G\u00fcn\u00fcm\u00fcz\u00fcn h\u0131zl\u0131 geli\u015fen yaz\u0131l\u0131m d\u00fcnyas\u0131nda, uygulamalar\u0131n h\u0131zl\u0131, g\u00fcvenilir ve tekrarlanabilir bir \u015fekilde da\u011f\u0131t\u0131lmas\u0131 kritik \u00f6neme sahiptir. Manuel da\u011f\u0131t\u0131m s\u00fcre\u00e7leri zaman al\u0131c\u0131, hataya a\u00e7\u0131k ve tutars\u0131z sonu\u00e7lar do\u011furabilirken, otomasyon ara\u00e7lar\u0131 bu zorluklar\u0131n \u00fcstesinden gelmek i\u00e7in g\u00fc\u00e7l\u00fc \u00e7\u00f6z\u00fcmler sunar. Bu teknik makale, a\u00e7\u0131k kaynakl\u0131 bir otomasyon motoru olan Ansible’\u0131 kullanarak temel bir PHP uygulamas\u0131n\u0131 Ubuntu 14.04 i\u015fletim sistemi y\u00fckl\u00fc bir sunucuya nas\u0131l da\u011f\u0131taca\u011f\u0131n\u0131z\u0131 ad\u0131m ad\u0131m a\u00e7\u0131klamaktad\u0131r.<\/p>\n
Ansible, SSH \u00fczerinden \u00e7al\u0131\u015ft\u0131\u011f\u0131 i\u00e7in arac\u0131 (agent) gerektirmeyen, basit ve g\u00fc\u00e7l\u00fc bir otomasyon arac\u0131d\u0131r. Yap\u0131land\u0131rma y\u00f6netimi, uygulama da\u011f\u0131t\u0131m\u0131, s\u00fcrekli da\u011f\u0131t\u0131m (CD) ve di\u011fer IT otomasyon g\u00f6revleri i\u00e7in kullan\u0131l\u0131r. Ubuntu 14.04, uzun s\u00fcredir desteklenen (LTS) bir s\u00fcr\u00fcm olup, bir\u00e7ok eski sistemde hala aktif olarak kullan\u0131lmaktad\u0131r. Bu makale, \u00f6zellikle bu eski ancak yayg\u0131n ortamda da\u011f\u0131t\u0131m yapma ihtiyac\u0131 olan geli\u015ftiriciler ve sistem y\u00f6neticileri i\u00e7in kapsaml\u0131 bir rehber niteli\u011findedir.<\/p>\n
Bu rehberde, bir kontrol makinesi (Ansible kurulu olan makine) ve bir veya daha fazla hedef makine (PHP uygulamas\u0131n\u0131n da\u011f\u0131t\u0131laca\u011f\u0131 Ubuntu 14.04 sunucular\u0131) kullanaca\u011f\u0131z. Amac\u0131m\u0131z, Nginx web sunucusu, PHP-FPM (FastCGI Process Manager) ve temel bir PHP uygulamas\u0131n\u0131 Ansible playbook’lar\u0131 ve rolleri arac\u0131l\u0131\u011f\u0131yla otomatik olarak kurmak ve yap\u0131land\u0131rmakt\u0131r. Makale boyunca, Ansible’\u0131n temel kavramlar\u0131n\u0131, proje yap\u0131s\u0131n\u0131, envanter y\u00f6netimini, playbook’lar\u0131, rolleri ve mod\u00fclleri detayl\u0131 bir \u015fekilde ele alaca\u011f\u0131z.<\/p>\n
Bu da\u011f\u0131t\u0131m s\u00fcrecine ba\u015flamadan \u00f6nce belirli \u00f6n ko\u015fullar\u0131n yerine getirilmesi gerekmektedir. Bu gereksinimler, kontrol makinesi (Ansible’\u0131n \u00e7al\u0131\u015ft\u0131\u011f\u0131 makine) ve hedef makine (uygulaman\u0131n da\u011f\u0131t\u0131laca\u011f\u0131 sunucu) i\u00e7in ayr\u0131 ayr\u0131 ele al\u0131nm\u0131\u015ft\u0131r.<\/p>\n
* \u0130\u015fletim Sistemi:<\/strong> Tercihen Ubuntu (14.04 veya daha yeni bir s\u00fcr\u00fcm, zira Ansible kurulumu daha yeni s\u00fcr\u00fcmlerde daha kolayd\u0131r), macOS veya herhangi bir Linux da\u011f\u0131t\u0131m\u0131. Bu makale i\u00e7in Ubuntu baz al\u0131nacakt\u0131r. * \u0130\u015fletim Sistemi:<\/strong> Ubuntu 14.04 sunucusu. Makineye SSH ile eri\u015filebilir olmal\u0131d\u0131r. Da\u011f\u0131t\u0131m\u0131 test etmek i\u00e7in basit bir PHP uygulamas\u0131na ihtiyac\u0131m\u0131z olacak. Bu makale i\u00e7in a\u015fa\u011f\u0131daki gibi bir yap\u0131ya sahip, Bu \u00f6n gereksinimler tamamland\u0131\u011f\u0131nda, Ansible kurulumuna ve da\u011f\u0131t\u0131m s\u00fcrecinin di\u011fer ad\u0131mlar\u0131na ge\u00e7meye haz\u0131r\u0131z.<\/p>\n Ansible’\u0131 kontrol makinesine kurmak ve hedef makine ile g\u00fcvenli bir ileti\u015fim kurmak, da\u011f\u0131t\u0131m s\u00fcrecinin ilk ve en \u00f6nemli ad\u0131m\u0131d\u0131r.