues/33; -/task/55624 https://gitlab.archlinux.org/archlinux/archlinux-keyring/issues/34; -/task/55977 https://gitlab.archlinux.org/archlinux/archlinux-keyring/issues/35; -/task/55978 https://gitlab.archlinux.org/archlinux/archlinux-keyring/issues/36; -/task/55979 https://gitlab.archlinux.org/archlinux/archlinux-keyring/issues/37; -/task/56016 https://gitlab.archlinux.org/archlinux/archlinux-keyring/issues/38; -/task/57132 https://gitlab.archlinux.org/archlinux/archlinux-keyring/issues/39; -/task/57133 https://gitlab.archlinux.org/archlinux/archlinux-keyring/issues/40; -/task/58504 https://gitlab.archlinux.org/archlinux/archlinux-keyring/issues/41; -/task/58822 https://gitlab.archlinux.org/archlinux/archlinux-keyring/issues/42; -/task/58823 https://gitlab.archlinux.org/archlinux/archlinux-keyring/issues/43; -/task/59639 https://gitlab.archlinux.org/archlinux/archlinux-keyring/issues/44; -/task/60305 https://gitlab.archlinux.org/archlinux/archlinux-keyring/issues/45; -/task/60306 https://gitlab.archlinux.org/archlinux/archlinux-keyring/issues/46; -/task/60321 https://gitlab.archlinux.org/archlinux/archlinux-keyring/issues/47; -/task/64099 https://gitlab.archlinux.org/archlinux/archlinux-keyring/issues/48; -/task/64100 https://gitlab.archlinux.org/archlinux/archlinux-keyring/issues/49; -/task/64151 https://gitlab.archlinux.org/archlinux/archlinux-keyring/issues/50; -/task/64708 https://gitlab.archlinux.org/archlinux/archlinux-keyring/issues/51; -/task/65081 https://gitlab.archlinux.org/archlinux/archlinux-keyring/issues/52; -/task/67803 https://gitlab.archlinux.org/archlinux/archlinux-keyring/issues/53; -/task/67848 https://gitlab.archlinux.org/archlinux/archlinux-keyring/issues/54; -/task/68700 https://gitlab.archlinux.org/archlinux/archlinux-keyring/issues/55; -/task/69078 https://gitlab.archlinux.org/archlinux/archlinux-keyring/issues/56; -/task/37121 https://gitlab.archlinux.org/archlinux/archlinux-keyring/issues/57; -/task/37433 https://gitlab.archlinux.org/archlinux/archlinux-keyring/issues/58; -/task/38253 https://gitlab.archlinux.org/archlinux/archlinux-keyring/issues/59; -/task/38941 https://gitlab.archlinux.org/archlinux/archlinux-keyring/issues/60; -/task/41540 https://gitlab.archlinux.org/archlinux/archlinux-keyring/issues/61; -/task/41584 https://gitlab.archlinux.org/archlinux/archlinux-keyring/issues/62; -/task/42728 https://gitlab.archlinux.org/archlinux/archlinux-keyring/issues/63; -/task/43443 https://gitlab.archlinux.org/archlinux/archlinux-keyring/issues/64; -/task/43451 https://gitlab.archlinux.org/archlinux/archlinux-keyring/issues/65; -/task/44591 https://gitlab.archlinux.org/archlinux/archlinux-keyring/issues/66; -/task/44688 https://gitlab.archlinux.org/archlinux/archlinux-keyring/issues/67; -/task/46710 https://gitlab.archlinux.org/archlinux/archlinux-keyring/issues/68; -/task/47111 https://gitlab.archlinux.org/archlinux/archlinux-keyring/issues/69; -/task/50257 https://gitlab.archlinux.org/archlinux/archlinux-keyring/issues/70; -/task/50818 https://gitlab.archlinux.org/archlinux/archlinux-keyring/issues/71; -/task/51814 https://gitlab.archlinux.org/archlinux/archlinux-keyring/issues/72; -/task/52491 https://gitlab.archlinux.org/archlinux/archlinux-keyring/issues/73; -/task/52649 https://gitlab.archlinux.org/archlinux/archlinux-keyring/issues/74; -/task/53132 https://gitlab.archlinux.org/archlinux/archlinux-keyring/issues/75; -/task/54158 https://gitlab.archlinux.org/archlinux/archlinux-keyring/issues/76; -/task/55074 https://gitlab.archlinux.org/archlinux/archlinux-keyring/issues/77; -/task/55506 https://gitlab.archlinux.org/archlinux/archlinux-keyring/issues/78; -/task/55660 https://gitlab.archlinux.org/archlinux/archlinux-keyring/issues/79; -/task/55726 https://gitlab.archlinux.org/archlinux/archlinux-keyring/issues/80; -/task/56212 https://gitlab.archlinux.org/archlinux/archlinux-keyring/issues/81; -/task/56513 https://gitlab.archlinux.org/archlinux/archlinux-keyring/issues/82; -/task/56864 https://gitlab.archlinux.org/archlinux/archlinux-keyring/issues/83; -/task/57452 https://gitlab.archlinux.org/archlinux/archlinux-keyring/issues/84; -/task/57679 https://gitlab.archlinux.org/archlinux/archlinux-keyring/issues/85; -/task/57845 https://gitlab.archlinux.org/archlinux/archlinux-keyring/issues/86; -/task/59467 https://gitlab.archlinux.org/archlinux/archlinux-keyring/issues/87; -/task/59544 https://gitlab.archlinux.org/archlinux/archlinux-keyring/issues/88; -/task/59626 https://gitlab.archlinux.org/archlinux/archlinux-keyring/issues/89; -/task/59899 https://gitlab.archlinux.org/archlinux/archlinux-keyring/issues/90; -/task/60716 https://gitlab.archlinux.org/archlinux/archlinux-keyring/issues/91; -/task/60753 https://gitlab.archlinux.org/archlinux/archlinux-keyring/issues/92; -/task/60850 https://gitlab.archlinux.org/archlinux/archlinux-keyring/issues/93; -/task/60872 https://gitlab.archlinux.org/archlinux/archlinux-keyring/issues/94; -/task/60990 https://gitlab.archlinux.org/archlinux/archlinux-keyring/issues/95; -/task/61152 https://gitlab.archlinux.org/archlinux/archlinux-keyring/issues/96; -/task/62326 https://gitlab.archlinux.org/archlinux/archlinux-keyring/issues/97; -/task/63926 https://gitlab.archlinux.org/archlinux/archlinux-keyring/issues/98; -/task/63983 https://gitlab.archlinux.org/archlinux/archlinux-keyring/issues/99; -/task/64131 https://gitlab.archlinux.org/archlinux/archlinux-keyring/issues/100; -/task/66612 https://gitlab.archlinux.org/archlinux/archlinux-keyring/issues/101; -/task/66634 https://gitlab.archlinux.org/archlinux/archlinux-keyring/issues/102; -/task/66873 https://gitlab.archlinux.org/archlinux/archlinux-keyring/issues/103; -/task/67255 https://gitlab.archlinux.org/archlinux/archlinux-keyring/issues/104; -/task/67956 https://gitlab.archlinux.org/archlinux/archlinux-keyring/issues/105; -/task/68638 https://gitlab.archlinux.org/archlinux/archlinux-keyring/issues/106; -/task/68958 https://gitlab.archlinux.org/archlinux/archlinux-keyring/issues/107; -/task/69192 https://gitlab.archlinux.org/archlinux/archlinux-keyring/issues/108; -/task/48082 https://gitlab.archlinux.org/archlinux/archlinux-keyring/issues/109; -/task/59872 https://gitlab.archlinux.org/archlinux/archlinux-keyring/issues/110; -/task/63453 https://gitlab.archlinux.org/archlinux/archlinux-keyring/issues/111; diff --git a/roles/flyspray/files/removed-packages-bugs.py b/roles/flyspray/files/removed-packages-bugs.py deleted file mode 100644 index 74059bae4803be47b50e1943d8d53c244f1955ac..0000000000000000000000000000000000000000 --- a/roles/flyspray/files/removed-packages-bugs.py +++ /dev/null @@ -1,25 +0,0 @@ -#!/usr/bin/python - -from re import search -from subprocess import check_output - -import sqlalchemy - -REGEX = r'\[([A-Za-z0-9_-]+)\]' - -packages = check_output(['/usr/bin/pacman', '-Slq']).decode().splitlines() - -engine = sqlalchemy.create_engine('mysql://localhost/flyspray', connect_args={'read_default_file': '/root/.my.cnf'}) - - -with engine.connect() as conn: - result = conn.execute("SELECT task_id,item_summary from flyspray_tasks where is_closed=0 and project_id in (1,5)") - for row in result: - m = search(REGEX, row['item_summary']) - if not m: - continue - - pkgname = m.group(1) - if pkgname not in packages: - task_id = row['task_id'] - print(f'Removed package {pkgname} found - https://bugs.archlinux.org/task/{task_id}') diff --git a/roles/flyspray/handlers/main.yml b/roles/flyspray/handlers/main.yml deleted file mode 100644 index e0984639850f08611f198d9b36b6070f88b7ce34..0000000000000000000000000000000000000000 --- a/roles/flyspray/handlers/main.yml +++ /dev/null @@ -1,2 +0,0 @@ -- name: Restart php-fpm7@flyspray - service: name=php-fpm7@flyspray state=restarted diff --git a/roles/flyspray/tasks/main.yml b/roles/flyspray/tasks/main.yml deleted file mode 100644 index 95427fff74d25334b308e82313660947af62707f..0000000000000000000000000000000000000000 --- a/roles/flyspray/tasks/main.yml +++ /dev/null @@ -1,96 +0,0 @@ -- name: Run maintenance mode - include_role: - name: maintenance - vars: - service_name: "Bugtracker" - service_domain: "{{ flyspray_domain }}" - service_alternate_domains: [] - service_nginx_conf: "{{ flyspray_nginx_conf }}" - when: maintenance is defined - -- name: Install git - pacman: name=git state=present - -- name: Make flyspray user - user: name="{{ flyspray_user }}" shell=/bin/false home="{{ flyspray_dir }}" createhome=no - register: user_created - -- name: Fix home permissions - file: state=directory owner="{{ flyspray_user }}" group="{{ flyspray_user }}" path="{{ flyspray_dir }}" mode=0755 - -- name: Create ssl cert - include_role: - name: certificate - vars: - domains: ["{{ flyspray_domain }}"] - -- name: Set up nginx - template: src=nginx.d.conf.j2 dest="{{ flyspray_nginx_conf }}" owner=root group=root mode=644 - notify: - - Reload nginx - when: maintenance is not defined - tags: ['nginx'] - -- name: Install nginx migrated-tasks.map - copy: src=migrated-tasks.map dest=/etc/nginx/maps/ owner=root group=root mode=0644 - -- name: Make nginx log dir - file: path=/var/log/nginx/{{ flyspray_domain }} state=directory owner=root group=root mode=0755 - -- name: Create setup dir with write permissions - file: state=directory owner="{{ flyspray_user }}" group="{{ flyspray_user }}" path="{{ flyspray_dir }}/setup" mode=755 - when: not user_created.changed - -- name: Clone flyspray repo - git: - repo: https://gitlab.archlinux.org/archlinux/flyspray.git - version: "{{ flyspray_commit }}" - dest: "{{ flyspray_dir }}" - become: true - become_user: "{{ flyspray_user }}" - register: release - -- name: Take away setup dir write permissions - file: state=directory owner="{{ flyspray_user }}" group="{{ flyspray_user }}" path="{{ flyspray_dir }}/setup" mode=000 - -- name: Configure flyspray - template: src=flyspray.conf.php.j2 dest=/srv/http/flyspray/flyspray.conf.php owner="{{ flyspray_user }}" group="{{ flyspray_user }}" mode=0660 - register: config - no_log: true - -- name: Create flyspray db - mysql_db: name="{{ flyspray_db }}" login_host="{{ flyspray_db_host }}" login_password="{{ vault_mariadb_users.root }}" - register: db_created - -- name: Create flyspray db user - mysql_user: name={{ flyspray_db_user }} password={{ vault_flyspray_db_password }} - login_host="{{ flyspray_db_host }}" login_password="{{ vault_mariadb_users.root }}" - priv="{{ flyspray_db }}.*:ALL" - no_log: true - -- name: Configure php-fpm - template: - src=php-fpm.conf.j2 dest="/etc/php7/php-fpm.d/{{ flyspray_user }}.conf" - owner=root group=root mode=0644 - notify: - - Restart php-fpm7@flyspray - -- name: Install fail2ban register ban filter - template: src=fail2ban.filter.j2 dest=/etc/fail2ban/filter.d/nginx-flyspray-register.local owner=root group=root mode=0644 - notify: - - Restart fail2ban - tags: - - fail2ban - -- name: Install fail2ban register ban jail - template: src=fail2ban.jail.j2 dest=/etc/fail2ban/jail.d/nginx-flyspray-register.local owner=root group=root mode=0644 - notify: - - Restart fail2ban - tags: - - fail2ban - -- name: Start and enable systemd socket - service: name=php-fpm7@flyspray.socket state=started enabled=true - -- name: Copy removed package bugs script - copy: src=removed-packages-bugs.py dest=/usr/local/bin/removed-packages-bugs.py mode=0755 owner=root group=root diff --git a/roles/flyspray/templates/fail2ban.filter.j2 b/roles/flyspray/templates/fail2ban.filter.j2 deleted file mode 100644 index f8edf800f7f4c2b58063995e76eb7a54d37b388d..0000000000000000000000000000000000000000 --- a/roles/flyspray/templates/fail2ban.filter.j2 +++ /dev/null @@ -1,3 +0,0 @@ -[Definition] -failregex = ^<HOST> bugs.archlinux.org -.*POST /register HTTP/1\.." 200 -ignoreregex = diff --git a/roles/flyspray/templates/fail2ban.jail.j2 b/roles/flyspray/templates/fail2ban.jail.j2 deleted file mode 100644 index 1f2d702081b5b989698f7ea0aca3397f58dbfbaa..0000000000000000000000000000000000000000 --- a/roles/flyspray/templates/fail2ban.jail.j2 +++ /dev/null @@ -1,9 +0,0 @@ -[nginx-flyspray-register] -# bots regsiter 1 account per 10 minutes. - -enabled = true -filter = nginx-flyspray-register -logpath = /var/log/nginx/bugs.archlinux.org/access.log -findtime = 14400 # 4 hours -bantime = 1d -maxretry = 20 diff --git a/roles/flyspray/templates/flyspray.conf.php.j2 b/roles/flyspray/templates/flyspray.conf.php.j2 deleted file mode 100644 index 7fa45a2dae2632021e645dd00fcf6946b1e63905..0000000000000000000000000000000000000000 --- a/roles/flyspray/templates/flyspray.conf.php.j2 +++ /dev/null @@ -1,31 +0,0 @@ -; <?php die( 'Do not access this page directly.' ); ?