wordpress-instance.yml

ROSTemplateFormatVersion: '2015-09-01'
Description:
  en: Create a wordpress instance.
  zh-cn: 创建一台ECS实例并部署WordPress。
Parameters:
  VpcCidrBlock:
    Type: String
    Label:
      en: VPC CIDR Block
      zh-cn: 专有网络网段
    Description:
      en: 'The IP address range of the VPC in the CIDR Block form; <br>you can use
        the following IP address ranges: <br><font color=''green''>[10.0.0.0/8]</font><br><font
        color=''green''>[172.16.0.0/12]</font><br><font color=''green''>[192.168.0.0/16]</font>'
      zh-cn: 专有网络IP地址段范围，<br>您可以使用以下的IP地址段:<br><font color='green'>[10.0.0.0/8]</font><br><font
        color='green'>[172.16.0.0/12]</font><br><font color='green'>[192.168.0.0/16]</font>
    Default: 192.168.0.0/16
    AllowedValues:
      - 192.168.0.0/16
      - 172.16.0.0/12
      - 10.0.0.0/8
  ZoneId:
    Type: String
    Label:
      en: VSwitch Availability Zone
      zh-cn: 可用区ID
    Description:
      en: Availability Zone ID,<br><b>note： <font color='blue'>Before selecting, please confirm that the Availability Zone supports the specification of creating RDS and ECS resources.</font></b>
      zh-cn: 可用区ID。<br><b>注： <font color='blue'>选择可用区前请确认该可用区是否支持创建RDS及ECS资源的规格。</font></b>
    AssociationProperty: ALIYUN::ECS::Instance:ZoneId
  VSwitchCidrBlock:
    Type: String
    Label:
      en: VSwitch CIDR Block
      zh-cn: 交换机子网网段
    Description:
      en: CIDR Block of created VSwitch, It must belong to itself VPC CIDR Block.
      zh-cn: 交换机网段，必须为专有网络子网段。
    Default: 192.168.0.0/24
  InstanceType:
    Type: String
    Label:
      en: Instance Type
      zh-cn: 实例类型
    Description:
      en: 'Fill in the specifications that can be used under the VSwitch availability
        zone;</b></font><br>general specifications：<font color=''red''><b>ecs.c5.large</b></font><br>note:
        a few zones do not support general specifications<br>see detail: <a href=''https://www.alibabacloud.com/help/en/doc-detail/25378.html''
        target=''_blank''><b><font color=''blue''>Instance Specification Family.</font></a></b>'
      zh-cn: 填写VSwitch可用区下可使用的规格；<br>通用规格：<font color='red'><b>ecs.c5.large</b></font><br>注：可用区可能不支持通用规格<br>规格详见：<a
        href='https://help.aliyun.com/document_detail/25378.html' target='_blank'><b><font
        color='blue'>实例规格族。</font></a></b>
    AssociationProperty: ALIYUN::ECS::Instance::InstanceType
    AssociationPropertyMetadata:
      ZoneId: ZoneId
  SystemDiskCategory:
    Type: String
    Label:
      en: System Disk Type
      zh-cn: 系统盘类型
    Description:
      en: '<font color=''blue''><b>Optional values:</b></font><br>[cloud_efficiency: <font color=''green''>Efficient Cloud Disk</font>]<br>[cloud_ssd: <font color=''green''>SSD Cloud Disk</font>]<br>[cloud_essd: <font color=''green''>ESSD Cloud Disk</font>]<br>[cloud: <font color=''green''>Cloud Disk</font>]<br>[ephemeral_ssd: <font color=''green''>Local SSD Cloud Disk</font>]'
      zh-cn: '<font color=''blue''><b>可选值：</b></font><br>[cloud_efficiency: <font color=''green''>高效云盘</font>]<br>[cloud_ssd: <font color=''green''>SSD云盘</font>]<br>[cloud_essd: <font color=''green''>ESSD云盘</font>]<br>[cloud: <font color=''green''>普通云盘</font>]<br>[ephemeral_ssd: <font color=''green''>本地SSD盘</font>]'
    AssociationProperty: ALIYUN::ECS::Disk::SystemDiskCategory
    AssociationPropertyMetadata:
      LocaleKey: DiskCategory
      InstanceType: ${InstanceType}
      ZoneId: ZoneId
  InstancePassword:
    Type: String
    Label:
      en: Instance Password
      zh-cn: 实例密码
    Description:
      en: Server login password, Length 8-30, must contain three(Capital letters,
        lowercase letters, numbers, ()`~!@#$%^&*_-+=|{}[]:;'<>,.?/ Special symbol
        in).