<\/p>\n Ubuntu 14.04 \u00fczerinde Ansible kurmak i\u00e7in genellikle PPA (Personal Package Archive) kullan\u0131l\u0131r.<\/p>\n 1. Sistem Paket Listesini G\u00fcncelleme:<\/strong><\/p>\n 2. Yaz\u0131l\u0131m \u00d6zellikleri Ortak Paketini Kurma (Gerekliyse):<\/strong><\/p>\n 3. Ansible PPA’s\u0131n\u0131 Ekleme:<\/strong><\/p>\n Bu komut, Ansible paketlerinin bulundu\u011fu depoyu sisteminize ekler.<\/p>\n 4. Paket Listesini Tekrar G\u00fcncelleme:<\/strong> 5. Ansible Kurulumu:<\/strong> 6. Kurulumu Do\u011frulama:<\/strong> \u00c7\u0131kt\u0131da Ansible versiyonu, Python versiyonu ve di\u011fer detaylar g\u00f6r\u00fcnmelidir.<\/p>\n Ansible, hedef makinelere SSH \u00fczerinden ba\u011flan\u0131r. G\u00fcvenli ve otomatik bir ba\u011flant\u0131 i\u00e7in parola yerine SSH anahtarlar\u0131 kullanmak en iyi y\u00f6ntemdir.<\/p>\n 1. SSH Anahtar \u00c7ifti Olu\u015fturma (Kontrol Makinesinde):<\/strong> Komut sizden anahtarlar\u0131 kaydedece\u011fi yeri ve bir parola (passphrase) isteyecektir. Genellikle varsay\u0131lan konum ( 2. Public Anahtar\u0131 Hedef Makineye Kopyalama:<\/strong> \u00d6rne\u011fin: 3. SSH Ba\u011flant\u0131s\u0131n\u0131 Test Etme:<\/strong> E\u011fer parola sormadan do\u011frudan ba\u011flanabiliyorsan\u0131z, SSH yap\u0131land\u0131rmas\u0131 ba\u015far\u0131yla tamamlanm\u0131\u015ft\u0131r.<\/p>\n \u0130yi organize edilmi\u015f bir Ansible projesi, y\u00f6netilebilirli\u011fi ve \u00f6l\u00e7eklenebilirli\u011fi art\u0131r\u0131r. A\u015fa\u011f\u0131daki dizin yap\u0131s\u0131n\u0131 kontrol makinenizde olu\u015fturaca\u011f\u0131z:<\/p>\n Bu yap\u0131, her bir bile\u015fenin (web sunucusu, PHP uygulamas\u0131) kendi sorumluluklar\u0131n\u0131 ayr\u0131 rollerde tutarak mod\u00fclerli\u011fi sa\u011flar.<\/p>\n Ansible’\u0131n nas\u0131l davranaca\u011f\u0131n\u0131 belirleyen baz\u0131 temel yap\u0131land\u0131rma dosyalar\u0131 vard\u0131r.<\/p>\n Bu dosya, Ansible’\u0131n \u00e7al\u0131\u015fma zaman\u0131 davran\u0131\u015f\u0131n\u0131 kontrol eder. Proje k\u00f6k dizinine yerle\u015ftirilmesi, bu proje i\u00e7in \u00f6zel ayarlar tan\u0131mlaman\u0131z\u0131 sa\u011flar.<\/p>\n Envanter dosyas\u0131, Ansible’\u0131n y\u00f6nete\u011fi hedef makineleri ve gruplar\u0131 tan\u0131mlar.<\/p>\n Roller, Ansible’da g\u00f6revleri, de\u011fi\u015fkenleri, \u015fablonlar\u0131 ve i\u015fleyicileri d\u00fczenli bir \u015fekilde gruplamak i\u00e7in kullan\u0131lan g\u00fc\u00e7l\u00fc bir yap\u0131d\u0131r. Her rol, belirli bir amaca hizmet eder.<\/p>\n Bu rol Nginx web sunucusunu kuracak ve yap\u0131land\u0131racakt\u0131r.<\/p>\n Bu \u015fablon, Nginx’in PHP-FPM ile nas\u0131l etkile\u015fime girece\u011fini belirler. Uygulama k\u00f6k dizini i\u00e7in \u0130\u015fleyiciler (handlers), bir g\u00f6rev taraf\u0131ndan tetiklenen eylemlerdir (\u00f6rne\u011fin, bir yap\u0131land\u0131rma dosyas\u0131 de\u011fi\u015fti\u011finde bir servisi yeniden ba\u015flatmak).<\/p>\n Bu rol PHP ve PHP-FPM’i kuracak, uygulama dosyalar\u0131n\u0131 hedef makineye kopyalayacak ve PHP-FPM’i yap\u0131land\u0131racakt\u0131r.<\/p>\n Bu de\u011fi\u015fkenleri ana playbook’ta tan\u0131mlamak daha merkezi bir y\u00f6netim sa\u011flar.