From 75611f5920aa275ca6ae3b0c3c51a3915fcf224d Mon Sep 17 00:00:00 2001 From: Justin Lambert Date: Fri, 28 Dec 2012 14:29:16 -0700 Subject: puppet-lint cleanup --- manifests/server.pp | 48 ++++++++++++++++++++++++------------------------ 1 file changed, 24 insertions(+), 24 deletions(-) (limited to 'manifests/server.pp') diff --git a/manifests/server.pp b/manifests/server.pp index ec2fde9..8a516eb 100644 --- a/manifests/server.pp +++ b/manifests/server.pp @@ -3,12 +3,12 @@ define openvpn::server($country, $province, $city, $organization, $email) { include openvpn - $easyrsa_source = $operatingsystem ? { + $easyrsa_source = $::operatingsystem ? { 'centos' => '/usr/share/doc/openvpn-2.2.0/easy-rsa/2.0', default => '/usr/share/doc/openvpn/examples/easy-rsa/2.0' } - $link_openssl_cnf = $lsbdistcodename ? { + $link_openssl_cnf = $::lsbdistcodename ? { 'precise' => true, default => false } @@ -16,7 +16,7 @@ define openvpn::server($country, $province, $city, $organization, $email) { file { "/etc/openvpn/${name}": ensure => directory, - require => Package["openvpn"]; + require => Package['openvpn']; } file { "/etc/openvpn/${name}/client-configs": @@ -43,18 +43,18 @@ define openvpn::server($country, $province, $city, $organization, $email) { "copy easy-rsa to openvpn config folder ${name}": command => "/bin/cp -r ${easyrsa_source} /etc/openvpn/${name}/easy-rsa", creates => "/etc/openvpn/${name}/easy-rsa", - notify => Exec["fix_easyrsa_file_permissions"], + notify => Exec['fix_easyrsa_file_permissions'], require => File["/etc/openvpn/${name}"]; } exec { - "fix_easyrsa_file_permissions": - refreshonly => "true", + 'fix_easyrsa_file_permissions': + refreshonly => true, command => "/bin/chmod 755 /etc/openvpn/${name}/easy-rsa/*"; } file { "/etc/openvpn/${name}/easy-rsa/vars": ensure => present, - content => template("openvpn/vars.erb"), + content => template('openvpn/vars.erb'), require => Exec["copy easy-rsa to openvpn config folder ${name}"]; } @@ -71,24 +71,24 @@ define openvpn::server($country, $province, $city, $organization, $email) { exec { "generate dh param ${name}": - command => ". ./vars && ./clean-all && ./build-dh", + command => '. ./vars && ./clean-all && ./build-dh', cwd => "/etc/openvpn/${name}/easy-rsa", creates => "/etc/openvpn/${name}/easy-rsa/keys/dh1024.pem", - provider => "shell", + provider => 'shell', require => File["/etc/openvpn/${name}/easy-rsa/vars"]; "initca ${name}": - command => ". ./vars && ./pkitool --initca", + command => '. ./vars && ./pkitool --initca', cwd => "/etc/openvpn/${name}/easy-rsa", creates => "/etc/openvpn/${name}/easy-rsa/keys/ca.key", - provider => "shell", + provider => 'shell', require => [ Exec["generate dh param ${name}"], File["/etc/openvpn/${name}/easy-rsa/openssl.cnf"] ]; "generate server cert ${name}": - command => ". ./vars && ./pkitool --server server", + command => '. ./vars && ./pkitool --server server', cwd => "/etc/openvpn/${name}/easy-rsa", creates => "/etc/openvpn/${name}/easy-rsa/keys/server.key", - provider => "shell", + provider => 'shell', require => Exec["initca ${name}"]; } @@ -101,31 +101,31 @@ define openvpn::server($country, $province, $city, $organization, $email) { openvpn::option { "ca ${name}": - key => "ca", + key => 'ca', value => "/etc/openvpn/${name}/keys/ca.crt", require => Exec["initca ${name}"], - server => "${name}"; + server => $name; "cert ${name}": - key => "cert", + key => 'cert', value => "/etc/openvpn/${name}/keys/server.crt", require => Exec["generate server cert ${name}"], - server => "${name}"; + server => $name; "key ${name}": - key => "key", + key => 'key', value => "/etc/openvpn/${name}/keys/server.key", require => Exec["generate server cert ${name}"], - server => "${name}"; + server => $name; "dh ${name}": - key => "dh", + key => 'dh', value => "/etc/openvpn/${name}/keys/dh1024.pem", require => Exec["generate dh param ${name}"], - server => "${name}"; + server => $name; } concat::fragment { "openvpn.default.autostart.