ansible系列(34)--ansible实战之部署WEB集群架构（4）

2023-12-10 09:27:45

目录

1. 业务环境部署

  • wordpress-base：用于设置WEB集群的网络基础环境，包括所有节点网关指向出口路由器，添加DNS；
  • wordpress-web：用来增加nginx的虚拟主机节点，PHP-FPM连接redis，nfs挂载；
  • wordpress-proxy：用于添加nginx负载均衡的虚拟主机节点，LVS后端RS网络部署；
  • wordpress-mysql：用于创建wordpress的数据库和相关用户；

1.1 wordpress-base编写

  • 创建wordpress-base模块的目录结构：

    [root@xuzhichao cluster-roles]# mkdir wordpress-base/{tasks,meta,files,tamplates,handlers} -p

  • 编写主任务文件如下：

    [root@xuzhichao cluster-roles]# cat wordpress-base/tasks/main.yml 
#1.把所有节点的网关指向192.168.20.17，增加DNS地址192.168.20.70
- name: Modify Gateway And Dns
  lineinfile:
    path: /etc/sysconfig/network-scripts/ifcfg-eth1-static
    line: "GATEWAY=192.168.20.17\nDNS1=192.168.20.70"

#2.重启网络
- name: Restart Network
  systemd:
    name: network
    state: restarted

  • playbook文件修改如下：

    [root@xuzhichao cluster-roles]# cat wordpress_site.yml
- hosts: all
  roles:
    - role: base-module
    - role: wordpress-base
  tags: base-module
......

1.2 wordpress-web编写

  • 创建wordpress-web的目录结构：

    [root@xuzhichao cluster-roles]# mkdir wordpress-web/{tasks,meta,files,templates,handlers} -p

  • nginx 虚拟主机任务文件如下：

    [root@xuzhichao cluster-roles]# cat wordpress-web/tasks/nginx_web_vhost.yml 
- name: Copy Nginx Vhosts Configure File
  template:
    src: "wordpress.conf.j2"
    dest: "{{ nginx_install_directory }}/nginx/conf/conf.d/wordpress.conf"
  notify: Restart Nginx Server

- name: Check Nginx Configure File 
  shell: "{{ nginx_install_directory }}/nginx/sbin/nginx -t"
  register: Check_Nginx_Status
  changed_when: 
      - Check_Nginx_Status.stdout.find('successful')
      - false

  • wordpress的代码部署如下：

    [root@xuzhichao cluster-roles]# cat wordpress-web/tasks/wordpress_code.yml 
#1.拷贝解压wordpress代码
- name: Unarchive Wordpress Code
  unarchive:
    src: wordpress-5.7.2-zh_CN.tar.gz
    dest: "{{ wordpress_unarchive_directory }}"
    owner: "{{ web_user }}"
    group: "{{ web_group }}"
    mode: "0755"

#2.创建图片上传目录，默认wordpress没有创建
- name: Create wp-content/uploads directory
  file: 
    path: "{{ wordpress_code_directory }}/wp-content/uploads"
    state: directory
    owner: "{{ web_user }}"
    group: "{{ web_group }}"
    mode: "0755"
  changed_when: false

#3.挂载NFS
- name: Mount NFS Point
  mount:
    src: "nfs01.xuzhichao.com:{{ nfs_share_path }}"
    path: "{{ wordpress_code_directory }}/wp-content/uploads"
    fstype: nfs
    opts: defaults
    state: mounted

  • php连接redis编译部署如下：

    [root@xuzhichao cluster-roles]# cat wordpress-web/tasks/php_connect_redis.yml 
#1.安装php-pecl-redis软件包
- name: Install php-pecl-redis
  yum:
    name: php-pecl-redis
    state: present

#2.拷贝解压redis扩展包
- name: Unarchive php-Redis
  unarchive:
    src: redis-4.2.0.tgz
    dest: /root

#3.生成配置文件
- name: phpize
  shell:
    cmd: "{{ PHP_install_directory }}/php/bin/phpize"
    chdir: "/root/redis-4.2.0"
  changed_when: false

