confdroid_apache/manifests/server/dirs.pp

## confdroid_apache::server::dirs.pp
# Module name: confdroid_apache
# Author: 12ww1160 (12ww1160@confdroid.com)
# @summary  Manage all aspects of the directory structure required for the
#   httpd service.
##############################################################################
class confdroid_apache::server::dirs (

) inherits confdroid_apache::params {
  require confdroid_apache::server::install

  if $ae_manage_dirs == true {
    # create main dir

    file { $ae_main_dir:
      ensure   => directory,
      path     => $ae_main_dir,
      owner    => 'root',
      group    => 'root',
      mode     => '0755',
      selrange => s0,
      selrole  => object_r,
      seltype  => httpd_config_t,
      seluser  => system_u,
    }

    #  conf dir

    file { $ae_conf_dir:
      ensure   => directory,
      path     => $ae_conf_dir,
      owner    => 'root',
      group    => 'root',
      mode     => '0755',
      selrange => s0,
      selrole  => object_r,
      seltype  => httpd_config_t,
      seluser  => system_u,
    }

    # conf.d dir

    file { $ae_conf_d_dir:
      ensure   => directory,
      path     => $ae_conf_d_dir,
      owner    => 'root',
      group    => 'root',
      mode     => '0755',
      selrange => s0,
      selrole  => object_r,
      seltype  => httpd_config_t,
      seluser  => system_u,
    }

    # conf.modules.d

    file { $ae_conf_mods_d:
      ensure   => directory,
      path     => $ae_conf_mods_d,
      owner    => 'root',
      group    => 'root',
      mode     => '0755',
      selrange => s0,
      selrole  => object_r,
      seltype  => httpd_config_t,
      seluser  => system_u,
    }

    # /var/log/httpd

    file { $ae_var_logs_dir:
      ensure   => directory,
      path     => $ae_var_logs_dir,
      owner    => 'root',
      group    => 'root',
      mode     => '0700',
      selrange => s0,
      selrole  => object_r,
      seltype  => httpd_log_t,
      seluser  => system_u,
    }

    # logs dir link

    file { $ae_logs_dir:
      ensure   => link,
      path     => $ae_logs_dir,
      target   => $ae_var_logs_dir,
      owner    => 'root',
      group    => 'root',
      mode     => '0777',
      selrange => s0,
      selrole  => object_r,
      seltype  => httpd_log_t,
      seluser  => system_u,
    }

    # /usr/lib/httpd

    file { $ae_usr_lib_dir:
      ensure   => directory,
      path     => $ae_usr_lib_dir,
      owner    => 'root',
      group    => 'root',
      mode     => '0755',
      selrange => s0,
      selrole  => object_r,
      seltype  => httpd_modules_t,
      seluser  => system_u,
    }

    # mods dir

    file { $ae_usr_mods_dir:
      ensure   => directory,
      path     => $ae_usr_mods_dir,
      owner    => 'root',
      group    => 'root',
      mode     => '0755',
      selrange => s0,
      selrole  => object_r,
      seltype  => httpd_modules_t,
      seluser  => system_u,
    }

    # logs dir link

    file { $ae_mods_dir:
      ensure   => link,
      path     => $ae_mods_dir,
      target   => $ae_usr_mods_dir,
      owner    => 'root',
      group    => 'root',
      mode     => '0777',
      selrange => s0,
      selrole  => object_r,
      seltype  => httpd_modules_t,
      seluser  => system_u,
    }

    # run dir

    file { $ae_run_dir:
      ensure   => directory,
      path     => $ae_run_dir,
      owner    => 'root',
      group    => 'apache',
      mode     => '0710',
      selrange => s0,
      selrole  => object_r,
      seltype  => httpd_var_run_t,
      seluser  => system_u,
    }

    # run link

    file { $ae_run_link:
      ensure   => link,
      path     => $ae_run_link,
      target   => $ae_run_dir,
      owner    => 'root',
      group    => 'root',
      mode     => '0777',
      selrange => s0,
      selrole  => object_r,
      seltype  => httpd_config_t,
      seluser  => system_u,
    }

    # /usr/share/httpd dir

    file { $ae_share_httpd:
      ensure   => directory,
      path     => $ae_share_httpd,
      owner    => 'root',
      group    => 'root',
      mode     => '0755',
      selrange => s0,
      selrole  => object_r,
      seltype  => usr_t,
      seluser  => system_u,
    }

    # /var/cache/httpd

    file { $ae_cache_httpd:
      ensure   => directory,
      path     => $ae_cache_httpd,
      owner    => 'apache',
      group    => 'apache',
      mode     => '0700',
      selrange => s0,
      selrole  => object_r,
      seltype  => httpd_cache_t,
      seluser  => system_u,
    }
  }
}