summaryrefslogtreecommitdiff
path: root/puppet/modules/stunnel/README
diff options
context:
space:
mode:
authorvarac <varacanero@zeromail.org>2016-06-09 17:34:32 +0200
committervarac <varacanero@zeromail.org>2016-06-14 12:05:18 +0200
commitd2c8498b41bebc6a06216515b3cf75564b8fb61a (patch)
tree35a82a51e37c75db2c819d0bda8df832619b143c /puppet/modules/stunnel/README
parent77450777e17522cc56874e35cceed997378ff3f1 (diff)
git subrepo clone https://leap.se/git/puppet_stunnel puppet/modules/stunnel
subrepo: subdir: "puppet/modules/stunnel" merged: "008777b" upstream: origin: "https://leap.se/git/puppet_stunnel" branch: "master" commit: "008777b" git-subrepo: version: "0.3.0" origin: "https://github.com/ingydotnet/git-subrepo.git" commit: "cb2995b"
Diffstat (limited to 'puppet/modules/stunnel/README')
-rw-r--r--puppet/modules/stunnel/README77
1 files changed, 77 insertions, 0 deletions
diff --git a/puppet/modules/stunnel/README b/puppet/modules/stunnel/README
new file mode 100644
index 00000000..b6a3124c
--- /dev/null
+++ b/puppet/modules/stunnel/README
@@ -0,0 +1,77 @@
+Overview
+========
+
+This module manages stunnel4. It installs and configures the software, makes
+sure it is running, and enables you to create different stunnels.
+
+
+! Upgrade Notice !
+==================
+
+Previous versions of this module were not using parameterized classes. If you
+were using a previous version, you may need to change how you are using the
+module to accomodate for that. If you were previously setting some stunnel
+variables before including the class, you will now need to pass those variables
+to the class as parameters. If you were just simply doing 'include stunnel',
+then you will not need to change anything.
+
+Classes
+=======
+
+stunnel
+-------
+
+This is the main class which brings you stunnel support. You will need to
+instantiate it by doing the following:
+
+class { 'stunnel': }
+
+Class parameters:
+
+* ensure_version - If this parameter is passed, you can force a particular
+ version of stunnel to be installed, if it is available with your packaging
+ system, for example:
+
+ class { 'stunnel': ensure_version = '3:4.53-1' }
+
+ If you do not pass this parameter, it will default to just be 'present'.
+
+* startboot (Debian) - This parameter controls if stunnel should be started at
+ boot or not, if you do not pass this paramter, by default it will be started
+
+* default_extra (Debian) - This parameter lets you add arbitrary extra text to
+ the bottom of /etc/default/stunnel4, this can be useful to set ulimit for
+ example
+
+
+Defines
+=======
+
+stunnel::service
+----------------
+
+This define lets you setup any number of stunnels, it allows you to pass every
+stunnel configuration variable (see manifests/server.pp) which will be used to
+create the /etc/stunnel/${name}.conf file, and then notify the stunnel service
+so it will restart.
+
+If you pass $manage_nagios to this define, it will create a nagios::service
+entry for stunnel_${name} which will watch for the appropriate number processes
+with that configuration name
+
+Note that if you need to use some specific logic to decide whether or not to
+create a nagios service check, you should set $manage_nagios to false, and
+use stunnel::service::nagios from within your own manifests.
+
+stunnel::service::nagios
+------------------------
+
+This define creates a nagios service check for a specific tunnel. The resource
+name should be the name of the tunnel's configuration file without the '.conf'
+suffix. For example:
+
+ stunnel::service::nagios { 'carpal': }
+
+The above example would verify that the tunnel defined in
+`/etc/stunnel/carpal.conf'.
+