#4.configure预编译
- name: Configure
  shell:
    cmd: "./configure --with-php-config={{ PHP_install_directory }}/php/bin/php-config"
    chdir: "/root/redis-4.2.0"
  changed_when: false

#5.编译安装
- name: Make And Make Install
  shell:
    cmd: make && make install
    chdir: "/root/redis-4.2.0"
  changed_when: false

  • 主任务文件如下：

    [root@xuzhichao cluster-roles]# cat wordpress-web/tasks/main.yml 
- include: wordpress_code.yml
- include: nginx_web_vhost.yml
- include: php_connect_redis.yml

  • nginx虚拟主机模板文件如下：

    [root@xuzhichao cluster-roles]# cat wordpress-web/templates/wordpress.conf.j2 
log_format access_json '{ "@timestamp": "$time_iso8601", '  
'"remote_addr": "X-Forwarded_For", '  
'"referer": "$http_referer", '  
'"request": "$request", '  
'"status": $status, '  
'"bytes":$body_bytes_sent, '  
'"agent": "$http_user_agent", '  
'"x_forwarded": "$http_x_forwarded_for", '  
'"upstr_addr": "$upstream_addr",'  
'"upstr_host": "$upstream_http_host",'  
'"upstreamtime": "$upstream_response_time" }'; 

server {
	listen 80;
	server_name {{ wordpress_server_name }};
	access_log {{ nginx_install_directory }}/nginx/logs/access_wordpress.log access_json;
	charset utf-8,gbk;
	
	#防盗链
	valid_referers none blocked server_names *.b.com  b.*  ~\.baidu\.  ~\.google\.;
	
	if ( $invalid_referer ) {
		return 403;	
	}

	client_max_body_size 10m;

	location / {
		root {{ wordpress_code_directory }};
		index index.html index.php;
	}

	location ~ \.php$ {
		root {{ wordpress_code_directory }};

		#fastcgi反向代理
		fastcgi_pass 127.0.0.1:9000;
		fastcgi_index index.php;
        fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
		#fastcgi_param HTTPS on;  <==此指令加上会导致http向https跳转，此处不能加。
		fastcgi_hide_header X-Powered-By;
		include fastcgi_params;
	}

	location ~ ^/(ping|pm_status)$ {
		access_log off;
		allow 192.168.20.0/24;
		allow 192.168.50.0/24;
		deny all;
		fastcgi_pass 127.0.0.1:9000;
        fastcgi_param SCRIPT_FILENAME $fastcgi_script_name;
		include fastcgi_params;
	}

	location = /nginx_status {
		access_log off;
		allow 192.168.20.0/24;
		allow 192.168.50.0/24;
		deny all;
		stub_status;
	}
}

  • wordpress-web的依赖的role如下，表示需要先执行依赖的角色，才可以执行本角色：

    [root@xuzhichao cluster-roles]# cat wordpress-web/meta/main.yml 
dependencies:
  - { role: nginx }
  - { role: php-fpm }

  • 新增的变量文件如下：

    [root@xuzhichao cluster-roles]# cat group_vars/all
......
#wordpress相关变量
wordpress_unarchive_directory: /data/nginx
wordpress_code_directory: /data/nginx/wordpress
wordpress_server_name: wordpress.xuzhichao.com

  • wordpress-web整体目录结构如下：

    [root@xuzhichao cluster-roles]# tree wordpress-web/
wordpress-web/
├── files
│   ├── redis-4.2.0.tgz
│   └── wordpress-5.7.2-zh_CN.tar.gz
├── handlers
│   └── main.yml
├── meta
│   └── main.yml
├── tasks
│   ├── main.yml
│   ├── nginx_web_vhost.yml
│   ├── php_connect_redis.yml
│   └── wordpress_code.yml
└── templates
    └── wordpress.conf.j2

5 directories, 9 files

  • playbook文件修改如下：

    [root@xuzhichao cluster-roles]# cat wordpress_site.yml 
- hosts: all
  roles:
    - role: base-module
    - role: wordpress-base
  tags: base-module

- hosts: webservers
  roles:
    - role: wordpress-web
  tags: 
    - wordpress-web

