lamp-basic.yml

ROSTemplateFormatVersion: '2015-09-01'
Description:
  en: On the existing virtual proprietary network, switches, and security group base resources, the one-click deployment OF LAMP (Linux-Apache-MySQL-PHP) development environment based on the Centos7 system.
  zh-cn: 在已有虚拟专有网络、交换机和安全组基础资源上，基于Centos7系统中一键部署LAMP(Linux+Apache+MySQL+PHP)开发环境。
Parameters:
  SelectExistECS:
    Type: Boolean
    Label:
      en: Whether to select an existing instance
      zh-cn: 是否选择已有实例
    Description:
      en: Whether to select an existing Centos7 system instance. The Centos7 system instance must be connected to a public network.
      zh-cn: 是否选择已有Centos7系统实例，实例需要开通公网。
    Default: false
  VPC:
    Type: String
    Label:
      en: Existing VPC Instance ID
      zh-cn: 现有VPC的实例ID
    Description:
      en: Please search the ID starting with (vpc-xxx)from console-Virtual Private Cloud.
      zh-cn: 现有虚拟专有网络的实例ID,控制台-VPC-专有网络下查询。
    AssociationProperty: ALIYUN::ECS::VPC::VPCId
    AssociationPropertyMetadata:
      Visible:
        Condition:
          Fn::Equals:
            - ${SelectExistECS}
            - false
    Default: Null
  ZoneId:
    Type: String
    Label:
      en: VSwitch Availability Zone
      zh-cn: 交换机可用区
    Description:
      en: Availability Zone ID.<br><b>note：<font color='blue'>before selecting, please confirm that the Availability Zone supports the specification of creating ECS resources,which is recommended to be different from other VSwitch Availability Zone.</font></b>
      zh-cn: 可用区ID。<br><b>注： <font color='blue'>选择前请确认该可用区是否支持创建ECS资源的规格，建议与其他交换机可用区不同。</font></b>
    AssociationProperty: ALIYUN::ECS::Instance::ZoneId
    AssociationPropertyMetadata:
      Visible:
        Condition:
          Fn::Equals:
            - ${SelectExistECS}
            - false
    Default: Null
  VSwitch:
    Type: String
    Label:
      en: VSwitch ID
      zh-cn: 网络交换机ID
    Description:
      en: Please search the business vswitch ID starting with(vsw-xxx)from console-Virtual Private Cloud-VSwitches.
      zh-cn: 现有业务网络交换机的实例ID,控制台-VPC-专有网络-交换机下查询。
    AssociationProperty: ALIYUN::ECS::VSwitch::VSwitchId
    AssociationPropertyMetadata:
      VpcId: VPC
      ZoneId: ZoneId
      Visible:
        Condition:
          Fn::Equals:
            - ${SelectExistECS}
            - false
    Default: Null
  ECSInstanceId:
    Type: String
    Label:
      en: Existing ECS Instance
      zh-cn: 已创建ECS实例
    Description:
      en: Select an ECS instance with the CentOS 7.9 64-bit operating system.