<\/p>\n Daha \u00f6nce bahsetti\u011fimiz gibi, Bu dosyay\u0131 T\u00fcm dosyalar\u0131 olu\u015fturduktan ve d\u00fczenledikten sonra, da\u011f\u0131t\u0131m i\u015flemini ba\u015flatmaya haz\u0131r\u0131z. Kontrol makinenizin terminalinde, * Komut \u00e7al\u0131\u015fmaya ba\u015flad\u0131\u011f\u0131nda, Ansible hedef makineye SSH \u00fczerinden ba\u011flanacak, \u00c7\u0131kt\u0131 Kontrol\u00fc:<\/strong> E\u011fer \u00e7\u0131kt\u0131 Da\u011f\u0131t\u0131m\u0131 Do\u011frulama:<\/strong> E\u011fer her \u015fey do\u011fru yap\u0131land\u0131r\u0131ld\u0131ysa, Bu temel da\u011f\u0131t\u0131m, Ansible ile PHP uygulamas\u0131 da\u011f\u0131t\u0131m\u0131n\u0131n sadece ba\u015flang\u0131c\u0131d\u0131r. Ger\u00e7ek d\u00fcnya senaryolar\u0131 i\u00e7in bir\u00e7ok iyile\u015ftirme ve ek konu bulunmaktad\u0131r.<\/p>\n \u00c7o\u011fu PHP uygulamas\u0131 bir veritaban\u0131na ihtiya\u00e7 duyar (MySQL, PostgreSQL vb.). Ansible ile veritaban\u0131 sunucusunu kurabilir, veritaban\u0131 olu\u015fturabilir, kullan\u0131c\u0131lar\u0131 yap\u0131land\u0131rabilir ve uygulama i\u00e7in gerekli \u015femalar\u0131 da\u011f\u0131tabilirsiniz. Bu, ayr\u0131 bir Ansible rol\u00fc olarak ele al\u0131nabilir. \u00d6rne\u011fin, * Firewall Kurulumu:<\/strong> UFW (Uncomplicated Firewall) veya iptables gibi bir g\u00fcvenlik duvar\u0131 kullanarak yaln\u0131zca gerekli portlara (HTTP\/HTTPS, SSH) eri\u015fime izin vermek \u00f6nemlidir. Uygulama kaynak kodunu manuel olarak Veritaban\u0131 kimlik bilgileri, API anahtarlar\u0131 gibi hassas veriler asla a\u00e7\u0131k metin olarak playbook’larda veya de\u011fi\u015fken dosyalar\u0131nda tutulmamal\u0131d\u0131r. Ansible Vault, bu t\u00fcr verileri \u015fifrelemek ve g\u00fcvenli bir \u015fekilde y\u00f6netmek i\u00e7in kullan\u0131l\u0131r. Uygulamalar i\u00e7in ortam de\u011fi\u015fkenlerini ayarlamak veya E\u011fer PHP uygulaman\u0131z Composer kullan\u0131yorsa, uygulama dosyalar\u0131n\u0131 kopyalad\u0131ktan sonra Ansible playbook’lar\u0131, Jenkins, GitLab CI, GitHub Actions gibi CI\/CD ara\u00e7lar\u0131yla entegre edilerek otomatik da\u011f\u0131t\u0131m boru hatlar\u0131 olu\u015fturman\u0131n temelini olu\u015fturur. Kodunuz bir depoya push edildi\u011finde, otomatik testler \u00e7al\u0131\u015ft\u0131r\u0131l\u0131r ve ba\u015far\u0131l\u0131 olursa Ansible playbook’u otomatik olarak uygulamay\u0131 da\u011f\u0131t\u0131r.<\/p>\n Ansible playbook’lar\u0131 \u00e7al\u0131\u015f\u0131rken sorunlarla kar\u015f\u0131la\u015f\u0131rsan\u0131z, Ansible’\u0131n en g\u00fc\u00e7l\u00fc \u00f6zelliklerinden biri idempotence’tir. Bu, bir playbook’u ka\u00e7 kez \u00e7al\u0131\u015ft\u0131r\u0131rsan\u0131z \u00e7al\u0131\u015ft\u0131r\u0131n, sistemin her zaman ayn\u0131 nihai duruma ula\u015faca\u011f\u0131 anlam\u0131na gelir. E\u011fer bir kaynak zaten istenen durumdaysa, Ansible herhangi bir de\u011fi\u015fiklik yapmaz. Bu, da\u011f\u0131t\u0131m s\u00fcre\u00e7lerinin g\u00fcvenilirli\u011fini ve tutarl\u0131l\u0131\u011f\u0131n\u0131 art\u0131r\u0131r.<\/p>\n Ubuntu 14.04, PHP 5.x serisini kullan\u0131r ve modern PHP uygulamalar\u0131n\u0131n gerektirdi\u011fi baz\u0131 yeni \u00f6zelliklerden (PHP 7.x ve sonras\u0131) yoksundur. Ayr\u0131ca, paket depolar\u0131ndaki yaz\u0131l\u0131m versiyonlar\u0131 da eski olabilir. Bu nedenle, yeni projeler i\u00e7in daha g\u00fcncel bir i\u015fletim sistemi s\u00fcr\u00fcm\u00fcn\u00fc (\u00f6rne\u011fin Ubuntu 20.04 veya 22.04) tercih etmek, daha modern PHP versiyonlar\u0131na ve g\u00fcncel paketlere eri\u015fim sa\u011flamak a\u00e7\u0131s\u0131ndan daha avantajl\u0131 olacakt\u0131r. Ancak mevcut 14.04 ortamlar\u0131nda \u00e7al\u0131\u015fmak zorunda olanlar i\u00e7in bu makale, da\u011f\u0131t\u0131m otomasyonunu nas\u0131l yapacaklar\u0131n\u0131 g\u00f6stermektedir.