- hosts: lbservers
  roles:
    - role: nginx
  tags: nginx

- hosts: mysql
  roles: 
    - role: mariadb
  tags: mysql

- hosts: redis
  roles:
    - role: redis
  tags: redis

- hosts: nfs
  roles:
    - role: nfs
  tags: nfs

- hosts: lvs
  roles:
    - role: keepalived
  tags: keepalived

- hosts: dns
  roles:
    - role: dns
  tags: dns

  • 运行palybook文件：

    [root@xuzhichao cluster-roles]# ansible-playbook  -t wordpress-web wordpress_site.yml

  • 检测web节点的虚拟主机配置文件如下：

    [root@web01 ~]# cat /soft/nginx/conf/conf.d/wordpress.conf
log_format access_json '{ "@timestamp": "$time_iso8601", '  
'"remote_addr": "X-Forwarded_For", '  
'"referer": "$http_referer", '  
'"request": "$request", '  
'"status": $status, '  
'"bytes":$body_bytes_sent, '  
'"agent": "$http_user_agent", '  
'"x_forwarded": "$http_x_forwarded_for", '  
'"upstr_addr": "$upstream_addr",'  
'"upstr_host": "$upstream_http_host",'  
'"upstreamtime": "$upstream_response_time" }'; 

server {
	listen 80;
	server_name wordpress.xuzhichao.com;
	access_log /soft/nginx/logs/access_wordpress.log access_json;
	charset utf-8,gbk;
	
	#防盗链
	valid_referers none blocked server_names *.b.com  b.*  ~\.baidu\.  ~\.google\.;
	
	if ( $invalid_referer ) {
		return 403;	
	}

	client_max_body_size 10m;

	location / {
		root /data/nginx/wordpress;
		index index.html index.php;
	}

	location ~ \.php$ {
		root /data/nginx/wordpress;

		#fastcgi反向代理
		fastcgi_pass 127.0.0.1:9000;
		fastcgi_index index.php;
		fastcgi_hide_header X-Powered-By;
        fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
		include fastcgi_params;
	}

	location ~ ^/(ping|pm_status)$ {
		access_log off;
		allow 192.168.20.0/24;
		allow 192.168.50.0/24;
		deny all;
		fastcgi_pass 127.0.0.1:9000;
        fastcgi_param SCRIPT_FILENAME $fastcgi_script_name;
		include fastcgi_params;
	}

	location = /nginx_status {
		access_log off;
		allow 192.168.20.0/24;
		allow 192.168.50.0/24;
		deny all;
		stub_status;
	}
}

  • 查看web节点服务启动情况：

    [root@web01 ~]# ss -ntl
State      Recv-Q Send-Q                                 Local Address:Port                 Peer Address:Port             ......
LISTEN     0      128                                        127.0.0.1:9000                   *:*                  
LISTEN     0      128                                                *:80                     *:*                  

[root@web01 ~]# df
Filesystem                    1K-blocks    Used Available Use% Mounted on
......
nfs01.xuzhichao.com:/data/nfs 154057344   33664 154023680   1% /data/nginx/wordpress/wp-content/uploads

1.3 wordpress-mysql编写

注意：数据库建议使用新的数据库部署，若使用之前的数据库会存在问题，因为之前的数据库存储了wordpress的会话信息，对新的站点会造成影响。

  • 创建wordpress-mysql目录结构：

    [root@xuzhichao cluster-roles]# mkdir wordpress-mysql/{tasks,handlers,meta,files,templates} -p

  • 主任务文件如下：

    [root@xuzhichao cluster-roles]# cat wordpress-mysql/tasks/main.yml 
#1.创建数据库wordpress
- name: Create Wordpress Database
  mysql_db:
    login_host: "localhost"
    login_user: "root"
    login_password: "123456"
    #login_password: "123456"
    login_port: "3306"
    name: "{{ wordpress_mysql_database }}"
    state: present

