Ansible, modern BT altyap\u0131lar\u0131nda otomasyonun temel ta\u015flar\u0131ndan biridir. Sunucu yap\u0131land\u0131rmas\u0131, uygulama da\u011f\u0131t\u0131m\u0131 ve orkestrasyon gibi karma\u015f\u0131k g\u00f6revleri basitle\u015ftirerek, sistem y\u00f6neticilerinin ve DevOps m\u00fchendislerinin i\u015f y\u00fck\u00fcn\u00fc \u00f6nemli \u00f6l\u00e7\u00fcde azalt\u0131r. Bu teknik makalede, Ansible kullanarak Ubuntu 18.04 i\u015fletim sistemi \u00fczerinde pop\u00fcler bir web sunucu y\u0131\u011f\u0131n\u0131 olan LEMP’yi (Linux, Nginx, MySQL\/MariaDB, PHP-FPM) nas\u0131l kurup yap\u0131land\u0131raca\u011f\u0131m\u0131z\u0131 ad\u0131m ad\u0131m inceleyece\u011fiz.<\/p>\n
LEMP y\u0131\u011f\u0131n\u0131, y\u00fcksek performansl\u0131 web uygulamalar\u0131 ve dinamik web siteleri i\u00e7in tercih edilen g\u00fc\u00e7l\u00fc bir kombinasyondur. Nginx, d\u00fc\u015f\u00fck kaynak t\u00fcketimiyle y\u00fcksek e\u015fzamanl\u0131 ba\u011flant\u0131lar\u0131 i\u015fleyebilirken, PHP-FPM dinamik i\u00e7erik i\u015fleme yetene\u011fi sunar. MariaDB ise g\u00fcvenilir ve h\u0131zl\u0131 bir veritaban\u0131 \u00e7\u00f6z\u00fcm\u00fcd\u00fcr. Bu bile\u015fenlerin manuel olarak kurulmas\u0131 ve yap\u0131land\u0131r\u0131lmas\u0131 zaman al\u0131c\u0131 ve hataya a\u00e7\u0131k bir s\u00fcre\u00e7 olabilir. Ansible sayesinde, bu s\u00fcreci tamamen otomatikle\u015ftirerek tekrarlanabilir, tutarl\u0131 ve \u00f6l\u00e7eklenebilir bir \u00e7\u00f6z\u00fcm elde edece\u011fiz.<\/p>\n
Bu rehber, bir Ansible kontrol sunucunuzun (genellikle yerel makineniz veya ayr\u0131 bir sunucu) oldu\u011funu ve hedef Ubuntu 18.04 sunucusuna SSH eri\u015fiminizin oldu\u011funu varsaymaktad\u0131r. Ansible, Python tabanl\u0131 oldu\u011fu i\u00e7in kontrol sunucunuzda Python 3 ve pip’in kurulu olmas\u0131 gerekmektedir.<\/p>\n
1. Python ve pip Kurulumu (Gerekliyse):<\/strong><\/p>\n 2. Ansible Kurulumu:<\/strong><\/p>\n 3. SSH Anahtar \u00c7ifti Olu\u015fturma:<\/strong> T\u00fcm sorular\u0131 varsay\u0131lan olarak kabul edebilirsiniz. Bu komut, anahtar\u0131n\u0131z\u0131 hedef sunucudaki kullan\u0131c\u0131n\u0131n Hedef sunucuda temel bir Ubuntu 18.04 kurulumu yeterlidir. Ansible’\u0131n sorunsuz \u00e7al\u0131\u015fabilmesi i\u00e7in hedef sunucuda * Sistemi g\u00fcncelleyin: Ansible ile \u00e7al\u0131\u015f\u0131rken, d\u00fczenli bir proje yap\u0131s\u0131 olu\u015fturmak iyi bir uygulamad\u0131r. Bu, playbook’lar\u0131n\u0131z\u0131n, envanterinizin ve rollerinizin daha y\u00f6netilebilir olmas\u0131n\u0131 sa\u011flar.<\/p>\n Bu yap\u0131, her bir LEMP bile\u015feni i\u00e7in ayr\u0131 bir rol tan\u0131mlamam\u0131z\u0131 sa\u011flar. Proje dizininin k\u00f6k\u00fcnde ( Bu dosya, Ansible’\u0131n y\u00f6nete\u011fi hedef sunucular\u0131 tan\u0131mlar.<\/p>\n * Bu dosya, Ansible’\u0131n varsay\u0131lan davran\u0131\u015flar\u0131n\u0131 yap\u0131land\u0131rmak i\u00e7in kullan\u0131l\u0131r.