vhosts

Ansible role to create lots of apache vhosts, with jailed sftp users.

Note: Works with EL6/7(?), Debian 6/7, Ubuntu 14. For now, a2ensite breaks on Ubuntu 12 due to vhost config filenames.

Requirements

• Apache up and running
• sshd_config configured for jailing (note: restart ssh after running role so group is present):

    Subsystem sftp internal-sftp

    Match Group sftponly
	    ChrootDirectory %h
	    AllowTcpForwarding no
	    X11Forwarding no
	    ForceCommand internal-sftp

Example playbook

    ---
    - hosts: web
      vars_files:
        - vhosts/vars/main.yml
        - vhosts/vars/{{ ansible_os_family }}.yml
      roles:
        - vhosts

Where vars/main.yml contains:

   ---
   vhost_parent_root: '/var/www/vhosts'
   vhosts:
       - { site_url: 'site1.com', vhost_home: '{{ vhost_parent_root }}/site1.com', sftp_user: 'site1', sftp_pass: 'sha_512_password' }
       - { site_url: 'site2.com', vhost_home: '{{ vhost_parent_root }}/site2.com', sftp_user: 'site2', sftp_pass: 'sha_512_password' }

You can specify as many sites as required.

Password hashing

Note that the 'sftp_pass' variable takes a hash that is inserted directly into /etc/shadow. You can use:

python -c "from passlib.hash import sha512_crypt; print sha512_crypt.encrypt('password')"

Todo

• Need to add support for Ubuntu versions < 14
• Build in password hashing