├── srcs
    ├── requirements
    │   ├── mariadb
    │   │   ├── .dockerignore
    │   │   ├── tools
    │   │   │   └── initial_db.sql
    │   │   ├── Dockerfile
    │   │   └── conf
    │   │   │   └── 50-server.cnf
    │   ├── nginx
    │   │   ├── .dockerignore
    │   │   ├── tools
    │   │   │   └── nginx_start.sh
    │   │   ├── Dockerfile
    │   │   └── conf
    │   │   │   └── default
    │   └── wordpress
    │   │   ├── .dockerignore
    │   │   ├── conf
    │   │       └── www.conf
    │   │   ├── Dockerfile
    │   │   └── tools
    │   │       ├── wordpress_start.sh
    │   │       └── wp-config.php
    ├── .env
    └── docker-compose.yml
├── Subject.pdf
├── examples
    └── score.png
├── Makefile
└── README.md


/srcs/requirements/mariadb/.dockerignore:
--------------------------------------------------------------------------------
1 | .git
2 | .DS_Store


--------------------------------------------------------------------------------
/srcs/requirements/nginx/.dockerignore:
--------------------------------------------------------------------------------
1 | .git
2 | .DS_Store


--------------------------------------------------------------------------------
/srcs/requirements/wordpress/.dockerignore:
--------------------------------------------------------------------------------
1 | .git
2 | .DS_Store


--------------------------------------------------------------------------------
/Subject.pdf:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/alexnik42/inception/HEAD/Subject.pdf


--------------------------------------------------------------------------------
/examples/score.png:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/alexnik42/inception/HEAD/examples/score.png


--------------------------------------------------------------------------------
/srcs/requirements/wordpress/conf/www.conf:
--------------------------------------------------------------------------------
1 | [www]
2 | user = www-data
3 | group = www-data
4 | listen = wordpress:9000
5 | pm = dynamic
6 | pm.start_servers = 6
7 | pm.max_children = 25
8 | pm.min_spare_servers = 2
9 | pm.max_spare_servers = 10


--------------------------------------------------------------------------------
/srcs/.env:
--------------------------------------------------------------------------------
 1 | WP_URL=crendeha.42.fr
 2 | WP_TITLE=wordpress
 3 | 
 4 | WP_ADMIN_LOGIN=boss
 5 | WP_ADMIN_PASSWORD=boss12345
 6 | WP_ADMIN_EMAIL=boss@42.fr
 7 | 
 8 | WP_USER_LOGIN=crendeha
 9 | WP_USER_PASSWORD=12345
10 | WP_USER_EMAIL=crendeha@42.fr


--------------------------------------------------------------------------------
/srcs/requirements/mariadb/tools/initial_db.sql:
--------------------------------------------------------------------------------
1 | CREATE DATABASE IF NOT EXISTS wordpress;
2 | CREATE USER IF NOT EXISTS 'crendeha'@'%' IDENTIFIED BY '12345';
3 | GRANT ALL PRIVILEGES ON wordpress.* TO 'crendeha'@'%';
4 | FLUSH PRIVILEGES;
5 | ALTER USER 'root'@'localhost' IDENTIFIED BY 'root12345';


--------------------------------------------------------------------------------
/srcs/requirements/mariadb/Dockerfile:
--------------------------------------------------------------------------------
 1 | FROM debian:buster
 2 | 
 3 | RUN apt-get update
 4 | RUN apt-get install -y mariadb-server
 5 | 
 6 | EXPOSE 3306
 7 | 
 8 | COPY ./conf/50-server.cnf /etc/mysql/mariadb.conf.d/
 9 | COPY ./tools /var/www/
10 | 
11 | RUN service mysql start && mysql < /var/www/initial_db.sql && rm -f /var/www/initial_db.sql;
12 | 
13 | CMD ["mysqld"]


--------------------------------------------------------------------------------
/srcs/requirements/nginx/tools/nginx_start.sh:
--------------------------------------------------------------------------------
1 | #!/bin/bash
2 | 
3 | if [ ! -f /etc/ssl/certs/nginx.crt ]; then
4 | echo "Nginx: setting up ssl ...";
5 | openssl req -x509 -nodes -days 365 -newkey rsa:4096 -keyout /etc/ssl/private/nginx.key -out /etc/ssl/certs/nginx.crt -subj "/C=RU/ST=Moscow/L=Moscow/O=wordpress/CN=crendeha.42.fr";
6 | echo "Nginx: ssl is set up!";
7 | fi
8 | 
9 | exec "$@"


