[root@salt-master ~]# salt-key -A -y
The following keys are going to be accepted:
Unaccepted Keys:
salt-minion01
salt-minion02
salt-minion03
salt-minion04
Key for minion salt-minion01 accepted.
Key for minion salt-minion02 accepted.
Key for minion salt-minion03 accepted.
Key for minion salt-minion04 accepted.
[root@salt-master ~]# salt-key -L
Accepted Keys:
salt-minion01
salt-minion02
salt-minion03
salt-minion04
Denied Keys:
Unaccepted Keys:
Rejected Keys:
[root@salt-master ~]# salt '*' test.ping
salt-minion01:
True
salt-minion02:
True
salt-minion03:
True
salt-minion04:
True

user.present:
- name: www
- fullname: www
- shell: /sbin/nologin
- uid: 2000
- gid: 2000
- unless: id www

nginx-install:
file.managed:
- name: /usr/local/src/nginx-{{ nginx_version }}.tar.gz
- source: salt://modules/nginx/files/nginx-{{ nginx_version }}.tar.gz
- user: root
- group: root
- mode: 644

cmd.run:
- name: cd /usr/local/src/ && tar xf nginx-{{ nginx_version }}.tar.gz && cd nginx-{{ nginx_version }} && ./configure --prefix=/usr/local/nginx-{{ nginx_version }} --user=root --group=root --with-http_ssl_module --with-stream --with-http_stub_status_module --with-file-aio --with-http_gzip_static_module && make && make install && ln -s /usr/local/nginx-{{ nginx_version }} /usr/local/nginx
- unless: test -d /usr/local/nginx-{{ nginx_version }} && test -L /usr/local/nginx
- require:
- file: nginx-install
- pkg: pkg-install

#Ìí¼Ósystemctl
nginx-init:
file.managed:
- name: /usr/lib/systemd/system/nginx.service
- source: salt://modules/nginx/files/nginx.service.template
- user: root
- group: root
- mode: 755
- unless: test -f /usr/lib/systemd/system/nginx.service
cmd.run:
- name: systemctl daemon-reload
- require:
- file: nginx-init

#ÅäÖÃÎļþ
/usr/local/nginx/conf/nginx.conf:
file.managed:
- source: salt://modules/nginx/files/nginx.conf.template
- user: root
- group: root
- mode: 644

#Æô¶¯nginx
nginx-service:
file.directory:
- name: /usr/local/nginx/conf/conf.d
- user: root
- group: root
- mode: 755
- require:
- cmd: nginx-install
service.running:
- name: nginx
- enable: True
- reload: True
- require:
- cmd: nginx-init
- watch:
- file: /usr/local/nginx/conf/nginx.conf
- file: nginx-service

php-install:
file.managed:
- name: /usr/local/src/php-{{ php_version }}.tar.gz
- source: salt://modules/php/files/php-{{ php_version }}.tar.gz
- user: root
- group: root
- mode: 644

cmd.run:
- name: cd /usr/local/src/ && tar xf php-{{ php_version }}.tar.gz && cd php-{{ php_version }} && ./configure
--prefix=/usr/local/php-{{ php_version }} --with-curl
--with-freetype-dir --with-gd --with-gettext
--with-iconv-dir
--with-jpeg-dir --with-kerberos --with-libdir=lib64
--with-libxml-dir --with-mysql --with-mysqli
--with-openssl --with-pcre-regex --with-pdo-mysql
--with-dpo-sqlite --with-pear --with-png-dir
--with-openssl --with-xmlrpc --with-xsl --with-zlib
--enable-fpm --enable-bcmath --enable-libxml
--enable-inline-optimization --enable-gd-native-ttf
--enable-mbregex --enable-mbstring --enable-opcache
--enable-pcntl --enable-shmop --enable-soap
--enable-sockets --enable-sysvsem --enable-xml
--enable-zip && make && make install && ln -s
/usr/local/php-{{ php_version }} /usr/local/php
- unless: test -d /usr/local/php-{{ php_version }}
&& test -L /usr/local/php
- require:
- file: php-install
- pkg: pkg-install

