add ftp server

bonus/Makefile

@@ -0,0 +1,37 @@
+NAME		= inception
+COMPOSE		= docker compose --env-file srcs/.env -f srcs/docker-compose.yml
+DATA_PATH	= /home/oriabenkyi/data
+
+all: up
+
+up: data
+	$(COMPOSE) up -d --build
+
+data:
+	mkdir -p $(DATA_PATH)/wordpress
+	mkdir -p $(DATA_PATH)/mariadb
+
+down:
+	$(COMPOSE) down
+
+stop:
+	$(COMPOSE) stop
+
+start:
+	$(COMPOSE) start
+
+restart: down up
+
+logs:
+	$(COMPOSE) logs -f
+
+clean: down
+	docker system prune -f
+
+fclean: clean
+	sudo rm -rf $(DATA_PATH)/wordpress
+	sudo rm -rf $(DATA_PATH)/mariadb
+
+re: fclean up
+
+.PHONY: all up down stop start restart logs clean fclean re data

bonus/secrets/db_password.txt

@@ -0,0 +1 @@
+z9K93ew8T+cUVVFwYH6MmVTE

bonus/secrets/db_root_password.txt

@@ -0,0 +1 @@
+tLPUmcpXXzugcZXxXwtT51Qg

bonus/secrets/ftp_password.txt

@@ -0,0 +1 @@
+9BSLCZWoT1Z7mfdcWEC+nmZ2

bonus/secrets/wp_admin_password.txt

@@ -0,0 +1 @@
+vQvK2jgta1Y9q/EOru7J/APo

bonus/secrets/wp_user_password.txt

@@ -0,0 +1 @@
+oMg5sgSqPvIHN0NFS1s+97Un

bonus/srcs/.env

@@ -0,0 +1,16 @@
+DOMAIN_NAME=oriabenk.42.fr
+LOGIN=oriabenk
+
+DATA_PATH=/home/oriabenkyi/data
+
+MYSQL_DATABASE=wordpress
+MYSQL_USER=wp_user
+MYSQL_HOST=mariadb
+
+WP_TITLE=Inception
+WP_ADMIN_USER=supervisor
+WP_ADMIN_EMAIL=supervisor@oriabenk.42.fr
+WP_USER=oriabenk
+WP_USER_EMAIL=oriabenk@oriabenk.42.fr
+
+FTP_USER=oriabenk

bonus/srcs/docker-compose.yml

@@ -0,0 +1,94 @@
+services:
+  mariadb:
+    build: ./requirements/mariadb
+    image: mariadb:inception
+    container_name: mariadb
+    env_file: .env
+    secrets:
+      - db_root_password
+      - db_password
+    volumes:
+      - mariadb_data:/var/lib/mysql
+    networks:
+      - inception
+    restart: always
+
+  wordpress:
+    build: ./requirements/wordpress
+    image: wordpress:inception
+    container_name: wordpress
+    env_file: .env
+    secrets:
+      - db_password
+      - wp_admin_password
+      - wp_user_password
+    volumes:
+      - wordpress_data:/var/www/html
+    networks:
+      - inception
+    depends_on:
+      - mariadb
+    restart: always
+
+  nginx:
+    build: ./requirements/nginx
+    image: nginx:inception
+    container_name: nginx
+    env_file: .env
+    volumes:
+      - wordpress_data:/var/www/html
+    networks:
+      - inception
+    ports:
+      - "443:443"
+    depends_on:
+      - wordpress
+    restart: always
+
+  ftp:
+    build: ./requirements/ftp
+    image: ftp:inception
+    container_name: ftp
+    env_file: .env
+    secrets:
+      - ftp_password
+    volumes:
+      - wordpress_data:/var/www/html
+    networks:
+      - inception
+    ports:
+      - "21:21"
+      - "21100-21110:21100-21110"
+    depends_on:
+      - wordpress
+    restart: always
+
+networks:
+  inception:
+    driver: bridge
+
+volumes:
+  mariadb_data:
+    driver: local
+    driver_opts:
+      type: none
+      o: bind
+      device: ${DATA_PATH}/mariadb
+  wordpress_data:
+    driver: local
+    driver_opts:
+      type: none
+      o: bind
+      device: ${DATA_PATH}/wordpress
+
+secrets:
+  db_root_password:
+    file: ../secrets/db_root_password.txt
+  db_password:
+    file: ../secrets/db_password.txt
+  wp_admin_password:
+    file: ../secrets/wp_admin_password.txt
+  wp_user_password:
+    file: ../secrets/wp_user_password.txt
+  ftp_password:
+    file: ../secrets/ftp_password.txt

bonus/srcs/requirements/ftp/Dockerfile

@@ -0,0 +1,15 @@
+FROM debian:bookworm-slim
+
+RUN apt-get update && apt-get install -y --no-install-recommends \
+    vsftpd \
+    && rm -rf /var/lib/apt/lists/*
+
+COPY conf/vsftpd.conf /etc/vsftpd.conf
+COPY tools/entrypoint.sh /usr/local/bin/entrypoint.sh
+
+RUN echo "/usr/sbin/nologin" >> /etc/shells \
+    && chmod +x /usr/local/bin/entrypoint.sh
+
+EXPOSE 21 21100-21110
+
+ENTRYPOINT ["entrypoint.sh"]

