").append(c.replace(bN,"")).find(g):c)),d&&i.each(d,[c,b,a])}});return this},serialize:function(){return f.param(this.serializeArray())},serializeArray:function(){return this.map(function(){return this.elements?f.makeArray(this.elements):this}).filter(function(){return this.name&&!this.disabled&&(this.checked||bO.test(this.nodeName)||bI.test(this.type))}).map(function(a,b){var c=f(this).val();return c==null?null:f.isArray(c)?f.map(c,function(a,c){return{name:b.name,value:a.replace(bF,"\r\n")}}):{name:b.name,value:c.replace(bF,"\r\n")}}).get()}}),f.each("ajaxStart ajaxStop ajaxComplete ajaxError ajaxSuccess ajaxSend".split(" "),function(a,b){f.fn[b]=function(a){return this.on(b,a)}}),f.each(["get","post"],function(a,c){f[c]=function(a,d,e,g){f.isFunction(d)&&(g=g||e,e=d,d=b);return f.ajax({type:c,url:a,data:d,success:e,dataType:g})}}),f.extend({getScript:function(a,c){return f.get(a,b,c,"script")},getJSON:function(a,b,c){return f.get(a,b,c,"json")},ajaxSetup:function(a,b){b?b_(a,f.ajaxSettings):(b=a,a=f.ajaxSettings),b_(a,b);return a},ajaxSettings:{url:bV,isLocal:bJ.test(bW[1]),global:!0,type:"GET",contentType:"application/x-www-form-urlencoded",processData:!0,async:!0,accepts:{xml:"application/xml, text/xml",html:"text/html",text:"text/plain",json:"application/json, text/javascript","*":bX},contents:{xml:/xml/,html:/html/,json:/json/},responseFields:{xml:"responseXML",text:"responseText"},converters:{"* text":a.String,"text html":!0,"text json":f.parseJSON,"text xml":f.parseXML},flatOptions:{context:!0,url:!0}},ajaxPrefilter:bZ(bT),ajaxTransport:bZ(bU),ajax:function(a,c){function w(a,c,l,m){if(s!==2){s=2,q&&clearTimeout(q),p=b,n=m||"",v.readyState=a>0?4:0;var o,r,u,w=c,x=l?cb(d,v,l):b,y,z;if(a>=200&&a<300||a===304){if(d.ifModified){if(y=v.getResponseHeader("Last-Modified"))f.lastModified[k]=y;if(z=v.getResponseHeader("Etag"))f.etag[k]=z}if(a===304)w="notmodified",o=!0;else try{r=cc(d,x),w="success",o=!0}catch(A){w="parsererror",u=A}}else{u=w;if(!w||a)w="error",a<0&&(a=0)}v.status=a,v.statusText=""+(c||w),o?h.resolveWith(e,[r,w,v]):h.rejectWith(e,[v,w,u]),v.statusCode(j),j=b,t&&g.trigger("ajax"+(o?"Success":"Error"),[v,d,o?r:u]),i.fireWith(e,[v,w]),t&&(g.trigger("ajaxComplete",[v,d]),--f.active||f.event.trigger("ajaxStop"))}}typeof a=="object"&&(c=a,a=b),c=c||{};var d=f.ajaxSetup({},c),e=d.context||d,g=e!==d&&(e.nodeType||e instanceof f)?f(e):f.event,h=f.Deferred(),i=f.Callbacks("once memory"),j=d.statusCode||{},k,l={},m={},n,o,p,q,r,s=0,t,u,v={readyState:0,setRequestHeader:function(a,b){if(!s){var c=a.toLowerCase();a=m[c]=m[c]||a,l[a]=b}return this},getAllResponseHeaders:function(){return s===2?n:null},getResponseHeader:function(a){var c;if(s===2){if(!o){o={};while(c=bH.exec(n))o[c[1].toLowerCase()]=c[2]}c=o[a.toLowerCase()]}return c===b?null:c},overrideMimeType:function(a){s||(d.mimeType=a);return this},abort:function(a){a=a||"abort",p&&p.abort(a),w(0,a);return this}};h.promise(v),v.success=v.done,v.error=v.fail,v.complete=i.add,v.statusCode=function(a){if(a){var b;if(s<2)for(b in a)j[b]=[j[b],a[b]];else b=a[v.status],v.then(b,b)}return this},d.url=((a||d.url)+"").replace(bG,"").replace(bL,bW[1]+"//"),d.dataTypes=f.trim(d.dataType||"*").toLowerCase().split(bP),d.crossDomain==null&&(r=bR.exec(d.url.toLowerCase()),d.crossDomain=!