Install Nginx 1.4.1 from the official repository

modules/nginx/manifests/init.pp

 class nginx (
     $worker_processes = $nginx::params::worker_processes,
     $worker_connections = $nginx::params::worker_connections,
     $ssl_session_cache =  $nginx::params::ssl_session_cache
   ) inherits nginx::params {
 
+  include apt
+
+  apt::source {'nginx':
+    location => "http://nginx.org/packages/ubuntu",
+    repos => "nginx",
+    key => "A524C53E",
+    key_source => "http://sysoev.ru/pgp.txt"
+  }
+
   package {'nginx':
-    ensure => present
+    ensure => '1.4.1-1~precise',

[Wladimir Palant, 2013/05/18 09:52:32]

Will that also allow for newer versions?

[Felix Dahlke, 2013/05/21 05:40:58]

No, this will install exactly this version. I've thought a bit about how we can
handle security upgrades, and I see three options:

1) Use "ensure => present" and use something like apt-cron to automatically
install security updates
2) Use "ensure => latest" to make Puppet automatically install the newest
available version
3) Use "ensure => $version" to install the exact version we want.

I thought option 1 was our way to go, but in the case of the latest Nginx
update, we would have broken it on all servers, that's something I'd love to
avoid.

Option 2 is similar to option 1, except that we'll at least install the update
during the puppet update, i.e. we're more likely to notice issues. In a way,
it's more dangerous than option 1 though, since these are all upgrades, not just
security upgrades.

Option 3 seems like the best bet. When a new version of Nginx is released, we
have control over when we upgrade, and should thus be able to avoid issues.

+    require => Apt::Source['nginx']
   }
 
   File {
     owner => root,
     group => root,
     mode => 0644,
   }
 
   file {'/etc/nginx/nginx.conf':
     content => template('nginx/nginx.conf.erb'),
     require => Package['nginx'],
     notify => Service['nginx']
   }
 
+  file {'/etc/nginx/sites-available':
+    ensure => directory,
+    require => Package['nginx']
+  }
+
+  file {'/etc/nginx/sites-enabled':
+    ensure => directory,
+    require => Package['nginx']
+  }
+
   file {'/etc/nginx/sites-available/default':
     ensure => absent,
     require => Package['nginx']
   }
 
 #  file {'/etc/nginx/sites-enabled/default':
 #    ensure => absent,
 #  }
 
   define hostconfig ($file = $title, $source, $enabled = false) {
@@ skipping 19 matching lines @@
   }
 
   service {'nginx':
     ensure => running,
     enable => true,
     restart => '/etc/init.d/nginx reload',
     hasstatus => true,
     require => File['/etc/nginx/nginx.conf']
   }
 }