bonus/srcs/requirements/ftp/conf/vsftpd.conf

@@ -0,0 +1,19 @@
+listen=YES
+listen_ipv6=NO
+
+anonymous_enable=NO
+local_enable=YES
+write_enable=YES
+
+chroot_local_user=YES
+allow_writeable_chroot=YES
+local_umask=022
+
+pasv_enable=YES
+pasv_min_port=21100
+pasv_max_port=21110
+
+seccomp_sandbox=NO
+
+xferlog_enable=YES
+dual_log_enable=YES

bonus/srcs/requirements/ftp/tools/entrypoint.sh

@@ -0,0 +1,14 @@
+#!/bin/bash
+set -e
+
+mkdir -p /var/run/vsftpd/empty
+
+FTP_PASSWORD=$(cat /run/secrets/ftp_password)
+
+if ! id "${FTP_USER}" >/dev/null 2>&1; then
+    useradd -o -u 33 -g www-data -d /var/www/html -s /usr/sbin/nologin "${FTP_USER}"
+fi
+
+echo "${FTP_USER}:${FTP_PASSWORD}" | chpasswd
+
+exec /usr/sbin/vsftpd /etc/vsftpd.conf

bonus/srcs/requirements/mariadb/Dockerfile

@@ -0,0 +1,18 @@
+FROM debian:bookworm-slim
+
+RUN apt-get update && apt-get install -y --no-install-recommends \
+    mariadb-server \
+    mariadb-client \
+    && rm -rf /var/lib/apt/lists/*
+
+COPY conf/my.cnf /etc/mysql/mariadb.conf.d/50-server.cnf
+COPY tools/entrypoint.sh /usr/local/bin/entrypoint.sh
+
+RUN chmod +x /usr/local/bin/entrypoint.sh \
+    && rm -rf /var/lib/mysql/* \
+    && mkdir -p /var/lib/mysql /run/mysqld \
+    && chown -R mysql:mysql /var/lib/mysql /run/mysqld
+
+EXPOSE 3306
+
+ENTRYPOINT ["entrypoint.sh"]

bonus/srcs/requirements/mariadb/conf/my.cnf

@@ -0,0 +1,11 @@
+[mysqld]
+user = mysql
+bind-address = 0.0.0.0
+port = 3306
+datadir = /var/lib/mysql
+socket = /run/mysqld/mysqld.sock
+pid-file = /run/mysqld/mysqld.pid
+skip-name-resolve
+
+[client]
+socket = /run/mysqld/mysqld.sock

bonus/srcs/requirements/mariadb/tools/entrypoint.sh

@@ -0,0 +1,36 @@
+#!/bin/bash
+set -e
+
+unset MYSQL_HOST
+
+mkdir -p /run/mysqld
+chown -R mysql:mysql /run/mysqld /var/lib/mysql
+
+DB_ROOT_PASSWORD=$(cat /run/secrets/db_root_password)
+DB_PASSWORD=$(cat /run/secrets/db_password)
+
+if [ ! -f "/var/lib/mysql/.inception_initialized" ]; then
+    mariadb-install-db --user=mysql --datadir=/var/lib/mysql > /dev/null
+
+    mariadbd --user=mysql --skip-networking --socket=/run/mysqld/mysqld.sock &
+    pid="$!"
+
+    until mariadb-admin --socket=/run/mysqld/mysqld.sock --silent ping 2>/dev/null; do
+        sleep 1
+    done
+
+    mariadb --socket=/run/mysqld/mysqld.sock -u root <<-EOSQL
+        CREATE DATABASE IF NOT EXISTS \`${MYSQL_DATABASE}\`;
+        CREATE USER IF NOT EXISTS '${MYSQL_USER}'@'%' IDENTIFIED BY '${DB_PASSWORD}';
+        GRANT ALL PRIVILEGES ON \`${MYSQL_DATABASE}\`.* TO '${MYSQL_USER}'@'%';
+        ALTER USER 'root'@'localhost' IDENTIFIED BY '${DB_ROOT_PASSWORD}';
+        FLUSH PRIVILEGES;
+EOSQL
+
+    mariadb-admin --socket=/run/mysqld/mysqld.sock -u root -p"${DB_ROOT_PASSWORD}" shutdown
+    wait "$pid"
+
+    touch /var/lib/mysql/.inception_initialized
+fi
+
+exec mariadbd --user=mysql

bonus/srcs/requirements/nginx/Dockerfile

@@ -0,0 +1,18 @@
+FROM debian:bookworm-slim
+
+RUN apt-get update && apt-get install -y --no-install-recommends \
+    nginx \
+    openssl \
+    && rm -rf /var/lib/apt/lists/*
+
+COPY conf/nginx.conf /etc/nginx/sites-available/wordpress.conf
+COPY tools/entrypoint.sh /usr/local/bin/entrypoint.sh
+
+RUN rm -f /etc/nginx/sites-enabled/default \
+    && ln -s /etc/nginx/sites-available/wordpress.conf /etc/nginx/sites-enabled/wordpress.conf \
+    && mkdir -p /etc/nginx/ssl \
+    && chmod +x /usr/local/bin/entrypoint.sh
+
+EXPOSE 443
+
+ENTRYPOINT ["entrypoint.sh"]

