Skip to content
GitLab
Explore
Sign in
Primary navigation
Search or go to…
Project
php
Manage
Activity
Members
Labels
Plan
Issues
Issue boards
Milestones
Code
Merge requests
Repository
Branches
Commits
Tags
Repository graph
Compare revisions
Deploy
Releases
Model registry
Monitor
Incidents
Service Desk
Analyze
Model experiments
Help
Help
Support
GitLab documentation
Compare GitLab plans
Community forum
Contribute to GitLab
Provide feedback
Keyboard shortcuts
?
Snippets
Groups
Projects
Show more breadcrumbs
Ansible
Roles
php
Commits
7a8b676b
Commit
7a8b676b
authored
4 years ago
by
jurgenhaas
Browse files
Options
Downloads
Patches
Plain Diff
ansible-inventories/gentner#2375 Move imagemagick specific parts to the new role
parent
40056a90
No related branches found
No related tags found
No related merge requests found
Changes
4
Hide whitespace changes
Inline
Side-by-side
Showing
4 changed files
defaults/main.yml
+0
-2
0 additions, 2 deletions
defaults/main.yml
meta/main.yml
+1
-0
1 addition, 0 deletions
meta/main.yml
tasks/php.yml
+0
-16
0 additions, 16 deletions
tasks/php.yml
templates/etc-imagemagick-policy.xml
+0
-74
0 additions, 74 deletions
templates/etc-imagemagick-policy.xml
with
1 addition
and
92 deletions
defaults/main.yml
+
0
−
2
View file @
7a8b676b
...
...
@@ -27,12 +27,10 @@ php_packages:
-
php5-mysql
-
php5-xdebug
-
php5-xmlrpc
-
imagemagick
php_base_dir
:
php5
php_conf_dir
:
conf.d
php_imagick_config_dir
:
/etc/ImageMagick-6
php_allow_call_time_pass_reference
:
'
on'
php_browscap
:
no
php_date_timezone
:
Europe/Berlin
...
...
This diff is collapsed.
Click to expand it.
meta/main.yml
+
1
−
0
View file @
7a8b676b
...
...
@@ -2,3 +2,4 @@
dependencies
:
-
{
role
:
apache
}
-
{
role
:
imagemagick
}
This diff is collapsed.
Click to expand it.
tasks/php.yml
+
0
−
16
View file @
7a8b676b
...
...
@@ -119,22 +119,6 @@
import_tasks
:
msodbc.yml
when
:
php_needs_msodbc
-
name
:
Ensure ImageMagick config directory
file
:
dest
:
'
{{
php_imagick_config_dir
}}'
state
:
directory
owner
:
root
group
:
root
mode
:
0755
-
name
:
ImageMagick Policy File
template
:
src
:
etc-imagemagick-policy.xml
dest
:
'
{{
php_imagick_config_dir
}}/policy.xml'
owner
:
root
group
:
root
mode
:
0644
-
block
:
-
name
:
Apache FPM Socket Configuration
...
...
This diff is collapsed.
Click to expand it.
templates/etc-imagemagick-policy.xml
deleted
100644 → 0
+
0
−
74
View file @
40056a90
<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE policymap [
<!ELEMENT policymap (policy)+>
<!ELEMENT policy (#PCDATA)>
<!ATTLIST policy domain (delegate|cache|coder|filter|path|resource) #IMPLIED>
<!ATTLIST policy name CDATA #IMPLIED>
<!ATTLIST policy rights CDATA #IMPLIED>
<!ATTLIST policy pattern CDATA #IMPLIED>
<!ATTLIST policy value CDATA #IMPLIED>
]>
<!--
Configure ImageMagick policies.
Domains include system, delegate, coder, filter, path, or resource.
Rights include none, read, write, and execute. Use | to combine them,
for example: "read | write" to permit read from, or write to, a path.
Use a glob expression as a pattern.
Suppose we do not want users to process MPEG video images:
<policy domain="delegate" rights="none" pattern="mpeg:decode" />
Here we do not want users reading images from HTTP:
<policy domain="coder" rights="none" pattern="HTTP" />
Lets prevent users from executing any image filters:
<policy domain="filter" rights="none" pattern="*" />
The /repository file system is restricted to read only. We use a glob
expression to match all paths that start with /repository:
<policy domain="path" rights="read" pattern="/repository/*" />
Any large image is cached to disk rather than memory:
<policy domain="resource" name="area" value="1GB"/>
Define arguments for the memory, map, area, and disk resources with
SI prefixes (.e.g 100MB). In addition, resource policies are maximums for
each instance of ImageMagick (e.g. policy memory limit 1GB, -limit 2GB
exceeds policy maximum so memory limit is 1GB).
-->
<policymap>
<!-- <policy domain="system" name="precision" value="6"/> -->
<!-- <policy domain="resource" name="temporary-path" value="/tmp"/> -->
<!-- <policy domain="resource" name="memory" value="2GiB"/> -->
<!-- <policy domain="resource" name="map" value="4GiB"/> -->
<!-- <policy domain="resource" name="area" value="1GB"/> -->
<!-- <policy domain="resource" name="disk" value="16EB"/> -->
<!-- <policy domain="resource" name="file" value="768"/> -->
<!-- <policy domain="resource" name="thread" value="4"/> -->
<!-- <policy domain="resource" name="throttle" value="0"/> -->
<policy
domain=
"resource"
name=
"time"
value=
"30"
/>
<policy
domain=
"cache"
name=
"shared-secret"
value=
"passphrase"
/>
<policy
domain=
"coder"
rights=
"none"
pattern=
"EPHEMERAL"
/>
<policy
domain=
"coder"
rights=
"none"
pattern=
"URL"
/>
<policy
domain=
"coder"
rights=
"none"
pattern=
"HTTPS"
/>
<policy
domain=
"coder"
rights=
"none"
pattern=
"MVG"
/>
<policy
domain=
"coder"
rights=
"none"
pattern=
"MSL"
/>
<policy
domain=
"coder"
rights=
"none"
pattern=
"TEXT"
/>
<policy
domain=
"coder"
rights=
"none"
pattern=
"SHOW"
/>
<policy
domain=
"coder"
rights=
"none"
pattern=
"WIN"
/>
<policy
domain=
"coder"
rights=
"none"
pattern=
"PLT"
/>
<policy
domain=
"path"
rights=
"none"
pattern=
"@*"
/>
<!-- disable ghostscript format types -->
<policy
domain=
"coder"
rights=
"none"
pattern=
"PS"
/>
<policy
domain=
"coder"
rights=
"none"
pattern=
"EPS"
/>
<policy
domain=
"coder"
rights=
"read | write"
pattern=
"PDF"
/>
<policy
domain=
"coder"
rights=
"none"
pattern=
"XPS"
/>
</policymap>
This diff is collapsed.
Click to expand it.
Preview
0%
Loading
Try again
or
attach a new file
.
Cancel
You are about to add
0
people
to the discussion. Proceed with caution.
Finish editing this message first!
Save comment
Cancel
Please
register
or
sign in
to comment