(!r||r[1]==bW[1]&&r[2]==bW[2]&&(r[3]||(r[1]==="http:"?80:443))==(bW[3]||(bW[1]==="http:"?80:443)))),d.data&&d.processData&&typeof d.data!="string"&&(d.data=f.param(d.data,d.traditional)),b$(bT,d,c,v);if(s===2)return!1;t=d.global,d.type=d.type.toUpperCase(),d.hasContent=!bK.test(d.type),t&&f.active++===0&&f.event.trigger("ajaxStart");if(!d.hasContent){d.data&&(d.url+=(bM.test(d.url)?"&":"?")+d.data,delete d.data),k=d.url;if(d.cache===!1){var x=f.now(),y=d.url.replace(bQ,"$1_="+x);d.url=y+(y===d.url?(bM.test(d.url)?"&":"?")+"_="+x:"")}}(d.data&&d.hasContent&&d.contentType!==!1||c.contentType)&&v.setRequestHeader("Content-Type",d.contentType),d.ifModified&&(k=k||d.url,f.lastModified[k]&&v.setRequestHeader("If-Modified-Since",f.lastModified[k]),f.etag[k]&&v.setRequestHeader("If-None-Match",f.etag[k])),v.setRequestHeader("Accept",d.dataTypes[0]&&d.accepts[d.dataTypes[0]]?d.accepts[d.dataTypes[0]]+(d.dataTypes[0]!=="*"?", "+bX+"; q=0.01":""):d.accepts["*"]);for(u in d.headers)v.setRequestHeader(u,d.headers[u]);if(d.beforeSend&&(d.beforeSend.call(e,v,d)===!1||s===2)){v.abort();return!1}for(u in{success:1,error:1,complete:1})v[u](d[u]);p=b$(bU,d,c,v);if(!p)w(-1,"No Transport");else{v.readyState=1,t&&g.trigger("ajaxSend",[v,d]),d.async&&d.timeout>0&&(q=setTimeout(function(){v.abort("timeout")},d.timeout));try{s=1,p.send(l,w)}catch(z){if(s<2)w(-1,z);else throw z}}return v},param:function(a,c){var d=[],e=function(a,b){b=f.isFunction(b)?b():b,d[d.length]=encodeURIComponent(a)+"="+encodeURIComponent(b)};c===b&&(c=f.ajaxSettings.traditional);if(f.isArray(a)||a.jquery&&!f.isPlainObject(a))f.each(a,function(){e(this.name,this.value)});else for(var g in a)ca(g,a[g],c,e);return d.join("&").replace(bD,"+")}}),f.extend({active:0,lastModified:{},etag:{}});var cd=f.now(),ce=/(\=)\?(&|$)|\?\?/i;f.ajaxSetup({jsonp:"callback",jsonpCallback:function(){return f.expando+"_"+cd++}}),f.ajaxPrefilter("json jsonp",function(b,c,d){var e=b.contentType==="application/x-www-form-urlencoded"&&typeof b.data=="string";if(b.dataTypes[0]==="jsonp"||b.jsonp!==!1&&(ce.test(b.url)||e&&ce.test(b.data))){var g,h=b.jsonpCallback=f.isFunction(b.jsonpCallback)?b.jsonpCallback():b.jsonpCallback,i=a[h],j=b.url,k=b.data,l="$1"+h+"$2";b.jsonp!==!1&&(j=j.replace(ce,l),b.url===j&&(e&&(k=k.replace(ce,l)),b.data===k&&(j+=(/\?/.test(j)?"&":"?")