bonus/srcs/requirements/nginx/conf/nginx.conf

@@ -0,0 +1,24 @@
+server {
+    listen 443 ssl;
+    listen [::]:443 ssl;
+
+    server_name oriabenk.42.fr;
+
+    ssl_certificate     /etc/nginx/ssl/inception.crt;
+    ssl_certificate_key /etc/nginx/ssl/inception.key;
+    ssl_protocols       TLSv1.2 TLSv1.3;
+
+    root /var/www/html;
+    index index.php index.html;
+
+    location / {
+        try_files $uri $uri/ /index.php?$args;
+    }
+
+    location ~ \.php$ {
+        fastcgi_pass wordpress:9000;
+        fastcgi_index index.php;
+        fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
+        include fastcgi_params;
+    }
+}

bonus/srcs/requirements/nginx/tools/entrypoint.sh

@@ -0,0 +1,12 @@
+#!/bin/bash
+set -e
+
+if [ ! -f /etc/nginx/ssl/inception.crt ]; then
+    openssl req -x509 -nodes -days 365 \
+        -newkey rsa:2048 \
+        -keyout /etc/nginx/ssl/inception.key \
+        -out /etc/nginx/ssl/inception.crt \
+        -subj "/C=UA/ST=Kyiv/L=Kyiv/O=42/OU=42/CN=${DOMAIN_NAME}"
+fi
+
+exec nginx -g "daemon off;"

bonus/srcs/requirements/wordpress/Dockerfile

@@ -0,0 +1,32 @@
+FROM debian:bookworm-slim
+
+RUN apt-get update && apt-get install -y --no-install-recommends \
+    ca-certificates \
+    php-fpm \
+    php-mysql \
+    php-curl \
+    php-gd \
+    php-xml \
+    php-mbstring \
+    php-zip \
+    php-intl \
+    curl \
+    default-mysql-client \
+    && rm -rf /var/lib/apt/lists/*
+
+RUN curl -sS -o /usr/local/bin/wp \
+    https://raw.githubusercontent.com/wp-cli/builds/gh-pages/phar/wp-cli.phar \
+    && chmod +x /usr/local/bin/wp
+
+COPY conf/www.conf /etc/php/8.2/fpm/pool.d/www.conf
+COPY tools/entrypoint.sh /usr/local/bin/entrypoint.sh
+
+RUN mkdir -p /var/www/html \
+    && chown -R www-data:www-data /var/www/html \
+    && chmod +x /usr/local/bin/entrypoint.sh
+
+WORKDIR /var/www/html
+
+EXPOSE 9000
+
+ENTRYPOINT ["entrypoint.sh"]

bonus/srcs/requirements/wordpress/conf/www.conf

@@ -0,0 +1,15 @@
+[www]
+user = www-data
+group = www-data
+
+listen = 9000
+listen.owner = www-data
+listen.group = www-data
+
+pm = dynamic
+pm.max_children = 5
+pm.start_servers = 2
+pm.min_spare_servers = 1
+pm.max_spare_servers = 3
+
+clear_env = no

bonus/srcs/requirements/wordpress/tools/entrypoint.sh

@@ -0,0 +1,45 @@
+#!/bin/bash
+set -e
+
+DB_PASSWORD=$(cat /run/secrets/db_password)
+WP_ADMIN_PASSWORD=$(cat /run/secrets/wp_admin_password)
+WP_USER_PASSWORD=$(cat /run/secrets/wp_user_password)
+
+cd /var/www/html
+
+until (echo > "/dev/tcp/${MYSQL_HOST}/3306") 2>/dev/null; do
+    sleep 1
+done
+
+if [ ! -f wp-config.php ]; then
+    wp core download --allow-root
+
+    wp config create \
+        --dbname="${MYSQL_DATABASE}" \
+        --dbuser="${MYSQL_USER}" \
+        --dbpass="${DB_PASSWORD}" \
+        --dbhost="${MYSQL_HOST}" \
+        --allow-root
+
+    until mysqladmin ping -h"${MYSQL_HOST}" -u"${MYSQL_USER}" -p"${DB_PASSWORD}" --silent 2>/dev/null; do
+        sleep 1
+    done
+
+    wp core install \
+        --url="https://${DOMAIN_NAME}" \
+        --title="${WP_TITLE}" \
+        --admin_user="${WP_ADMIN_USER}" \
+        --admin_password="${WP_ADMIN_PASSWORD}" \
+        --admin_email="${WP_ADMIN_EMAIL}" \
+        --skip-email \
+        --allow-root
+
+    wp user create "${WP_USER}" "${WP_USER_EMAIL}" \
+        --role=author \
+        --user_pass="${WP_USER_PASSWORD}" \
+        --allow-root
+fi
+
+chown -R www-data:www-data /var/www/html
+
+exec php-fpm8.2 -F