      zh-cn: 服务器登录密码,长度8-30，必须包含三项（大写字母、小写字母、数字、 ()`~!@#$%^&*_-+=|{}[]:;'<>,.?/ 中的特殊符号）。
    ConstraintDescription:
      en: Length 8-30, must contain three(Capital letters, lowercase letters, numbers,
        ()`~!@#$%^&*_-+=|{}[]:;'<>,.?/ Special symbol in).
      zh-cn: 长度8-30，必须包含三项（大写字母、小写字母、数字、 ()`~!@#$%^&*_-+=|{}[]:;'<>,.?/ 中的特殊符号）。
    AllowedPattern: '[0-9A-Za-z\_\-\&:;''<>,=%`~!@#\(\)\$\^\*\+\|\{\}\[\]\.\?\/]+$'
    MinLength: 8
    MaxLength: 30
    NoEcho: true
    Default: Admin123
  EngineVersion:
    Type: String
    Label:
      en: Engine Version
      zh-cn: 数据库版本号
    AssociationProperty: ALIYUN::RDS::Engine::EngineVersion
    AssociationPropertyMetadata:
      Engine: MySQL
    Default: "8.0"
  DBInstanceClass:
    Type: String
    Label:
      en: Instance Class
      zh-cn: 实例规格
    AssociationProperty: ALIYUN::RDS::Instance::InstanceType
    AssociationPropertyMetadata:
      ZoneId: ${ZoneId}
      EngineVersion: ${EngineVersion}
      Engine: MySQL
      Category: HighAvailability
      DBInstanceStorageType: cloud_essd
    Default: 'rds.mysql.t1.small'
  DBInstanceStorage:
    Type: Number
    Label:
      en: Instance Storage
      zh-cn: 实例存储
    Description:
      en: 'Incrementing in every 5G, unit: GB'
      zh-cn: 每5G递增，单位：GB
    ConstraintDescription:
      en: '[5, 2000] Incrementing in every 5G, unit: GB'
      zh-cn: '[5, 2000] 每 5G 递增，单位：GB'
    MinValue: 5
    MaxValue: 2000
    Default: 20
  DBName:
    Type: String
    Label:
      en: DB Name
      zh-cn: 数据库名
    Description:
      en: Name of WordPress database
      zh-cn: WordPress数据库名
    ConstraintDescription:
      en: Consist of 2 to 64 characters of lowercase letters, underline. Must begin
        with a letter and be end with an alphanumeric character.
      zh-cn: 由 2 到 64 个小写字母组成，下划线。必须以字母开头，以字母数字字符结尾。
    Default: wordpress
    MinLength: 2
    MaxLength: 64
  DBUser:
    Type: String
    Label:
      en: DB Username
      zh-cn: 数据库账号
    Description:
      en: Username of WordPress database
      zh-cn: WordPress数据库账号
    ConstraintDescription:
      en: Consist of 2 to 16 characters of lowercase letters, underline. Must begin
        with a letter and be end with an alphanumeric character.
      zh-cn: 由 2 到 16 个小写字母组成，下划线。必须以字母开头，以字母数字字符结尾。
    Default: wpuser
    MinLength: 2
    MaxLength: 16
  DBPassword:
    Type: String
    Label:
      en: DB Password
      zh-cn: 数据库密码
    Description:
      en: WordPress database password, consisting of letters, numbers, and underline(_),
        is 8 to 32 characters long.