+b.jsonp+"="+h))),b.url=j,b.data=k,a[h]=function(a){g=[a]},d.always(function(){a[h]=i,g&&f.isFunction(i)&&a[h](g[0])}),b.converters["script json"]=function(){g||f.error(h+" was not called");return g[0]},b.dataTypes[0]="json";return"script"}}),f.ajaxSetup({accepts:{script:"text/javascript, application/javascript, application/ecmascript, application/x-ecmascript"},contents:{script:/javascript|ecmascript/},converters:{"text script":function(a){f.globalEval(a);return a}}}),f.ajaxPrefilter("script",function(a){a.cache===b&&(a.cache=!1),a.crossDomain&&(a.type="GET",a.global=!1)}),f.ajaxTransport("script",function(a){if(a.crossDomain){var d,e=c.head||c.getElementsByTagName("head")[0]||c.documentElement;return{send:function(f,g){d=c.createElement("script"),d.async="async",a.scriptCharset&&(d.charset=a.scriptCharset),d.src=a.url,d.onload=d.onreadystatechange=function(a,c){if(c||!d.readyState||/loaded|complete/.test(d.readyState))d.onload=d.onreadystatechange=null,e&&d.parentNode&&e.removeChild(d),d=b,c||g(200,"success")},e.insertBefore(d,e.firstChild)},abort:function(){d&&d.onload(0,1)}}}});var cf=a.ActiveXObject?function(){for(var a in ch)ch[a](0,1)}:!1,cg=0,ch;f.ajaxSettings.xhr=a.ActiveXObject?function(){return!this.isLocal&&ci()||cj()}:ci,function(a){f.extend(f.support,{ajax:!!a,cors:!!a&&"withCredentials"in a})}(f.ajaxSettings.xhr()),f.support.ajax&&f.ajaxTransport(function(c){if(!c.crossDomain||f.support.cors){var d;return{send:function(e,g){var h=c.xhr(),i,j;c.username?h.open(c.type,c.url,c.async,c.username,c.password):h.open(c.type,c.url,c.async);if(c.xhrFields)for(j in c.xhrFields)h[j]=c.xhrFields[j];c.mimeType&&h.overrideMimeType&&h.overrideMimeType(c.mimeType),!c.crossDomain&&!e["X-Requested-With"]&&(e["X-Requested-With"]="XMLHttpRequest");try{for(j in e)h.setRequestHeader(j,e[j])}catch(k){}h.send(c.hasContent&&c.data||null),d=function(a,e){var j,k,l,m,n;try{if(d&&(e||h.readyState===4)){d=b,i&&(h.onreadystatechange=f.noop,cf&&delete ch[i]);if(e)h.readyState!==4&&h.abort();else{j=h.status,l=h.getAllResponseHeaders(),m={},n=h.responseXML,n&&n.documentElement&&(m.xml=n),m.text=h.responseText;try{k=h.statusText}catch(o){k=""}!j&&c.isLocal&&!c.crossDomain?j=m.text?200:404:j===1223&&(j=204)}}}catch(p){e||g(-1,p)}m&&g(j,k,m,l)},!c.async||h.readyState===4?d():(i=++cg,cf&&(ch||(ch={},f(a).unload(cf)),ch[i]=d),h.onreadystatechange=d)},abort:function(){d&&d(0,1)}}}});var ck={},cl,cm,cn=/^(?:toggle|show|hide)$/,co=/^([+\-]=)?([\d+.\-]+)([a-z%]*)$/i,cp,cq=[["height","marginTop","marginBottom","paddingTop","paddingBottom"],["width","marginLeft","marginRight","paddingLeft","paddingRight"],["opacity"]],cr;f.fn.extend({show:function(a,b,c){var d,e;if(a||a===0)return this.animate(cu("show",3),a,b,c);for(var g=0,h=this.length;g
=i.duration+this.startTime){this.now=this.end,this.pos=this.state=1,this.update(),i.animatedProperties[this.prop]=!0;for(b in i.animatedProperties)i.animatedProperties[b]!==!0&&(g=!1);if(g){i.overflow!=null&&!f.support.shrinkWrapBlocks&&f.each(["","X","Y"],function(a,b){h.style["overflow"+b]=i.overflow[a]}),i.hide&&f(h).hide();if(i.hide||i.show)for(b in i.animatedProperties)f.style(h,b,i.orig[b]),f.removeData(h,"fxshow"+b,!0),f.removeData(h,"toggle"+b,!0);d=i.complete,d&&(i.complete=!1,d.call(h))}return!1}i.duration==Infinity?this.now=e:(c=e-this.startTime,this.state=c/i.duration,this.pos=f.easing[i.animatedProperties[this.prop]](this.state,c,0,1,i.duration),this.now=this.start+(this.end-this.start)*this.pos),this.update();return!0}},f.extend(f.fx,{tick:function(){var a,b=f.timers,c=0;for(;c-1,k={},l={},m,n;j?