Rietveld Code Review Tool
Help | Bug tracker | Discussion group | Source code

Side by Side Diff: modules/filterserver/manifests/init.pp

Issue 5734493784637440: Issue 245 - Unify SSL configuration for all servers (Closed)
Patch Set: Created April 2, 2014, 2:05 p.m.
Left:
Right:
Use n/p to move between diff chunks; N/P to move between comments.
Jump to:
View unified diff | Download patch
OLDNEW
1 class filterserver($is_default = false) { 1 class filterserver($is_default = false) {
2 if !defined(Class['nginx']) { 2 if !defined(Class['nginx']) {
3 class {'nginx': 3 class {'nginx':
4 worker_processes => 2, 4 worker_processes => 2,
5 worker_connections => 4000, 5 worker_connections => 4000,
6 ssl_session_cache => off, 6 ssl_session_cache => off,
7 } 7 }
8 } 8 }
9 9
10 if !defined(File['/var/www']) { 10 if !defined(File['/var/www']) {
(...skipping 32 matching lines...) Expand 10 before | Expand all | Expand 10 after
43 } 43 }
44 44
45 file {'/etc/nginx/sites-available/inc.easylist-downloads-txt': 45 file {'/etc/nginx/sites-available/inc.easylist-downloads-txt':
46 ensure => absent 46 ensure => absent
47 } 47 }
48 48
49 file {'/etc/nginx/sites-available/inc.easylist-downloads-tpl': 49 file {'/etc/nginx/sites-available/inc.easylist-downloads-tpl':
50 ensure => absent 50 ensure => absent
51 } 51 }
52 52
53 file {'/etc/nginx/sites-available/easylist-downloads.adblockplus.org_sslcert.k ey':
54 ensure => file,
55 notify => Service['nginx'],
56 before => Nginx::Hostconfig['easylist-downloads.adblockplus.org'],
57 source => 'puppet:///modules/private/easylist-downloads.adblockplus.org_sslc ert.key'
58 }
59
60 file {'/etc/nginx/sites-available/easylist-downloads.adblockplus.org_sslcert.p em':
61 ensure => file,
62 notify => Service['nginx'],
63 before => Nginx::Hostconfig['easylist-downloads.adblockplus.org'],
64 mode => 0400,
65 source => 'puppet:///modules/private/easylist-downloads.adblockplus.org_sslc ert.pem'
66 }
67
68 nginx::hostconfig{'easylist-downloads.adblockplus.org': 53 nginx::hostconfig{'easylist-downloads.adblockplus.org':
69 content => template('filterserver/easylist-downloads.adblockplus.org.erb'), 54 alt_names => 'easylist-msie.adblockplus.org',
70 enabled => true 55 source => 'puppet:///modules/filterserver/site.conf',
71 } 56 is_default => $is_default,
72 57 certificate => 'adblockplus.org_sslcert.pem',
73 file {'/etc/logrotate.d/nginx_easylist-downloads.adblockplus.org': 58 private_key => 'adblockplus.org_sslcert.key',
74 ensure => file, 59 log => 'access_log_easylist_downloads'
75 require => Nginx::Hostconfig['easylist-downloads.adblockplus.org'],
76 source => 'puppet:///modules/filterserver/logrotate'
77 } 60 }
78 61
79 file {'/home/rsync/.ssh': 62 file {'/home/rsync/.ssh':
80 ensure => directory, 63 ensure => directory,
81 require => User['rsync'], 64 require => User['rsync'],
82 owner => rsync, 65 owner => rsync,
83 mode => 0600; 66 mode => 0600;
84 } 67 }
85 68
86 concat {'/home/rsync/.ssh/known_hosts': 69 concat {'/home/rsync/.ssh/known_hosts':
(...skipping 42 matching lines...) Expand 10 before | Expand all | Expand 10 after
129 File['/home/rsync/.ssh/id_rsa'], 112 File['/home/rsync/.ssh/id_rsa'],
130 User['rsync'] 113 User['rsync']
131 ], 114 ],
132 command => 'rsync -e "ssh -o CheckHostIP=no" -ltprz --delete rsync@filtermas ter.adblockplus.org:. /var/www/easylist/', 115 command => 'rsync -e "ssh -o CheckHostIP=no" -ltprz --delete rsync@filtermas ter.adblockplus.org:. /var/www/easylist/',
133 environment => ['MAILTO=admins@adblockplus.org,root'], 116 environment => ['MAILTO=admins@adblockplus.org,root'],
134 user => rsync, 117 user => rsync,
135 hour => '*', 118 hour => '*',
136 minute => '2-52/10' 119 minute => '2-52/10'
137 } 120 }
138 } 121 }
OLDNEW

Powered by Google App Engine
This is Rietveld