#2.授权远程连接的数据库
- name: Grant Wordpress Database User
  mysql_user:
    login_host: "localhost"
    login_user: "root"
    login_password: "123456"
    #login_port: "3306"
    name: "{{ wordpress_mysql_user }}"
    password: "{{ wordpress_mysql_password }}"
    host: "{{ wordpress_mysql_host }}"
    priv: "{{ wordpress_mysql_user }}.*:ALL"
    state: present

  • 依赖文件如下：

    [root@xuzhichao cluster-roles]# cat wordpress-mysql/meta/main.yml 
dependencies:
  - { role: mariadb }

  • 变量文件如下：

    [root@xuzhichao cluster-roles]# vim group_vars/all
#wordpress相关变量
wordpress_unarchive_directory: /data/nginx
wordpress_code_directory: /data/nginx/wordpress
wordpress_server_name: wordpress.xuzhichao.com

wordpress_mysql_database: wordpress
wordpress_mysql_user: wordpress
wordpress_mysql_password: 123456
wordpress_mysql_host: 192.168.20.%

  • playbook文件如下：

    [root@xuzhichao cluster-roles]# cat wordpress_site.yml 
- hosts: all
  roles:
    - role: base-module
    - role: wordpress-base
  tags: base-module

- hosts: webservers
  roles:
    - role: wordpress-web
  tags: 
    - wordpress-web

- hosts: lbservers
  roles:
    - role: nginx
  tags: nginx

- hosts: mysql
  roles: 
    - role: wordpress-mysql
  tags: wordpress-mysql

- hosts: redis
  roles:
    - role: redis
  tags: redis

- hosts: nfs
  roles:
    - role: nfs
  tags: nfs

- hosts: lvs
  roles:
    - role: keepalived
  tags: keepalived

- hosts: dns
  roles:
    - role: dns
  tags: dns

  • 运行playbook：

    [root@xuzhichao cluster-roles]# ansible-playbook -t wordpress-mysql wordpress_site.yml

  • 查看mysql是否成功创建：

    [root@web02 ~]# mysql -uwordpress -p123456 -h192.168.20.50
Welcome to the MariaDB monitor.  Commands end with ; or \g.
Your MariaDB connection id is 36
Server version: 10.5.2-MariaDB MariaDB Server

Copyright (c) 2000, 2018, Oracle, MariaDB Corporation Ab and others.

Type 'help;' or '\h' for help. Type '\c' to clear the current input statement.

MariaDB [(none)]> show databases;
+--------------------+
| Database           |
+--------------------+
| information_schema |
| test               |
| wordpress          |
+--------------------+
3 rows in set (0.00 sec)

1.4 wordpress-proxy编写

  • 创建wordpress-proxy的目录结构：

    [root@xuzhichao cluster-roles]# mkdir wordpress-proxy/{tasks,templates,files,meta,handlers} -p

  • 主任务文件如下：

    [root@xuzhichao cluster-roles]# cat wordpress-proxy/tasks/main.yml 
#创建证书存放目录
- name: Create Cert directory
  file:
    path: "{{ nginx_install_directory }}/nginx/certs"
    state: directory

#拷贝证书文件
- name: Copy SSL Cer File
  copy:
    src: "{{ item.src }}"
    dest: "{{ item.dest }}"
  loop:
    - { src: "xuzhichao.key", dest: "{{ nginx_install_directory }}/nginx/certs/xuzhichao.key" }
    - { src: "xuzhichao.crt", dest: "{{ nginx_install_directory }}/nginx/certs/xuzhichao.crt" }

#拷贝虚拟主机配置文件
- name: Copy Nginx-LB Vhosts Configure
  template:
    src: "{{ item.src }}"
    dest: "{{ item.dest }}"
  loop:
    - { src: "wordpress.conf.j2", dest: "{{ nginx_install_directory }}/nginx/conf/conf.d/wordpress.conf" }
    - { src: "proxy_params.j2", dest: "{{ nginx_install_directory }}/nginx/conf/proxy_params" }
  notify: Restart Nginx Server

#检查nginx配置文件
- name: Check Nginx Configure File 
  shell: "{{ nginx_install_directory }}/nginx/sbin/nginx -t"
  register: Check_Nginx_Status
  changed_when: 
    - Check_Nginx_Status.stdout.find('successful')
    - false