<\/p>\n Bu makalede, Ansible kullanarak temel bir PHP uygulamas\u0131n\u0131 Ubuntu 14.04 sunucusu \u00fczerine nas\u0131l otomatik olarak da\u011f\u0131tabilece\u011finizi ayr\u0131nt\u0131l\u0131 bir \u015fekilde inceledik. Ansible’\u0131n kurulumundan, proje yap\u0131s\u0131n\u0131n olu\u015fturulmas\u0131na, envanter ve yap\u0131land\u0131rma dosyalar\u0131n\u0131n haz\u0131rlanmas\u0131na, Nginx ve PHP-FPM kurulumunu i\u00e7eren \u00f6zel rollerin geli\u015ftirilmesine ve son olarak uygulaman\u0131n da\u011f\u0131t\u0131m\u0131na kadar t\u00fcm ad\u0131mlar\u0131 ele ald\u0131k.<\/p>\n Ansible, manuel ve hataya a\u00e7\u0131k da\u011f\u0131t\u0131m s\u00fcre\u00e7lerini otomatikle\u015ftirmek i\u00e7in g\u00fc\u00e7l\u00fc ve esnek bir ara\u00e7t\u0131r. Rollerin ve playbook’lar\u0131n mod\u00fcler yap\u0131s\u0131 sayesinde, karma\u015f\u0131k altyap\u0131lar\u0131n bile tutarl\u0131 ve tekrarlanabilir bir \u015fekilde y\u00f6netilmesi m\u00fcmk\u00fcn hale gelir. Bu rehber, Ansible’\u0131n temel yeteneklerini ve bir PHP uygulamas\u0131n\u0131 da\u011f\u0131tmak i\u00e7in nas\u0131l kullan\u0131labilece\u011fini g\u00f6stermekle birlikte, daha karma\u015f\u0131k ve \u00fcretim ortamlar\u0131na y\u00f6nelik da\u011f\u0131t\u0131mlar i\u00e7in ek konular ve iyile\u015ftirmeler i\u00e7in bir ba\u015flang\u0131\u00e7 noktas\u0131 sunmaktad\u0131r.<\/p>\n Uygulama da\u011f\u0131t\u0131m s\u00fcre\u00e7lerinizi otomatikle\u015ftirmek, geli\u015ftirme d\u00f6ng\u00fclerinizi h\u0131zland\u0131racak, hata oranlar\u0131n\u0131 d\u00fc\u015f\u00fcrecek ve operasyonel verimlili\u011fi \u00f6nemli \u00f6l\u00e7\u00fcde art\u0131racakt\u0131r. Ansible, bu hedeflere ula\u015fmak i\u00e7in vazge\u00e7ilmez bir ara\u00e7t\u0131r. Bu makaledeki bilgileri kullanarak kendi da\u011f\u0131t\u0131m s\u00fcre\u00e7lerinizi in\u015fa edebilir ve otomasyonun avantajlar\u0131ndan yararlanmaya ba\u015flayabilirsiniz.<\/p>\n <\/body><\/p>\n","protected":false},"excerpt":{"rendered":"Ansible Kullanarak Temel Bir PHP Uygulamas\u0131n\u0131 Ubuntu 14.04 \u00dczerine Da\u011f\u0131tma\nGiri\u015f\nG\u00fcn\u00fcm\u00fcz\u00fcn h\u0131zl\u0131 geli\u015fen yaz\u0131l\u0131m d\u00fcnyas\u0131nda, uygula","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"csco_page_header_type":"","csco_page_load_nextpost":"","csco_page_subscribe_form":"","csco_page_contact_form":"","footnotes":""},"categories":[1468],"tags":[],"class_list":{"0":"post-33369","1":"post","2":"type-post","3":"status-publish","4":"format-standard","6":"category-ubuntu","7":"cs-entry","8":"cs-video-wrap"},"yoast_head":"\n
\n* Python:<\/strong> Ansible Python ile yaz\u0131ld\u0131\u011f\u0131 i\u00e7in sisteminizde Python 2.7 veya Python 3.x kurulu olmal\u0131d\u0131r. Ubuntu 14.04 varsay\u0131lan olarak Python 2.7 ile gelir.
\n* Ansible:<\/strong> Kontrol makinesinde Ansible kurulu olmal\u0131d\u0131r. Kurulum ad\u0131mlar\u0131 sonraki b\u00f6l\u00fcmde detayland\u0131r\u0131lacakt\u0131r.
\n* SSH Anahtar\u0131:<\/strong> Hedef makineye \u015fifresiz SSH eri\u015fimi sa\u011flamak i\u00e7in bir SSH anahtar \u00e7ifti (public\/private key) olu\u015fturulmu\u015f ve hedef makineye public key kopyalanm\u0131\u015f olmal\u0131d\u0131r. Bu, Ansible’\u0131n parola sormadan hedef makineye ba\u011flanabilmesi i\u00e7in kritik \u00f6neme sahiptir.<\/p>\nHedef Makine (Target Host)<\/h3>\n
\n* SSH Eri\u015fimi:<\/strong> Kontrol makinesinden hedef makineye SSH ile ba\u011flanabilmelisiniz.
\n* Sudo Yetkileri:<\/strong> Ansible’\u0131n hedef makinede paket kurulumu ve sistem yap\u0131land\u0131rmas\u0131 gibi g\u00f6revleri ger\u00e7ekle\u015ftirebilmesi i\u00e7in, SSH ile ba\u011fland\u0131\u011f\u0131n\u0131z kullan\u0131c\u0131n\u0131n sudo<\/code> yetkilerine sahip olmas\u0131 gerekmektedir.