#php-fpmÅäÖÃÎļþÅäÖÃ
php-fpm:
file.managed:
- name: /usr/local/php/etc/php-fpm.conf
- source: salt://modules/php/files/php-fpm.conf.template
- user: root
- group: root
- mode: 644
- require:
- cmd: php-install
cmd.run:
- name: ln -s /usr/local/php/etc/php-fpm.conf
/etc/php-fpm.conf
- unless: test -L /etc/php-fpm.conf
- require:
- file: php-fpm
#¼ÓÈësystemÆô¶¯
php-systemd:
file.managed:
- name: /usr/lib/systemd/system/php-fpm.service
- source: salt://modules/php/files/php-fpm.service.template
- user: root
- group: root
- mode: 644
- require:
- cmd: php-install

#¼ÓÈë/etc/init.d/Æô¶¯
php-init:
file.managed:
- name: /etc/init.d/php-fpm
- source: salt://modules/php/files/php-fpm.template
- user: root
- group: root
- mode: 755
- require:
- cmd: php-install

#Æô¶¯php-fpm
php-service:
service.running:
- name: php-fpm
- enable: True
- require:
- file: php-systemd
- watch:
- file: php-fpm
- file: php-ini

#my.cnfÅäÖÃÎļþ
mariadb-config:
file.managed:
- name: /etc/my.cnf
- source: salt://modules/mysql/files/my.cnf
- user: root
- group: root
- mode: 644
- require:
- pkg: mariadb-install

#Æô¶¯mariadb
mariadb-service:
service.running:
- name: mariadb
- enable: True
- watch:
- file: mariadb-config
- require:
- pkg: mariadb-install
- file: mariadb-config

#ÐéÄâÖ÷»úwebÕ¾µãĿ¼´´½¨
web-www:
file.directory:
- name: /opt/www
- user: www
- group: www
- mode: 755

#ÐéÄâÖ÷»úÅäÖÃÎļþÅäÖÃ
web-www-conf:
file.managed:
- name: /usr/local/nginx/conf/conf.d/www.conf
- source: salt://modules/lnmp/files/www.conf
- user: root
- group: root
- mode: 644
- require:
- file: web-www
- watch_in:
- service: nginx-service
- template: jinja
- defaults:
PORT: 80
IPADDR: {{ grains['fqdn_ip4'][0] }}

#phpinfo²âÊÔÎļþ×¼±¸
web-index:
file.managed:
- name: /opt/www/index.php
- source: salt://modules/lnmp/files/index.php
- user: www
- group: www
- mode: 644

#ÅäÖÃÎļþ
haproxy-config:
file.managed:
- name: /etc/haproxy/haproxy.cfg
- source: salt://modules/haproxy/files/haproxy.cfg
- user: root
- group: root
- mode: 644
- require:
- pkg: haproxy-install

#Æô¶¯haproxy
haproxy-service:
service.running:
- name: haproxy
- enable: True
- require:
- pkg: haproxy-install
- file: haproxy-config
- watch:
- file: haproxy-config

#keepalivedÅäÖÃÎļþ
keepalived-config:
file.managed:
- name: /etc/keepalived/keepalived.conf
- source: salt://modules/keepalived/files/keepalived.conf
- user: root
- group: root
- mode: 644
- require:
- pkg: keepalived-install
- template: jinja
- defaults:
{% if grains['fqdn'] == "salt-minion01" %}
ROUTER_ID: saltstack01
STATE: MASTER
PRIORITY: 150
{% elif grains['fqdn'] == "salt-minion02" %}
ROUTER_ID: saltstack02
STATE: BACKUP
PRIORITY: 100
{% endif %}

#Æô¶¯keepalived
keepalived-service:
service.running:
- name: keepalived
- enable: True
- require:
- pkg: keepalived-install
- file: keepalived-config
- watch:
- file: keepalived-config

"salt-minion0[1-2]":
- modules.haproxy.service
- modules.keepalived.service

"salt-minion0[1-2]":
- modules.haproxy.service
- modules.keepalived.service

#µ¥ÊµÀý²Ù×÷˵Ã÷£º
prod:
"salt-minion04":
- modules.nginx.service #µ¥¶À°²×°nginxʱ
- modules.mysql.service #µ¥¶À°²×°mysqlʱ
- modules.php.service #µ¥¶À°²×°phpʱ
- modules.keepalived.service #µ¥¶À°²×°keepalivedʱ
- modules.haproxy.service #µ¥¶À°²×°haproxyʱ

"salt-minion03":
- modules.lnmp.www #µ¥¶À²¿Êðlnmp»·¾³Ê±