<\/p>\n * \u015eimdi s\u0131ra, LEMP y\u0131\u011f\u0131n\u0131n\u0131n her bir bile\u015feni i\u00e7in rolleri tan\u0131mlamaya geldi.<\/p>\n Bu rol, hedef sunucudaki i\u015fletim sistemini g\u00fcncelleyecek ve temel paketleri kuracakt\u0131r.<\/p>\n * * Bu rol, Nginx web sunucusunu kuracak, yap\u0131land\u0131racak ve ba\u015flatacakt\u0131r.<\/p>\n * * * * Burada Bu rol, MariaDB veritaban\u0131 sunucusunu kuracak, g\u00fcvenli\u011fini sa\u011flayacak ve bir veritaban\u0131 ile kullan\u0131c\u0131 olu\u015fturacakt\u0131r.<\/p>\n * MariaDB g\u00f6revleri i\u00e7in * * \u00d6NEML\u0130:<\/strong> \u015eifreler gibi hassas verileri do\u011frudan bu dosyada b\u0131rakmak yerine Ansible Vault kullanmal\u0131y\u0131z. Bunu bir sonraki b\u00f6l\u00fcmde ele alaca\u011f\u0131z.<\/p>\n Bu rol, PHP-FPM’i ve gerekli PHP mod\u00fcllerini kuracak, yap\u0131land\u0131racak ve ba\u015flatacakt\u0131r.<\/p>\n * * Burada da \u015eimdi t\u00fcm bu rolleri bir araya getiren ana playbook’u olu\u015ftural\u0131m.<\/p>\n * Veritaban\u0131 \u015fifreleri gibi hassas bilgileri do\u011frudan playbook veya rol dosyalar\u0131nda saklamak g\u00fcvenlik a\u00e7\u0131s\u0131ndan risklidir. Ansible Vault, bu t\u00fcr verileri \u015fifrelemek ve g\u00fcvenli bir \u015fekilde y\u00f6netmek i\u00e7in kullan\u0131l\u0131r.<\/p>\n 1. Vault Dosyas\u0131 Olu\u015fturma:<\/strong><\/p>\n Bu komut sizden bir parola isteyecektir. Bu parolay\u0131 unutmay\u0131n! Dosya bir metin d\u00fczenleyicide a\u00e7\u0131lacak ve buraya hassas de\u011fi\u015fkenleri ekleyebilirsiniz:<\/p>\n Kaydedip kapat\u0131n. Art\u0131k bu dosya \u015fifrelenmi\u015f durumdad\u0131r.<\/p>\n 2. Vault Dosyas\u0131n\u0131 D\u00fczenleme:<\/strong> 3. Vault Parolas\u0131n\u0131 Kullanarak Playbook’u \u00c7al\u0131\u015ft\u0131rma:<\/strong> Veya bir dosya i\u00e7inde saklanan parolay\u0131 kullanabilirsiniz (daha g\u00fcvenli):<\/p>\n T\u00fcm dosyalar\u0131 olu\u015fturduktan ve Ansible Vault’u yap\u0131land\u0131rd\u0131ktan sonra, playbook’u \u00e7al\u0131\u015ft\u0131rmaya haz\u0131r\u0131z.<\/p>\n 1. Ansible Koleksiyonlar\u0131n\u0131 Kurma:<\/strong> 2. Playbook’u \u00c7al\u0131\u015ft\u0131rma:<\/strong> Ansible, hedef sunucuya ba\u011flanacak ve tan\u0131mlad\u0131\u011f\u0131m\u0131z t\u00fcm g\u00f6revleri s\u0131ras\u0131yla y\u00fcr\u00fctecektir. \u00c7\u0131kt\u0131da her bir g\u00f6revin durumu (changed, ok, skipped vb.) g\u00f6sterilecektir.<\/p>\n 3. Kurulumun Do\u011frulanmas\u0131:<\/strong> * Nginx Kontrol\u00fc:<\/strong> * PHP-FPM Kontrol\u00fc:<\/strong> Dosyan\u0131n i\u00e7ine a\u015fa\u011f\u0131daki kodu yap\u0131\u015ft\u0131r\u0131n:<\/p>\n Kaydedip \u00e7\u0131k\u0131n. Ard\u0131ndan taray\u0131c\u0131n\u0131zda * MariaDB Kontrol\u00fc:<\/strong> * Firewall Kontrol\u00fc:<\/strong> SSH (22), HTTP (80) ve HTTPS (443) portlar\u0131n\u0131n izinli oldu\u011funu g\u00f6rmelisiniz.