\n* Python:<\/strong> Ubuntu 14.04 varsay\u0131lan olarak Python 2.7 ile gelir. Ansible mod\u00fcllerinin \u00e7al\u0131\u015fmas\u0131 i\u00e7in bu gereklidir.<\/p>\nTemel PHP Uygulamas\u0131<\/h3>\n
phpinfo()<\/code> \u00e7\u0131kt\u0131s\u0131 veren veya basit bir “Hello World” mesaj\u0131 g\u00f6steren bir uygulama kullanaca\u011f\u0131z:<\/p>\napp\/\n\u251c\u2500\u2500 public\/\n\u2502 \u2514\u2500\u2500 index.php\n\u2514\u2500\u2500 composer.json (iste\u011fe ba\u011fl\u0131)<\/code><\/pre>\napp\/public\/index.php<\/code>:<\/strong><\/p>\nMerhaba D\u00fcnya! Bu, Ubuntu 14.04 \u00fczerinde \u00e7al\u0131\u015fan basit bir PHP uygulamas\u0131d\u0131r.<\/p>\";\nphpinfo();\n?><\/code><\/pre>\nAnsible Kurulumu ve SSH Yap\u0131land\u0131rmas\u0131<\/h2>\n
Kontrol Makinesinde Ansible Kurulumu<\/h3>\n
sudo apt-get update<\/code><\/pre>\nsudo apt-get install software-properties-common<\/code><\/pre>\nsudo apt-add-repository ppa:ansible\/ansible<\/code><\/pre>\n
\n Yeni depo eklendikten sonra paket listesini tekrar g\u00fcncellemek \u00f6nemlidir.<\/p>\nsudo apt-get update<\/code><\/pre>\n
\n \u015eimdi Ansible’\u0131 kurabiliriz:<\/p>\nsudo apt-get install ansible<\/code><\/pre>\n
\n Kurulumun ba\u015far\u0131l\u0131 olup olmad\u0131\u011f\u0131n\u0131 kontrol etmek i\u00e7in Ansible versiyonunu sorgulayabilirsiniz:<\/p>\nansible --version<\/code><\/pre>\nSSH Anahtar \u00c7ifti Olu\u015fturma ve Hedef Makineye Kopyalama<\/h3>\n
\n E\u011fer hen\u00fcz bir SSH anahtar \u00e7iftiniz yoksa, a\u015fa\u011f\u0131daki komutla olu\u015fturabilirsiniz:<\/p>\nssh-keygen -t rsa -b 4096<\/code><\/pre>\n~\/.ssh\/id_rsa<\/code>) kabul edilir ve parola bo\u015f b\u0131rak\u0131labilir (otomatik ba\u011flant\u0131 i\u00e7in).<\/p>\n
\n Olu\u015fturdu\u011funuz public anahtar\u0131 (~\/.ssh\/id_rsa.pub<\/code>), ssh-copy-id<\/code> arac\u0131yla hedef makineye kopyalayabilirsiniz:<\/p>\nssh-copy-id kullan\u0131c\u0131_ad\u0131@hedef_ip_adresi<\/code><\/pre>\nssh-copy-id deployuser@192.168.1.100<\/code>
\n Bu komut sizden hedef makinenin parolas\u0131n\u0131 isteyecek ve public anahtar\u0131n\u0131z\u0131 hedef makinedeki ~\/.ssh\/authorized_keys<\/code> dosyas\u0131na ekleyecektir.<\/p>\n
\n Public anahtar kopyaland\u0131ktan sonra, parola sormadan hedef makineye ba\u011flan\u0131p ba\u011flanamad\u0131\u011f\u0131n\u0131z\u0131 test edin:<\/p>\nssh kullan\u0131c\u0131_ad\u0131@hedef_ip_adresi<\/code><\/pre>\nProje Yap\u0131s\u0131 Olu\u015fturma<\/h2>\n
ansible-php-deployment\/\n\u251c\u2500\u2500 ansible.cfg # Ansible yap\u0131land\u0131rma dosyas\u0131\n\u251c\u2500\u2500 inventory.ini # Hedef sunucular\u0131n listesi\n\u251c\u2500\u2500 playbook.yml # Ana Ansible playbook\n\u251c\u2500\u2500 app\/ # Da\u011f\u0131t\u0131lacak PHP uygulama dosyalar\u0131\n\u2502 \u2514\u2500\u2500 public\/\n\u2502 \u2514\u2500\u2500 index.php\n\u2514\u2500\u2500 roles\/ # Ansible rolleri\n \u251c\u2500\u2500 webserver\/ # Nginx kurulumu ve yap\u0131land\u0131rmas\u0131\n \u2502 \u251c\u2500\u2500 tasks\/\n \u2502 \u2502 \u2514\u2500\u2500 main.yml\n \u2502 \u251c\u2500\u2500 handlers\/\n \u2502 \u2502 \u2514\u2500\u2500 main.yml\n \u2502 \u251c\u2500\u2500 templates\/\n \u2502 \u2502 \u2514\u2500\u2500 nginx.conf.j2\n \u2502 \u2514\u2500\u2500 vars\/\n \u2502 \u2514\u2500\u2500 main.yml\n \u2514\u2500\u2500 php-app\/ # PHP ve PHP-FPM kurulumu, uygulama da\u011f\u0131t\u0131m\u0131\n \u251c\u2500\u2500 tasks\/\n \u2502 \u2514\u2500\u2500 main.yml\n \u251c\u2500\u2500 handlers\/\n \u2502 \u2514\u2500\u2500 main.yml\n \u251c\u2500\u2500 templates\/\n \u251c\u2500\u2500 files\/\n \u2514\u2500\u2500 vars\/\n \u2514\u2500\u2500 main.yml<\/code><\/pre>\nAnsible Yap\u0131land\u0131rma Dosyalar\u0131<\/h2>\n
ansible.cfg<\/code><\/h3>\n# ansible-php-deployment\/ansible.cfg\n[defaults]\ninventory = inventory.ini # Envanter dosyam\u0131z\u0131n ad\u0131\nremote_user = deployuser # Hedef makineye ba\u011flanmak i\u00e7in kullan\u0131lacak SSH kullan\u0131c\u0131s\u0131\nask_become_pass = False # Sudo parolas\u0131 sormay\u0131 kapat (e\u011fer sudoers ayarl\u0131ysa)\nhost_key_checking = False # \u0130lk ba\u011flant\u0131da SSH anahtar kontrol\u00fcn\u00fc devre d\u0131\u015f\u0131 b\u0131rak (g\u00fcvenlik nedeniyle \u00fcretimde 'True' olmal\u0131)\nroles_path = .\/roles # Rollerin nerede oldu\u011funu belirtir<\/code><\/pre>\nremote_user<\/code> yerine kendi SSH kullan\u0131c\u0131 ad\u0131n\u0131z\u0131 yaz\u0131n. ask_become_pass = False<\/code> ayar\u0131, e\u011fer deployuser<\/code> kullan\u0131c\u0131s\u0131 sudo NOPASSWD<\/code> ayar\u0131na sahipse parolay\u0131 sormay\u0131 engeller. G\u00fcvenlik nedeniyle host_key_checking = False<\/code> ayar\u0131 sadece test ortamlar\u0131nda kullan\u0131lmal\u0131, \u00fcretimde True<\/code> olarak b\u0131rak\u0131lmal\u0131 veya SSH known_hosts<\/code> dosyas\u0131 d\u00fczg\u00fcn y\u00f6netilmelidir.<\/p>\ninventory.ini<\/code><\/h3>\n# ansible-php-deployment\/inventory.ini\n[webservers]\nhedef_sunucu_ip_adresi ansible_host=hedef_sunucu_ip_adresi\n\n[all:vars]\nansible_python_interpreter=\/usr\/bin\/python<\/code><\/pre>\nhedef_sunucu_ip_adresi<\/code> yerine ger\u00e7ek IP adresinizi veya hostname’inizi yaz\u0131n. \u00d6rne\u011fin: 192.168.1.100 ansible_host=192.168.1.100<\/code>.
