summaryrefslogtreecommitdiff
path: root/puppet/modules/site_stunnel/manifests
diff options
context:
space:
mode:
authorvarac <varacanero@zeromail.org>2013-03-19 13:54:40 +0100
committerMicah Anderson <micah@riseup.net>2013-04-02 10:21:05 -0400
commitcc082541980df1062cb5b2d10f4980cf8b6664c9 (patch)
tree72d67d3844677e7eb8f2893d9337319809f16695 /puppet/modules/site_stunnel/manifests
parente0354eda8f1dba999c452caf99c40dcb6f7af33e (diff)
moved generic stunnel config from site_webapp to site_stunnel
Diffstat (limited to 'puppet/modules/site_stunnel/manifests')
-rw-r--r--puppet/modules/site_stunnel/manifests/clients.pp32
-rw-r--r--puppet/modules/site_stunnel/manifests/setup.pp30
2 files changed, 62 insertions, 0 deletions
diff --git a/puppet/modules/site_stunnel/manifests/clients.pp b/puppet/modules/site_stunnel/manifests/clients.pp
new file mode 100644
index 00000000..28ed6d3c
--- /dev/null
+++ b/puppet/modules/site_stunnel/manifests/clients.pp
@@ -0,0 +1,32 @@
+define site_stunnel::clients (
+ $accept_port,
+ $connect,
+ $client = true,
+ $cafile,
+ $key,
+ $cert,
+ $verify = '2',
+ $pid = $name,
+ $rndfile = '/var/lib/stunnel4/.rnd',
+ $debuglevel = '4' ) {
+
+ $couchdb_stunnel_client_defaults = {
+ 'cafile' => $ca_path,
+ 'key' => $key_path,
+ 'cert' => $cert_path,
+ }
+
+
+ stunnel::service { $name:
+ accept => "127.0.0.1:${accept_port}",
+ connect => "${connect}:6984",
+ client => $client,
+ cafile => $cafile,
+ key => $key,
+ cert => $cert,
+ verify => $verify,
+ pid => "/var/run/stunnel4/${pid}.pid",
+ rndfile => $rndfile,
+ debuglevel => $debuglevel
+ }
+ }
diff --git a/puppet/modules/site_stunnel/manifests/setup.pp b/puppet/modules/site_stunnel/manifests/setup.pp
new file mode 100644
index 00000000..a6384a6e
--- /dev/null
+++ b/puppet/modules/site_stunnel/manifests/setup.pp
@@ -0,0 +1,30 @@
+class site_stunnel::setup ($cert_name, $key, $cert, $ca) {
+
+ include x509::variables
+ include site_stunnel
+
+ $ca_name = 'leap_ca'
+ $ca_path = "${x509::variables::local_CAs}/${ca_name}.crt"
+ $cert_path = "${x509::variables::certs}/${cert_name}.crt"
+ $key_path = "${x509::variables::keys}/${cert_name}.key"
+
+ x509::key {
+ $cert_name:
+ content => $key,
+ notify => Service['stunnel'];
+ }
+
+ x509::cert {
+ $cert_name:
+ content => $cert,
+ notify => Service['stunnel'];
+ }
+
+ x509::ca {
+ $ca_name:
+ content => $ca,
+ notify => Service['stunnel'];
+ }
+
+}
+