<\/p>\n Bu makalede, Ansible kullanarak Ubuntu 18.04 sunucusu \u00fczerine LEMP y\u0131\u011f\u0131n\u0131n\u0131 (Nginx, MariaDB, PHP-FPM) nas\u0131l otomatik olarak kurup yap\u0131land\u0131raca\u011f\u0131m\u0131z\u0131 detayl\u0131 bir \u015fekilde \u00f6\u011frendik. Ansible’\u0131n rol tabanl\u0131 yap\u0131s\u0131, g\u00f6rev otomasyonu, idempotence (tekrarl\u0131 \u00e7al\u0131\u015ft\u0131rmalarda tutarl\u0131l\u0131k) ve hassas veri y\u00f6netimi (Ansible Vault) gibi \u00f6zellikleri sayesinde, karma\u015f\u0131k sunucu kurulumlar\u0131n\u0131 basitle\u015ftirebilir, hatalar\u0131 azaltabilir ve da\u011f\u0131t\u0131m s\u00fcre\u00e7lerinizi h\u0131zland\u0131rabilirsiniz.<\/p>\n Bu kurulum, LEMP y\u0131\u011f\u0131n\u0131n\u0131n temelini olu\u015fturur. \u0130leri d\u00fczeyde, bu yap\u0131land\u0131rmay\u0131 daha da geli\u015ftirebilirsiniz:<\/p>\n * SSL\/TLS Kurulumu:<\/strong> Let’s Encrypt ile otomatik SSL sertifikalar\u0131 kurmak i\u00e7in Nginx rol\u00fcn\u00fc geni\u015fletmek. Ansible, altyap\u0131 y\u00f6netimini bir sanat haline getiren g\u00fc\u00e7l\u00fc bir ara\u00e7t\u0131r. Bu rehber, otomasyon yolculu\u011funuzda sa\u011flam bir ba\u015flang\u0131\u00e7 noktas\u0131 sa\u011flamal\u0131d\u0131r.<\/body><\/p>\n","protected":false},"excerpt":{"rendered":"Ansible ile Ubuntu 18.04 \u00dczerine LEMP Kurulumu ve Yap\u0131land\u0131rmas\u0131\nAnsible, modern BT altyap\u0131lar\u0131nda otomasyonun temel ta\u015flar\u0131ndan biridir. Sun","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"csco_page_header_type":"","csco_page_load_nextpost":"","csco_page_subscribe_form":"","csco_page_contact_form":"","footnotes":""},"categories":[1468],"tags":[],"class_list":{"0":"post-37559","1":"post","2":"type-post","3":"status-publish","4":"format-standard","6":"category-ubuntu","7":"cs-entry","8":"cs-video-wrap"},"yoast_head":"\nsudo apt update\n sudo apt install python3 python3-pip -y<\/code><\/pre>\npip3 install ansible<\/code><\/pre>\n
\n Hedef sunuculara parola girmeden ba\u011flanabilmek i\u00e7in SSH anahtar \u00e7ifti olu\u015fturmak en iyi uygulamad\u0131r.<\/p>\nssh-keygen -t rsa -b 4096<\/code><\/pre>\n
\n4. SSH Anahtar\u0131n\u0131 Hedef Sunucuya Kopyalama:<\/strong>
\n your_user<\/code> k\u0131sm\u0131n\u0131 hedef sunucudaki kullan\u0131c\u0131 ad\u0131n\u0131zla, your_server_ip<\/code> k\u0131sm\u0131n\u0131 ise hedef sunucunun IP adresiyle de\u011fi\u015ftirin.<\/p>\nssh-copy-id your_user@your_server_ip<\/code><\/pre>\n~\/.ssh\/authorized_keys<\/code> dosyas\u0131na ekleyecektir.<\/p>\n1.2. Hedef Ubuntu 18.04 Sunucusu Haz\u0131rl\u0131\u011f\u0131<\/h4>\n
python3<\/code> ve sudo<\/code> yetkisine sahip bir kullan\u0131c\u0131ya ihtiyac\u0131m\u0131z var. Ansible, varsay\u0131lan olarak root<\/code> kullan\u0131c\u0131s\u0131 yerine sudo<\/code> yetkili bir kullan\u0131c\u0131 ile ba\u011flanmay\u0131 tercih eder.<\/p>\nsudo apt update && sudo apt upgrade -y<\/code>
\n* python3<\/code> kurulu oldu\u011fundan emin olun. Ubuntu 18.04’te varsay\u0131lan olarak gelir.