      zh-cn: WordPress数据库密码，由字母、数字、下划线（_）组成，长度为8~32个字符。
    ConstraintDescription:
      en: Consisting of letters, numbers, and underline(_),
        is 8 to 32 characters long.
      zh-cn: 由字母、数字、下划线（_）组成，长度为8~32个字符。
    MinLength: 8
    MaxLength: 32
    NoEcho: true
Resources:
  Vpc:
    Type: ALIYUN::ECS::VPC
    Properties:
      CidrBlock:
        Ref: VpcCidrBlock
      VpcName: wordpress_vpc
  VSwitch:
    Type: ALIYUN::ECS::VSwitch
    Properties:
      ZoneId:
        Ref: ZoneId
      VpcId:
        Fn::GetAtt:
          - Vpc
          - VpcId
      CidrBlock:
        Ref: VSwitchCidrBlock
  Database:
    Type: ALIYUN::RDS::DBInstance
    Properties:
      ZoneId:
        Ref: ZoneId
      VPCId:
        Ref: Vpc
      VSwitchId:
        Ref: VSwitch
      DBInstanceClass:
        Ref: DBInstanceClass
      DBInstanceDescription: DataBase
      DBInstanceStorage:
        Ref: DBInstanceStorage
      DBMappings:
        - CharacterSetName: utf8
          DBName:
            Ref: DBName
      Engine: MySQL
      EngineVersion:
        Ref: EngineVersion
      MasterUserPassword:
        Ref: DBPassword
      MasterUsername:
        Ref: DBUser
      SecurityIPList: 0.0.0.0/0
      AllocatePublicConnection: true
      Category: HighAvailability
      DBInstanceStorageType: cloud_essd
  WebServerConditionHandle:
    Type: ALIYUN::ROS::WaitConditionHandle
    Properties: { }
  RosWaitCondition:
    Type: ALIYUN::ROS::WaitCondition
    Properties:
      Count: 1
      Handle:
        Ref: WebServerConditionHandle
      Timeout: 3600
  SecurityGroup:
    Type: ALIYUN::ECS::SecurityGroup
    Properties:
      VpcId:
        Ref: Vpc
      SecurityGroupName: wordpress_sg
    Metadata:
      ALIYUN::ROS::Designer:
        id: 4740a2b8-d119-4bc8-956d-6b02e2d7aa9f
  SecurityGroupIngress:
    Type: ALIYUN::ECS::SecurityGroupIngress
    Properties:
      SecurityGroupId:
        Ref: SecurityGroup
      IpProtocol: all
      PortRange: -1/-1
      SourceCidrIp: 0.0.0.0/0
  WebServer:
    Type: ALIYUN::ECS::Instance
    Properties:
      VpcId:
        Ref: Vpc
      VSwitchId:
        Ref: VSwitch
      SecurityGroupId:
        Ref: SecurityGroup
      ImageId: centos_7
      AllocatePublicIP: true
      InstanceType:
        Ref: InstanceType
      InternetMaxBandwidthOut: 80
      IoOptimized: optimized
      Password:
        Ref: InstancePassword
      SystemDiskCategory:
        Ref: SystemDiskCategory
    DependsOn: Database
  Command:
    Type: ALIYUN::ECS::Command
    Properties:
      Timeout: 3600
      CommandContent:
        Fn::Base64Encode:
          Fn::Sub: |-
            #!/bin/bash
            if [ ! -f .ros.provision ]; then
              echo "Name: wordpress-service" > .ros.provision
            fi          
            name=$(grep "^Name:" .ros.provision | awk -F':' '{print $2}' | sed -e 's/^[[:space:]]*//' -e 's/[[:space:]]*$//')
            if [[ "$name" != "wordpress-service" ]]; then
              echo "wordpress-service installed, skip"
              exit 0
            fi
            
            if ! grep -q "^Step1: Install Environment$" .ros.provision; then
              echo "#########################"
              echo "# Install Environment"
              echo "#########################"
              yum -y install httpd httpd-manual mod_ssl mod_perl mod_auth_mysql sysbench
              systemctl start httpd
              systemctl enable httpd
              systemctl status httpd
            
              yum install -y yum-utils epel-release http://rpms.remirepo.net/enterprise/remi-release-7.rpm 
