onjen/hetzner-ha-wordpress
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity
hetzner-ha-wordpress/README.md

3.1 KiB
Raw Blame History

Hetzner HA WordPress

This repository contains scripts and configuration files to set up a highly available (HA) WordPress instance on Hetzner Cloud infrastructure. The aim of this project is to provide a robust and scalable solution for hosting a WordPress website with high availability.

Table of Contents

Features

  • High availability setup for WordPress using Hetzner Cloud
  • Automated deployment of cloud infrastructure via terraform
  • Automated provisioning of the servers with ansible
  • Test environment with vagrant

Requirements

Before you begin, ensure you have the following:

  • A Hetzner Cloud account and API token
  • A recent installation of ansible
  • A recent installation of terraform

If you would like to test the ansible provisioning locally, ensure you have the following:

Deployment

To deploy the cloud infrastructure with terraform, switch into the terraform folder

cd terraform

Export the hcloud token as environment variable

export HCLOUD_TOKEN="<your-hcloud-token>"

Initialize terraform

terraform init

And apply the changes using the production variables

terraform apply -var-file="prod.tfvars"

Testing

To test the provisioning with ansible, vagrant is used. The secrets are stored in an ansible vault. Vagrant expects them in a password file vault_pass in the root of the repo. This file is not included for obvious reasons. Please ask the project maintainer if you need the vault password.

Launch the virtualboxes inside the repository root folder

vagrant up

For subsequent tests of the playbook run

vagrant provision

To connect to a specific machine run

vagrant ssh web1

Open Tasks

  • Replication of the file system between machines: GlusterFS
  • Replication of the database between machine: Using mysql replication
  • Provision hcloud server with the cloud init ansible module
  • Setup Hetzner Managed certificate for the loadbalancer and set type to https
  • Assign the correct static external IP to the loadbalancer
  • Add required SSH keys
  • Document terraform modules with terraform-docs

Shortcomings which should be addressed in future versions

  • Use an external secret provider
  • Store the terraform state remote

License

Hetzner HA WordPress is licensed under the MIT License.