(l=e.position(),m=l.top,n=l.left):(m=parseFloat(h)||0,n=parseFloat(i)||0),f.isFunction(b)&&(b=b.call(a,c,g)),b.top!=null&&(k.top=b.top-g.top+m),b.left!=null&&(k.left=b.left-g.left+n),"using"in b?b.using.call(a,k):e.css(k)}},f.fn.extend({position:function(){if(!this[0])return null;var a=this[0],b=this.offsetParent(),c=this.offset(),d=cx.test(b[0].nodeName)?{top:0,left:0}:b.offset();c.top-=parseFloat(f.css(a,"marginTop"))||0,c.left-=parseFloat(f.css(a,"marginLeft"))||0,d.top+=parseFloat(f.css(b[0],"borderTopWidth"))||0,d.left+=parseFloat(f.css(b[0],"borderLeftWidth"))||0;return{top:c.top-d.top,left:c.left-d.left}},offsetParent:function(){return this.map(function(){var a=this.offsetParent||c.body;while(a&&!cx.test(a.nodeName)&&f.css(a,"position")==="static")a=a.offsetParent;return a})}}),f.each(["Left","Top"],function(a,c){var d="scroll"+c;f.fn[d]=function(c){var e,g;if(c===b){e=this[0];if(!e)return null;g=cy(e);return g?"pageXOffset"in g?g[a?"pageYOffset":"pageXOffset"]:f.support.boxModel&&g.document.documentElement[d]||g.document.body[d]:e[d]}return this.each(function(){g=cy(this),g?g.scrollTo(a?f(g).scrollLeft():c,a?c:f(g).scrollTop()):this[d]=c})}}),f.each(["Height","Width"],function(a,c){var d=c.toLowerCase();f.fn["inner"+c]=function(){var a=this[0];return a?a.style?parseFloat(f.css(a,d,"padding")):this[d]():null},f.fn["outer"+c]=function(a){var b=this[0];return b?b.style?parseFloat(f.css(b,d,a?"margin":"border")):this[d]():null},f.fn[d]=function(a){var e=this[0];if(!e)return a==null?null:this;if(f.isFunction(a))return this.each(function(b){var c=f(this);c[d](a.call(this,b,c[d]()))});if(f.isWindow(e)){var g=e.document.documentElement["client"+c],h=e.document.body;return e.document.compatMode==="CSS1Compat"&&g||h&&h["client"+c]||g}if(e.nodeType===9)return Math.max(e.documentElement["client"+c],e.body["scroll"+c],e.documentElement["scroll"+c],e.body["offset"+c],e.documentElement["offset"+c]);if(a===b){var i=f.css(e,d),j=parseFloat(i);return f.isNumeric(j)?j:i}return this.css(d,typeof a=="string"?a:a+"px")}}),a.jQuery=a.$=f,typeof define=="function"&&define.amd&&define.amd.jQuery&&define("jquery",[],function(){return f})})(window);
\ No newline at end of file
diff --git a/doc/puppet_class_list.html b/doc/puppet_class_list.html
new file mode 100644
index 0000000..faf10f4
--- /dev/null
+++ b/doc/puppet_class_list.html
@@ -0,0 +1,117 @@
+
+
+
+ Puppet Class List
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+ Puppet Class: haproxy_cd
+
+ — Documentation by YARD 0.9.36
+
+
+
+
+
+
+
Puppet Class: haproxy_cd
+
+
+
+
+ Defined in:
+
+ manifests/init.pp
+
+
+
+
+
Summary
+ Class initializes the haproxy_cd module.