#LVS的DR模型设置虚IP，一致arp
- name: LVS DR RS Scripts
  script: ../files/lvs_rs.sh start

  • handlers文件如下：

    [root@xuzhichao cluster-roles]# cat wordpress-proxy/handlers/main.yml 
- name: Restart Nginx Server
  systemd:
    name: nginx
    state: reloaded

  • nginx负载均衡虚拟主机文件如下：

    [root@xuzhichao cluster-roles]# cat wordpress-proxy/templates/wordpress.conf.j2 
upstream  webservers {
{% for host in groups["webservers"] %}
	server {{ host }}:80 weight=1 fail_timeout=5s max_fails=3;
{% endfor %}
}

log_format access_json '{ "@timestamp": "$time_iso8601", '  
'"remote_addr": "X-Forwarded_For", '  
'"referer": "$http_referer", '  
'"request": "$request", '  
'"status": $status, '  
'"bytes":$body_bytes_sent, '  
'"agent": "$http_user_agent", '  
'"x_forwarded": "$http_x_forwarded_for", '  
'"upstr_addr": "$upstream_addr",'  
'"upstr_host": "$upstream_http_host",'  
'"upstreamtime": "$upstream_response_time" }'; 

server {
	listen 443 ssl;
	listen 80;
	server_name {{ wordpress_server_name }};
	access_log {{ nginx_install_directory }}/nginx/logs/access_wordpress.log access_json;

	ssl_certificate {{ nginx_install_directory }}/nginx/certs/xuzhichao.crt;
	ssl_certificate_key {{ nginx_install_directory }}/nginx/certs/xuzhichao.key;
	ssl_session_cache shared:ssl_cache:30m;
	ssl_session_timeout 10m;

	valid_referers none blocked server_names *.b.com  b.*  ~\.baidu\.  ~\.google\.;

	if ( $invalid_referer ) {
		return 403;	
	}

	location / {
		
		if ( $scheme = http ) {
			rewrite /(.*) https://{{ wordpress_server_name }}/$1 permanent;
		}
		
		proxy_pass http://webservers;
		include proxy_params;
	}
}


[root@xuzhichao cluster-roles]# cat wordpress-proxy/templates/proxy_params.j2 
proxy_set_header host $http_host;
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;

proxy_connect_timeout 30;
proxy_send_timeout 60;
proxy_read_timeout 60;										        

proxy_buffering on;
proxy_buffer_size 64k;
proxy_buffers 4 64k;

  • lvs的rs脚本文件如下：

    [root@xuzhichao cluster-roles]# cat wordpress-proxy/files/lvs_rs.sh 
#!/usr/bin/bash

VIP1=192.168.20.200
VIP2=192.168.20.201
DEV1=lo:0
DEV2=lo:1

case $1 in
    start)
	echo "1" >/proc/sys/net/ipv4/conf/all/arp_ignore
	echo "1" >/proc/sys/net/ipv4/conf/default/arp_ignore
	echo "1" >/proc/sys/net/ipv4/conf/lo/arp_ignore

	echo "2" >/proc/sys/net/ipv4/conf/all/arp_announce
	echo "2" >/proc/sys/net/ipv4/conf/default/arp_announce
	echo "2" >/proc/sys/net/ipv4/conf/lo/arp_announce

	cat  >/etc/sysconfig/network-scripts/ifcfg-${DEV1} <<-EOF
	DEVICE=${DEV1}
	IPADDR=${VIP1}
	NETMASK=255.255.255.255
	ONBOOT=yes
	NAME=loopback1
	EOF
	
	cat  >/etc/sysconfig/network-scripts/ifcfg-${DEV2} <<-EOF
	DEVICE=${DEV2}
	IPADDR=${VIP2}
	NETMASK=255.255.255.255
	ONBOOT=yes
	NAME=loopback2
	EOF
	ifup ${DEV1}	# 启动网卡
	ifup ${DEV2}
	systemctl start nginx
    ;;
    stop)
    	echo "0" >/proc/sys/net/ipv4/conf/all/arp_ignore
    	echo "0" >/proc/sys/net/ipv4/conf/default/arp_ignore
    	echo "0" >/proc/sys/net/ipv4/conf/lo/arp_ignore
    