\n[all:vars]<\/code> alt\u0131ndaki ansible_python_interpreter<\/code> de\u011fi\u015fkeni \u00e7ok \u00f6nemlidir. Ubuntu 14.04 varsay\u0131lan olarak \/usr\/bin\/python<\/code> (Python 2.7) kullan\u0131r ve baz\u0131 Ansible mod\u00fclleri i\u00e7in bu yorumlay\u0131c\u0131n\u0131n do\u011fru bir \u015fekilde belirtilmesi gerekebilir.<\/p>\nAnsible Roller Olu\u015fturma<\/h2>\n
webserver<\/code> Rol\u00fc<\/h3>\nroles\/webserver\/tasks\/main.yml<\/code><\/h4>\n# roles\/webserver\/tasks\/main.yml\n---\n- name: Sistem paketlerini g\u00fcncelle\n apt:\n update_cache: yes\n force_apt_get: yes # Ubuntu 14.04'te apt mod\u00fcl\u00fc i\u00e7in gerekli olabilir\n become: yes\n\n- name: Nginx paketini kur\n apt:\n name: nginx\n state: present\n become: yes\n\n- name: Nginx varsay\u0131lan yap\u0131land\u0131rma dosyas\u0131n\u0131 kopyala\n template:\n src: nginx.conf.j2\n dest: \/etc\/nginx\/sites-available\/default\n owner: root\n group: root\n mode: '0644'\n become: yes\n notify: restart nginx\n\n- name: Nginx sites-enabled dizininde sembolik link olu\u015ftur\n file:\n src: \/etc\/nginx\/sites-available\/default\n dest: \/etc\/nginx\/sites-enabled\/default\n state: link\n become: yes\n notify: restart nginx\n\n- name: UFW firewall'da Nginx HTTP trafi\u011fine izin ver\n ufw:\n rule: allow\n name: 'Nginx HTTP'\n become: yes\n ignore_errors: yes # UFW kurulu olmayabilir, hata vermesin<\/code><\/pre>\nroles\/webserver\/templates\/nginx.conf.j2<\/code><\/h4>\napp_root<\/code> ve app_name<\/code> de\u011fi\u015fkenlerini kullanaca\u011f\u0131z.<\/p>\n# roles\/webserver\/templates\/nginx.conf.j2\nserver {\n listen 80 default_server;\n listen [::]:80 default_server;\n\n root {{ app_root }}\/{{ app_name }}\/public;\n index index.php index.html index.htm;\n\n server_name _; # Sunucu IP'si veya domain ad\u0131 buraya gelebilir\n\n location \/ {\n try_files $uri $uri\/ \/index.php?$query_string;\n }\n\n location ~ \\.php$ {\n include snippets\/fastcgi-php.conf;\n fastcgi_pass unix:\/var\/run\/php5-fpm.sock;\n fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;\n include fastcgi_params;\n }\n\n # Deny access to .htaccess files, if Apache's document root\n # concurs with nginx's one\n location ~ \/\\.ht {\n deny all;\n }\n}<\/code><\/pre>\nroles\/webserver\/handlers\/main.yml<\/code><\/h4>\n# roles\/webserver\/handlers\/main.yml\n---\n- name: restart nginx\n service:\n name: nginx\n state: restarted\n become: yes<\/code><\/pre>\nphp-app<\/code> Rol\u00fc<\/h3>\nroles\/php-app\/tasks\/main.yml<\/code><\/h4>\n# roles\/php-app\/tasks\/main.yml\n---\n- name: PHP ve gerekli mod\u00fclleri kur\n apt:\n name: \"{{ item }}\"\n state: present\n become: yes\n loop:\n - php5-fpm\n - php5-cli\n - php5-mysql\n - php5-gd\n - php5-curl\n - php5-json # Modern uygulamalar i\u00e7in \u00f6nemlidir\n notify: restart php5-fpm\n\n- name: Uygulama k\u00f6k dizinini olu\u015ftur\n file:\n path: \"{{ app_root }}\/{{ app_name }}\"\n state: directory\n owner: www-data\n group: www-data\n mode: '0755'\n become: yes\n\n- name: Uygulama dosyalar\u0131n\u0131 kopyala\n copy:\n src: ..\/..