\n* Ansible’\u0131n apt<\/code> mod\u00fcl\u00fcn\u00fc kullanabilmesi i\u00e7in python3-apt<\/code> paketinin kurulu olmas\u0131 \u00f6nemlidir. Genellikle Ansible bunu otomatik kurar, ancak manuel olarak da kontrol edilebilir: sudo apt install python3-apt -y<\/code><\/p>\n2. Ansible Proje Yap\u0131s\u0131 Olu\u015fturma<\/h3>\n
lemp_ansible\/\n\u251c\u2500\u2500 ansible.cfg\n\u251c\u2500\u2500 inventory.ini\n\u251c\u2500\u2500 playbooks\/\n\u2502 \u2514\u2500\u2500 main.yml\n\u2514\u2500\u2500 roles\/\n \u251c\u2500\u2500 common\/\n \u2502 \u251c\u2500\u2500 tasks\/\n \u2502 \u2502 \u2514\u2500\u2500 main.yml\n \u2502 \u2514\u2500\u2500 handlers\/\n \u2502 \u2514\u2500\u2500 main.yml\n \u251c\u2500\u2500 mariadb\/\n \u2502 \u251c\u2500\u2500 tasks\/\n \u2502 \u2502 \u2514\u2500\u2500 main.yml\n \u2502 \u251c\u2500\u2500 handlers\/\n \u2502 \u2502 \u2514\u2500\u2500 main.yml\n \u2502 \u2514\u2500\u2500 defaults\/\n \u2502 \u2514\u2500\u2500 main.yml\n \u251c\u2500\u2500 nginx\/\n \u2502 \u251c\u2500\u2500 tasks\/\n \u2502 \u2502 \u2514\u2500\u2500 main.yml\n \u2502 \u251c\u2500\u2500 handlers\/\n \u2502 \u2502 \u2514\u2500\u2500 main.yml\n \u2502 \u2514\u2500\u2500 templates\/\n \u2502 \u251c\u2500\u2500 default.conf.j2\n \u2502 \u2514\u2500\u2500 nginx.conf.j2\n \u2514\u2500\u2500 php\/\n \u251c\u2500\u2500 tasks\/\n \u2502 \u2514\u2500\u2500 main.yml\n \u2514\u2500\u2500 handlers\/\n \u2514\u2500\u2500 main.yml<\/code><\/pre>\ncommon<\/code> rol\u00fc, t\u00fcm sunucularda yap\u0131lmas\u0131 gereken genel sistem g\u00fcncellemeleri ve temel paket kurulumlar\u0131 gibi g\u00f6revleri i\u00e7erir.<\/p>\n3. Temel Ansible Yap\u0131land\u0131rmas\u0131<\/h3>\n
lemp_ansible\/<\/code>) a\u015fa\u011f\u0131daki dosyalar\u0131 olu\u015ftural\u0131m:<\/p>\n3.1.
inventory.ini<\/code><\/h4>\n[lemp_servers]\nyour_server_ip_or_hostname ansible_user=your_ssh_user ansible_python_interpreter=\/usr\/bin\/python3<\/code><\/pre>\n[lemp_servers]<\/code>: Hedef sunucular\u0131m\u0131z\u0131 grupland\u0131ran bir grup ad\u0131.
\n* your_server_ip_or_hostname<\/code>: Hedef sunucunuzun IP adresi veya ana bilgisayar ad\u0131.
\n* ansible_user<\/code>: Hedef sunucuya ba\u011flanmak i\u00e7in kullan\u0131lacak SSH kullan\u0131c\u0131 ad\u0131 (SSH anahtar\u0131n\u0131 kopyalad\u0131\u011f\u0131n\u0131z kullan\u0131c\u0131).
\n* ansible_python_interpreter<\/code>: Ansible’\u0131n hedef sunucuda kullanaca\u011f\u0131 Python yorumlay\u0131c\u0131s\u0131n\u0131n yolu. Ubuntu 18.04 i\u00e7in \/usr\/bin\/python3<\/code> olmal\u0131d\u0131r.<\/p>\n3.2.
ansible.cfg<\/code><\/h4>\n[defaults]\ninventory = inventory.ini\nremote_user = your_ssh_user\nask_pass = False\nhost_key_checking = False\nroles_path = roles<\/code><\/pre>\ninventory<\/code>: Envanter dosyam\u0131z\u0131n yolu.
\n* remote_user<\/code>: E\u011fer inventory.ini<\/code> i\u00e7inde belirtilmezse, varsay\u0131lan olarak kullan\u0131lacak uzak kullan\u0131c\u0131.
\n* ask_pass<\/code>: SSH parolas\u0131 sormay\u0131 devre d\u0131\u015f\u0131 b\u0131rak\u0131r (SSH anahtarlar\u0131 kulland\u0131\u011f\u0131m\u0131z i\u00e7in).