        echo "0" >/proc/sys/net/ipv4/conf/all/arp_announce
    	echo "0" >/proc/sys/net/ipv4/conf/default/arp_announce
        echo "0" >/proc/sys/net/ipv4/conf/lo/arp_announce

    	ifdown ${DEV1}  # 停止网卡
    	ifdown ${DEV2}
    	rm -f /etc/sysconfig/network-scripts/ifcfg-${DEV1}
    	rm -f /etc/sysconfig/network-scripts/ifcfg-${DEV2}
    	systemctl stop nginx
        ;;
    *)
        echo "Usage: sh $0 { start | stop }"
esac

  • meta依赖文件如下：

    [root@xuzhichao cluster-roles]# cat wordpress-proxy/meta/main.yml 
dependencies:
  - { role: nginx }

  • wordpress-proxy整体目录结构如下：

    [root@xuzhichao cluster-roles]# tree wordpress-proxy/
wordpress-proxy/
├── files
│   ├── lvs_rs.sh
│   ├── xuzhichao.crt
│   └── xuzhichao.key
├── handlers
│   └── main.yml
├── meta
│   └── main.yml
├── tasks
│   └── main.yml
└── templates
    ├── proxy_params.j2
    └── wordpress.conf.j2

  • 变量文件如下：

    [root@xuzhichao cluster-roles]# cat group_vars/all 
#创建基础环境变量
web_group: nginx
web_gid: 887
web_user: nginx
web_uid: 887


#nginx相关变量
nginx_install_directory: /soft
nginx_filename_tar: nginx-1.20.1.tar.gz
nginx_version: nginx-1.20.1
nginx_configure_options: --with-http_ssl_module --with-http_v2_module --with-http_realip_module --with-http_dav_module --with-http_stub_status_module --with-http_gzip_static_module --with-pcre --with-stream --with-stream_ssl_module --with-stream_realip_module --with-file-aio
gzip_contorl: "on"
keepalive_timeout: 65
worker_connections_num: 35566
nginx_path: /soft/nginx/sbin/nginx

#PHP相关变量
PHP_install_directory: /soft
PHP_tar_packages: php-7.3.16.tar.xz
PHP_version: php-7.3.16

PHP_configure_options: --enable-fpm --with-pear --with-mysqli=mysqlnd --with-openssl --with-pdo-mysql=mysqlnd --enable-mbstring --with-freetype-dir --with-jpeg-dir --with-png-dir --with-zlib --with-libxml-dir=/usr --enable-xml --enable-sockets --with-curl --with-freetype-dir --with-iconv --disable-debug --with-mhash --with-xmlrpc --with-xsl  --enable-soap --enable-exif --enable-wddx --enable-bcmath --enable-calendar --enable-shmop --enable-sysvsem --enable-sysvshm --enable-syssvmsg

php_fpm_listen_address: 127.0.0.1
php_fpm_listen_port: 9000
pm_max_children_num: 50
php_path: /soft/php/sbin/php-fpm

#Mysql相关变量
mysql_user: mysql
mysql_group: mysql
mysql_base_directory: /usr/local/mysql
mysql_data_directory: /data/mysql
mysql_tar_ball: mariadb-10.5.2-linux-x86_64.tar.gz
mysql_version: mariadb-10.5.2-linux-x86_64
mysql_link_file_path: /usr/local/mysql
mysqld_file: /etc/init.d/mysqld

#NFS相关变量
nfs_share_path: /data/nfs
nfs_share_iprange: 192.168.20.0/24

#keepalived相关变量
vrrp_interface: eth1
virtual_router_id1: 51
auth_pass: 1111
virtual_ipaddress1: 192.168.20.200/24
virtual_router_id2: 52
virtual_ipaddress2: 192.168.20.201/24
vips:
  - 192.168.20.200
  - 192.168.20.201
track_ports:
  - 443
  - 80
lb_algo: rr
lb_kind: DR
protocol: TCP