              yum-config-manager --enable remi-php82
              yum -y install php php-opcache php-mysqlnd php-pdo php-gd php-ldap php-odbc php-pear php-xml php-xmlrpc php-mbstring php-soap
              echo "<?php phpinfo(); ?>" > /var/www/html/phpinfo.php
              systemctl restart httpd
              echo "Step1: Install Environment" >> .ros.provision
            else
              echo "#########################"
              echo "# Environment has been installed"
              echo "#########################"
            fi
            
            if ! grep -q "^Step2: Install and Config WordPress$" .ros.provision; then
              echo "################################"
              echo "# Install and Config WordPress"
              echo "################################"
              wget https://ros-template-resources.oss-cn-beijing.aliyuncs.com/WordPress/wordpress-6.3.1-zh_CN.tar.gz
              tar -xvf wordpress-6.3.1-zh_CN.tar.gz -C /var/www/html
              mv /var/www/html/wordpress/* /var/www/html
              chown -R apache:apache /var/www/html/wordpress
              chmod -R 755 /var/www/html/wordpress
              mv /var/www/html/wp-config-sample.php /var/www/html/wp-config.php
              sed -i 's/localhost/${Database.PublicConnectionString}/' /var/www/html/wp-config.php
              sed -i 's/username_here/${DBUser}/' /var/www/html/wp-config.php
              sed -i 's/password_here/${DBPassword}/' /var/www/html/wp-config.php
              sed -i 's/database_name_here/${DBName}/' /var/www/html/wp-config.php
              systemctl restart httpd
              echo "Step2: Install and Config WordPress" >> .ros.provision
            else
              echo "#########################"
              echo "# WordPress has been installed and configed"
              echo "#########################"
            fi
            ${WebServerConditionHandle.CurlCli} --data-binary '{"status": "SUCCESS"}'
      Type: RunShellScript
      Name:
        Ref: ALIYUN::StackId
    DependsOn:
      - WebServerConditionHandle
  Invocation:
    Type: ALIYUN::ECS::Invocation
    Properties:
      InstanceIds:
        - Fn::GetAtt:
            - WebServer
            - InstanceId
      CommandId:
        Ref: Command
Outputs:
  DBInstanceId:
    Description: The instance id of created database instance.
    Value:
      Fn::GetAtt:
        - Database
        - DBInstanceId
  InnerConnectionString:
    Description: DB instance connection url by Intranet.
    Value:
      Fn::GetAtt:
        - Database
        - InnerConnectionString
  InstanceId:
    Description: The instance id of WebServer instance.
    Value:
      Fn::GetAtt:
        - WebServer
        - InstanceId
  WordPressUrl:
    Description: Wordpress default address.
    Value:
      Fn::Sub:
        - 'http://${IP}'
        - IP:
            Fn::GetAtt:
              - WebServer
              - PublicIp
Metadata:
  ALIYUN::ROS::Interface:
    ParameterGroups:
      - Parameters:
          - VpcCidrBlock
          - ZoneId
          - VSwitchCidrBlock
        Label:
          default: VPC
      - Parameters:
          - InstanceType
          - SystemDiskCategory
          - InstancePassword
        Label:
          default: ECS
      - Parameters:
          - EngineVersion
          - DBInstanceClass
          - DBInstanceStorage
          - DBName
          - DBUser
          - DBPassword
        Label:
          default: RDS
    TemplateTags:
      - acs:example:网站:基于ECS和RDS创建WordPress环境