diff options
| author | guido <guido@bruo.org> | 2014-10-28 21:03:52 -0300 |
|---|---|---|
| committer | guido <guido@bruo.org> | 2014-11-04 22:24:44 -0300 |
| commit | 16c985a1b8e692c0e0f76a30b7ec052c9dc269bd (patch) | |
| tree | 8c6aec84e289f6c4d2a472db95de07808667e88e /puppet/modules/site_webapp/manifests/hidden_service.pp | |
| parent | 3c06efc2529188c175209d09f8db1932dc4295b8 (diff) | |
Adds support for Tor hidden service on webapp (Feature #6273)
Change-Id: I56250e05e3a933deacd0b6e02192e712d3fd9fd5
Diffstat (limited to 'puppet/modules/site_webapp/manifests/hidden_service.pp')
| -rw-r--r-- | puppet/modules/site_webapp/manifests/hidden_service.pp | 43 |
1 files changed, 43 insertions, 0 deletions
diff --git a/puppet/modules/site_webapp/manifests/hidden_service.pp b/puppet/modules/site_webapp/manifests/hidden_service.pp new file mode 100644 index 00000000..ac0e8a37 --- /dev/null +++ b/puppet/modules/site_webapp/manifests/hidden_service.pp @@ -0,0 +1,43 @@ +class site_webapp::hidden_service { + $tor = hiera('tor') + $hidden_service = $tor['hidden_service'] + $tor_domain = "${hidden_service['address']}.onion" + + include site_apache::common + include site_apache::module::headers + include site_apache::module::alias + include site_apache::module::expires + include site_apache::module::removeip + + include tor::daemon + tor::daemon::hidden_service { 'webapp': ports => '80 127.0.0.1:80' } + + file { + '/var/lib/tor/webapp/': + ensure => directory, + owner => 'debian-tor', + group => 'debian-tor', + mode => '2700'; + + '/var/lib/tor/webapp/private_key': + ensure => present, + source => '/srv/leap/files/nodes/web/tor.key', + owner => 'debian-tor', + group => 'debian-tor', + mode => '0600'; + + '/var/lib/tor/webapp/hostname': + ensure => present, + content => $tor_domain, + owner => 'debian-tor', + group => 'debian-tor', + mode => '0600'; + } + + apache::vhost::file { + 'hidden_service': + content => template('site_apache/vhosts.d/hidden_service.conf.erb') + } + + include site_shorewall::tor +}
\ No newline at end of file |