puppet/modules/site_ca_daemon/manifests/apache.pp


1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62

class site_ca_daemon::apache {

  $api_domain       = hiera('api_domain')
  $x509             = hiera('x509')
  $commercial_key   = $x509['commercial_key']
  $commercial_cert  = $x509['commercial_cert']
  $commercial_root  = $x509['commercial_ca_cert']
  $api_key          = $x509['key']
  $api_cert         = $x509['cert']
  $api_root         = $x509['ca_cert']

  $apache_no_default_site = true
  include apache::ssl

  apache::module {
    'alias':   ensure => present;
    'rewrite': ensure => present;
    'headers': ensure => present;
  }

  class { 'passenger': use_munin => false }

  apache::vhost::file {
    'leap_ca_daemon':
      content => template('site_apache/vhosts.d/leap_ca_daemon.conf.erb')
  }

  apache::vhost::file {
    'api':
      content => template('site_apache/vhosts.d/api.conf.erb')
  }

  x509::key {
    'leap_ca_daemon':
      content => $commercial_key,
      notify  => Service[apache];

    'leap_api':
      content => $api_key,
      notify  => Service[apache];
  }

  x509::cert {
    'leap_ca_daemon':
      content => $commercial_cert,
      notify  => Service[apache];

    'leap_api':
      content => $api_cert,
      notify  => Service[apache];
  }

  x509::ca {
    'leap_ca_daemon':
      content => $commercial_root,
      notify  => Service[apache];

    'leap_api':
      content => $api_root,
      notify  => Service[apache];
  }
}