--------------------------------------------------------------------------------
/srcs/requirements/nginx/Dockerfile:
--------------------------------------------------------------------------------
 1 | FROM debian:buster
 2 | 
 3 | RUN apt-get update
 4 | RUN apt-get install -y nginx openssl
 5 | 
 6 | EXPOSE 443
 7 | 
 8 | COPY ./conf/default /etc/nginx/sites-enabled/default
 9 | COPY ./tools/nginx_start.sh /var/www
10 | 
11 | RUN chmod +x /var/www/nginx_start.sh
12 | 
13 | ENTRYPOINT [ "var/www/nginx_start.sh" ]
14 | 
15 | CMD ["nginx", "-g", "daemon off;"]
16 | 


--------------------------------------------------------------------------------
/srcs/requirements/wordpress/Dockerfile:
--------------------------------------------------------------------------------
 1 | FROM debian:buster
 2 | 
 3 | RUN apt-get update
 4 | RUN apt-get -y install php7.3 php-mysqli php-fpm wget sendmail
 5 | 
 6 | EXPOSE 9000
 7 | 
 8 | COPY ./conf/www.conf /etc/php/7.3/fpm/pool.d
 9 | COPY ./tools /var/www/
10 | 
11 | RUN chmod +x /var/www/wordpress_start.sh
12 | 
13 | ENTRYPOINT [ "/var/www/wordpress_start.sh" ]
14 | 
15 | CMD ["/usr/sbin/php-fpm7.3", "--nodaemonize"]


--------------------------------------------------------------------------------
/Makefile:
--------------------------------------------------------------------------------
 1 | all: 
 2 | 	@docker-compose -f ./srcs/docker-compose.yml up
 3 | 
 4 | down:
 5 | 	@docker-compose -f ./srcs/docker-compose.yml down
 6 | 
 7 | re:
 8 | 	@docker-compose -f srcs/docker-compose.yml up --build
 9 | 
10 | clean:
11 | 	@docker stop $$(docker ps -qa);\
12 | 	docker rm $$(docker ps -qa);\
13 | 	docker rmi -f $$(docker images -qa);\
14 | 	docker volume rm $$(docker volume ls -q);\
15 | 	docker network rm $$(docker network ls -q);\
16 | 
17 | .PHONY: all re down clean


--------------------------------------------------------------------------------
/README.md:
--------------------------------------------------------------------------------
 1 | # inception
 2 | 
 3 | School 42 Project. Set up a small infrastructure composed of WordPress with LEMP Stack (Nginx, MariaDB and PHP) using Docker / Docker-Compose under specific rules (see `Subject.pdf`).
 4 | <br></br>
 5 | 
 6 | # Final grade: 100/100
 7 | 
 8 | <img src="./examples/score.png" height="125" alt="Score"> <br></br>
 9 | 
10 | ## Docker containers
11 | 
12 | - MariaDB
13 | - WordPress
14 | - Nginx
15 | 
16 | 
17 | ## How to use
18 | 
19 | - Build the images and deploy the infrastructure:
20 | 
21 |   ```sh
22 |    $ make
23 |    ```
24 | 
25 | - Stop and remove containers, remove images, volumes and network:
26 | 
27 | 	```sh
28 | 	$ make clean
29 | 	```
30 | 
31 | 


--------------------------------------------------------------------------------
/srcs/requirements/nginx/conf/default:
--------------------------------------------------------------------------------
 1 | server {
 2 |     listen 443 ssl;
 3 |     listen [::]:443 ssl;
 4 | 
 5 |     server_name crendeha.42.fr;
 6 | 
 7 |     ssl_certificate /etc/ssl/certs/nginx.crt;
 8 |     ssl_certificate_key /etc/ssl/private/nginx.key;
 9 |     ssl_protocols TLSv1.3;
10 | 
11 |     index index.php;
12 | 
13 |     root /var/www/html;
14 | 
15 |     location / {
16 |         try_files $uri $uri/ /index.php$is_args$args;
17 |     }
18 | 
19 |     location ~ \.php$ {
20 |         try_files $uri =404;
21 |         fastcgi_split_path_info ^(.+\.php)(/.+)$;
22 |         fastcgi_pass wordpress:9000;
23 |         fastcgi_index index.php;
24 |         include fastcgi_params;
25 |         fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
26 |         fastcgi_param PATH_INFO $fastcgi_path_info;
27 |     }
28 | }