      zh-cn: 选择已存在操作系统为CentOS 7.9 64位的ECS实例。
    AssociationProperty: ALIYUN::ECS::Instance::InstanceId
    AssociationPropertyMetadata:
      ZoneId: ZoneId
      Visible:
        Condition:
          Fn::Equals:
            - ${SelectExistECS}
            - true
    Default: Null
  InstanceType:
    Type: String
    Label:
      en: Instance Type
      zh-cn: 实例规格
    Description:
      en: <font color='blue'><b>1.Before selecting the model please confirm that the current available zone under the model is in stock, some models need to be reported in advance</b></font><br><font color='blue'><b>2.List of optional models</font><br></b></font>[ecs.c5.large <font color='green'>2vCPU 4GiB Intranet bandwidth1Gbps In-grid sending and receiving packages30MillionPPS</font>]<br></b>[ecs.c5.xlarge <font color='green'>4vCPU 8GiB Intranet bandwidth1.5Gbps In-grid sending and receiving packages50MillionPPS</font>]<br></b>[ecs.c5.2xlarge <font color='green'>8vCPU 16GiB Intranet bandwidth2.5Gbps In-grid sending and receiving packages80MillionPPS.</font>]
      zh-cn: <font color='blue'><b>1.选择机型前请先确认当前可用区下该机型是否有货，部分机型需要提前报备</b></font><br><font color='blue'><b>2.可选机型列表</font><br></b></font>[ecs.c5.large <font color='green'>2vCPU 4GiB 内网带宽1Gbps 内网收发包30万PPS</font>]<br></b>[ecs.c5.xlarge <font color='green'>4vCPU 8GiB 内网带宽1.5Gbps 内网收发包50万PPS</font>]<br></b>[ecs.c5.2xlarge <font color='green'>8vCPU 16GiB 内网带宽2.5Gbps 内网收发包80万PPS。</font>]
    AssociationProperty: ALIYUN::ECS::Instance::InstanceType
    AssociationPropertyMetadata:
      ZoneId: ZoneId
      Visible:
        Condition:
          Fn::Equals:
            - ${SelectExistECS}
            - false
    Default: ecs.c5.large
  SystemDiskCategory:
    Type: String
    Label:
      en: System Disk Type
      zh-cn: 系统盘类型
    Description:
      en: '<font color=''blue''><b>Optional values:</b></font><br>[cloud_efficiency: <font color=''green''>Efficient Cloud Disk</font>]<br>[cloud_ssd: <font color=''green''>SSD Cloud Disk</font>]<br>[cloud_essd: <font color=''green''>ESSD Cloud Disk</font>]<br>[cloud: <font color=''green''>Cloud Disk</font>]<br>[ephemeral_ssd: <font color=''green''>Local SSD Cloud Disk</font>]'
      zh-cn: '<font color=''blue''><b>可选值：</b></font><br>[cloud_efficiency: <font color=''green''>高效云盘</font>]<br>[cloud_ssd: <font color=''green''>SSD云盘</font>]<br>[cloud_essd: <font color=''green''>ESSD云盘</font>]<br>[cloud: <font color=''green''>普通云盘</font>]<br>[ephemeral_ssd: <font color=''green''>本地SSD盘</font>]'
    AssociationProperty: ALIYUN::ECS::Disk::SystemDiskCategory
    AssociationPropertyMetadata:
      LocaleKey: DiskCategory
      InstanceType: ${InstanceType}
      ZoneId: ZoneId
      Visible:
        Condition:
          Fn::Equals:
            - ${SelectExistECS}
            - false
    Default: cloud_efficiency
  InstancePassword:
    Type: String
    Label:
      en: Instance Password
      zh-cn: 实例密码
    Description:
      en: Server login password, Length 8-30, must contain three(Capital letters, lowercase letters, numbers, ()`~!@#$%^&*_-+=|{}[]:;'<>,.?/ Special symbol in).
      zh-cn: 服务器登录密码,长度8-30，必须包含三项（大写字母、小写字母、数字、 ()`~!@#$%^&*_-+=|{}[]:;'<>,.?/ 中的特殊符号）。
    ConstraintDescription:
      en: Length 8-30, must contain three(Capital letters, lowercase letters, numbers, ()`~!@#$%^&*_-+=|{}[]:;'<>,.?/ Special symbol in).
      zh-cn: 长度8-30，必须包含三项（大写字母、小写字母、数字、 ()`~!@#$%^&*_-+=|{}[]:;'<>,.?/ 中的特殊符号）。
    AllowedPattern: '[0-9A-Za-z\_\-\&:;''<>,=%`~!@#\(\)\$\^\*\+\|\{\}\[\]\.\?\/]+$'
    AssociationPropertyMetadata:
      Visible:
        Condition:
          Fn::Equals:
            - ${SelectExistECS}
            - false
    MinLength: 8
    MaxLength: 30
    NoEcho: true
    Default: Null
  DBName:
    Type: String
    Label:
      en: DB Name
      zh-cn: 数据库名称
    Description:
      en: MySQL database name, [1, 64] English or Chinese characters, must start with a letter or Chinese in size, can contain numbers, '_' or '.', '-'.
      zh-cn: MySQL数据库名称，[1, 64] 英文或中文字符，必须以字母或中文开头，可以包含数字、下划线或“.”、“-”。
    ConstraintDescription:
      en: Must begin with a letter and contain only alphanumeric characters.