> - -[general] -cookiesalt="{{ vault_flyspray_cookie_salt }}" -output_buffering="on" -address_rewriting="1" -reminder_daemon="0" -passwdcrypt="md5" -doku_url="https://wiki.archlinux.org/" -syntax_plugin="none" -update_check="0" - -[database] -dbtype="mysqli" -dbhost="{{ flyspray_db_host }}" -dbname="{{ flyspray_db }}" -dbuser="{{ flyspray_db_user }}" -dbpass="{{ vault_flyspray_db_password }}" -dbprefix="flyspray_" - -[attachments] -zip="application/zip" -tgz="application/x-gzip" -gz="application/x-gzip" -bz2="application/x-bzip2" -png="image/png" -gif="image/gif" -jpg="image/jpeg" -jpeg="image/jpeg" -html="text/html" -xml="application/xml" diff --git a/roles/flyspray/templates/nginx.d.conf.j2 b/roles/flyspray/templates/nginx.d.conf.j2 deleted file mode 100644 index 5731c2b0ba929b6eb2b328f4f8c61965454ca07d..0000000000000000000000000000000000000000 --- a/roles/flyspray/templates/nginx.d.conf.j2 +++ /dev/null @@ -1,144 +0,0 @@ -upstream flyspray { - server unix:///run/php-fpm7/flyspray.socket; -} - -server { - listen 80; - listen [::]:80; - server_name {{ flyspray_domain }}; - - access_log /var/log/nginx/{{ flyspray_domain }}/access.log reduced; - access_log /var/log/nginx/{{ flyspray_domain }}/access.log.json json_reduced; - error_log /var/log/nginx/{{ flyspray_domain }}/error.log; - - include snippets/letsencrypt.conf; - - location / { - access_log off; - return 301 https://$server_name$request_uri; - } -} - -map $uri $redirect { - default ""; - include maps/migrated-tasks.map; -} - -server { - listen 443 ssl http2; - listen [::]:443 ssl http2; - server_name {{ flyspray_domain }}; - - access_log /var/log/nginx/{{ flyspray_domain }}/access.log reduced; - access_log /var/log/nginx/{{ flyspray_domain }}/access.log.json json_reduced; - error_log /var/log/nginx/{{ flyspray_domain }}/error.log; - - ssl_certificate /etc/letsencrypt/live/{{ flyspray_domain }}/fullchain.pem; - ssl_certificate_key /etc/letsencrypt/live/{{ flyspray_domain }}/privkey.pem; - ssl_trusted_certificate /etc/letsencrypt/live/{{ flyspray_domain }}/chain.pem; - - root {{ flyspray_dir }}; - - location /.git { - deny all; - } - - location /setup/ { - deny all; - } - - location /attachments/ { - location ~ \.php$ {return 403;} - } - - location /cache/ { - location ~ \.php$ {return 403;} - } - - location ~ ^/task/(?<task_id>[0-9]+) { - if ($redirect != "") { - return 302 $redirect; - } - rewrite ^/task/[0-9]+$ /index.php?do=details&task_id=$task_id last; - rewrite ^/task/[0-9]+/comment(?<comment_id>[0-9]+)$ /index.php?do=details&task_id=$task_id&comment=$comment_id last; - rewrite ^/task/[0-9]+/depends$ /index.php?do=depends&task_id=$task_id last; - if ( $arg_prune ~ "[0-9]+" ) { - rewrite ^ /index.php?do=depends&task_id=$task_id&prune=$arg_prune last; - } - rewrite ^/task/[0-9]+/edit$ /index.php?do=details&task_id=$task_id&edit=yep last; - } - - location ~ ^/newtask { - rewrite ^/newtask$ /index.php?do=newtask last; - rewrite ^/newtask/proj(?<project_id>[0-9]+)$ /index.php?do=newtask&project=$project_id last; - } - - location ~ ^/reports$ { - rewrite ^/reports$ /index.php?do=reports last; - } - - location ~ ^/myprofile$ { - rewrite ^/myprofile$ /index.php?do=myprofile last; - } - - location ~ ^/user/(?<user_id>[0-9]+)$ { - rewrite ^/user/[0-9]+$ /index.php?do=user&id=$user_id last; - } - - location ~ ^/logout$ { - rewrite ^/logout$ /index.php?do=authenticate&logout=1 last; - } - - location ~ ^/admin { - rewrite ^/admin/(?<area_id>[a-zA-Z]+)$ /index.php?do=admin&area=$area_id last; - rewrite ^/admin/editgroup/(?<group_id>[0-9]+)$ /index.php?do=admin&area=editgroup&id=$group_id last; - } - - location ~ ^/pm { - rewrite ^/pm/proj(?<project_id>[0-9]+)/(?<area_id>[a-zA-Z]+)$ /index.php?do=pm&project=$project_id&area=$area_id last; - rewrite ^/pm/editgroup/(?<group_id>[0-9]+)$ /index.php?do=pm&area=editgroup&id=$group_id last; - } - - location ~ ^/edituser/(?<user_id>[0-9]+)$ { - rewrite ^/edituser/[0-9]+$ /index.php?do=admin&area=users&user_id=$user_id last; - } - - location ~ ^/register$ { - rewrite ^/register$ /index.php?do=register last; - } - - location ~ ^/lostpw$ { - rewrite ^/lostpw$ /index.php?do=lostpw last; - } - - location ~ ^/roadmap { - rewrite ^/roadmap$ /index.php?do=roadmap last; - rewrite ^/roadmap/proj(?<project_id>[0-9]+)$ /index.php?do=roadmap&project=$project_id last; - } - - location ~ ^/toplevel { - rewrite ^/toplevel$ /index.php?do=toplevel last; - rewrite ^/toplevel/proj(?<project_id>[0-9]+)$ /index.php?do=toplevel&project=$project_id last; - } - - location ~ ^/proj(?<project_id>[0-9]+)$ { - rewrite ^/proj[0-9]+$ /index.php?project=$project_id last; - } - - location ~ ^/index$ { - rewrite ^/index$ /index.php?do=index last; - } - - location ~ ^/index/proj(?<project_id>[0-9]+)$ { - rewrite ^/index/proj[0-9]+$ /index.php?do=index&project=$project_id last; - } - - location ~ \.php$ { - access_log /var/log/nginx/{{ flyspray_domain }}/access.log main; - access_log /var/log/nginx/{{ flyspray_domain }}/access.log.json json_main; - fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name; - try_files $uri =404; - include fastcgi_params; - fastcgi_pass flyspray; - } -} diff --git a/roles/flyspray/templates/php-fpm.conf.j2 b/roles/flyspray/templates/php-fpm.conf.j2 deleted file mode 100644 index 83a467b14f78b2d65132408341d8e32fbcbdaa26..0000000000000000000000000000000000000000 --- a/roles/flyspray/templates/php-fpm.conf.j2 +++ /dev/null @@ -1,25 +0,0 @@ -[global] -error_log = syslog -daemonize = no - -[{{ flyspray_user }}] -listen = /run/php-fpm7/flyspray.socket -listen.owner = {{ flyspray_user }} -listen.group = http -listen.mode = 0660 - -pm = dynamic -pm.max_children = 30 -pm.start_servers = 5 -pm.min_spare_servers = 2 -pm.max_spare_servers = 5 -pm.max_requests = 2000 - -php_admin_value[open_basedir] = {{ flyspray_dir }}:/tmp -php_admin_value[opcache.memory_consumption] = 128 -php_admin_value[opcache.interned_strings_buffer] = 8 -php_admin_value[opcache.max_accelerated_files] = 200 -php_admin_value[opcache.revalidate_freq] = 60 -php_admin_value[opcache.fast_shutdown] = 1 -php_admin_value[disable_functions] = virtual, dl, suexec, popen, proc_nice, proc_open, proc_terminate, exec, passthru, system, show_source, shell_exec, escapeshellcmd, escapeshellarg -php_admin_flag[allow_url_fopen] = off diff --git a/roles/grafana/files/public-dashboards/flyspray.json b/roles/grafana/files/public-dashboards/flyspray.json deleted file mode 100644 index e5178f0d06a0e9c53b299cbcb309c91e4bc5d87e..0000000000000000000000000000000000000000 --- a/roles/grafana/files/public-dashboards/flyspray.json +++ /dev/null @@ -1,130 +0,0 @@ -{ - "annotations": { - "list": [ - { - "builtIn": 1, - "datasource": { - "type": "grafana", - "uid": "-- Grafana --" - }, - "enable": true, - "hide": true, - "iconColor": "rgba(0, 211, 255, 1)", - "name": "Annotations & Alerts", - "type": "dashboard" - } - ] - }, - "editable": true, - "fiscalYearStartMonth": 0, - "graphTooltip": 0, - "id": 71, - "links": [], - "liveNow": false, - "panels": [ - { - "datasource": "Prometheus", - "description": "Currently open bugs on https://bugs.archlinux.org", - "fieldConfig": { - "defaults": { - "color": { - "mode": "palette-classic" - }, - "custom": { - "axisCenteredZero": false, - "axisColorMode": "text", - "axisLabel": "", - "axisPlacement": "auto", - "barAlignment": 0, - "drawStyle": "line", - "fillOpacity": 0, - "gradientMode": "none", - "hideFrom": { - "legend": false, - "tooltip": false, - "viz": false - }, - "lineInterpolation": "linear", - "lineWidth": 1, - "pointSize": 5, - "scaleDistribution": { - "type": "linear" - }, - "showPoints": "auto", - "spanNulls": false, - "stacking": { - "group": "A", - "mode": "none" - }, - "thresholdsStyle": { - "mode": "off" - } - }, - "mappings": [], - "thresholds": { - "mode": "absolute", - "steps": [ - { - "color": "green", - "value": null - }, - { - "color": "red", - "value": 80 - } - ] - } - }, - "overrides": [] - }, - "gridPos": { - "h": 22, - "w": 24, - "x": 0, - "y": 0 - }, - "id": 1, - "options": { - "legend": { - "calcs": [], - "displayMode": "list", - "placement": "bottom", - "showLegend": true - }, - "tooltip": { - "mode": "single", - "sort": "none" - } - }, - "targets": [ - { - "datasource": "Prometheus", - "editorMode": "builder", - "expr": "flyspray_issues", - "legendFormat": "{{ project }}", - "range": true, - "refId": "A" - } - ], - "title": "Open bugs", - "type": "timeseries" - } - ], - "refresh": "", - "schemaVersion": 38, - "style": "dark", - "tags": [], - "templating": { - "list": [] - }, - "time": { - "from": "now-6h", - "to": "now" - }, - "timepicker": {}, - "timezone": "", - "title": "Flyspray", - "uid": "c9a9b812-a067-4534-96bf-c21ba7a0c47d", - "version": 2, - "weekStart": "" -} diff --git a/roles/php7_fpm/defaults/main.yml b/roles/php7_fpm/defaults/main.yml deleted file mode 100644 index 30c66ddcee9d226169882b9585e1200248a89d83..0000000000000000000000000000000000000000 --- a/roles/php7_fpm/defaults/main.yml +++ /dev/null @@ -1,6 +0,0 @@ -php_extensions: - - curl - - zip - -zend_extensions: - - opcache diff --git a/roles/php7_fpm/files/php-fpm7@.service b/roles/php7_fpm/files/php-fpm7@.service deleted file mode 100644 index 40a42669b623707d111a49eb59a0973fca57ad26..0000000000000000000000000000000000000000 --- a/roles/php7_fpm/files/php-fpm7@.service +++ /dev/null @@ -1,45 +0,0 @@ -[Unit] -Description=PHP-FPM service for %i -After=syslog.target network.target -After=mysqld.service postfix.service -Requires=php-fpm7@.socket - -[Service] -Type=notify - -PrivateTmp=true -NoNewPrivileges=true -;PrivateNetwork=true -PrivateDevices=true - -# AURweb's rendercomment script git bindings requires access to /home: -# failed to stat '/home/aur/.gitconfig -ProtectHome=tmpfs -ProtectSystem=full -InaccessiblePaths=-/var/lib/mysql - -ProtectKernelModules=true -ProtectKernelTunables=true -ProtectControlGroups=true -ProtectKernelLogs=true -ProtectClock=true - -RestrictRealtime=true -RestrictNamespaces=true - -# Restricts the set of socket address families accessible to the processes of this unit. -# Protects against vulnerabilities such as CVE-2016-8655 -RestrictAddressFamilies=AF_INET AF_INET6 AF_NETLINK AF_UNIX - -MemoryAccounting=yes -CPUAccounting=yes -IOAccounting=yes - -User=%i -Group=%i -Environment="FPM_SOCKETS=/run/php-fpm7/%i.socket=3" -ExecStart=/usr/bin/php-fpm7 --nodaemonize --fpm-config /etc/php7/php-fpm.d/%i.conf -ExecReload=/bin/kill -USR2 $MAINPID - -[Install] -WantedBy=multi-user.target diff --git a/roles/php7_fpm/files/php-fpm7@.socket b/roles/php7_fpm/files/php-fpm7@.socket deleted file mode 100644 index 20884edec7cf795ab910750235205644af5675cf..0000000000000000000000000000000000000000 --- a/roles/php7_fpm/files/php-fpm7@.socket +++ /dev/null @@ -1,11 +0,0 @@ -[Unit] -Description=PHP-FPM socket for %i - -[Socket] -ListenStream=/run/php-fpm7/%i.socket -SocketMode=0660 -SocketUser=%i -SocketGroup=http - -[Install] -WantedBy=sockets.target diff --git a/roles/php7_fpm/handlers/main.yaml b/roles/php7_fpm/handlers/main.yaml deleted file mode 100644 index 53c25acb653061ac6585331c532338b68ce70faa..0000000000000000000000000000000000000000 --- a/roles/php7_fpm/handlers/main.yaml +++ /dev/null @@ -1,3 +0,0 @@ -- name: Daemon reload - systemd: - daemon-reload: true diff --git a/roles/php7_fpm/tasks/main.yaml b/roles/php7_fpm/tasks/main.yaml deleted file mode 100644 index e03f7336556bd33e8fc57c6f2639c976a55d584e..0000000000000000000000000000000000000000 --- a/roles/php7_fpm/tasks/main.yaml +++ /dev/null @@ -1,16 +0,0 @@ -- name: Install php7-fpm - pacman: name=php7-fpm,php7-gd,php7-pgsql state=present - -- name: Install php7-fpm units - copy: > - src={{ item }} dest=/etc/systemd/system/{{ item }} - owner=root group=root mode=0644 - with_items: - - php-fpm7@.socket - - php-fpm7@.service - notify: Daemon reload - -- name: Configure default php.ini - template: > - src=php.ini.j2 dest=/etc/php7/php.ini - owner=root group=root mode=0644 diff --git a/roles/php7_fpm/templates/php.ini.j2 b/roles/php7_fpm/templates/php.ini.j2 deleted file mode 100644 index 9327663dbdd91c34e47509cfabbc93692749b70b..0000000000000000000000000000000000000000 --- a/roles/php7_fpm/templates/php.ini.j2 +++ /dev/null @@ -1,1912 +0,0 @@ -[PHP] - -;;;;;;;;;;;;;;;;;;; -; About php.ini ; -;;;;;;;;;;;;;;;;;;; -; PHP's initialization file, generally called php.ini, is responsible for -; configuring many of the aspects of PHP's behavior. - -; PHP attempts to find and load this configuration from a number of locations. -; The following is a summary of its search order: -; 1. SAPI module specific location. -; 2. The PHPRC environment variable. (As of PHP 5.2.0) -; 3. A number of predefined registry keys on Windows (As of PHP 5.2.0) -; 4. Current working directory (except CLI) -; 5. The web server's directory (for SAPI modules), or directory of PHP -; (otherwise in Windows) -; 6. The directory from the --with-config-file-path compile time