--------------------------------------------------------------------------------
/srcs/requirements/wordpress/tools/wordpress_start.sh:
--------------------------------------------------------------------------------
 1 | #!/bin/bash
 2 | 
 3 | 	sed -i "s/listen = \/run\/php\/php7.3-fpm.sock/listen = 9000/" "/etc/php/7.3/fpm/pool.d/www.conf";
 4 | 	chown -R www-data:www-data /var/www/*;
 5 | 	chown -R 755 /var/www/*;
 6 | 	mkdir -p /run/php/;
 7 | 	touch /run/php/php7.3-fpm.pid;
 8 | 
 9 | if [ ! -f /var/www/html/wp-config.php ]; then
10 | 	echo "Wordpress: setting up..."
11 | 	mkdir -p /var/www/html
12 | 	wget https://raw.githubusercontent.com/wp-cli/builds/gh-pages/phar/wp-cli.phar;
13 | 	chmod +x wp-cli.phar; 
14 | 	mv wp-cli.phar /usr/local/bin/wp;
15 | 	cd /var/www/html;
16 | 	wp core download --allow-root;
17 | 	mv /var/www/wp-config.php /var/www/html/
18 | 	echo "Wordpress: creating users..."
19 | 	wp core install --allow-root --url=${WP_URL} --title=${WP_TITLE} --admin_user=${WP_ADMIN_LOGIN} --admin_password=${WP_ADMIN_PASSWORD} --admin_email=${WP_ADMIN_EMAIL}
20 | 	wp user create --allow-root ${WP_USER_LOGIN} ${WP_USER_EMAIL} --user_pass=${WP_USER_PASSWORD};
21 | 	echo "Wordpress: set up!"
22 | fi
23 | 
24 | exec "$@"


--------------------------------------------------------------------------------
/srcs/docker-compose.yml:
--------------------------------------------------------------------------------
 1 | version: "3.5"
 2 | 
 3 | networks:
 4 |   app-network:
 5 |     name: app-network
 6 |     driver: bridge
 7 | 
 8 | volumes:
 9 |   wp:
10 |     driver: local
11 |     name: wp
12 |     driver_opts:
13 |       type: none
14 |       o: bind
15 |       device: /home/crendeha/data/wordpress
16 |   db:
17 |     driver: local
18 |     name: db
19 |     driver_opts:
20 |       type: none
21 |       o: bind
22 |       device: /home/crendeha/data/mariadb
23 | 
24 | services:
25 |   mariadb:
26 |     container_name: mariadb
27 |     build: ./requirements/mariadb
28 |     env_file:
29 |       - .env
30 |     volumes:
31 |       - db:/var/lib/mysql
32 |     networks:
33 |       - app-network
34 |     restart: unless-stopped
35 | 
36 |   wordpress:
37 |     container_name: wordpress
38 |     build: ./requirements/wordpress
39 |     env_file:
40 |       - .env
41 |     depends_on:
42 |       - mariadb
43 |     volumes:
44 |       - wp:/var/www/html
45 |     networks:
46 |       - app-network
47 |     restart: unless-stopped
48 | 
49 |   nginx:
50 |     container_name: nginx
51 |     build: ./requirements/nginx
52 |     ports:
53 |       - "443:443"
54 |     depends_on:
55 |       - wordpress
56 |     volumes:
57 |       - wp:/var/www/html
58 |     networks:
59 |       - app-network
60 |     restart: unless-stopped
61 | 