      zh-cn: 必须以字母开头并且只包含字母数字字符。
    Default: MyDatabase
    MinLength: 1
    MaxLength: 64
  DBUser:
    Type: String
    Label:
      en: DB UserName
      zh-cn: 数据库用户名
    Description:
      en: Username for MySQL database access.It consists of lowercase letters, numbers and underscores (_), and begins with a letter. Not longer than 16 characters.
      zh-cn: MySQL数据库访问的用户名。它由小写字母、数字和下划线（_）组成，以字母开头。不超过16个字符。
    ConstraintDescription:
      en: Must begin with a letter and contain only alphanumeric characters.
      zh-cn: 必须以字母开头并且只包含字母数字字符。
    Default: DefaultUser
    MinLength: 1
    MaxLength: 16
  DBPassword:
    Type: String
    Label:
      en: DB User Password
      zh-cn: 数据库用户密码
    Description:
      en: The MySQL user password, consisting of letters, numbers, and underline(_), 8 to 32 characters in length.
      zh-cn: MySQL用户密码，数据库访问大小写字母、数字和下划线（_），8-32个字符。
    ConstraintDescription:
      en: Consisting of letters, numbers, and underline(_), 8 to 32 characters in length.
      zh-cn: 由字母、数字和下划线(_)组成，长度为8到32个字符。
    MinLength: 8
    MaxLength: 32
    NoEcho: true
  DBRootPassword:
    Type: String
    Label:
      en: DB Root Password
      zh-cn: 数据库管理员用户密码
    Description:
      en: Root user password for MySQL, consisting of letters, numbers, and underline(_), 8 to 32 characters in length.
      zh-cn: MySQL的root用户密码, 由字母、数字、下划线（_）组成，长度为8~32个字符。
    ConstraintDescription:
      en: Consisting of letters, numbers, and underline(_), 8 to 32 characters in length.
      zh-cn: 由字母、数字和下划线(_)组成，长度为8到32个字符。
    MinLength: 8
    MaxLength: 32
    NoEcho: true
Conditions:
  IsSelectExistECS:
    Fn::Equals:
      - Ref: SelectExistECS
      - false
  NotSelectExistECS:
    Fn::Equals:
      - Ref: SelectExistECS
      - true
Resources:
  SecurityGroup:
    Type: ALIYUN::ECS::SecurityGroup
    Condition: IsSelectExistECS
    Properties:
      VpcId:
        Ref: VPC
      SecurityGroupIngress:
        - IpProtocol: tcp
          NicType: internet
          PortRange: 80/80
          Priority: 1
          SourceCidrIp: 0.0.0.0/0
      SecurityGroupName: LAMP
  ExistWebServer:
    Type: DATASOURCE::ECS::Instances
    Condition: NotSelectExistECS
    Properties:
      InstanceId:
        Ref: ECSInstanceId
  WebServer:
    Type: ALIYUN::ECS::Instance
    Condition: IsSelectExistECS
    Properties:
      VpcId:
        Ref: VPC
      VSwitchId:
        Ref: VSwitch
      SecurityGroupId:
        Ref: SecurityGroup
      ImageId: centos_7
      InstanceType:
        Ref: InstanceType
      InternetMaxBandwidthOut: 80
      IoOptimized: optimized
      Password:
        Ref: InstancePassword
      SystemDiskCategory:
        Ref: SystemDiskCategory
    DependsOn: SecurityGroup
  WebServerConditionHandle:
    Type: ALIYUN::ROS::WaitConditionHandle
    Properties: {}
  WebServerWaitCondition:
    Type: ALIYUN::ROS::WaitCondition
    Properties:
      Count: 1
      Handle:
        Ref: WebServerConditionHandle
      Timeout: 1800
  Command:
    Type: ALIYUN::ECS::Command
    Properties:
      Timeout: 1800
      CommandContent:
        Fn::Base64Encode:
          Fn::Sub:
            - |-
              #!/bin/bash
              dbname=${DBName}
              dbuser=${DBUser}
              dbpassword=${DBPassword}
              dbrootpassword=${DBRootPassword}
              export HOME=/root
              export HOSTNAME=`hostname`
              systemctl stop firewalld.service
              systemctl disable firewalld.service
              sed -i 's/^SELINUX=/# SELINUX=/' /etc/selinux/config 
              sed -i '/# SELINUX=/a SELINUX=disabled' /etc/selinux/config 
              setenforce 0 
              yum -y install httpd httpd-manual mod_ssl mod_perl mod_auth_mysql 
              yum install yum-priorities -y 
              yum -y install php-fpm 
              systemctl start php-fpm.service 
