summaryrefslogtreecommitdiff
path: root/puppet/manifests/site.pp
blob: 4b0ad4599ecc2fe35e55bd2d89d8972d82de24f2 (plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
node default {
  # set a default exec path
  # the logoutput exec parameter defaults to "on_error" in puppet 3,
  # but to "false" in puppet 2.7, so we need to set this globally here
  Exec {
    logoutput => on_failure,
    path      => '/usr/bin:/usr/sbin/:/bin:/sbin:/usr/local/bin:/usr/local/sbin'
  }

  Package <| provider == 'apt' |>  {
    install_options => ['--no-install-recommends'],
  }

  $services = hiera('services', [])
  $services_str = join($services, ', ')
  notice("Services for ${fqdn}: ${services_str}")

  # In the default deployment case, we want to run an 'apt-get dist-upgrade'
  # to ensure the latest packages are installed. This is done by including the
  # class 'site_config::slow' here. However, you only changed a small bit of
  # the platform and want to skip this slow part of deployment, you can do that
  # by using 'leap deploy --fast' which will only apply those resources that are
  # tagged with 'leap_base' or 'leap_service'.
  # See https://leap.se/en/docs/platform/details/under-the-hood#tags
  include site_config::slow

  if member($services, 'openvpn') {
    include site_openvpn
  }

  if member($services, 'couchdb') {
    include site_couchdb
  }

  if member($services, 'webapp') {
    include site_webapp
  }

  if member($services, 'soledad') {
    include soledad::server
  }

  if member($services, 'monitor') {
    include site_nagios
  }

  if member($services, 'tor') {
    include site_tor
  }

  if member($services, 'mx') {
    include site_mx
  }

  if member($services, 'static') {
    include site_static
  }

  if member($services, 'obfsproxy') {
    include site_obfsproxy
  }
}