option, or the -; Windows directory (usually C:\windows) -; See the PHP docs for more specific information. -; http://php.net/configuration.file - -; The syntax of the file is extremely simple. Whitespace and lines -; beginning with a semicolon are silently ignored (as you probably guessed). -; Section headers (e.g. [Foo]) are also silently ignored, even though -; they might mean something in the future. - -; Directives following the section heading [PATH=/www/mysite] only -; apply to PHP files in the /www/mysite directory. Directives -; following the section heading [HOST=www.example.com] only apply to -; PHP files served from www.example.com. Directives set in these -; special sections cannot be overridden by user-defined INI files or -; at runtime. Currently, [PATH=] and [HOST=] sections only work under -; CGI/FastCGI. -; http://php.net/ini.sections - -; Directives are specified using the following syntax: -; directive = value -; Directive names are *case sensitive* - foo=bar is different from FOO=bar. -; Directives are variables used to configure PHP or PHP extensions. -; There is no name validation. If PHP can't find an expected -; directive because it is not set or is mistyped, a default value will be used. - -; The value can be a string, a number, a PHP constant (e.g. E_ALL or M_PI), one -; of the INI constants (On, Off, True, False, Yes, No and None) or an expression -; (e.g. E_ALL & ~E_NOTICE), a quoted string ("bar"), or a reference to a -; previously set variable or directive (e.g. ${foo}) - -; Expressions in the INI file are limited to bitwise operators and parentheses: -; | bitwise OR -; ^ bitwise XOR -; & bitwise AND -; ~ bitwise NOT -; ! boolean NOT - -; Boolean flags can be turned on using the values 1, On, True or Yes. -; They can be turned off using the values 0, Off, False or No. - -; An empty string can be denoted by simply not writing anything after the equal -; sign, or by using the None keyword: - -; foo = ; sets foo to an empty string -; foo = None ; sets foo to an empty string -; foo = "None" ; sets foo to the string 'None' - -; If you use constants in your value, and these constants belong to a -; dynamically loaded extension (either a PHP extension or a Zend extension), -; you may only use these constants *after* the line that loads the extension. - -;;;;;;;;;;;;;;;;;;; -; About this file ; -;;;;;;;;;;;;;;;;;;; -; PHP comes packaged with two INI files. One that is recommended to be used -; in production environments and one that is recommended to be used in -; development environments. - -; php.ini-production contains settings which hold security, performance and -; best practices at its core. But please be aware, these settings may break -; compatibility with older or less security conscience applications. We -; recommending using the production ini in production and testing environments. - -; php.ini-development is very similar to its production variant, except it is -; much more verbose when it comes to errors. We recommend using the -; development version only in development environments, as errors shown to -; application users can inadvertently leak otherwise secure information. - -; This is the php.ini-production INI file. - -;;;;;;;;;;;;;;;;;;; -; Quick Reference ; -;;;;;;;;;;;;;;;;;;; -; The following are all the settings which are different in either the production -; or development versions of the INIs with respect to PHP's default behavior. -; Please see the actual settings later in the document for more details as to why -; we recommend these changes in PHP's behavior. - -; display_errors -; Default Value: On -; Development Value: On -; Production Value: Off - -; display_startup_errors -; Default Value: Off -; Development Value: On -; Production Value: Off - -; error_reporting -; Default Value: E_ALL & ~E_NOTICE & ~E_STRICT & ~E_DEPRECATED -; Development Value: E_ALL -; Production Value: E_ALL & ~E_DEPRECATED & ~E_STRICT - -; log_errors -; Default Value: Off -; Development Value: On -; Production Value: On - -; max_input_time -; Default Value: -1 (Unlimited) -; Development Value: 60 (60 seconds) -; Production Value: 60 (60 seconds) - -; output_buffering -; Default Value: Off -; Development Value: 4096 -; Production Value: 4096 - -; register_argc_argv -; Default Value: On -; Development Value: Off -; Production Value: Off - -; request_order -; Default Value: None -; Development Value: "GP" -; Production Value: "GP" - -; session.gc_divisor -; Default Value: 100 -; Development Value: 1000 -; Production Value: 1000 - -; session.sid_bits_per_character -; Default Value: 4 -; Development Value: 5 -; Production Value: 5 - -; short_open_tag -; Default Value: On -; Development Value: Off -; Production Value: Off - -; variables_order -; Default Value: "EGPCS" -; Development Value: "GPCS" -; Production Value: "GPCS" - -;;;;;;;;;;;;;;;;;;;; -; php.ini Options ; -;;;;;;;;;;;;;;;;;;;; -; Name for user-defined php.ini (.htaccess) files. Default is ".user.ini" -;user_ini.filename = ".user.ini" - -; To disable this feature set this option to an empty value -;user_ini.filename = - -; TTL for user-defined php.ini files (time-to-live) in seconds. Default is 300 seconds (5 minutes) -;user_ini.cache_ttl = 300 - -;;;;;;;;;;;;;;;;;;;; -; Language Options ; -;;;;;;;;;;;;;;;;;;;; - -; Enable the PHP scripting language engine under Apache. -; http://php.net/engine -engine = On - -; This directive determines whether or not PHP will recognize code between -; <? and ?> tags as PHP source which should be processed as such. It is -; generally recommended that <?php and ?> should be used and that this feature -; should be disabled, as enabling it may result in issues when generating XML -; documents, however this remains supported for backward compatibility reasons. -; Note that this directive does not control the <?= shorthand tag, which can be -; used regardless of this directive. -; Default Value: On -; Development Value: Off -; Production Value: Off -; http://php.net/short-open-tag -short_open_tag = Off - -; The number of significant digits displayed in floating point numbers. -; http://php.net/precision -precision = 14 - -; Output buffering is a mechanism for controlling how much output data -; (excluding headers and cookies) PHP should keep internally before pushing that -; data to the client. If your application's output exceeds this setting, PHP -; will send that data in chunks of roughly the size you specify. -; Turning on this setting and managing its maximum buffer size can yield some -; interesting side-effects depending on your application and web server. -; You may be able to send headers and cookies after you've already sent output -; through print or echo. You also may see performance benefits if your server is -; emitting less packets due to buffered output versus PHP streaming the output -; as it gets it. On production servers, 4096 bytes is a good setting for performance -; reasons. -; Note: Output buffering can also be controlled via Output Buffering Control -; functions. -; Possible Values: -; On = Enabled and buffer is unlimited. (Use with caution) -; Off = Disabled -; Integer = Enables the buffer and sets its maximum size in bytes. -; Note: This directive is hardcoded to Off for the CLI SAPI -; Default Value: Off -; Development Value: 4096 -; Production Value: 4096 -; http://php.net/output-buffering -output_buffering = 4096 - -; You can redirect all of the output of your scripts to a function. For -; example, if you set output_handler to "mb_output_handler", character -; encoding will be transparently converted to the specified encoding. -; Setting any output handler automatically turns on output buffering. -; Note: People who wrote portable scripts should not depend on this ini -; directive. Instead, explicitly set the output handler using ob_start(). -; Using this ini directive may cause problems unless you know what script -; is doing. -; Note: You cannot use both "mb_output_handler" with "ob_iconv_handler" -; and you cannot use both "ob_gzhandler" and "zlib.output_compression". -; Note: output_handler must be empty if this is set 'On' !!!! -; Instead you must use zlib.output_handler. -; http://php.net/output-handler -;output_handler = - -; URL rewriter function rewrites URL on the fly by using -; output buffer. You can set target tags by this configuration. -; "form" tag is special tag. It will add hidden input tag to pass values. -; Refer to session.trans_sid_tags for usage. -; Default Value: "form=" -; Development Value: "form=" -; Production Value: "form=" -;url_rewriter.tags - -; URL rewriter will not rewrite absolute URL nor form by default. To enable -; absolute URL rewrite, allowed hosts must be defined at RUNTIME. -; Refer to session.trans_sid_hosts for more details. -; Default Value: "" -; Development Value: "" -; Production Value: "" -;url_rewriter.hosts - -; Transparent output compression using the zlib library -; Valid values for this option are 'off', 'on', or a specific buffer size -; to be used for compression (default is 4KB) -; Note: Resulting chunk size may vary due to nature of compression. PHP -; outputs chunks that are few hundreds bytes each as a result of -; compression. If you prefer a larger chunk size for better -; performance, enable output_buffering in addition. -; Note: You need to use zlib.output_handler instead of the standard -; output_handler, or otherwise the output will be corrupted. -; http://php.net/zlib.output-compression -zlib.output_compression = Off - -; http://php.net/zlib.output-compression-level -;zlib.output_compression_level = -1 - -; You cannot specify additional output handlers if zlib.output_compression -; is activated here. This setting does the same as output_handler but in -; a different order. -; http://php.net/zlib.output-handler -;zlib.output_handler = - -; Implicit flush tells PHP to tell the output layer to flush itself -; automatically after every output block. This is equivalent to calling the -; PHP function flush() after each and every call to print() or echo() and each -; and every HTML block. Turning this option on has serious performance -; implications and is generally recommended for debugging purposes only. -; http://php.net/implicit-flush -; Note: This directive is hardcoded to On for the CLI SAPI -implicit_flush = Off - -; The unserialize callback function will be called (with the undefined class' -; name as parameter), if the unserializer finds an undefined class -; which should be instantiated. A warning appears if the specified function is -; not defined, or if the function doesn't include/implement the missing class. -; So only set this entry, if you really want to implement such a -; callback-function. -unserialize_callback_func = - -; The unserialize_max_depth specifies the default depth limit for unserialized -; structures. Setting the depth limit too high may result in stack overflows -; during unserialization. The unserialize_max_depth ini setting can be -; overridden by the max_depth option on individual unserialize() calls. -; A value of 0 disables the depth limit. -;unserialize_max_depth = 4096 - -; When floats & doubles are serialized, store serialize_precision significant -; digits after the floating point. The default value ensures that when floats -; are decoded with unserialize, the data will remain the same. -; The value is also used for json_encode when encoding double values. -; If -1 is used, then dtoa mode 0 is used which automatically select the best -; precision. -serialize_precision = -1 - -; open_basedir, if set, limits all file operations to the defined directory -; and below. This directive makes most sense if used in a per-directory -; or per-virtualhost web server configuration file. -; Note: disables the realpath cache -; http://php.net/open-basedir -;open_basedir = - -; This directive allows you to disable certain functions. -; It receives a comma-delimited list of function names. -; http://php.net/disable-functions -disable_functions = - -; This directive allows you to disable certain classes. -; It receives a comma-delimited list of class names. -; http://php.net/disable-classes -disable_classes = - -; Colors for Syntax Highlighting mode. Anything that's acceptable in -; <span style="color: ???????"