${name}": content => "AUTOSTART=\"\$AUTOSTART ${name}\"\n", - target => "/etc/default/openvpn", + target => '/etc/default/openvpn', order => 10; } @@ -135,8 +135,8 @@ define openvpn::server($country, $province, $city, $organization, $email) { group => root, mode => 644, warn => true, - require => File["/etc/openvpn"], - notify => Service["openvpn"]; + require => File['/etc/openvpn'], + notify => Service['openvpn']; } } -- cgit v1.2.3 From be29a25a726d339f69a99ccf4ff2592b681cd622 Mon Sep 17 00:00:00 2001 From: Justin Lambert Date: Fri, 28 Dec 2012 19:01:34 -0700 Subject: version bump to 2.2.2, minor redhat change, specify params that are in client.pp --- manifests/server.pp | 21 ++++++++++++++++----- 1 file changed, 16 insertions(+), 5 deletions(-) (limited to 'manifests/server.pp') diff --git a/manifests/server.pp b/manifests/server.pp index 8a516eb..79ca4da 100644 --- a/manifests/server.pp +++ b/manifests/server.pp @@ -3,14 +3,14 @@ define openvpn::server($country, $province, $city, $organization, $email) { include openvpn - $easyrsa_source = $::operatingsystem ? { - 'centos' => '/usr/share/doc/openvpn-2.2.0/easy-rsa/2.0', + $easyrsa_source = $operatingsystem ? { + 'centos' => '/usr/share/doc/openvpn-2.2.2/easy-rsa/2.0', default => '/usr/share/doc/openvpn/examples/easy-rsa/2.0' } - $link_openssl_cnf = $::lsbdistcodename ? { - 'precise' => true, - default => false + $link_openssl_cnf = $::osfamily ? { + /(Ubuntu|RedHat)/ => true, + default => false } file { @@ -120,6 +120,17 @@ define openvpn::server($country, $province, $city, $organization, $email) { value => "/etc/openvpn/${name}/keys/dh1024.pem", require => Exec["generate dh param ${name}"], server => $name; + + "proto ${name}": + key => 'proto', + value => 'tcp', + require => Exec["generate dh param ${name}"], + server => $name; + + "comp-lzo ${name}": + key => 'comp-lzo', + require => Exec["generate dh param ${name}"], + server => $name; } concat::fragment { -- cgit v1.2.3 From b0552bab409590c565dc01b2a6889ad16213dc82 Mon Sep 17 00:00:00 2001 From: Justin Lambert Date: Sat, 29 Dec 2012 07:05:45 -0700 Subject: Fixed Ubuntu's lsbdistcodename --- manifests/server.pp | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) (limited to 'manifests/server.pp') diff --git a/manifests/server.pp b/manifests/server.pp index 79ca4da..dbc8bb6 100644 --- a/manifests/server.pp +++ b/manifests/server.pp @@ -9,7 +9,7 @@ define openvpn::server($country, $province, $city, $organization, $email) { } $link_openssl_cnf = $::osfamily ? { - /(Ubuntu|RedHat)/ => true, + /(Debian|RedHat)/ => true, default => false } -- cgit v1.2.3 From 5754d3c5a10afbc7e3242299088bb3e1978cf7c7 Mon Sep 17 00:00:00 2001 From: Justin Lambert Date: Sat, 29 Dec 2012 07:20:49 -0700 Subject: updated spacing for multi-line arrays. updated selector for consistency --- manifests/server.pp | 12 ++++++------ 1 file changed, 6 insertions(+), 6 deletions(-) (limited to 'manifests/server.pp') diff --git a/manifests/server.pp b/manifests/server.pp index dbc8bb6..bfcaad8 100644 --- a/manifests/server.pp +++ b/manifests/server.pp @@ -3,9 +3,9 @@ define openvpn::server($country, $province, $city, $organization, $email) { include openvpn - $easyrsa_source = $operatingsystem ? { - 'centos' => '/usr/share/doc/openvpn-2.2.2/easy-rsa/2.0', - default => '/usr/share/doc/openvpn/examples/easy-rsa/2.0' + $easyrsa_source = $::osfamily ? { + 'RedHat' => '/usr/share/doc/openvpn-2.2.2/easy-rsa/2.0', + default => '/usr/share/doc/openvpn/examples/easy-rsa/2.0' } $link_openssl_cnf = $::osfamily ? { @@ -34,9 +34,9 @@ define openvpn::server($country, $province, $city, $organization, $email) { server => $name, require => File["/etc/openvpn/${name}"]; "mode ${name}": - key => 'mode', - value => 'server', - server => $name; + key => 'mode', + value => 'server', + server => $name; } exec { -- cgit v1.2.3