+
+
Overview
+
+
+
+
haproxy_cd::init.pp Module name: haproxy_cd Author: Arne Teuke (arne_teuke@confdroid.com)
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+6
+7
+8
+
+
+ # File 'manifests/init.pp', line 6
+
+class haproxy_cd {
+ include haproxy_cd::params
+}
+
+
+
+
+
+
+
+
+ Puppet Class: haproxy_cd::firewall::iptables
+
+ — Documentation by YARD 0.9.36
+
+
+
+
+
+
+
Puppet Class: haproxy_cd::firewall::iptables
+
+
+
+ Inherits:
+ haproxy_cd::params
+
+
+
+ Defined in:
+
+ manifests/firewall/iptables.pp
+
+
+
+
+
Summary
+ manage firewall settings through cd_firewall or puppetlabs-firewall
+
+
Overview
+
+
+
+
haproxy_cd::firewall::iptables.pp Module name: haproxy_cd Author: Arne Teuke (arne_teuke@confdroid.com)
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+6
+7
+8
+9
+10
+11
+12
+13
+14
+15
+16
+17
+18
+19
+20
+21
+22
+
+
+ # File 'manifests/firewall/iptables.pp', line 6
+
+class haproxy_cd::firewall::iptables (
+
+) inherits haproxy_cd::params {
+ if ($fqdn == $hy_host_fqdn) and ($hy_manage_fw == true) {
+ firewall { "${hy_fw_order_no}${hy_http_port} tcp port ${hy_http_port}":
+ proto => 'tcp',
+ dport => $hy_http_port,
+ jump => 'accept',
+ }
+
+ firewall { "${hy_fw_order_no}${hy_https_port} tcp port ${hy_https_port}":
+ proto => 'tcp',
+ dport => $hy_https_port,
+ jump => 'accept',
+ }
+ }
+}
+
+
+
+
+
+
+
+
+ Puppet Class: haproxy_cd::main::config
+
+ — Documentation by YARD 0.9.36
+
+
+
+
+
+
+
Puppet Class: haproxy_cd::main::config
+
+
+
+ Inherits:
+ haproxy_cd::params
+
+
+
+ Defined in:
+
+ manifests/main/config.pp
+
+
+
+
+
Summary
+ Class manages module logic for haproxy_cd.
+
+
Overview
+
+
+
+
haproxy_cd::main::config.pp Module name: haproxy_cd Author: Arne Teuke (arne_teuke@confdroid.com)
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+6
+7
+8
+9
+10
+11
+12
+13
+14
+
+
+ # File 'manifests/main/config.pp', line 6
+
+class haproxy_cd::main::config (
+
+) inherits haproxy_cd::params {
+ include haproxy_cd::server::service
+
+ if $hy_manage_fail2ban == true {
+ include haproxy_cd::monitoring::fail2ban
+ }
+}
+
+
+
+
+
+
+
+
+ Puppet Class: haproxy_cd::main::dirs
+
+ — Documentation by YARD 0.9.36
+
+
+
+
+
+
+
Puppet Class: haproxy_cd::main::dirs
+
+
+
+ Inherits:
+ haproxy_cd::params
+
+
+
+ Defined in:
+
+ manifests/main/dirs.pp
+
+
+
+
+
Summary
+ Class manages all directories required for haproxy_cd.
+
+
Overview
+
+
+
+
haproxy_cd::main::dirs.pp Module name: haproxy_cd Author: Arne Teuke (arne_teuke@confdroid.com)
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+6
+7
+8
+9
+10
+11
+12
+13
+14
+15
+16
+17
+18
+19
+20
+21
+22
+23
+24
+25
+26
+27
+28
+29
+30
+31
+32
+33
+34
+35
+36
+37
+38
+39
+40
+41
+42
+43
+44
+45
+46
+47
+48
+
+
+ # File 'manifests/main/dirs.pp', line 6
+
+class haproxy_cd::main::dirs (
+
+) inherits haproxy_cd::params {
+ if $fqdn == $hy_host_fqdn {
+ require haproxy_cd::main::user
+
+ # main dir
+ file { $hy_main_dir:
+ ensure => directory,
+ owner => 'root',
+ group => 'root',
+ mode => '0755',
+ selrange => s0,
+ selrole => object_r,
+ seltype => etc_t,
+ seluser => system_u,
+ }
+
+ # errors dir
+ file { $hy_errors_dir:
+ ensure => directory,
+ owner => 'root',
+ group => 'root',
+ mode => '0755',
+ selrange => s0,
+ selrole => object_r,
+ seltype => etc_t,
+ seluser => system_u,
+ }
+
+ # certs dir
+ file { $hy_certs_dir:
+ ensure => directory,
+ owner => 'root',
+ group => 'root',
+ mode => '0755',
+ selrange => s0,
+ selrole => object_r,
+ seltype => etc_t,
+ seluser => system_u,
+ }
+ }
+}
+
+
+
+
+
+
+
+
+ Puppet Class: haproxy_cd::main::files
+
+ — Documentation by YARD 0.9.36
+
+
+
+
+
+
+
Puppet Class: haproxy_cd::main::files
+
+
+
+ Inherits:
+ haproxy_cd::params
+
+
+
+ Defined in:
+
+ manifests/main/files.pp
+
+
+
+
+
Summary
+ Class manages all configuration files required for haproxy_cd.