\n* host_key_checking<\/code>: Yeni sunuculara ba\u011flan\u0131rken SSH anahtar kontrol\u00fcn\u00fc devre d\u0131\u015f\u0131 b\u0131rak\u0131r (test ortamlar\u0131 i\u00e7in kullan\u0131\u015fl\u0131d\u0131r, \u00fcretimde dikkatli olunmal\u0131d\u0131r).
\n* roles_path<\/code>: Rollerin bulundu\u011fu dizinin yolu.<\/p>\n4. Ansible Rollerini Olu\u015fturma ve Yap\u0131land\u0131rma<\/h3>\n
4.1.
common<\/code> Rol\u00fc<\/h4>\nroles\/common\/tasks\/main.yml<\/code>:<\/strong><\/p>\n---\n - name: Update apt cache\n apt:\n update_cache: yes\n cache_valid_time: 3600 # Cache'i 1 saat ge\u00e7erli tut\n\n - name: Upgrade all installed packages\n apt:\n upgrade: dist\n autoremove: yes\n\n - name: Install common packages\n apt:\n name:\n - curl\n - git\n - unzip\n - htop\n - net-tools\n - python3-apt # apt mod\u00fcl\u00fcn\u00fcn d\u00fczg\u00fcn \u00e7al\u0131\u015fmas\u0131 i\u00e7in\n - aptitude # apt mod\u00fcl\u00fcn\u00fcn baz\u0131 ba\u011f\u0131ml\u0131l\u0131klar\u0131 i\u00e7in\n state: present\n\n - name: Install UFW (Uncomplicated Firewall)\n apt:\n name: ufw\n state: present\n\n - name: Allow SSH traffic\n ufw:\n rule: allow\n name: OpenSSH\n\n - name: Allow HTTP traffic\n ufw:\n rule: allow\n port: '80'\n proto: tcp\n\n - name: Allow HTTPS traffic\n ufw:\n rule: allow\n port: '443'\n proto: tcp\n\n - name: Enable UFW\n ufw:\n state: enabled\n policy: deny # Varsay\u0131lan olarak t\u00fcm gelen ba\u011flant\u0131lar\u0131 reddet<\/code><\/pre>\nroles\/common\/handlers\/main.yml<\/code>:<\/strong> (Bu rol i\u00e7in \u00f6zel bir handler’a gerek yok, ancak standart olarak olu\u015fturulabilir.)<\/p>\n---\n # Bu rol i\u00e7in \u00f6zel bir handler'a gerek yok.<\/code><\/pre>\n4.2.
nginx<\/code> Rol\u00fc<\/h4>\nroles\/nginx\/tasks\/main.yml<\/code>:<\/strong><\/p>\n---\n - name: Install Nginx\n apt:\n name: nginx\n state: present\n\n - name: Copy Nginx main configuration file\n template:\n src: nginx.conf.j2\n dest: \/etc\/nginx\/nginx.conf\n notify: Restart Nginx\n\n - name: Remove default Nginx site configuration\n file:\n path: \/etc\/nginx\/sites-enabled\/default\n state: absent\n notify: Restart Nginx\n\n - name: Copy Nginx default site configuration\n template:\n src: default.conf.j2\n dest: \/etc\/nginx\/sites-available\/default\n notify: Restart Nginx\n\n - name: Enable Nginx default site\n file:\n src: \/etc\/nginx\/sites-available\/default\n dest: \/etc\/nginx\/sites-enabled\/default\n state: link\n notify: Restart Nginx\n\n - name: Ensure Nginx service is running and enabled\n systemd:\n name: nginx\n state: started\n enabled: yes<\/code><\/pre>\nroles\/nginx\/handlers\/main.yml<\/code>:<\/strong><\/p>\n---\n - name: Restart Nginx\n systemd:\n name: nginx\n state: restarted<\/code><\/pre>\nroles\/nginx\/templates\/nginx.conf.j2<\/code>:<\/strong> (Basit bir \u00f6rnek, daha fazla optimizasyon yap\u0131labilir.)<\/p>\nuser www-data;\n worker_processes auto;\n pid \/run\/nginx.pid;\n include \/etc\/nginx\/modules-enabled\/*.conf;\n\n events {\n worker_connections 768;\n # multi_accept on;\n }\n\n http {\n sendfile on;\n tcp_nopush on;\n tcp_nodelay on;\n keepalive_timeout 65;\n types_hash_max_size 2048;\n\n include \/etc\/nginx\/mime.types;\n default_type application\/octet-stream;\n\n ssl_protocols TLSv1 TLSv1.1 TLSv1.2 TLSv1.3; # Dropping SSLv3, ref: POODLE\n ssl_prefer_server_ciphers on;\n\n access_log \/var\/log\/nginx\/access.log;\n error_log \/var\/log\/nginx\/error.log;\n\n gzip on;\n\n include \/etc\/nginx\/conf.d\/*.conf;\n include \/etc\/nginx\/sites-enabled\/*;\n }<\/code><\/pre>\nroles\/nginx\/templates\/default.conf.j2<\/code>:<\/strong> (PHP-FPM ile entegrasyonu g\u00f6steren \u00f6rnek.)