Install Nginx 1.4.1 from the official repository

modules/nginx/manifests/init.pp

Index: modules/nginx/manifests/init.pp
===================================================================
--- a/modules/nginx/manifests/init.pp
+++ b/modules/nginx/manifests/init.pp
@@ -4,8 +4,18 @@
     $ssl_session_cache =  $nginx::params::ssl_session_cache
   ) inherits nginx::params {
 
+  include apt
+
+  apt::source {'nginx':
+    location => "http://nginx.org/packages/ubuntu",
+    repos => "nginx",
+    key => "A524C53E",
+    key_source => "http://sysoev.ru/pgp.txt"
+  }
+
   package {'nginx':
-    ensure => present
+    ensure => '1.4.1-1~precise',

[Wladimir Palant, 2013/05/18 09:52:32]

Will that also allow for newer versions?

[Felix Dahlke, 2013/05/21 05:40:58]

No, this will install exactly this version. I've thought a bit about how we can
handle security upgrades, and I see three options:

1) Use "ensure => present" and use something like apt-cron to automatically
install security updates
2) Use "ensure => latest" to make Puppet automatically install the newest
available version
3) Use "ensure => $version" to install the exact version we want.

I thought option 1 was our way to go, but in the case of the latest Nginx
update, we would have broken it on all servers, that's something I'd love to
avoid.

Option 2 is similar to option 1, except that we'll at least install the update
during the puppet update, i.e. we're more likely to notice issues. In a way,
it's more dangerous than option 1 though, since these are all upgrades, not just
security upgrades.

Option 3 seems like the best bet. When a new version of Nginx is released, we
have control over when we upgrade, and should thus be able to avoid issues.

+    require => Apt::Source['nginx']
   }
 
   File {
@@ -20,6 +30,16 @@
     notify => Service['nginx']
   }
 
+  file {'/etc/nginx/sites-available':
+    ensure => directory,
+    require => Package['nginx']
+  }
+
+  file {'/etc/nginx/sites-enabled':
+    ensure => directory,
+    require => Package['nginx']
+  }
+
   file {'/etc/nginx/sites-available/default':
     ensure => absent,
     require => Package['nginx']