> would work. -; http://php.net/syntax-highlighting -;highlight.string = #DD0000 -;highlight.comment = #FF9900 -;highlight.keyword = #007700 -;highlight.default = #0000BB -;highlight.html = #000000 - -; If enabled, the request will be allowed to complete even if the user aborts -; the request. Consider enabling it if executing long requests, which may end up -; being interrupted by the user or a browser timing out. PHP's default behavior -; is to disable this feature. -; http://php.net/ignore-user-abort -;ignore_user_abort = On - -; Determines the size of the realpath cache to be used by PHP. This value should -; be increased on systems where PHP opens many files to reflect the quantity of -; the file operations performed. -; Note: if open_basedir is set, the cache is disabled -; http://php.net/realpath-cache-size -;realpath_cache_size = 4096k - -; Duration of time, in seconds for which to cache realpath information for a given -; file or directory. For systems with rarely changing files, consider increasing this -; value. -; http://php.net/realpath-cache-ttl -;realpath_cache_ttl = 120 - -; Enables or disables the circular reference collector. -; http://php.net/zend.enable-gc -zend.enable_gc = On - -; If enabled, scripts may be written in encodings that are incompatible with -; the scanner. CP936, Big5, CP949 and Shift_JIS are the examples of such -; encodings. To use this feature, mbstring extension must be enabled. -; Default: Off -;zend.multibyte = Off - -; Allows to set the default encoding for the scripts. This value will be used -; unless "declare(encoding=...)" directive appears at the top of the script. -; Only affects if zend.multibyte is set. -; Default: "" -;zend.script_encoding = - -; Allows to include or exclude arguments from stack traces generated for exceptions. -; In production, it is recommended to turn this setting on to prohibit the output -; of sensitive information in stack traces -; Default: Off -zend.exception_ignore_args = On - -;;;;;;;;;;;;;;;;; -; Miscellaneous ; -;;;;;;;;;;;;;;;;; - -; Decides whether PHP may expose the fact that it is installed on the server -; (e.g. by adding its signature to the Web server header). It is no security -; threat in any way, but it makes it possible to determine whether you use PHP -; on your server or not. -; http://php.net/expose-php -expose_php = Off - -;;;;;;;;;;;;;;;;;;; -; Resource Limits ; -;;;;;;;;;;;;;;;;;;; - -; Maximum execution time of each script, in seconds -; http://php.net/max-execution-time -; Note: This directive is hardcoded to 0 for the CLI SAPI -max_execution_time = 300 - -; Maximum amount of time each script may spend parsing request data. It's a good -; idea to limit this time on productions servers in order to eliminate unexpectedly -; long running scripts. -; Note: This directive is hardcoded to -1 for the CLI SAPI -; Default Value: -1 (Unlimited) -; Development Value: 60 (60 seconds) -; Production Value: 60 (60 seconds) -; http://php.net/max-input-time -max_input_time = 300 - -; Maximum input variable nesting level -; http://php.net/max-input-nesting-level -;max_input_nesting_level = 64 - -; How many GET/POST/COOKIE input variables may be accepted -;max_input_vars = 1000 - -; Maximum amount of memory a script may consume -; http://php.net/memory-limit -memory_limit = 128M - -;;;;;;;;;;;;;;;;;;;;;;;;;;;;;; -; Error handling and logging ; -;;;;;;;;;;;;;;;;;;;;;;;;;;;;;; - -; This directive informs PHP of which errors, warnings and notices you would like -; it to take action for. The recommended way of setting values for this -; directive is through the use of the error level constants and bitwise -; operators. The error level constants are below here for convenience as well as -; some common settings and their meanings. -; By default, PHP is set to take action on all errors, notices and warnings EXCEPT -; those related to E_NOTICE and E_STRICT, which together cover best practices and -; recommended coding standards in PHP. For performance reasons, this is the -; recommend error reporting setting. Your production server shouldn't be wasting -; resources complaining about best practices and coding standards. That's what -; development servers and development settings are for. -; Note: The php.ini-development file has this setting as E_ALL. This -; means it pretty much reports everything which is exactly what you want during -; development and early testing. -; -; Error Level Constants: -; E_ALL - All errors and warnings (includes E_STRICT as of PHP 5.4.0) -; E_ERROR - fatal run-time errors -; E_RECOVERABLE_ERROR - almost fatal run-time errors -; E_WARNING - run-time warnings (non-fatal errors) -; E_PARSE - compile-time parse errors -; E_NOTICE - run-time notices (these are warnings which often result -; from a bug in your code, but it's possible that it was -; intentional (e.g., using an uninitialized variable and -; relying on the fact it is automatically initialized to an -; empty string) -; E_STRICT - run-time notices, enable to have PHP suggest changes -; to your code which will ensure the best interoperability -; and forward compatibility of your code -; E_CORE_ERROR - fatal errors that occur during PHP's initial startup -; E_CORE_WARNING - warnings (non-fatal errors) that occur during PHP's -; initial startup -; E_COMPILE_ERROR - fatal compile-time errors -; E_COMPILE_WARNING - compile-time warnings (non-fatal errors) -; E_USER_ERROR - user-generated error message -; E_USER_WARNING - user-generated warning message -; E_USER_NOTICE - user-generated notice message -; E_DEPRECATED - warn about code that will not work in future versions -; of PHP -; E_USER_DEPRECATED - user-generated deprecation warnings -; -; Common Values: -; E_ALL (Show all errors, warnings and notices including coding standards.) -; E_ALL & ~E_NOTICE (Show all errors, except for notices) -; E_ALL & ~E_NOTICE & ~E_STRICT (Show all errors, except for notices and coding standards warnings.) -; E_COMPILE_ERROR|E_RECOVERABLE_ERROR|E_ERROR|E_CORE_ERROR (Show only errors) -; Default Value: E_ALL & ~E_NOTICE & ~E_STRICT & ~E_DEPRECATED -; Development Value: E_ALL -; Production Value: E_ALL & ~E_DEPRECATED & ~E_STRICT -; http://php.net/error-reporting -error_reporting = E_ALL & ~E_USER_NOTICE & ~E_NOTICE & ~E_DEPRECATED & ~E_STRICT - -; This directive controls whether or not and where PHP will output errors, -; notices and warnings too. Error output is very useful during development, but -; it could be very dangerous in production environments. Depending on the code -; which is triggering the error, sensitive information could potentially leak -; out of your application such as database usernames and passwords or worse. -; For production environments, we recommend logging errors rather than -; sending them to STDOUT. -; Possible Values: -; Off = Do not display any errors -; stderr = Display errors to STDERR (affects only CGI/CLI binaries!) -; On or stdout = Display errors to STDOUT -; Default Value: On -; Development Value: On -; Production Value: Off -; http://php.net/display-errors -display_errors = Off - -; The display of errors which occur during PHP's startup sequence are handled -; separately from display_errors. PHP's default behavior is to suppress those -; errors from clients. Turning the display of startup errors on can be useful in -; debugging configuration problems. We strongly recommend you -; set this to 'off' for production servers. -; Default Value: Off -; Development Value: On -; Production Value: Off -; http://php.net/display-startup-errors -display_startup_errors = Off - -; Besides displaying errors, PHP can also log errors to locations such as a -; server-specific log, STDERR, or a location specified by the error_log -; directive found below. While errors should not be displayed on productions -; servers they should still be monitored and logging is a great way to do that. -; Default Value: Off -; Development Value: On -; Production Value: On -; http://php.net/log-errors -log_errors = On - -; Set maximum length of log_errors. In error_log information about the source is -; added. The default is 1024 and 0 allows to not apply any maximum length at all. -; http://php.net/log-errors-max-len -log_errors_max_len = 1024 - -; Do not log repeated messages. Repeated errors must occur in same file on same -; line unless ignore_repeated_source is set true. -; http://php.net/ignore-repeated-errors -ignore_repeated_errors = Off - -; Ignore source of message when ignoring repeated messages. When this setting -; is On you will not log errors with repeated messages from different files or -; source lines. -; http://php.net/ignore-repeated-source -ignore_repeated_source = Off - -; If this parameter is set to Off, then memory leaks will not be shown (on -; stdout or in the log). This is only effective in a debug compile, and if -; error reporting includes E_WARNING in the allowed list -; http://php.net/report-memleaks -report_memleaks = On - -; This setting is on by default. -;report_zend_debug = 0 - -; Store the last error/warning message in $php_errormsg (boolean). Setting this value -; to On can assist in debugging and is appropriate for development servers. It should -; however be disabled on production servers. -; This directive is DEPRECATED. -; Default Value: Off -; Development Value: Off -; Production Value: Off -; http://php.net/track-errors -track_errors = Off - -; Turn off normal error reporting and emit XML-RPC error XML -; http://php.net/xmlrpc-errors -;xmlrpc_errors = 0 - -; An XML-RPC faultCode -;xmlrpc_error_number = 0 - -; When PHP displays or logs an error, it has the capability of formatting the -; error message as HTML for easier reading. This directive controls whether -; the error message is formatted as HTML or not. -; Note: This directive is hardcoded to Off for the CLI SAPI -; http://php.net/html-errors -html_errors = On - -; If html_errors is set to On *and* docref_root is not empty, then PHP -; produces clickable error messages that direct to a page describing the error -; or function causing the error in detail. -; You can download a copy of the PHP manual from http://php.net/docs -; and change docref_root to the base URL of your local copy including the -; leading '/'. You must also specify the file extension being used including -; the dot. PHP's default behavior is to leave these settings empty, in which -; case no links to documentation are generated. -; Note: Never use this feature for production boxes. -; http://php.net/docref-root -; Examples -;docref_root = "/phpmanual/" - -; http://php.net/docref-ext -;docref_ext = .html - -; String to output before an error message. PHP's default behavior is to leave -; this setting blank. -; http://php.net/error-prepend-string -; Example: -;error_prepend_string = "<span style='color: #ff0000'>" - -; String to output after an error message. PHP's default behavior is to leave -; this setting blank. -; http://php.net/error-append-string -; Example: -;error_append_string = "</span>" - -; Log errors to specified file. PHP's default behavior is to leave this value -; empty. -; http://php.net/error-log -; Example: -;error_log = php_errors.log -; Log errors to syslog (Event Log on Windows). -error_log = syslog - -; The syslog ident is a string which is prepended to every message logged -; to syslog. Only used when error_log is set to syslog. -;syslog.ident = php - -; The syslog facility is used to specify what type of program is logging -; the message. Only used when error_log is set to syslog. -;syslog.facility = user - -; Set this to disable filtering control characters (the default). -; Some loggers only accept NVT-ASCII, others accept anything that's not -; control characters. If your logger accepts everything, then no filtering -; is needed at all. -; Allowed values are: -; ascii (all printable ASCII characters and NL) -; no-ctrl (all characters except control characters) -; all (all characters) -; raw (like "all", but messages are not split at newlines) - -; http://php.net/syslog.filter -;syslog.filter = ascii - -;windows.show_crt_warning -; Default value: 0 -; Development value: 0 -; Production value: 0 - -;;;;;;;;;;;;;;;;; -; Data Handling ; -;;;;;;;;;;;;;;;;; - -; The separator used in PHP generated URLs to separate arguments. -; PHP's default setting is "&". -; http://php.net/arg-separator.output -; Example: -;arg_separator.output = "&" - -; List of separator(s) used by PHP to parse input URLs into variables. -; PHP's default setting is "&". -; NOTE: Every character in this directive is considered as separator! -; http://php.net/arg-separator.input -; Example: -;arg_separator.input = ";&" - -; This directive determines which super global arrays are registered when PHP -; starts up. G,P,C,E & S are abbreviations for the following respective super -; globals: GET, POST, COOKIE, ENV and SERVER. There is a performance penalty -; paid for the registration of these arrays and because ENV is not as commonly -; used as the others, ENV is not recommended on productions servers. You -; can still get access to the environment variables through getenv() should you -; need to. -; Default Value: "EGPCS" -; Development Value: "GPCS" -; Production Value: "GPCS"; -; http://php.net/variables-order -variables_order = "GPCS" - -; This directive determines which super global data (G,P & C) should be -; registered into the super global array REQUEST. If so, it also determines -; the order in which that data is registered. The values for this directive -; are specified in the same manner as the variables_order directive, -; EXCEPT one. Leaving this value empty will cause PHP to use the value set -; in the variables_order directive. It does not mean it will leave the super -; globals array REQUEST empty. -; Default Value: None -; Development Value: "GP" -; Production Value: "GP" -; http://php.net/request-order -request_order = "GP" - -; This directive determines whether PHP registers $argv & $argc each time it -; runs. $argv contains an array of all the arguments passed to PHP when a script -; is invoked. $argc contains an integer representing the number of arguments -; that were passed when the script was invoked. These arrays are extremely -; useful when running scripts from the command line. When this directive is -; enabled, registering these variables consumes CPU cycles and memory each time -; a script is executed. For performance reasons, this feature should be disabled -; on production servers. -; Note: This directive is hardcoded to On for the CLI SAPI -; Default Value: On -; Development Value: Off -; Production Value: Off -; http://php.net/register-argc-argv -register_argc_argv = Off - -; When enabled, the ENV, REQUEST and SERVER variables are created when they're -; first used (Just In Time) instead of when the script starts. If these -; variables are not used within a script, having this directive on will result -; in a performance gain. The PHP directive register_argc_argv must be disabled -; for this directive to have any effect. -; http://php.net/auto-globals-jit -auto_globals_jit = On - -; Whether PHP will read the POST data. -; This option is enabled by default. -; Most likely, you won't want to disable this option globally. It causes $_POST -; and $_FILES to always be empty; the only way you will be able to read the -; POST data will be through the php://input stream wrapper. This can be useful -; to proxy requests or to process the POST data in a memory efficient fashion. -; http://php.net/enable-post-data-reading -;enable_post_data_reading = Off - -; Maximum size of POST data that PHP will accept. -; Its value may be 0 to disable the limit. It is ignored if POST data reading -; is disabled through enable_post_data_reading. -; http://php.net/post-max-size -post_max_size = 16M - -; Automatically add files before PHP document. -; http://php.net/auto-prepend-file -auto_prepend_file = - -; Automatically add files after PHP document. -; http://php.net/auto-append-file -auto_append_file = - -; By default, PHP will output a media type using the Content-Type header. To -; disable this, simply set it to be empty. -; -; PHP's built-in default media type is set to text/html. -; http://php.net/default-mimetype -default_mimetype = "text/html" - -; PHP's default character set is set to UTF-8. -; http://php.net/default-charset -default_charset = "UTF-8" - -; PHP internal character encoding is set to empty. -; If empty, default_charset is used. -; http://php.net/internal-encoding -;internal_encoding = - -; PHP input character encoding is set to empty. -; If empty, default_charset is used. -; http://php.net/input-encoding -;input_encoding = - -; PHP output character encoding is set to empty. -; If empty, default_charset is used. -; See also output_buffer. -; http://php.net/output-encoding -;output_encoding = - -;;;;;;;;;;;;;;;;;;;;;;;;; -; Paths and Directories ; -;;;;;;;;;;;;;;;;;;;;;;;;; - -; UNIX: "/path1:/path2" -;include_path = ".:/php/includes" -; -; Windows: "\path1;\path2" -;include_path = ".;c:\php\includes" -; -; PHP's default setting for include_path is ".;/path/to/php/pear" -; http://php.net/include-path - -; The root of the PHP pages, used only if nonempty. -; if PHP was not compiled with FORCE_REDIRECT, you SHOULD set doc_root -; if you are running php as a CGI under any web server (other than IIS) -; see documentation for security issues. The alternate is to use the -; cgi.force_redirect configuration below -; http://php.net/doc-root -doc_root = - -; The directory under which PHP opens the script using /~username used only -; if nonempty. -; http://php.net/user-dir -user_dir = - -; Directory in which the loadable extensions (modules) reside. -; http://php.net/extension-dir -extension_dir = "/usr/lib/php7/modules/" -; On windows: -;extension_dir = "ext" - -; Directory where the temporary files should be placed. -; Defaults to the system default (see sys_get_temp_dir) -;sys_temp_dir = "/tmp" - -; Whether or not to enable the dl() function. The dl() function does NOT work -; properly in multithreaded servers, such as IIS or Zeus, and is automatically -; disabled on them. -; http://php.net/enable-dl -enable_dl = Off - -; cgi.force_redirect is necessary to provide security running PHP as a CGI under -; most web servers. Left undefined, PHP turns this on by default. You can -; turn it off here AT YOUR OWN RISK -; **You CAN safely turn this off for IIS, in fact, you MUST.** -; http://php.net/cgi.force-redirect -;cgi.force_redirect = 1 - -; if cgi.nph is enabled it will force cgi to always sent Status: 200 with -; every request. PHP's default behavior is to disable this feature. -;cgi.nph = 1 - -; if cgi.force_redirect is turned on, and you are not running under Apache or Netscape -; (iPlanet) web servers, you MAY need to set an environment variable name that PHP -; will look for to know it is OK to continue execution. Setting this variable MAY -; cause security issues, KNOW WHAT YOU ARE DOING FIRST. -; http://php.net/cgi.redirect-status-env -;cgi.redirect_status_env = - -; cgi.fix_pathinfo provides *real* PATH_INFO/PATH_TRANSLATED support for CGI. PHP's -; previous behaviour was to set PATH_TRANSLATED to SCRIPT_FILENAME, and to not grok -; what PATH_INFO is. For more information on PATH_INFO, see the cgi specs. Setting -; this to 1 will cause PHP CGI to fix its paths to conform to the spec. A setting -; of zero causes PHP to behave as before. Default is 1. You should fix your scripts -; to use SCRIPT_FILENAME rather than PATH_TRANSLATED. -; http://php.net/cgi.fix-pathinfo -;cgi.fix_pathinfo=1 - -; if cgi.discard_path is enabled, the PHP CGI binary can safely be placed outside -; of the web tree and people will not be able to circumvent .htaccess security. -;cgi.discard_path=1 - -; FastCGI under IIS supports the ability to impersonate -; security tokens of the calling client. This allows IIS to define the -; security context that the request runs under. mod_fastcgi under Apache -; does not currently support this feature (03/17/2002) -; Set to 1 if running under IIS. Default is zero. -; http://php.net/fastcgi.impersonate -;fastcgi.impersonate = 1 - -; Disable logging through FastCGI connection. PHP's default behavior is to enable -; this feature. -;fastcgi.logging = 0 - -; cgi.rfc2616_headers configuration option tells PHP what type of headers to -; use when sending HTTP response code. If set to 0, PHP sends Status: header that -; is supported by Apache. When this option is set to 1, PHP will send -; RFC2616 compliant header. -; Default is zero. -; http://php.net/cgi.rfc2616-headers -;cgi.rfc2616_headers = 0 - -; cgi.check_shebang_line controls whether CGI PHP checks for line starting with #! -; (shebang) at the top of the running script. This line might be needed if the -; script support running both as stand-alone script and via PHP CGI<. PHP in CGI -; mode skips this line and ignores its content if this directive is turned on. -; http://php.net/cgi.check-shebang-line -;cgi.check_shebang_line=1 - -;;;;;;;;;;;;;;;; -; File Uploads ; -;;;;;;;;;;;;;;;; - -; Whether to allow HTTP file uploads. -; http://php.net/file-uploads -file_uploads = On - -; Temporary directory for HTTP uploaded files (will use system default if not -; specified). -; http://php.net/upload-tmp-dir -;upload_tmp_dir = - -; Maximum allowed size for uploaded files. -; http://php.net/upload-max-filesize -upload_max_filesize = 2M - -; Maximum number of files that can be uploaded via a single request -max_file_uploads = 20 - -;;;;;;;;;;;;;;;;;; -; Fopen wrappers ; -;;;;;;;;;;;;;;;;;; - -; Whether to allow the treatment of URLs (like http:// or ftp://) as files. -; http://php.net/allow-url-fopen -allow_url_fopen = On - -; Whether to allow include/require to open URLs (like http:// or ftp://) as files. -; http://php.net/allow-url-include -allow_url_include = Off - -; Define the anonymous ftp password (your email address). PHP's default setting -; for this is empty. -; http://php.net/from -;from="john@doe.com" - -; Define the User-Agent string. PHP's default setting for this is empty. -; http://php.net/user-agent -;user_agent="PHP" - -; Default timeout for socket based streams (seconds) -; http://php.net/default-socket-timeout -default_socket_timeout = 60 - -; If your scripts have to deal with files from Macintosh systems, -; or you are running on a Mac and need to deal with files from -; unix or win32 systems, setting this flag will cause PHP to -; automatically detect the EOL character in those files so that -; fgets() and file() will work regardless of the source of the file. -; http://php.net/auto-detect-line-endings -;auto_detect_line_endings = Off - -;;;;;;;;;;;;;;;;;;;;;; -; Dynamic Extensions ; -;;;;;;;;;;;;;;;;;;;;;; - -; If you wish to have an extension loaded automatically, use the following -; syntax: -; -; extension=modulename -; -; For example: -; -; extension=mysqli -; -; When the extension library to load is not located in the default extension -; directory, You may specify an absolute path to the library file: -; -; extension=/path/to/extension/mysqli.so -; -; Note : The syntax used in previous PHP versions ('extension=<ext>.so' and -; 'extension='php_<ext>.dll') is supported for legacy reasons and may be -; deprecated in a future PHP major version. So, when it is possible, please -; move to the new ('extension=<ext>) syntax. -; -{% for ext in php_extensions %} -extension={{ ext }}.so -{% endfor %} - -{% for ext in zend_extensions %} -zend_extension={{ ext }}.so -{% endfor %} - -;;;;;;;;;;;;;;;;;;; -; Module Settings ; -;;;;;;;;;;;;;;;;;;; - -[CLI Server] -; Whether the CLI web server uses ANSI color coding in its terminal output. -cli_server.color = On - -[Date] -; Defines the default timezone used by the date functions -; http://php.net/date.timezone -;date.timezone = -date.timezone = UTC - -; http://php.net/date.default-latitude -;date.default_latitude = 31.7667 - -; http://php.net/date.default-longitude -;date.default_longitude = 35.2333 - -; http://php.net/date.sunrise-zenith -;date.sunrise_zenith = 90.583333 - -; http://php.net/date.sunset-zenith -;date.sunset_zenith = 90.583333 - -[filter] -; http://php.net/filter.default -;filter.default = unsafe_raw - -; http://php.net/filter.default-flags -;filter.default_flags = - -[iconv] -; Use of this INI entry is deprecated, use global input_encoding instead. -; If empty, default_charset or input_encoding or iconv.input_encoding is used. -; The precedence is: default_charset < input_encoding < iconv.input_encoding -;iconv.input_encoding = - -; Use of this INI entry is deprecated, use global internal_encoding instead. -; If empty, default_charset or internal_encoding or iconv.internal_encoding is used. -; The precedence is: default_charset < internal_encoding < iconv.internal_encoding -;iconv.internal_encoding = - -; Use of this INI entry is deprecated, use global output_encoding instead. -; If empty, default_charset or output_encoding or iconv.output_encoding is used. -; The precedence is: default_charset < output_encoding < iconv.output_encoding -; To use an output encoding conversion, iconv's output handler must be set -; otherwise output encoding conversion cannot be performed. -;iconv.output_encoding = - -[imap] -; rsh/ssh logins are disabled by default. Use this INI entry if you want to -; enable them. Note that the IMAP library does not filter mailbox names before -; passing them to rsh/ssh command, thus passing untrusted data to this function -; with rsh/ssh enabled is insecure. -;imap.enable_insecure_rsh=0 - -[intl] -;intl.default_locale = -; This directive allows you to produce PHP errors when some error -; happens within intl functions. The value is the level of the error produced. -; Default is 0, which does not produce any errors. -;intl.error_level = E_WARNING -;intl.use_exceptions = 0 - -[sqlite3] -; Directory pointing to SQLite3 extensions -; http://php.net/sqlite3.extension-dir -;sqlite3.extension_dir = - -; SQLite defensive mode flag (only available