\/app\/\n dest: \"{{ app_root }}\/{{ app_name }}\"\n owner: www-data\n group: www-data\n mode: '0755'\n become: yes\n\n- name: PHP-FPM yap\u0131land\u0131rmas\u0131n\u0131 ayarla (iste\u011fe ba\u011fl\u0131, performans i\u00e7in)\n lineinfile:\n path: \/etc\/php5\/fpm\/php.ini\n regexp: '^;cgi.fix_pathinfo='\n line: 'cgi.fix_pathinfo=0'\n state: present\n become: yes\n notify: restart php5-fpm\n\n- name: PHP-FPM pool yap\u0131land\u0131rmas\u0131n\u0131 ayarla (varsay\u0131lan)\n lineinfile:\n path: \/etc\/php5\/fpm\/pool.d\/www.conf\n regexp: '^listen ='\n line: 'listen = \/var\/run\/php5-fpm.sock'\n state: present\n become: yes\n notify: restart php5-fpm<\/code><\/pre>\nroles\/php-app\/handlers\/main.yml<\/code><\/h4>\n# roles\/php-app\/handlers\/main.yml\n---\n- name: restart php5-fpm\n service:\n name: php5-fpm\n state: restarted\n become: yes<\/code><\/pre>\nroles\/php-app\/vars\/main.yml<\/code> (iste\u011fe ba\u011fl\u0131, playbook’tan da verilebilir)<\/h4>\n# roles\/php-app\/vars\/main.yml\n---\napp_name: my_php_app<\/h2>\n
app_root: \/var\/www\/html<\/code><\/pre>\n<\/h2>\n
Ana Playbook Olu\u015fturma<\/h2>\n
playbook.yml<\/code> dosyas\u0131, tan\u0131mlad\u0131\u011f\u0131m\u0131z rolleri bir araya getirerek da\u011f\u0131t\u0131m s\u00fcrecini y\u00f6netir.<\/p>\n# ansible-php-deployment\/playbook.yml\n---\n- name: Temel PHP Uygulamas\u0131n\u0131 Da\u011f\u0131t\n hosts: webservers # inventory.ini dosyas\u0131ndaki grup ad\u0131\n become: yes # T\u00fcm g\u00f6revleri sudo ile \u00e7al\u0131\u015ft\u0131r\n\n vars:\n app_name: my_php_app # Uygulama ad\u0131\n app_root: \/var\/www\/html # Uygulaman\u0131n sunucudaki k\u00f6k dizini\n\n pre_tasks:\n - name: Sistem genelinde apt \u00f6nbelle\u011fini g\u00fcncelle\n apt:\n update_cache: yes\n force_apt_get: yes\n become: yes\n\n roles:\n - role: webserver\n - role: php-app<\/code><\/pre>\npre_tasks<\/code> b\u00f6l\u00fcm\u00fc, roller \u00e7al\u0131\u015fmadan \u00f6nce genel sistem g\u00fcncellemesi gibi g\u00f6revleri \u00e7al\u0131\u015ft\u0131rmak i\u00e7in kullan\u0131\u015fl\u0131d\u0131r. vars<\/code> b\u00f6l\u00fcm\u00fcnde tan\u0131mlanan app_name<\/code> ve app_root<\/code> de\u011fi\u015fkenleri, Nginx ve PHP-App rolleri taraf\u0131ndan kullan\u0131lacakt\u0131r.<\/p>\nTemel PHP Uygulamas\u0131<\/h2>\n
app\/public\/index.php<\/code> dosyas\u0131n\u0131n i\u00e7eri\u011fi:<\/p>\nMerhaba D\u00fcnya! Bu, Ubuntu 14.04 \u00fczerinde \u00e7al\u0131\u015fan basit bir PHP uygulamas\u0131d\u0131r.<\/p>\";\nphpinfo();\n?><\/code><\/pre>\nansible-php-deployment\/app\/public\/<\/code> dizinine yerle\u015ftirdi\u011finizden emin olun.<\/p>\nDa\u011f\u0131t\u0131m \u0130\u015flemi<\/h2>\n
ansible-php-deployment<\/code> dizinine gidin ve a\u015fa\u011f\u0131daki komutu \u00e7al\u0131\u015ft\u0131r\u0131n:<\/p>\nansible-playbook -i inventory.ini playbook.yml<\/code><\/pre>\n-i inventory.ini<\/code>: Ansible’a hangi envanter dosyas\u0131n\u0131 kullanaca\u011f\u0131n\u0131 s\u00f6yler.
\n* playbook.yml<\/code>: \u00c7al\u0131\u015ft\u0131r\u0131lacak ana playbook dosyas\u0131n\u0131 belirtir.<\/p>\nwebserver<\/code> rol\u00fcndeki g\u00f6revleri \u00e7al\u0131\u015ft\u0131racak (Nginx kurulumu, yap\u0131land\u0131rma), ard\u0131ndan php-app<\/code> rol\u00fcndeki g\u00f6revleri \u00e7al\u0131\u015ft\u0131racak (PHP\/PHP-FPM kurulumu, uygulama dosyalar\u0131n\u0131 kopyalama). G\u00f6revler tamamland\u0131\u011f\u0131nda, Nginx ve PHP-FPM servisleri yeniden ba\u015flat\u0131lacak ve uygulama haz\u0131r hale gelecektir.<\/p>\n
\nAnsible playbook’u \u00e7al\u0131\u015f\u0131rken, her bir g\u00f6revin durumunu g\u00f6steren renkli \u00e7\u0131kt\u0131lar g\u00f6receksiniz.
\n* ok=X<\/code>: Ba\u015far\u0131yla tamamlanan g\u00f6rev say\u0131s\u0131.
\n* changed=Y<\/code>: Hedef makinede de\u011fi\u015fiklik yapan g\u00f6rev say\u0131s\u0131.
\n* unreachable=Z<\/code>: Ula\u015f\u0131lamayan hedef makine say\u0131s\u0131.