<\/p>\nserver {\n listen 80 default_server;\n listen [::]:80 default_server;\n\n root \/var\/www\/html;\n index index.php index.html index.htm index.nginx-debian.html;\n\n server_name _;\n\n location \/ {\n try_files $uri $uri\/ =404;\n }\n\n location ~ \\.php$ {\n include snippets\/fastcgi-php.conf;\n fastcgi_pass unix:\/var\/run\/php\/php{{ php_version }}-fpm.sock; # php_version de\u011fi\u015fkeni kullan\u0131lacak\n fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;\n include fastcgi_params;\n }\n\n # deny access to .htaccess files, if Apache's document root\n # concurs with nginx's one\n #\n location ~ \/\\.ht {\n deny all;\n }\n }<\/code><\/pre>\nphp_version<\/code> diye bir de\u011fi\u015fken kulland\u0131k. Bu de\u011fi\u015fkeni group_vars\/lemp_servers.yml<\/code> veya playbooks\/main.yml<\/code> i\u00e7inde tan\u0131mlayaca\u011f\u0131z. Ubuntu 18.04 i\u00e7in varsay\u0131lan PHP s\u00fcr\u00fcm\u00fc 7.2’dir.<\/p>\n4.3.
mariadb<\/code> Rol\u00fc<\/h4>\nroles\/mariadb\/tasks\/main.yml<\/code>:<\/strong><\/p>\n---\n - name: Install MariaDB server and client\n apt:\n name:\n - mariadb-server\n - mariadb-client\n state: present\n\n - name: Ensure MariaDB service is running and enabled\n systemd:\n name: mariadb\n state: started\n enabled: yes\n\n - name: Set MariaDB root password\n community.mysql.mysql_user:\n name: root\n password: \"{{ mariadb_root_password }}\"\n host: localhost\n login_unix_socket: \/var\/run\/mysqld\/mysqld.sock\n check_password_exists: no # \u0130lk kurulumda \u015fifre olmad\u0131\u011f\u0131 i\u00e7in kontrol etme\n no_log: true # \u015eifreyi loglara yazd\u0131rmamak i\u00e7in\n\n - name: Remove anonymous users\n community.mysql.mysql_user:\n name: ''\n host: \"{{ item }}\"\n state: absent\n login_user: root\n login_password: \"{{ mariadb_root_password }}\"\n with_items:\n - localhost\n - \"{{ ansible_hostname }}\"\n no_log: true\n\n - name: Remove test database\n community.mysql.mysql_db:\n name: test\n state: absent\n login_user: root\n login_password: \"{{ mariadb_root_password }}\"\n no_log: true\n\n - name: Create database\n community.mysql.mysql_db:\n name: \"{{ mariadb_database }}\"\n state: present\n login_user: root\n login_password: \"{{ mariadb_root_password }}\"\n no_log: true\n\n - name: Create database user\n community.mysql.mysql_user:\n name: \"{{ mariadb_user }}\"\n password: \"{{ mariadb_password }}\"\n host: localhost\n priv: \"{{ mariadb_database }}.*:ALL\"\n state: present\n login_user: root\n login_password: \"{{ mariadb_root_password }}\"\n no_log: true\n\n - name: Flush privileges\n community.mysql.mysql_query:\n query: FLUSH PRIVILEGES;\n login_user: root\n login_password: \"{{ mariadb_root_password }}\"\n no_log: true<\/code><\/pre>\ncommunity.mysql<\/code> koleksiyonuna ihtiyac\u0131m\u0131z var. Bunu Ansible kontrol sunucusunda kurmal\u0131y\u0131z: ansible-galaxy collection install community.mysql<\/code>.<\/p>\nroles\/mariadb\/handlers\/main.yml<\/code>:<\/strong><\/p>\n---\n - name: Restart MariaDB\n systemd:\n name: mariadb\n state: restarted<\/code><\/pre>\nroles\/mariadb\/defaults\/main.yml<\/code>:<\/strong> (Varsay\u0131lan de\u011ferler, group_vars<\/code> veya vault<\/code> ile \u00fczerine yaz\u0131labilir.)<\/p>\n---\n mariadb_root_password: \"your_strong_root_password\"\n mariadb_database: \"your_database_name\"\n mariadb_user: \"your_database_user\"\n mariadb_password: \"your_strong_database_password\"<\/code><\/pre>\n4.4.