--------------------------------------------------------------------------------
/srcs/requirements/wordpress/tools/wp-config.php:
--------------------------------------------------------------------------------
 1 | <?php
 2 | /**
 3 |  * The base configuration for WordPress
 4 |  *
 5 |  * The wp-config.php creation script uses this file during the installation.
 6 |  * You don't have to use the web site, you can copy this file to "wp-config.php"
 7 |  * and fill in the values.
 8 |  *
 9 |  * This file contains the following configurations:
10 |  *
11 |  * * Database settings
12 |  * * Secret keys
13 |  * * Database table prefix
14 |  * * ABSPATH
15 |  *
16 |  * @link https://wordpress.org/support/article/editing-wp-config-php/
17 |  *
18 |  * @package WordPress
19 |  */
20 | 
21 | // ** Database settings - You can get this info from your web host ** //
22 | /** The name of the database for WordPress */
23 | define( 'DB_NAME', 'wordpress' );
24 | 
25 | /** Database username */
26 | define( 'DB_USER', 'crendeha' );
27 | 
28 | /** Database password */
29 | define( 'DB_PASSWORD', '12345' );
30 | 
31 | /** Database hostname */
32 | define( 'DB_HOST', 'mariadb' );
33 | 
34 | /** Database charset to use in creating database tables. */
35 | define( 'DB_CHARSET', 'utf8' );
36 | 
37 | /** The database collate type. Don't change this if in doubt. */
38 | define( 'DB_COLLATE', '' );
39 | 
40 | /**#@+
41 |  * Authentication unique keys and salts.
42 |  *
43 |  * Change these to different unique phrases! You can generate these using
44 |  * the {@link https://api.wordpress.org/secret-key/1.1/salt/ WordPress.org secret-key service}.
45 |  *
46 |  * You can change these at any point in time to invalidate all existing cookies.
47 |  * This will force all users to have to log in again.
48 |  *
49 |  * @since 2.6.0
50 |  */
51 | define('AUTH_KEY',         'q,VrMu@W3N$8lsY~K;,&~}+mj|}PjcUdh)H0Lyk+jII0/ Plr^HP*(~IA#p#G%~p');
52 | define('SECURE_AUTH_KEY',  'KoGFkg1,vS+gINeNrx*BjS-pl#j[/Pi24PqPshVD?rm.`F*+}mU9*b d[F# l.qR');
53 | define('LOGGED_IN_KEY',    'E`{ub-R1I+7_0~$-wt6/7!},}uUc>Qwt#^?R[DUM~hfRDSnOz-LLc>z7s&!U?PMV');
54 | define('NONCE_KEY',        'h<F3U;b@z H>[+=/+Qz[e-eB5vw>>1-:{9-D^<p3rg futlYzO:a;R!COqggpM+Y');
55 | define('AUTH_SALT',        '>eX1*hly+,!f<<n1icTyla|MQi*|#_n{auFx+;mfyAwM[dvD{w1O`*]BobEE<PfT');
56 | define('SECURE_AUTH_SALT', '%uHMhw~C/!0L3h9emJ9YkMER{Ua?k%8/|ZNce!5<XM6?Q+)^v6ex):t&WxIq+@Pi');
57 | define('LOGGED_IN_SALT',   'nD*TTw#tk+uO{@iZ+YOHN`&*kuU@NMVSk/419Jr,,%Dfl-g?YdAi;` vW3N1FPs/');
58 | define('NONCE_SALT',       '+f=j&zTc0Pv8#JZKbQ96S1U!& <_tuapL!C9n_^Yy&$2Q*,,`{x2~l.?q#ZScOF+');
59 | 
60 | /**#@-*/
61 | 
62 | /**
63 |  * WordPress database table prefix.
64 |  *
65 |  * You can have multiple installations in one database if you give each
66 |  * a unique prefix. Only numbers, letters, and underscores please!
67 |  */
68 | $table_prefix = 'wp_';
69 | 
70 | /**
71 |  * For developers: WordPress debugging mode.
72 |  *
73 |  * Change this to true to enable the display of notices during development.
74 |  * It is strongly recommended that plugin and theme developers use WP_DEBUG
75 |  * in their development environments.
76 |  *
77 |  * For information on other constants that can be used for debugging,
78 |  * visit the documentation.
79 |  *
80 |  * @link https://wordpress.org/support/article/debugging-in-wordpress/
81 |  */
82 | define( 'WP_DEBUG', false );
83 | 
84 | /* Add any custom values between this line and the "stop editing" line. */
85 | 
86 | 
87 | /* That's all, stop editing! Happy publishing. */
88 | 
89 | /** Absolute path to the WordPress directory. */
90 | if ( ! defined( 'ABSPATH' ) ) {
91 | 	define( 'ABSPATH', '/var/www/html/wordpress' );
92 | }
93 | 
94 | /** Sets up WordPress vars and included files. */
95 | require_once ABSPATH . 'wp-settings.php';


