The document discusses the integration of plugins and code management for web services, including security measures against SQL injections and bot traffic. It mentions a service definition for a WordPress environment with health checks and environment variables. Additionally, it highlights limitations in testing and knowledge of state within automation processes using tools like Ansible and Terraform.

27. PLUGINS / TEMA, DI
FACILE INTEGRAZIONE
MA IL CODICE… -.-

28. is your best friend...

31. PLUGINS, DI FACILE
INTEGRAZIONE MA IL
CODICE SCALA… -.-

34. set $block_sql_injections 0;
if ($query_string ~ "union.*select.*(") {
set $block_sql_injections 1;
}
if ($query_string ~ "union.*all.*select.*") {
set $block_sql_injections 1;
}
if ($query_string ~ "concat.*(") {
set $block_sql_injections 1;
}
if ($block_sql_injections = 1) {
return 403;
}

35. map $http_user_agent $is_non_search_bot {
default '';
~*(google|bing|bingbot|Zend_Http_Client) '';
~*(http|crawler|spider|bot|search|ForusP|Wget/|Python-urllib
|PHPCrawl|bGenius|facebookexternalhit|twitterbot|baiduspider
|yandex|yeti|yodaobot|gigabot|ia_archiver) 'bot';
}
location ~ .php$ {
limit_req zone=bots burst=5 nodelay;
……..
…..
}

53. services:
web:
build: {}
health:
interval: 5
path: /ck_status.php
timeout: 3
image: **********.dkr.ecr.eu-west-1.amazonaws.com/monrif:latest
environment:
- WORDPRESS_DB_PASSWORD
- WORDPRESS_DB_HOST
- WORDPRESS_DB_HOST_READER
- WORDPRESS_DB_USER
- WORDPRESS_DB_NAME
- WORDPRESS_AUTH_KEY
- WORDPRESS_SECURE_AUTH_KEY….. ##WordPress Auth vars
port:
port: 80
scheme: http
scale:
count:
min: 2
max: 2
memory: 1000

74. poco testabile
mancanza di conoscenza dello stato
NO “vero” DRY-RUN
ANSIBLE come task runner +
TERRAFORM plan & TERRAFORM apply

77. ◆
◆
◆
◆

78. ◆
◆
◆
◆
◆