php<\/code> Rol\u00fc<\/h4>\nroles\/php\/tasks\/main.yml<\/code>:<\/strong><\/p>\n---\n - name: Install PHP-FPM and common PHP modules for Ubuntu 18.04 (PHP 7.2)\n apt:\n name:\n - php{{ php_version }}-fpm\n - php{{ php_version }}-mysql\n - php{{ php_version }}-cli\n - php{{ php_version }}-gd\n - php{{ php_version }}-curl\n - php{{ php_version }}-mbstring\n - php{{ php_version }}-xml\n - php{{ php_version }}-zip\n - php{{ php_version }}-intl\n state: present\n\n - name: Ensure PHP-FPM service is running and enabled\n systemd:\n name: php{{ php_version }}-fpm\n state: started\n enabled: yes\n notify: Restart PHP-FPM<\/code><\/pre>\nroles\/php\/handlers\/main.yml<\/code>:<\/strong><\/p>\n---\n - name: Restart PHP-FPM\n systemd:\n name: php{{ php_version }}-fpm\n state: restarted<\/code><\/pre>\nphp_version<\/code> de\u011fi\u015fkenini kullan\u0131yoruz.<\/p>\n5. Ana Playbook (
main.yml<\/code>)<\/h3>\nplaybooks\/main.yml<\/code>:<\/strong><\/p>\n---\n - name: Setup LEMP stack on Ubuntu 18.04\n hosts: lemp_servers\n become: yes # T\u00fcm g\u00f6revleri sudo ile \u00e7al\u0131\u015ft\u0131r\n vars:\n php_version: \"7.2\" # Ubuntu 18.04 i\u00e7in varsay\u0131lan PHP s\u00fcr\u00fcm\u00fc\n\n pre_tasks:\n - name: Ensure python3-apt is installed on target hosts\n raw: test -e \/usr\/bin\/python3 || (apt update && apt install -y python3 python3-apt)\n changed_when: false # Bu komutun idempotent olmamas\u0131 durumunda bile \"changed\" olarak i\u015faretlenmesini engeller\n\n roles:\n - common\n - nginx\n - mariadb\n - php<\/code><\/pre>\npre_tasks<\/code> b\u00f6l\u00fcm\u00fc, Ansible’\u0131n ilk ba\u011flant\u0131s\u0131nda python3-apt<\/code> paketinin kurulu oldu\u011fundan emin olmak i\u00e7in eklenmi\u015ftir. Bu, \u00f6zellikle minimal sunucu kurulumlar\u0131nda Ansible’\u0131n apt<\/code> mod\u00fcl\u00fcn\u00fc kullanmadan \u00f6nce gerekli Python mod\u00fcl\u00fcn\u00fc y\u00fcklemesine olanak tan\u0131r.<\/p>\n6. Hassas Verilerin Y\u00f6netimi (Ansible Vault Kullan\u0131m\u0131)<\/h3>\n
ansible-vault create group_vars\/lemp_servers.yml<\/code><\/pre>\nmariadb_root_password: \"your_super_strong_root_password\"\n mariadb_database: \"my_webapp_db\"\n mariadb_user: \"webapp_user\"\n mariadb_password: \"your_super_strong_db_password\"<\/code><\/pre>\n
\n Daha sonra d\u00fczenlemek isterseniz:<\/p>\nansible-vault edit group_vars\/lemp_servers.yml<\/code><\/pre>\n
\n Playbook’u \u00e7al\u0131\u015ft\u0131r\u0131rken Ansible’a vault parolas\u0131n\u0131 sa\u011flaman\u0131z gerekecektir.<\/p>\nansible-playbook -i inventory.ini playbooks\/main.yml --ask-vault-pass<\/code><\/pre>\nansible-playbook -i inventory.ini playbooks\/main.yml --vault-password-file ~\/.ansible\/vault_pass.txt<\/code><\/pre>\n~\/.ansible\/vault_pass.txt<\/code> dosyas\u0131n\u0131n i\u00e7eri\u011fi sadece vault parolas\u0131 olmal\u0131d\u0131r ve izinleri 600<\/code> olarak ayarlanmal\u0131d\u0131r (chmod 600 ~\/.ansible\/vault_pass.txt<\/code>).<\/p>\n7. Playbook’u \u00c7al\u0131\u015ft\u0131rma ve Do\u011frulama<\/h3>\n