#wordpress相关变量
wordpress_unarchive_directory: /data/nginx
wordpress_code_directory: /data/nginx/wordpress
wordpress_server_name: wordpress.xuzhichao.com

wordpress_mysql_database: wordpress
wordpress_mysql_user: worpdress
wordpress_mysql_password: 123456
wordpress_mysql_host: 192.168.20.%

  • 最终playbook文件如下：

    [root@xuzhichao cluster-roles]# cat wordpress_site.yml 
- hosts: all
  roles:
    - role: base-module
    - role: wordpress-base
  tags: base-module

- hosts: webservers
  roles:
    - role: wordpress-web
  tags: 
    - wordpress-web

- hosts: lbservers
  roles:
    - role: wordpress-proxy
  tags: wordpress-proxy

- hosts: mysql
  roles: 
    - role: wordpress-mysql
  tags: wordpress-mysql

- hosts: redis
  roles:
    - role: redis
  tags: redis

- hosts: nfs
  roles:
    - role: nfs
  tags: nfs

- hosts: lvs
  roles:
    - role: keepalived
  tags: keepalived

- hosts: dns
  roles:
    - role: dns
  tags: dns

  • 运行palybook：

    [root@xuzhichao cluster-roles]# ansible-playbook -t wordpress-proxy wordpress_site.yml

  • 查看nginx负载均衡的状态：

    #nginx虚拟主机配置文件：
[root@lb01 ~]# cat /soft/nginx/conf/conf.d/wordpress.conf 
upstream  webservers {
	server 192.168.20.22:80 weight=1 fail_timeout=5s max_fails=3;
	server 192.168.20.23:80 weight=1 fail_timeout=5s max_fails=3;
}

log_format access_json '{ "@timestamp": "$time_iso8601", '  
'"remote_addr": "X-Forwarded_For", '  
'"referer": "$http_referer", '  
'"request": "$request", '  
'"status": $status, '  
'"bytes":$body_bytes_sent, '  
'"agent": "$http_user_agent", '  
'"x_forwarded": "$http_x_forwarded_for", '  
'"upstr_addr": "$upstream_addr",'  
'"upstr_host": "$upstream_http_host",'  
'"upstreamtime": "$upstream_response_time" }'; 

server {
	listen 443 ssl;
	listen 80;
	server_name wordpress.xuzhichao.com;
	access_log /soft/nginx/logs/access_wordpress.log access_json;

	ssl_certificate /soft/nginx/certs/xuzhichao.crt;
	ssl_certificate_key /soft/nginx/certs/xuzhichao.key;
	ssl_session_cache shared:ssl_cache:30m;
	ssl_session_timeout 10m;

	valid_referers none blocked server_names *.b.com  b.*  ~\.baidu\.  ~\.google\.;

	if ( $invalid_referer ) {
		return 403;	
	}

	location / {
		
		if ( $scheme = http ) {
			rewrite /(.*) https://wordpress.xuzhichao.com/$1 permanent;
		}
		
		proxy_pass http://webservers;
		include proxy_params;
	}
}

#虚IP情况：
[root@lb01 ~]# ip add show lo
1: lo: <LOOPBACK,UP,LOWER_UP> mtu 65536 qdisc noqueue state UNKNOWN group default qlen 1000
    link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00
    inet 127.0.0.1/8 scope host lo
       valid_lft forever preferred_lft forever
    inet 192.168.20.200/32 brd 192.168.20.200 scope global lo:0
       valid_lft forever preferred_lft forever
    inet 192.168.20.201/32 brd 192.168.20.201 scope global lo:1
       valid_lft forever preferred_lft forever
    inet6 ::1/128 scope host 
       valid_lft forever preferred_lft forever

#服务监听情况：
[root@lb01 ~]# ss -ntl
State      Recv-Q Send-Q                                 Local Address:Port                 Peer Address:Port             
LISTEN     0      128                                                *:443                       *:*                  
LISTEN     0      128                                                *:80                        *:*
上一篇：ansible系列(35)--ansible实战之部署WEB集群架构（5）


下一篇：ansible 配置管理windows