              systemctl enable php-fpm.service 
              yum -y install mariadb mariadb-server 
              systemctl start mariadb.service 
              systemctl enable mariadb.service 
              yum -y install php php-mysql php-gd libjpeg* php-ldap php-odbc php-pear php-xml php-xmlrpc php-mbstring php-bcmath php-mhash php-mcrypt 
              MDSRING=`find / -name mbstring.so` 
              echo extension=$MDSRING >> /etc/php.ini 
              systemctl restart mariadb.service 
              systemctl start httpd.service 
              mysqladmin -u root password "$dbrootpassword" 
              $(mysql $dbname -u root --password="$dbrootpassword" >/dev/null 2>&1 </dev/null); (( $? != 0 )) 
              echo CREATE DATABASE $dbname \; > /tmp/setup.mysql 
              echo GRANT ALL ON $dbname.* TO "$dbuser"@"localhost" IDENTIFIED BY "'$dbpassword'" \; >> /tmp/setup.mysql 
              mysql -u root --password="$dbrootpassword" < /tmp/setup.mysql 
              $(mysql $dbname -u root --password="$dbrootpassword" >/dev/null 2>&1 </dev/null); (( $? != 0 )) 
              cd /root 
              systemctl restart php-fpm.service 
              echo \<?php >  /var/www/html/test.php 
              echo \$conn=mysql_connect\("'127.0.0.1'", "'$dbuser'", "'$dbpassword'"\)\; >>  /var/www/html/test.php 
              echo if \(\$conn\){ >>  /var/www/html/test.php 
              echo   echo \"LAMP platform connect to mysql is successful\!\"\; >>  /var/www/html/test.php 
              echo   }else{  >>  /var/www/html/test.php 
              echo echo \"LAMP platform connect to mysql is failed\!\"\;  >> /var/www/html/test.php 
              echo }  >>  /var/www/html/test.php 
              echo  phpinfo\(\)\;  >>  /var/www/html/test.php 
              echo \?\>  >>  /var/www/html/test.php 
              ${CurlCli} -d '{"data" : "Install nginx."}'
            - DBName:
                Ref: DBName
              DBUser:
                Ref: DBUser
              DBPassword:
                Ref: DBPassword
              DBRootPassword:
                Ref: DBRootPassword
              CurlCli:
                Fn::GetAtt:
                  - WebServerConditionHandle
                  - CurlCli
      Type: RunShellScript
      Name:
        Ref: ALIYUN::StackId
    DependsOn:
      - WebServerConditionHandle
  Invocation:
    Type: ALIYUN::ECS::Invocation
    Properties:
      InstanceIds:
        - Fn::If:
            - IsSelectExistECS
            - Fn::GetAtt:
                - WebServer
                - InstanceId
            - Ref: ECSInstanceId
      CommandId:
        Ref: Command
Outputs:
  ApacheWebURL:
    Description: URL for newly created apache web page.
    Value:
      Fn::Sub:
        - 'http://${IP}/test.php'
        - IP:
            'Fn::If':
              - IsSelectExistECS
              - 'Fn::GetAtt':
                  - WebServer
                  - PublicIp
              - 'Fn::Jq':
                  - First
                  - >-
                    if .[0].PublicIpAddress != [] then .[0].PublicIpAddress[0]
                    else .[0].EipAddress.IpAddress end
                  - 'Fn::GetAtt':
                      - ExistWebServer
                      - Instances
Metadata:
  ALIYUN::ROS::Interface:
    ParameterGroups:
      - Parameters:
          - SelectExistECS
          - VPC
          - ZoneId
          - VSwitch
        Label:
          default:
            en: Infrastructure Configuration
            zh-cn: 基础资源配置配置
      - Parameters:
          - ECSInstanceId
          - InstanceType
          - SystemDiskCategory
          - InstancePassword
          - DBName
          - DBUser
          - DBPassword
          - DBRootPassword
        Label:
          default:
            en: LAMP Configuration
            zh-cn: LAMP配置
    TemplateTags:
      - acs:example:网站:部署LAMP(Linux+Apache+MySQL+PHP)环境