\n MariaDB rol\u00fcnde community.mysql<\/code> koleksiyonunu kulland\u0131\u011f\u0131m\u0131z i\u00e7in, kontrol sunucusunda bunu kurmal\u0131y\u0131z:<\/p>\nansible-galaxy collection install community.mysql<\/code><\/pre>\n
\n Proje k\u00f6k dizininde (lemp_ansible\/<\/code>) a\u015fa\u011f\u0131daki komutu \u00e7al\u0131\u015ft\u0131r\u0131n:<\/p>\nansible-playbook -i inventory.ini playbooks\/main.yml --ask-vault-pass<\/code><\/pre>\n
\n Playbook ba\u015far\u0131yla tamamland\u0131ktan sonra, LEMP y\u0131\u011f\u0131n\u0131n\u0131n do\u011fru \u015fekilde kurulup kurulmad\u0131\u011f\u0131n\u0131 do\u011frulamam\u0131z gerekir.<\/p>\n
\n Web taray\u0131c\u0131n\u0131z\u0131 a\u00e7\u0131n ve hedef sunucunuzun IP adresine gidin. Nginx’in varsay\u0131lan “Welcome to Nginx!” sayfas\u0131n\u0131 veya bizim default.conf.j2<\/code> dosyam\u0131zdaki \/var\/www\/html<\/code> dizininde bir index.html<\/code> dosyas\u0131 olu\u015fturduysan\u0131z o i\u00e7eri\u011fi g\u00f6rmelisiniz.<\/p>\n
\n PHP’nin Nginx ile do\u011fru bir \u015fekilde entegre olup olmad\u0131\u011f\u0131n\u0131 test etmek i\u00e7in, \/var\/www\/html<\/code> dizininde bir info.php<\/code> dosyas\u0131 olu\u015ftural\u0131m:<\/p>\n# Hedef sunucuya SSH ile ba\u011flan\u0131n\n sudo nano \/var\/www\/html\/info.php<\/code><\/pre>\n<\/code><\/pre>\nhttp:\/\/your_server_ip\/info.php<\/code> adresine gidin. PHP bilgi sayfas\u0131n\u0131 g\u00f6rmelisiniz. \u0130\u015finiz bitti\u011finde g\u00fcvenlik nedeniyle bu dosyay\u0131 silmeyi unutmay\u0131n: sudo rm \/var\/www\/html\/info.php<\/code>.<\/p>\n
\n Hedef sunucuya SSH ile ba\u011flan\u0131n ve MariaDB’ye ba\u011flanmay\u0131 deneyin:<\/p>\nmysql -u webapp_user -p<\/code><\/pre>\nwebapp_user<\/code> yerine group_vars\/lemp_servers.yml<\/code> dosyas\u0131nda tan\u0131mlad\u0131\u011f\u0131n\u0131z kullan\u0131c\u0131 ad\u0131n\u0131 ve parolay\u0131 girin. Ba\u015far\u0131l\u0131 bir \u015fekilde ba\u011flanabiliyorsan\u0131z ve SHOW DATABASES;<\/code> komutu ile olu\u015fturdu\u011funuz veritaban\u0131n\u0131 g\u00f6r\u00fcyorsan\u0131z, MariaDB de do\u011fru \u015fekilde \u00e7al\u0131\u015f\u0131yor demektir.<\/p>\n
\n Hedef sunucuda UFW durumunu kontrol edin:<\/p>\nsudo ufw status<\/code><\/pre>\n8. Sonu\u00e7 ve \u0130leri Ad\u0131mlar<\/h3>\n
\n* Birden Fazla Site Y\u00f6netimi:<\/strong> Nginx rol\u00fcne birden fazla sanal ana bilgisayar (virtual host) yap\u0131land\u0131rmas\u0131 eklemek.
\n* Geli\u015fmi\u015f PHP Yap\u0131land\u0131rmas\u0131:<\/strong> php.ini<\/code> veya PHP-FPM havuz ayarlar\u0131n\u0131 \u00f6zelle\u015ftirmek.
\n* Veritaban\u0131 Yedekleme:<\/strong> MariaDB i\u00e7in otomatik yedekleme g\u00f6revleri eklemek.
\n* Monitoring ve Loglama:<\/strong> Prometheus, Grafana veya ELK Stack gibi ara\u00e7larla entegrasyon.
\n* CI\/CD Entegrasyonu:<\/strong> Bu Ansible playbook’unu Jenkins, GitLab CI\/CD veya GitHub Actions gibi s\u00fcrekli entegrasyon\/s\u00fcrekli da\u011f\u0131t\u0131m (CI\/CD) boru hatlar\u0131na dahil etmek.<\/p>\n