From 1c7664e5efaed6da2a7dff9dd2c2930f147499e9 Mon Sep 17 00:00:00 2001 From: varac Date: Thu, 7 Mar 2013 15:42:17 +0100 Subject: added site_mx --- puppet/modules/site_mx/manifests/init.pp | 3 +++ 1 file changed, 3 insertions(+) create mode 100644 puppet/modules/site_mx/manifests/init.pp (limited to 'puppet/modules/site_mx') diff --git a/puppet/modules/site_mx/manifests/init.pp b/puppet/modules/site_mx/manifests/init.pp new file mode 100644 index 00000000..f7f358ce --- /dev/null +++ b/puppet/modules/site_mx/manifests/init.pp @@ -0,0 +1,3 @@ +class site_mx { + include site_postfix::mx +} -- cgit v1.2.3 From 07f1d18e20fb356a80e726e1555dbcc15db1cf45 Mon Sep 17 00:00:00 2001 From: varac Date: Thu, 7 Mar 2013 18:15:45 +0100 Subject: include shorewall rules for site_mx --- puppet/modules/site_mx/manifests/init.pp | 4 ++++ 1 file changed, 4 insertions(+) (limited to 'puppet/modules/site_mx') diff --git a/puppet/modules/site_mx/manifests/init.pp b/puppet/modules/site_mx/manifests/init.pp index f7f358ce..4b2db215 100644 --- a/puppet/modules/site_mx/manifests/init.pp +++ b/puppet/modules/site_mx/manifests/init.pp @@ -1,3 +1,7 @@ class site_mx { + tag 'leap_service' + include site_postfix::mx + include site_shorewall::mx + include site_shorewall::service::smtp } -- cgit v1.2.3 From 930885ac2be95698584e094fa23713a946d81dac Mon Sep 17 00:00:00 2001 From: varac Date: Wed, 17 Apr 2013 18:35:37 +0200 Subject: added site_mx::haproxy --- puppet/modules/site_mx/manifests/haproxy.pp | 14 ++++++++++++++ puppet/modules/site_mx/manifests/init.pp | 1 + 2 files changed, 15 insertions(+) create mode 100644 puppet/modules/site_mx/manifests/haproxy.pp (limited to 'puppet/modules/site_mx') diff --git a/puppet/modules/site_mx/manifests/haproxy.pp b/puppet/modules/site_mx/manifests/haproxy.pp new file mode 100644 index 00000000..988eeaf3 --- /dev/null +++ b/puppet/modules/site_mx/manifests/haproxy.pp @@ -0,0 +1,14 @@ +class site_mx::haproxy { + + include site_haproxy + + $haproxy = hiera('haproxy') + $local_ports = $haproxy['local_ports'] + + # Template uses $global_options, $defaults_options + concat::fragment { 'leap_haproxy_webapp_couchdb': + target => '/etc/haproxy/haproxy.cfg', + order => '20', + content => template('site_webapp/haproxy_couchdb.cfg.erb'), + } +} diff --git a/puppet/modules/site_mx/manifests/init.pp b/puppet/modules/site_mx/manifests/init.pp index 4b2db215..8c8b8d7e 100644 --- a/puppet/modules/site_mx/manifests/init.pp +++ b/puppet/modules/site_mx/manifests/init.pp @@ -2,6 +2,7 @@ class site_mx { tag 'leap_service' include site_postfix::mx + include site_mx::haproxy include site_shorewall::mx include site_shorewall::service::smtp } -- cgit v1.2.3 From 720717e177af576936a7e3e950aec1d208a21fae Mon Sep 17 00:00:00 2001 From: Micah Anderson Date: Wed, 17 Apr 2013 16:01:19 -0400 Subject: initial mx couchdb stunnel configuration --- puppet/modules/site_mx/manifests/couchdb.pp | 35 +++++++++++++++++++++++++++++ puppet/modules/site_mx/manifests/init.pp | 1 + 2 files changed, 36 insertions(+) create mode 100644 puppet/modules/site_mx/manifests/couchdb.pp (limited to 'puppet/modules/site_mx') diff --git a/puppet/modules/site_mx/manifests/couchdb.pp b/puppet/modules/site_mx/manifests/couchdb.pp new file mode 100644 index 00000000..f842ceab --- /dev/null +++ b/puppet/modules/site_mx/manifests/couchdb.pp @@ -0,0 +1,35 @@ +class site_mx::couchdb { + + $stunnel = hiera('stunnel') + $couch_client = $stunnel['couch_client'] + $couch_client_connect = $couch_client['connect'] + + include x509::variables + $x509 = hiera('x509') + $key = $x509['key'] + $cert = $x509['cert'] + $ca = $x509['ca_cert'] + $cert_name = 'leap_couchdb' + $ca_name = 'leap_ca' + $ca_path = "${x509::variables::local_CAs}/${ca_name}.crt" + $cert_path = "${x509::variables::certs}/${cert_name}.crt" + $key_path = "${x509::variables::keys}/${cert_name}.key" + + class { 'site_stunnel::setup': + cert_name => $cert_name, + key => $key, + cert => $cert, + ca_name => $ca_name, + ca => $ca + } + + $couchdb_stunnel_client_defaults = { + 'connect_port' => $couch_client_connect, + 'client' => true, + 'cafile' => $ca_path, + 'key' => $key_path, + 'cert' => $cert_path, + } + + create_resources(site_stunnel::clients, $couch_client, $couchdb_stunnel_client_defaults) +} diff --git a/puppet/modules/site_mx/manifests/init.pp b/puppet/modules/site_mx/manifests/init.pp index 8c8b8d7e..86ae56e1 100644 --- a/puppet/modules/site_mx/manifests/init.pp +++ b/puppet/modules/site_mx/manifests/init.pp @@ -5,4 +5,5 @@ class site_mx { include site_mx::haproxy include site_shorewall::mx include site_shorewall::service::smtp + include site_mx::couchdb } -- cgit v1.2.3 From d8a066a4307bea4c6dd6741daa250b67c92c1606 Mon Sep 17 00:00:00 2001 From: Micah Anderson Date: Thu, 25 Jul 2013 14:40:53 -0400 Subject: initial leap_mx configuration Change-Id: Iddca4cf52706bf2f612d20ba19a53fbbe6b28479 --- puppet/modules/site_mx/manifests/init.pp | 1 + 1 file changed, 1 insertion(+) (limited to 'puppet/modules/site_mx') diff --git a/puppet/modules/site_mx/manifests/init.pp b/puppet/modules/site_mx/manifests/init.pp index 86ae56e1..4cf3f41a 100644 --- a/puppet/modules/site_mx/manifests/init.pp +++ b/puppet/modules/site_mx/manifests/init.pp @@ -6,4 +6,5 @@ class site_mx { include site_shorewall::mx include site_shorewall::service::smtp include site_mx::couchdb + include leap_mx } -- cgit v1.2.3