summaryrefslogtreecommitdiff
path: root/puppet/modules/stunnel/manifests/init.pp
blob: c5ad70b12dd48ed75ef8f6b5f062d74b3ba5eb10 (plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
#
# stunnel puppet module
#
# Copyright 2009, Riseup Networks <micah@riseup.net>
#
#
# This program is free software; you can redistribute
# it and/or modify it under the terms of the GNU
# General Public License version 3 as published by
# the Free Software Foundation.
#
# 1. include stunnel: this will automatically include stunnel::debian,
#    which automatically includes stunnel::linux, which automatically
#    includes stunnel::base
# 2. stunnel::client allows you to configure different /etc/stunnel/*.conf files
#    to provide various stunnel configurations

# TODO: warn on cert/key issues, fail on false accept?

class stunnel (
  $ensure_version = 'present',
  $startboot      = '1',
  $default_extra  = '',
  $cluster        = '' )
{

  case $::operatingsystem {
    debian: { class { 'stunnel::debian': } }
    centos: { class {  'stunnel::centos': } }
    default: { class { 'stunnel::default': } }
  }

  $stunnel_staging = "${::puppet_vardir}/stunnel4"
  $stunnel_compdir = "${stunnel_staging}/configs"

  file {
    [ $stunnel_staging, "${stunnel_staging}/bin" ]:
      ensure => directory,
      owner  => 0,
      group  => 0,
      mode   => '0750';

    "${stunnel_staging}/configs":
      ensure  => directory,
      owner   => 0,
      group   => 0,
      mode    => '0750',
      recurse => true,
      purge   => true,
      force   => true,
      source  => undef;

    "${stunnel_staging}/bin/refresh_stunnel.sh":
      owner   => 0,
      group   => 0,
      mode    => '0755',
      content => template('stunnel/refresh_stunnel.sh.erb');
  }

  exec { 'refresh_stunnel':
    refreshonly => true,
    require     => [ Service['stunnel'], Package['stunnel'], File[$stunnel_compdir] ],
    subscribe   => File[$stunnel_compdir],
    command     => "${stunnel_staging}/bin/refresh_stunnel.sh"
  }
}