--------------------------------------------------------------------------------
/srcs/requirements/mariadb/conf/50-server.cnf:
--------------------------------------------------------------------------------
  1 | 
  2 |    
  3 | #
  4 | #These groups are read by MariaDB server.
  5 | #Use it for options that only the server (but not clients) should see
  6 | #
  7 | #See the examples of server my.cnf files in /usr/share/mysql
  8 | 
  9 | #this is read by the standalone daemon and embedded servers
 10 | [server]
 11 | 
 12 | #this is only for the mysqld standalone daemon
 13 | [mysqld]
 14 | 
 15 | #
 16 | # * Basic Settings
 17 | #
 18 | user                    = mysql
 19 | pid-file                = /run/mysqld/mysqld.pid
 20 | socket                  = /run/mysqld/mysqld.sock
 21 | port                    = 3306
 22 | basedir                 = /usr
 23 | datadir                 = /var/lib/mysql
 24 | tmpdir                  = /tmp
 25 | lc-messages-dir         = /usr/share/mysql
 26 | #skip-external-locking
 27 | 
 28 | #Instead of skip-networking the default is now to listen only on
 29 | #localhost which is more compatible and is not less secure.
 30 | #bind-address            = 127.0.0.1
 31 | 
 32 | #
 33 | # * Fine Tuning
 34 | #
 35 | #key_buffer_size        = 16M
 36 | #max_allowed_packet     = 16M
 37 | #thread_stack           = 192K
 38 | #thread_cache_size      = 8
 39 | # This replaces the startup script and checks MyISAM tables if needed
 40 | # the first time they are touched
 41 | #myisam_recover_options = BACKUP
 42 | #max_connections        = 100
 43 | #table_cache            = 64
 44 | #thread_concurrency     = 10
 45 | 
 46 | #
 47 | # * Query Cache Configuration
 48 | #
 49 | #query_cache_limit      = 1M
 50 | query_cache_size        = 16M
 51 | 
 52 | #
 53 | # * Logging and Replication
 54 | #
 55 | # Both location gets rotated by the cronjob.
 56 | # Be aware that this log type is a performance killer.
 57 | # As of 5.1 you can enable the log at runtime!
 58 | #general_log_file       = /var/log/mysql/mysql.log
 59 | #general_log            = 1
 60 | #
 61 | # Error log - should be very few entries.
 62 | #
 63 | log_error = /var/log/mysql/error.log
 64 | #
 65 | # Enable the slow query log to see queries with especially long duration
 66 | #slow_query_log_file    = /var/log/mysql/mariadb-slow.log
 67 | #long_query_time        = 10
 68 | #log_slow_rate_limit    = 1000
 69 | #log_slow_verbosity     = query_plan
 70 | #log-queries-not-using-indexes
 71 | #
 72 | # The following can be used as easy to replay backup logs or for replication.
 73 | # note: if you are setting up a replication slave, see README.Debian about
 74 | #       other settings you may need to change.
 75 | #server-id              = 1
 76 | #log_bin                = /var/log/mysql/mysql-bin.log
 77 | expire_logs_days        = 10
 78 | #max_binlog_size        = 100M
 79 | #binlog_do_db           = include_database_name
 80 | #binlog_ignore_db       = exclude_database_name
 81 | 
 82 | #
 83 | # * Security Features
 84 | #
 85 | # Read the manual, too, if you want chroot!
 86 | #chroot = /var/lib/mysql/
 87 | #
 88 | # For generating SSL certificates you can use for example the GUI tool "tinyca".
 89 | #
 90 | #ssl-ca = /etc/mysql/cacert.pem
 91 | #ssl-cert = /etc/mysql/server-cert.pem
 92 | #ssl-key = /etc/mysql/server-key.pem
 93 | #
 94 | # Accept only connections using the latest and most secure TLS protocol version.
 95 | # ..when MariaDB is compiled with OpenSSL:
 96 | #ssl-cipher = TLSv1.2
 97 | # ..when MariaDB is compiled with YaSSL (default in Debian):
 98 | #ssl = on
 99 | 
100 | #
101 | # * Character sets
102 | #
103 | # MySQL/MariaDB default is Latin1, but in Debian we rather default to the full
104 | # utf8 4-byte character set. See also client.cnf
105 | #
106 | character-set-server  = utf8mb4
107 | collation-server      = utf8mb4_general_ci
108 | 
109 | #
110 | # * InnoDB
111 | #
112 | # InnoDB is enabled by default with a 10MB datafile in /var/lib/mysql/.
113 | # Read the manual for more InnoDB related options. There are many!
114 | 
115 | #
116 | # * Unix socket authentication plugin is built-in since 10.0.22-6
117 | #
118 | # Needed so the root database user can authenticate without a password but
119 | # only when running as the unix root user.
120 | #
121 | # Also available for other users if required.
122 | # See https://mariadb.com/kb/en/unix_socket-authentication-plugin/
123 | 
124 | # this is only for embedded server
125 | [embedded]
126 | 
127 | # This group is only read by MariaDB servers, not by MySQL.
128 | # If you use the same .cnf file for MySQL and MariaDB,
129 | # you can put MariaDB-only options here
130 | [mariadb]
131 | 
132 | # This group is only read by MariaDB-10.3 servers.
133 | # If you use the same .cnf file for MariaDB of different versions,
134 | # use this group for options that older servers don't understand
135 | [mariadb-10.3]


--------------------------------------------------------------------------------