from SQLite 3.26+) -; When the defensive flag is enabled, language features that allow ordinary -; SQL to deliberately corrupt the database file are disabled. This forbids -; writing directly to the schema, shadow tables (eg. FTS data tables), or -; the sqlite_dbpage virtual table. -; https://www.sqlite.org/c3ref/c_dbconfig_defensive.html -; (for older SQLite versions, this flag has no use) -sqlite3.defensive = 1 - -[Pcre] -; PCRE library backtracking limit. -; http://php.net/pcre.backtrack-limit -;pcre.backtrack_limit=100000 - -; PCRE library recursion limit. -; Please note that if you set this value to a high number you may consume all -; the available process stack and eventually crash PHP (due to reaching the -; stack size limit imposed by the Operating System). -; http://php.net/pcre.recursion-limit -;pcre.recursion_limit=100000 - -; Enables or disables JIT compilation of patterns. This requires the PCRE -; library to be compiled with JIT support. -;pcre.jit=1 - -[Pdo] -; Whether to pool ODBC connections. Can be one of "strict", "relaxed" or "off" -; http://php.net/pdo-odbc.connection-pooling -;pdo_odbc.connection_pooling=strict - -;pdo_odbc.db2_instance_name - -[Pdo_mysql] -; Default socket name for local MySQL connects. If empty, uses the built-in -; MySQL defaults. -pdo_mysql.default_socket= - -[Phar] -; http://php.net/phar.readonly -;phar.readonly = On - -; http://php.net/phar.require-hash -;phar.require_hash = On - -;phar.cache_list = - -[mail function] -; For Win32 only. -; http://php.net/smtp -SMTP = localhost -; http://php.net/smtp-port -smtp_port = 25 - -; For Win32 only. -; http://php.net/sendmail-from -;sendmail_from = me@example.com - -; For Unix only. You may supply arguments as well (default: "sendmail -t -i"). -; http://php.net/sendmail-path -;sendmail_path = - -; Force the addition of the specified parameters to be passed as extra parameters -; to the sendmail binary. These parameters will always replace the value of -; the 5th parameter to mail(). -;mail.force_extra_parameters = - -; Add X-PHP-Originating-Script: that will include uid of the script followed by the filename -mail.add_x_header = On - -; The path to a log file that will log all mail() calls. Log entries include -; the full path of the script, line number, To address and headers. -;mail.log = -; Log mail to syslog (Event Log on Windows). -;mail.log = syslog - -[ODBC] -; http://php.net/odbc.default-db -;odbc.default_db = Not yet implemented - -; http://php.net/odbc.default-user -;odbc.default_user = Not yet implemented - -; http://php.net/odbc.default-pw -;odbc.default_pw = Not yet implemented - -; Controls the ODBC cursor model. -; Default: SQL_CURSOR_STATIC (default). -;odbc.default_cursortype - -; Allow or prevent persistent links. -; http://php.net/odbc.allow-persistent -odbc.allow_persistent = On - -; Check that a connection is still valid before reuse. -; http://php.net/odbc.check-persistent -odbc.check_persistent = On - -; Maximum number of persistent links. -1 means no limit. -; http://php.net/odbc.max-persistent -odbc.max_persistent = -1 - -; Maximum number of links (persistent + non-persistent). -1 means no limit. -; http://php.net/odbc.max-links -odbc.max_links = -1 - -; Handling of LONG fields. Returns number of bytes to variables. 0 means -; passthru. -; http://php.net/odbc.defaultlrl -odbc.defaultlrl = 4096 - -; Handling of binary data. 0 means passthru, 1 return as is, 2 convert to char. -; See the documentation on odbc_binmode and odbc_longreadlen for an explanation -; of odbc.defaultlrl and odbc.defaultbinmode -; http://php.net/odbc.defaultbinmode -odbc.defaultbinmode = 1 - -[MySQLi] - -; Maximum number of persistent links. -1 means no limit. -; http://php.net/mysqli.max-persistent -mysqli.max_persistent = -1 - -; Allow accessing, from PHP's perspective, local files with LOAD DATA statements -; http://php.net/mysqli.allow_local_infile -;mysqli.allow_local_infile = On - -; Allow or prevent persistent links. -; http://php.net/mysqli.allow-persistent -mysqli.allow_persistent = On - -; Maximum number of links. -1 means no limit. -; http://php.net/mysqli.max-links -mysqli.max_links = -1 - -; Default port number for mysqli_connect(). If unset, mysqli_connect() will use -; the $MYSQL_TCP_PORT or the mysql-tcp entry in /etc/services or the -; compile-time value defined MYSQL_PORT (in that order). Win32 will only look -; at MYSQL_PORT. -; http://php.net/mysqli.default-port -mysqli.default_port = 3306 - -; Default socket name for local MySQL connects. If empty, uses the built-in -; MySQL defaults. -; http://php.net/mysqli.default-socket -mysqli.default_socket = - -; Default host for mysqli_connect() (doesn't apply in safe mode). -; http://php.net/mysqli.default-host -mysqli.default_host = - -; Default user for mysqli_connect() (doesn't apply in safe mode). -; http://php.net/mysqli.default-user -mysqli.default_user = - -; Default password for mysqli_connect() (doesn't apply in safe mode). -; Note that this is generally a *bad* idea to store passwords in this file. -; *Any* user with PHP access can run 'echo get_cfg_var("mysqli.default_pw") -; and reveal this password! And of course, any users with read access to this -; file will be able to reveal the password as well. -; http://php.net/mysqli.default-pw -mysqli.default_pw = - -; Allow or prevent reconnect -mysqli.reconnect = Off - -[mysqlnd] -; Enable / Disable collection of general statistics by mysqlnd which can be -; used to tune and monitor MySQL operations. -mysqlnd.collect_statistics = On - -; Enable / Disable collection of memory usage statistics by mysqlnd which can be -; used to tune and monitor MySQL operations. -mysqlnd.collect_memory_statistics = Off - -; Records communication from all extensions using mysqlnd to the specified log -; file. -; http://php.net/mysqlnd.debug -;mysqlnd.debug = - -; Defines which queries will be logged. -;mysqlnd.log_mask = 0 - -; Default size of the mysqlnd memory pool, which is used by result sets. -;mysqlnd.mempool_default_size = 16000 - -; Size of a pre-allocated buffer used when sending commands to MySQL in bytes. -;mysqlnd.net_cmd_buffer_size = 2048 - -; Size of a pre-allocated buffer used for reading data sent by the server in -; bytes. -;mysqlnd.net_read_buffer_size = 32768 - -; Timeout for network requests in seconds. -;mysqlnd.net_read_timeout = 31536000 - -; SHA-256 Authentication Plugin related. File with the MySQL server public RSA -; key. -;mysqlnd.sha256_server_public_key = - -[OCI8] - -; Connection: Enables privileged connections using external -; credentials (OCI_SYSOPER, OCI_SYSDBA) -; http://php.net/oci8.privileged-connect -;oci8.privileged_connect = Off - -; Connection: The maximum number of persistent OCI8 connections per -; process. Using -1 means no limit. -; http://php.net/oci8.max-persistent -;oci8.max_persistent = -1 - -; Connection: The maximum number of seconds a process is allowed to -; maintain an idle persistent connection. Using -1 means idle -; persistent connections will be maintained forever. -; http://php.net/oci8.persistent-timeout -;oci8.persistent_timeout = -1 - -; Connection: The number of seconds that must pass before issuing a -; ping during oci_pconnect() to check the connection validity. When -; set to 0, each oci_pconnect() will cause a ping. Using -1 disables -; pings completely. -; http://php.net/oci8.ping-interval -;oci8.ping_interval = 60 - -; Connection: Set this to a user chosen connection class to be used -; for all pooled server requests with Oracle 11g Database Resident -; Connection Pooling (DRCP). To use DRCP, this value should be set to -; the same string for all web servers running the same application, -; the database pool must be configured, and the connection string must -; specify to use a pooled server. -;oci8.connection_class = - -; High Availability: Using On lets PHP receive Fast Application -; Notification (FAN) events generated when a database node fails. The -; database must also be configured to post FAN events. -;oci8.events = Off - -; Tuning: This option enables statement caching, and specifies how -; many statements to cache. Using 0 disables statement caching. -; http://php.net/oci8.statement-cache-size -;oci8.statement_cache_size = 20 - -; Tuning: Enables statement prefetching and sets the default number of -; rows that will be fetched automatically after statement execution. -; http://php.net/oci8.default-prefetch -;oci8.default_prefetch = 100 - -; Compatibility. Using On means oci_close() will not close -; oci_connect() and oci_new_connect() connections. -; http://php.net/oci8.old-oci-close-semantics -;oci8.old_oci_close_semantics = Off - -[PostgreSQL] -; Allow or prevent persistent links. -; http://php.net/pgsql.allow-persistent -pgsql.allow_persistent = On - -; Detect broken persistent links always with pg_pconnect(). -; Auto reset feature requires a little overheads. -; http://php.net/pgsql.auto-reset-persistent -pgsql.auto_reset_persistent = Off - -; Maximum number of persistent links. -1 means no limit. -; http://php.net/pgsql.max-persistent -pgsql.max_persistent = -1 - -; Maximum number of links (persistent+non persistent). -1 means no limit. -; http://php.net/pgsql.max-links -pgsql.max_links = -1 - -; Ignore PostgreSQL backends Notice message or not. -; Notice message logging require a little overheads. -; http://php.net/pgsql.ignore-notice -pgsql.ignore_notice = 0 - -; Log PostgreSQL backends Notice message or not. -; Unless pgsql.ignore_notice=0, module cannot log notice message. -; http://php.net/pgsql.log-notice -pgsql.log_notice = 0 - -[bcmath] -; Number of decimal digits for all bcmath functions. -; http://php.net/bcmath.scale -bcmath.scale = 0 - -[browscap] -; http://php.net/browscap -;browscap = extra/browscap.ini - -[Session] -; Handler used to store/retrieve data. -; http://php.net/session.save-handler -session.save_handler = files - -; Argument passed to save_handler. In the case of files, this is the path -; where data files are stored. Note: Windows users have to change this -; variable in order to use PHP's session functions. -; -; The path can be defined as: -; -; session.save_path = "N;/path" -; -; where N is an integer. Instead of storing all the session files in -; /path, what this will do is use subdirectories N-levels deep, and -; store the session data in those directories. This is useful if -; your OS has problems with many files in one directory, and is -; a more efficient layout for servers that handle many sessions. -; -; NOTE 1: PHP will not create this directory structure automatically. -; You can use the script in the ext/session dir for that purpose. -; NOTE 2: See the section on garbage collection below if you choose to -; use subdirectories for session storage -; -; The file storage module creates files using mode 600 by default. -; You can change that by using -; -; session.save_path = "N;MODE;/path" -; -; where MODE is the octal representation of the mode. Note that this -; does not overwrite the process's umask. -; http://php.net/session.save-path -;session.save_path = "/tmp" - -; Whether to use strict session mode. -; Strict session mode does not accept an uninitialized session ID, and -; regenerates the session ID if the browser sends an uninitialized session ID. -; Strict mode protects applications from session fixation via a session adoption -; vulnerability. It is disabled by default for maximum compatibility, but -; enabling it is encouraged. -; https://wiki.php.net/rfc/strict_sessions -session.use_strict_mode = 0 - -; Whether to use cookies. -; http://php.net/session.use-cookies -session.use_cookies = 1 - -; http://php.net/session.cookie-secure -;session.cookie_secure = - -; This option forces PHP to fetch and use a cookie for storing and maintaining -; the session id. We encourage this operation as it's very helpful in combating -; session hijacking when not specifying and managing your own session id. It is -; not the be-all and end-all of session hijacking defense, but it's a good start. -; http://php.net/session.use-only-cookies -session.use_only_cookies = 1 - -; Name of the session (used as cookie name). -; http://php.net/session.name -session.name = PHPSESSID - -; Initialize session on request startup. -; http://php.net/session.auto-start -session.auto_start = 0 - -; Lifetime in seconds of cookie or, if 0, until browser is restarted. -; http://php.net/session.cookie-lifetime -session.cookie_lifetime = 0 - -; The path for which the cookie is valid. -; http://php.net/session.cookie-path -session.cookie_path = / - -; The domain for which the cookie is valid. -; http://php.net/session.cookie-domain -session.cookie_domain = - -; Whether or not to add the httpOnly flag to the cookie, which makes it -; inaccessible to browser scripting languages such as JavaScript. -; http://php.net/session.cookie-httponly -session.cookie_httponly = - -; Current valid values are "Strict", "Lax" or "None". When using "None", -; make sure to include the quotes, as `none` is interpreted like `false` in ini files. -; https://tools.ietf.org/html/draft-west-first-party-cookies-07 -session.cookie_samesite = - -; Handler used to serialize data. php is the standard serializer of PHP. -; http://php.net/session.serialize-handler -session.serialize_handler = php - -; Defines the probability that the 'garbage collection' process is started on every -; session initialization. The probability is calculated by using gc_probability/gc_divisor, -; e.g. 1/100 means there is a 1% chance that the GC process starts on each request. -; Default Value: 1 -; Development Value: 1 -; Production Value: 1 -; http://php.net/session.gc-probability -session.gc_probability = 1 - -; Defines the probability that the 'garbage collection' process is started on every -; session initialization. The probability is calculated by using gc_probability/gc_divisor, -; e.g. 1/100 means there is a 1% chance that the GC process starts on each request. -; For high volume production servers, using a value of 1000 is a more efficient approach. -; Default Value: 100 -; Development Value: 1000 -; Production Value: 1000 -; http://php.net/session.gc-divisor -session.gc_divisor = 1000 - -; After this number of seconds, stored data will be seen as 'garbage' and -; cleaned up by the garbage collection process. -; http://php.net/session.gc-maxlifetime -session.gc_maxlifetime = 1440 - -; NOTE: If you are using the subdirectory option for storing session files -; (see session.save_path above), then garbage collection does *not* -; happen automatically. You will need to do your own garbage -; collection through a shell script, cron entry, or some other method. -; For example, the following script is the equivalent of setting -; session.gc_maxlifetime to 1440 (1440 seconds = 24 minutes): -; find /path/to/sessions -cmin +24 -type f | xargs rm - -; Check HTTP Referer to invalidate externally stored URLs containing ids. -; HTTP_REFERER has to contain this substring for the session to be -; considered as valid. -; http://php.net/session.referer-check -session.referer_check = - -; Set to {nocache,private,public,} to determine HTTP caching aspects -; or leave this empty to avoid sending anti-caching headers. -; http://php.net/session.cache-limiter -session.cache_limiter = nocache - -; Document expires after n minutes. -; http://php.net/session.cache-expire -session.cache_expire = 180 - -; trans sid support is disabled by default. -; Use of trans sid may risk your users' security. -; Use this option with caution. -; - User may send URL contains active session ID -; to other person via. email/irc/etc. -; - URL that contains active session ID may be stored -; in publicly accessible computer. -; - User may access your site with the same session ID -; always using URL stored in browser's history or bookmarks. -; http://php.net/session.use-trans-sid -session.use_trans_sid = 0 - -; Set session ID character length. This value could be between 22 to 256. -; Shorter length than default is supported only for compatibility reason. -; Users should use 32 or more chars. -; http://php.net/session.sid-length -; Default Value: 32 -; Development Value: 26 -; Production Value: 26 -session.sid_length = 26 - -; The URL rewriter will look for URLs in a defined set of HTML tags. -; <form> is special; if you include them here, the rewriter will -; add a hidden <input> field with the info which is otherwise appended -; to URLs. <form> tag's action attribute URL will not be modified -; unless it is specified. -; Note that all valid entries require a "=", even if no value follows. -; Default Value: "a=href,area=href,frame=src,form=" -; Development Value: "a=href,area=href,frame=src,form=" -; Production Value: "a=href,area=href,frame=src,form=" -; http://php.net/url-rewriter.tags -session.trans_sid_tags = "a=href,area=href,frame=src,form=" - -; URL rewriter does not rewrite absolute URLs by default. -; To enable rewrites for absolute paths, target hosts must be specified -; at RUNTIME. i.e. use ini_set() -; <form> tags is special. PHP will check action attribute's URL regardless -; of session.trans_sid_tags setting. -; If no host is defined, HTTP_HOST will be used for allowed host. -; Example value: php.net,www.php.net,wiki.php.net -; Use "," for multiple hosts. No spaces are allowed. -; Default Value: "" -; Development Value: "" -; Production Value: "" -;session.trans_sid_hosts="" - -; Define how many bits are stored in each character when converting -; the binary hash data to something readable. -; Possible values: -; 4 (4 bits: 0-9, a-f) -; 5 (5 bits: 0-9, a-v) -; 6 (6 bits: 0-9, a-z, A-Z, "-", ",") -; Default Value: 4 -; Development Value: 5 -; Production Value: 5 -; http://php.net/session.hash-bits-per-character -session.sid_bits_per_character = 5 - -; Enable upload progress tracking in $_SESSION -; Default Value: On -; Development Value: On -; Production Value: On -; http://php.net/session.upload-progress.enabled -;session.upload_progress.enabled = On - -; Cleanup the progress information as soon as all POST data has been read -; (i.e. upload completed). -; Default Value: On -; Development Value: On -; Production Value: On -; http://php.net/session.upload-progress.cleanup -;session.upload_progress.cleanup = On - -; A prefix used for the upload progress key in $_SESSION -; Default Value: "upload_progress_" -; Development Value: "upload_progress_" -; Production Value: "upload_progress_" -; http://php.net/session.upload-progress.prefix -;session.upload_progress.prefix = "upload_progress_" - -; The index name (concatenated with the prefix) in $_SESSION -; containing the upload progress information -; Default Value: "PHP_SESSION_UPLOAD_PROGRESS" -; Development Value: "PHP_SESSION_UPLOAD_PROGRESS" -; Production Value: "PHP_SESSION_UPLOAD_PROGRESS" -; http://php.net/session.upload-progress.name -;session.upload_progress.name = "PHP_SESSION_UPLOAD_PROGRESS" - -; How frequently the upload progress should be updated. -; Given either in percentages (per-file), or in bytes -; Default Value: "1%" -; Development Value: "1%" -; Production Value: "1%" -; http://php.net/session.upload-progress.freq -;session.upload_progress.freq = "1%" - -; The minimum delay between updates, in seconds -; Default Value: 1 -; Development Value: 1 -; Production Value: 1 -; http://php.net/session.upload-progress.min-freq -;session.upload_progress.min_freq = "1" - -; Only write session data when session data is changed. Enabled by default. -; http://php.net/session.lazy-write -;session.lazy_write = On - -[Assertion] -; Switch whether to compile assertions at all (to have no overhead at run-time) -; -1: Do not compile at all -; 0: Jump over assertion at run-time -; 1: Execute assertions -; Changing from or to a negative value is only possible in php.ini! (For turning assertions on and off at run-time, see assert.active, when zend.assertions = 1) -; Default Value: 1 -; Development Value: 1 -; Production Value: -1 -; http://php.net/zend.assertions -zend.assertions = -1 - -; Assert(expr); active by default. -; http://php.net/assert.active -;assert.active = On - -; Throw an AssertionError on failed assertions -; http://php.net/assert.exception -;assert.exception = On - -; Issue a PHP warning for each failed assertion. (Overridden by assert.exception if active) -; http://php.net/assert.warning -;assert.warning = On - -; Don't bail out by default. -; http://php.net/assert.bail -;assert.bail = Off - -; User-function to be called if an assertion fails. -; http://php.net/assert.callback -;assert.callback = 0 - -; Eval the expression with current error_reporting(). Set to true if you want -; error_reporting(0) around the eval(). -; http://php.net/assert.quiet-eval -;assert.quiet_eval = 0 - -[COM] -; path to a file containing GUIDs, IIDs or filenames of files with TypeLibs -; http://php.net/com.typelib-file -;com.typelib_file = - -; allow Distributed-COM calls -; http://php.net/com.allow-dcom -;com.allow_dcom = true - -; autoregister constants of a component's typlib on com_load() -; http://php.net/com.autoregister-typelib -;com.autoregister_typelib = true - -; register constants casesensitive -; http://php.net/com.autoregister-casesensitive -;com.autoregister_casesensitive = false - -; show warnings on duplicate constant registrations -; http://php.net/com.autoregister-verbose -;com.autoregister_verbose = true - -; The default character set code-page to use when passing strings to and from COM objects. -; Default: system ANSI code page -;com.code_page= - -[mbstring] -; language for internal character representation. -; This affects mb_send_mail() and mbstring.detect_order. -; http://php.net/mbstring.language -;mbstring.language = Japanese - -; Use of this INI entry is deprecated, use global internal_encoding instead. -; internal/script encoding. -; Some encoding cannot work as internal encoding. (e.g. SJIS, BIG5, ISO-2022-*) -; If empty, default_charset or internal_encoding or iconv.internal_encoding is used. -; The precedence is: default_charset < internal_encoding < iconv.internal_encoding -;mbstring.internal_encoding = - -; Use of this INI entry is deprecated, use global input_encoding instead. -; http input encoding. -; mbstring.encoding_translation = On is needed to use this setting. -; If empty, default_charset or input_encoding or mbstring.input is used. -; The precedence is: default_charset < input_encoding < mbsting.http_input -; http://php.net/mbstring.http-input -;mbstring.http_input = - -; Use of this INI entry is deprecated, use global output_encoding instead. -; http output encoding. -; mb_output_handler must be registered as output buffer to function. -; If empty, default_charset or output_encoding or mbstring.http_output is used. -; The precedence is: default_charset < output_encoding < mbstring.http_output -; To use an output encoding conversion, mbstring's output handler must be set -; otherwise output encoding conversion cannot be performed. -; http://php.net/mbstring.http-output -;mbstring.http_output = - -; enable automatic encoding translation according to -; mbstring.internal_encoding setting. Input chars are -; converted to internal encoding by setting this to On. -; Note: Do _not_ use automatic encoding translation for -; portable libs/applications. -; http://php.net/mbstring.encoding-translation -;mbstring.encoding_translation = Off - -; automatic encoding detection order. -; "auto" detect order is changed according to mbstring.language -; http://php.net/mbstring.detect-order -;mbstring.detect_order = auto - -; substitute_character used when character cannot be converted -; one from another -; http://php.net/mbstring.substitute-character -;mbstring.substitute_character = none - -; overload(replace) single byte functions by mbstring functions. -; mail(), ereg(), etc are overloaded by mb_send_mail(), mb_ereg(), -; etc. Possible values are 0,1,2,4 or combination of them. -; For example, 7 for overload everything. -; 0: No overload -; 1: Overload mail() function -; 2: Overload str*() functions -; 4: Overload ereg*() functions -; http://php.net/mbstring.func-overload -;mbstring.func_overload = 0 - -; enable strict encoding detection. -; Default: Off -;mbstring.strict_detection = On - -; This directive specifies the regex pattern of content types for which mb_output_handler() -; is activated. -; Default: mbstring.http_output_conv_mimetype=^(text/|application/xhtml\+xml) -;mbstring.http_output_conv_mimetype= - -; This directive specifies maximum stack depth for mbstring regular expressions. It is similar -; to the pcre.recursion_limit for PCRE. -; Default: 100000 -;mbstring.regex_stack_limit=100000 - -; This directive specifies maximum retry count for mbstring regular expressions. It is similar -; to the pcre.backtrack_limit for PCRE. -; Default: 1000000 -;mbstring.regex_retry_limit=1000000 - -[gd] -; Tell the jpeg decode to ignore warnings and try to create -; a gd image. The warning will then be displayed as notices -; disabled by default -; http://php.net/gd.jpeg-ignore-warning -;gd.jpeg_ignore_warning = 1 - -[exif] -; Exif UNICODE user comments are handled as UCS-2BE/UCS-2LE and JIS as JIS. -; With mbstring support this will automatically be converted into the encoding -; given by corresponding encode setting. When empty mbstring.internal_encoding -; is used. For the decode settings you can distinguish between motorola and -; intel byte order. A decode setting cannot be empty. -; http://php.net/exif.encode-unicode -;exif.encode_unicode = ISO-8859-15 - -; http://php.net/exif.decode-unicode-motorola -;exif.decode_unicode_motorola = UCS-2BE - -; http://php.net/exif.decode-unicode-intel -;exif.decode_unicode_intel = UCS-2LE - -; http://php.net/exif.encode-jis -;exif.encode_jis = - -; http://php.net/exif.decode-jis-motorola -;exif.decode_jis_motorola = JIS - -; http://php.net/exif.decode-jis-intel -;exif.decode_jis_intel = JIS - -[Tidy] -; The path to a default tidy configuration file to use when using tidy -; http://php.net/tidy.default-config -;tidy.default_config = /usr/local/lib/php/default.tcfg - -; Should tidy clean and repair output automatically? -; WARNING: Do not use this option if you are generating non-html content -; such as dynamic images -; http://php.net/tidy.clean-output -tidy.clean_output = Off - -[soap] -; Enables or disables WSDL caching feature. -; http://php.net/soap.wsdl-cache-enabled -soap.wsdl_cache_enabled=1 - -; Sets the directory name where SOAP extension will put cache files. -; http://php.net/soap.wsdl-cache-dir -soap.wsdl_cache_dir="/tmp" - -; (time to live) Sets the number of second while cached file will be used -; instead of original one. -; http://php.net/soap.wsdl-cache-ttl -soap.wsdl_cache_ttl=86400 - -; Sets the size of the cache limit. (Max. number of WSDL files to cache) -soap.wsdl_cache_limit = 5 - -[sysvshm] -; A default size of the shared memory segment -;sysvshm.init_mem = 10000 - -[ldap] -; Sets the maximum number of open links or -1 for unlimited. -ldap.max_links = -1 - -[dba] -;dba.default_handler= - -[opcache] -; Determines if Zend OPCache is enabled -opcache.enable=1 - -; Determines if Zend OPCache is enabled for the CLI version of PHP -opcache.enable_cli=1 - -; The OPcache shared memory storage size. -;opcache.memory_consumption=128 - -; The amount of memory for interned strings in Mbytes. -;opcache.interned_strings_buffer=8 - -; The maximum number of keys (scripts) in the OPcache hash table. -; Only numbers between 200 and 1000000 are allowed. -;opcache.max_accelerated_files=10000 - -; The maximum percentage of "wasted" memory until a restart is scheduled. -;opcache.max_wasted_percentage=5 - -; When this directive is enabled, the OPcache appends the current working -; directory to the script key, thus eliminating possible collisions between -; files with the same name (basename). Disabling the directive improves -; performance, but may break existing applications. -opcache.use_cwd=1 - -; When disabled, you must reset the OPcache manually or restart the -; webserver for changes to the filesystem to take effect. -;opcache.validate_timestamps=1 - -; How often (in seconds) to check file timestamps for changes to the shared -; memory storage allocation. ("1" means validate once per second, but only -; once per request. "0" means always validate) -;opcache.revalidate_freq=2 - -; Enables or disables file search in include_path optimization -;opcache.revalidate_path=0 - -; If disabled, all PHPDoc comments are dropped from the code to reduce the -; size of the optimized code. -;opcache.save_comments=1 - -; Allow file existence override (file_exists, etc.) performance feature. -;opcache.enable_file_override=0 - -; A bitmask, where each bit enables or disables the appropriate OPcache -; passes -;opcache.optimization_level=0x7FFFBFFF - -;opcache.dups_fix=0 - -; The location of the OPcache blacklist file (wildcards allowed). -; Each OPcache blacklist file is a text file that holds the names of files -; that should not be accelerated. The file format is to add each filename -; to a new line. The filename may be a full path or just a file prefix -; (i.e., /var/www/x blacklists all the files and directories in /var/www -; that start with 'x'). Line starting with a ; are ignored (comments). -;opcache.blacklist_filename= - -; Allows exclusion of large files from being cached. By default all files -; are cached. -;opcache.max_file_size=0 - -; Check the cache checksum each N requests. -; The default value of "0" means that the checks are disabled. -;opcache.consistency_checks=0 - -; How long to wait (in seconds) for a scheduled restart to begin if the cache -; is not being accessed. -;opcache.force_restart_timeout=180 - -; OPcache error_log file name. Empty string assumes "stderr". -;opcache.error_log= - -; All OPcache errors go to the Web server log. -; By default, only fatal errors (level 0) or errors (level 1) are logged. -; You can also enable warnings (level 2), info messages (level 3) or -; debug messages (level 4). -;opcache.log_verbosity_level=1 - -; Preferred Shared Memory back-end. Leave empty and let the system decide. -;opcache.preferred_memory_model= - -; Protect the shared memory from unexpected writing during script execution. -; Useful for internal debugging only. -;opcache.protect_memory=0 - -; Allows calling OPcache API functions only from PHP scripts which path is -; started from specified string. The default "" means no restriction -;opcache.restrict_api= - -; Mapping base of shared memory segments (for Windows only). All the PHP -; processes have to map shared memory into the same address space. This -; directive allows to manually fix the "Unable to reattach to base address" -; errors. -;opcache.mmap_base= - -; Facilitates multiple OPcache instances per user (for Windows only). All PHP -; processes with the same cache ID and user share an OPcache instance. -;opcache.cache_id= - -; Enables and sets the second level cache directory. -; It should improve performance when SHM memory is full, at server restart or -; SHM reset. The default "" disables file based caching. -;opcache.file_cache= - -; Enables or disables opcode caching in shared memory. -;opcache.file_cache_only=0 - -; Enables or disables checksum validation when script loaded from file cache. -;opcache.file_cache_consistency_checks=1 - -; Implies opcache.file_cache_only=1 for a certain process that failed to -; reattach to the shared memory (for Windows only). Explicitly enabled file -; cache is required. -;opcache.file_cache_fallback=1 - -; Enables or disables copying of PHP code (text segment) into HUGE PAGES. -; This should improve performance, but requires appropriate OS configuration. -;opcache.huge_code_pages=1 - -; Validate cached file permissions. -opcache.validate_permission=1 - -; Prevent name collisions in chroot'ed environment. -opcache.validate_root=1 - -; If specified, it produces opcode dumps for debugging different stages of -; optimizations. -;opcache.opt_debug_level=0 - -; Specifies a PHP script that is going to be compiled and executed at server -; start-up. -; http://php.net/opcache.preload -;opcache.preload= - -; Preloading code as root is not allowed for security reasons. This directive -; facilitates to let the preloading to be run as another user. -; http://php.net/opcache.preload_user -;opcache.preload_user= - -; Prevents caching files that are less than this number of seconds old. It -; protects from caching of incompletely updated files. In case all file updates -; on your site are atomic, you may increase performance by setting it to "0". -;opcache.file_update_protection=2 - -; Absolute path used to store shared lockfiles (for *nix only). -;opcache.lockfile_path=/tmp - -[curl] -; A default value for the CURLOPT_CAINFO option. This is required to be an -; absolute path. -;curl.cainfo = - -[openssl] -; The location of a Certificate Authority (CA) file on the local filesystem -; to use when verifying the identity of SSL/TLS peers. Most users should -; not specify a value for this directive as PHP will attempt to use the -; OS-managed cert stores in its absence. If specified, this value may still -; be overridden on a per-stream basis via the "cafile" SSL stream context -; option. -;openssl.cafile= - -; If openssl.cafile is not specified or if the CA file is not found, the -; directory pointed to by openssl.capath is searched for a suitable -; certificate. This value must be a correctly hashed certificate directory. -; Most users should not specify a value for this directive as PHP will -; attempt to use the OS-managed cert stores in its absence. If specified, -; this value may still be overridden on a per-stream basis via the "capath" -; SSL stream context option. -;openssl.capath= - -[ffi] -; FFI API restriction. Possible values: -; "preload" - enabled in CLI scripts and preloaded files (default) -; "false" - always disabled -; "true" - always enabled -;ffi.enable=preload - -; List of headers files to preload, wildcard patterns allowed. -;ffi.preload= diff --git a/roles/prometheus_exporters/files/flyspray-textcollector.py b/roles/prometheus_exporters/files/flyspray-textcollector.py deleted file mode 100755 index bbc72c3fb1d65decc73ad3964af3e6acb5f9f17a..0000000000000000000000000000000000000000 --- a/roles/prometheus_exporters/files/flyspray-textcollector.py +++ /dev/null @@ -1,43 +0,0 @@ -#!/usr/bin/python - -import sys -import shutil -import tempfile - -import sqlalchemy - -engine = sqlalchemy.create_engine('mysql://localhost/flyspray', connect_args={'read_default_file': '/root/.my.cnf'}) - - -def get_flyspray_header(): - return '# HELP flyspray_issues number of open issues\n# TYPE flyspray_issues gauge\n' - - -def format_metric(project, total): - return f'flyspray_issues{{project="{project}"}} {total}\n' - - -def get_metric(project_id): - with engine.connect() as conn: - result = conn.execute(f"SELECT count(task_id) from flyspray_tasks where project_id = {project_id} and is_closed = 0") - return next(result)[0] - - -def main(directory): - with tempfile.TemporaryDirectory() as tmpfp: - filename = f'{tmpfp}/flyspray-status.prom' - print(filename) - - with open(filename, 'w') as fp: - fp.write(get_flyspray_header()) - fp.write(format_metric("Arch Linux", get_metric(1))) - fp.write(format_metric("Community", get_metric(5))) - - shutil.move(filename, f'{directory}/flyspray-status.prom') - - -if __name__ == "__main__": - if len(sys.argv) != 2: - print('Missing textcollector directory argument') - - main(sys.argv[1]) diff --git a/roles/prometheus_exporters/tasks/main.yml b/roles/prometheus_exporters/tasks/main.yml index a4c254503b2ffdc7af48e38f5d792ae8d02e4f7b..64edff9b5da0a0a1ac4e1ec08459c679837d7228 100644 --- a/roles/prometheus_exporters/tasks/main.yml +++ b/roles/prometheus_exporters/tasks/main.yml @@ -181,18 +181,6 @@ systemd: name=prometheus-repository-textcollector.timer enabled=yes daemon_reload=yes state=started when: "inventory_hostname == 'gemini.archlinux.org'" -- name: Install flyspray textcollector service - template: src=prometheus-flyspray-textcollector.service.j2 dest=/etc/systemd/system/prometheus-flyspray-textcollector.service owner=root group=root mode=644 - when: "inventory_hostname == 'bugs.archlinux.org'" - -- name: Install flyspray textcollector timer - template: src=prometheus-flyspray-textcollector.timer.j2 dest=/etc/systemd/system/prometheus-flyspray-textcollector.timer owner=root group=root mode=644 - when: "inventory_hostname == 'bugs.archlinux.org'" - -- name: Enable and start prometheus flyspray textcollector timer - systemd: name=prometheus-flyspray-textcollector.timer enabled=yes daemon_reload=yes state=started - when: "inventory_hostname == 'bugs.archlinux.org'" - - name: Install sudoers for btrfs copy: src=sudoers dest=/etc/sudoers.d/node_exporter owner=root group=root mode=0440 when: filesystem == "btrfs" diff --git a/tf-stage1/archlinux.tf b/tf-stage1/archlinux.tf index 9177449749ca314d18e3f90d69c63c515bf62d31..a558cd179316077baafe836d5f03725b3bf7cbcd 100644 --- a/tf-stage1/archlinux.tf +++ b/tf-stage1/archlinux.tf @@ -68,10 +68,6 @@ locals { server_type = "cx11" domain = "bugbuddy" } - "bugs.archlinux.org" = { - server_type = "cx11" - domain = "bugs" - } "buildbot.pkgbuild.com" = { server_type = "cx21" domain = "buildbot" @@ -177,7 +173,7 @@ locals { "whatcanidofor" = "d9e45851002a623e10f6954ff9a85d21" "openpgpkey" = "d20c137368e26dcc3db56d45a368e729" "openpgpkey.master-key" = "3eea8f39a9b473a5dc7c188366f84072" - "bugs-old" = "1f3308c8d5763eecb4f9013291aeeac4" + "bugs" = "e41ef82b1a2d063ae958a4d5a3b2f870" "package-maintainer-bylaws.aur" = "680c89d189c8f342cc00bcb624d813a3" "reproducible-notes" = "8c657f2f2720db1c3db63be89605cf0d" "terms" = "0b62a71af2aa85fb491295b543b4c3d2" diff --git a/tf-stage2/uptimerobot.tf b/tf-stage2/uptimerobot.tf index 499189bcf7bd9b7f5c0edd3b4e9a7f2ee193ccff..ab9520964ff5307cd9f425a3bc45c16527e5032f 100644 --- a/tf-stage2/uptimerobot.tf +++ b/tf-stage2/uptimerobot.tf @@ -19,7 +19,6 @@ locals { archlinux_org_monitor = { "Accounts" = "https://accounts.archlinux.org" "AUR" = "https://aur.archlinux.org" - "Bugtracker" = "https://bugs.archlinux.org" "Forum" = "https://bbs.archlinux.org" "Gitlab" = "https://gitlab.archlinux.org" "Man" = "https://man.archlinux.org"