\n* failed=W<\/code>: Ba\u015far\u0131s\u0131z olan g\u00f6rev say\u0131s\u0131.<\/p>\nfailed=0<\/code> ve unreachable=0<\/code> g\u00f6steriyorsa, da\u011f\u0131t\u0131m\u0131n\u0131z b\u00fcy\u00fck olas\u0131l\u0131kla ba\u015far\u0131l\u0131 olmu\u015ftur.<\/p>\n
\nDa\u011f\u0131t\u0131m tamamland\u0131ktan sonra, bir web taray\u0131c\u0131s\u0131 a\u00e7\u0131n ve hedef sunucunun IP adresini (veya alan ad\u0131n\u0131) girin:<\/p>\nhttp:\/\/hedef_sunucu_ip_adresi<\/code><\/p>\nindex.php<\/code> dosyas\u0131n\u0131n i\u00e7eri\u011fini, yani “Ansible ile Da\u011f\u0131t\u0131lan PHP Uygulamas\u0131” ba\u015fl\u0131\u011f\u0131n\u0131 ve phpinfo()<\/code> \u00e7\u0131kt\u0131s\u0131n\u0131 g\u00f6rmelisiniz.<\/p>\nEk Konular ve \u0130yile\u015ftirmeler<\/h2>\n
Veritaban\u0131 Entegrasyonu<\/h3>\n
mysql<\/code> rol\u00fc, MySQL sunucusunu kurar ve yap\u0131land\u0131r\u0131r; database<\/code> rol\u00fc, belirli bir uygulama i\u00e7in veritaban\u0131 ve kullan\u0131c\u0131 olu\u015fturur.<\/p>\nG\u00fcvenlik<\/h3>\n
ufw<\/code> mod\u00fcl\u00fc ile bu kolayca yap\u0131labilir.
\n* SSH Anahtarlar\u0131:<\/strong> SSH anahtarlar\u0131n\u0131z\u0131 g\u00fcvenli bir \u015fekilde saklay\u0131n ve parola kullanmaktan ka\u00e7\u0131n\u0131n.
\n* Sudoers Yap\u0131land\u0131rmas\u0131:<\/strong> deployuser<\/code> gibi Ansible’\u0131n kulland\u0131\u011f\u0131 kullan\u0131c\u0131n\u0131n sadece belirli komutlar\u0131 sudo<\/code> ile \u00e7al\u0131\u015ft\u0131rabilmesini sa\u011flamak, g\u00fcvenlik risklerini azalt\u0131r.
\n* PHP G\u00fcvenli\u011fi:<\/strong> php.ini<\/code> ayarlar\u0131n\u0131 g\u00fcvenlik en iyi uygulamalar\u0131na g\u00f6re yap\u0131land\u0131rmak (\u00f6rne\u011fin, display_errors<\/code> kapatmak, upload_max_filesize<\/code> s\u0131n\u0131rlamak).<\/p>\nVersiyon Kontrol\u00fc ve Uygulama Kaynak Kodunun \u00c7ekilmesi<\/h3>\n
copy<\/code> mod\u00fcl\u00fc ile kopyalamak yerine, git<\/code> mod\u00fcl\u00fcn\u00fc kullanarak bir Git deposundan \u00e7ekmek daha iyi bir yakla\u015f\u0131md\u0131r. Bu, s\u00fcrekli entegrasyon\/s\u00fcrekli da\u011f\u0131t\u0131m (CI\/CD) boru hatlar\u0131 i\u00e7in temel bir ad\u0131md\u0131r.<\/p>\n- name: Uygulama kaynak kodunu Git deposundan \u00e7ek\n git:\n repo: 'https:\/\/github.com\/kullanici\/php-app.git'\n dest: \"{{ app_root }}\/{{ app_name }}\"\n version: master # veya belirli bir branch\/tag\n accept_hostkey: yes\n become: yes<\/code><\/pre>\nOrtam De\u011fi\u015fkenleri ve Hassas Veri Y\u00f6netimi<\/h3>\n
.env<\/code> dosyalar\u0131 olu\u015fturmak i\u00e7in template<\/code> veya lineinfile<\/code> mod\u00fclleri kullan\u0131labilir.<\/p>\nComposer Ba\u011f\u0131ml\u0131l\u0131klar\u0131<\/h3>\n
composer install<\/code> komutunu \u00e7al\u0131\u015ft\u0131rmak i\u00e7in command<\/code> veya shell<\/code> mod\u00fcllerini kullanman\u0131z gerekir:<\/p>\n- name: Composer ba\u011f\u0131ml\u0131l\u0131klar\u0131n\u0131 y\u00fckle\n shell: composer install --no-dev --optimize-autoloader -d \"{{ app_root }}\/{{ app_name }}\"\n args:\n chdir: \"{{ app_root }}\/{{ app_name }}\"\n become: yes\n environment:\n COMPOSER_ALLOW_SUPERUSER: \"1\" # E\u011fer www-data veya root ile \u00e7al\u0131\u015f\u0131yorsa gerekebilir<\/code><\/pre>\nCI\/CD Entegrasyonu<\/h3>\n
Hata Ay\u0131klama<\/h3>\n
ansible-playbook -vvv playbook.yml<\/code> komutunu kullanarak daha detayl\u0131 \u00e7\u0131kt\u0131 alabilir ve sorunun kayna\u011f\u0131n\u0131 belirleyebilirsiniz. debug<\/code> mod\u00fcl\u00fc de de\u011fi\u015fkenlerin veya komut \u00e7\u0131kt\u0131lar\u0131n\u0131n de\u011ferlerini g\u00f6rmek i\u00e7in kullan\u0131\u015fl\u0131d\u0131r.<\/p>\n\u0130dempotence (Tekrar \u00c7al\u0131\u015fabilirlik)<\/h3>\n
Ubuntu 14.04 S\u0131n\u0131rlamalar\u0131<\/h3>\n
Sonu\u00e7<\/h2>\n