summaryrefslogtreecommitdiff
path: root/puppet/modules/stunnel/templates/service.conf.erb
diff options
context:
space:
mode:
authorMicah <micah@leap.se>2016-07-12 16:46:21 -0400
committerMicah <micah@leap.se>2016-07-12 16:46:21 -0400
commit04279dd8d1390d61d696d2c14817199304ccd4d8 (patch)
treebd6b3cf6f612f822ca3aa6823287f87f7c784390 /puppet/modules/stunnel/templates/service.conf.erb
parent297fadc8e6ad4729589d4ec21683f05a1e50bdf9 (diff)
git subrepo clone https://leap.se/git/puppet_stunnel puppet/modules/stunnel
subrepo: subdir: "puppet/modules/stunnel" merged: "523612f" upstream: origin: "https://leap.se/git/puppet_stunnel" branch: "master" commit: "523612f" git-subrepo: version: "0.3.0" origin: "https://github.com/ingydotnet/git-subrepo" commit: "1e79595" Change-Id: If384c84c99d9cabc67d2b4b9d7d2fbfa4a47550a
Diffstat (limited to 'puppet/modules/stunnel/templates/service.conf.erb')
-rw-r--r--puppet/modules/stunnel/templates/service.conf.erb47
1 files changed, 47 insertions, 0 deletions
diff --git a/puppet/modules/stunnel/templates/service.conf.erb b/puppet/modules/stunnel/templates/service.conf.erb
new file mode 100644
index 00000000..47f1c9d2
--- /dev/null
+++ b/puppet/modules/stunnel/templates/service.conf.erb
@@ -0,0 +1,47 @@
+; templated stunnel configuration file to be used by puppet stunnel module
+; NOTE: any changes you make to this file will be overwritten the next time
+; puppet runs, please make configuration changes to this service in puppet
+
+; Global configuration options
+<%= 'debug = ' + @debuglevel %>
+<%= 'pid = ' + @real_pid %>
+<%- %w{chroot setuid setgid service compression}.each do |v|
+ if has_variable?(v) and instance_variable_get("@#{v}").to_s != "false" -%>
+<%= v + " = " + instance_variable_get("@#{v}").to_s %>
+<%-
+ end
+end -%>
+
+; Some performance tunings
+<% if @socket.is_a? String -%>
+<%= 'socket = ' + @socket %>
+<% elsif @socket.is_a? Array -%>
+<%= @socket.map { |i| "socket = #{i}" }. join("\n") %>
+<% end -%>
+
+<%- %w{output syslog}.each do |v|
+ if has_variable?(v) and instance_variable_get("@#{v}").to_s != "false" -%>
+<%= v + " = " + instance_variable_get("@#{v}").to_s %>
+<%-
+ end
+end -%>
+
+<%- %w{egd engine enginectrl rndbytes rndfile rndoverwrite}.each do |v|
+ if has_variable?(v) and instance_variable_get("@#{v}").to_s != "false" -%>
+<%= v + " = " + instance_variable_get("@#{v}").to_s %>
+<%-
+ end
+end -%>
+
+; Service-level configuration
+<%= '[' + @name + ']' %>
+<%- %w{accept connect capath cafile cert ciphers crlpath crlfile delay enginenum exec
+ execargs failover ident key local oscp ocspflag options protocol protocolauthentication
+ protocolhost protocolpassword protocolusername pty retry session sslversion stack
+ timeoutbusy timeoutclose timeoutconnect timeoutidle transparent verify}.each do |v|
+ if has_variable?(v) and instance_variable_get("@#{v}").to_s != "false" -%>
+<%= v + ' = ' + instance_variable_get("@#{v}").to_s %>
+<%-
+ end
+end -%>
+client = <%= @client ? 'yes' : 'no' %>