+
+
Overview
+
+
+
+
haproxy_cd::main::files.pp Module name: haproxy_cd Author: Arne Teuke (arne_teuke@confdroid.com)
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+6
+7
+8
+9
+10
+11
+12
+13
+14
+15
+16
+17
+18
+19
+20
+21
+22
+23
+24
+25
+26
+27
+28
+29
+30
+31
+32
+33
+34
+35
+36
+37
+38
+39
+40
+41
+42
+43
+44
+45
+46
+47
+48
+49
+50
+51
+52
+53
+54
+55
+56
+57
+58
+59
+60
+61
+62
+63
+64
+65
+66
+67
+68
+69
+70
+71
+72
+73
+74
+75
+76
+77
+78
+79
+80
+81
+82
+83
+84
+85
+86
+87
+88
+89
+90
+91
+92
+93
+94
+95
+96
+97
+98
+99
+100
+101
+102
+103
+104
+105
+106
+107
+108
+109
+110
+111
+112
+113
+114
+115
+116
+117
+118
+119
+120
+121
+122
+123
+124
+125
+126
+127
+128
+129
+130
+131
+132
+133
+134
+135
+136
+137
+138
+139
+140
+141
+142
+143
+144
+145
+146
+147
+148
+149
+150
+151
+152
+153
+154
+155
+156
+157
+158
+
+
+ # File 'manifests/main/files.pp', line 6
+
+class haproxy_cd::main::files (
+
+) inherits haproxy_cd::params {
+ if $fqdn == $hy_host_fqdn {
+ require haproxy_cd::main::dirs
+
+ # create the concat target
+ concat { $hy_main_config:
+ ensure => present,
+ owner => 'root',
+ group => 'root',
+ mode => '0640',
+ selrange => s0,
+ selrole => object_r,
+ seltype => etc_t,
+ seluser => system_u,
+ notify => Service[$hy_service],
+ }
+
+ # create the header
+ concat::fragment { 'header':
+ target => $hy_main_config,
+ content => template($hy_config_head_erb),
+ order => '001',
+ }
+
+ # create the header
+ concat::fragment { 'tail':
+ target => $hy_main_config,
+ content => template($hy_config_tail_erb),
+ order => '100',
+ }
+
+ # pid file
+ file { $hy_pid:
+ ensure => file,
+ owner => 'root',
+ group => 'root',
+ mode => '0644',
+ selrange => s0,
+ selrole => object_r,
+ seltype => haproxy_var_run_t,
+ seluser => system_u,
+ }
+
+ # error files
+ file { $hy_400_file:
+ ensure => file,
+ owner => 'root',
+ group => 'root',
+ mode => '0644',
+ selrange => s0,
+ selrole => object_r,
+ seltype => etc_t,
+ seluser => system_u,
+ content => template($hy_400_erb),
+ notify => Service[$hy_service],
+ }
+
+ file { $hy_403_file:
+ ensure => file,
+ owner => 'root',
+ group => 'root',
+ mode => '0644',
+ selrange => s0,
+ selrole => object_r,
+ seltype => etc_t,
+ seluser => system_u,
+ content => template($hy_403_erb),
+ notify => Service[$hy_service],
+ }
+
+ file { $hy_408_file:
+ ensure => file,
+ owner => 'root',
+ group => 'root',
+ mode => '0644',
+ selrange => s0,
+ selrole => object_r,
+ seltype => etc_t,
+ seluser => system_u,
+ content => template($hy_408_erb),
+ notify => Service[$hy_service],
+ }
+
+ file { $hy_500_file:
+ ensure => file,
+ owner => 'root',
+ group => 'root',
+ mode => '0644',
+ selrange => s0,
+ selrole => object_r,
+ seltype => etc_t,
+ seluser => system_u,
+ content => template($hy_500_erb),
+ notify => Service[$hy_service],
+ }
+
+ file { $hy_502_file:
+ ensure => file,
+ owner => 'root',
+ group => 'root',
+ mode => '0644',
+ selrange => s0,
+ selrole => object_r,
+ seltype => etc_t,
+ seluser => system_u,
+ content => template($hy_502_erb),
+ notify => Service[$hy_service],
+ }
+
+ file { $hy_503_file:
+ ensure => file,
+ owner => 'root',
+ group => 'root',
+ mode => '0644',
+ selrange => s0,
+ selrole => object_r,
+ seltype => etc_t,
+ seluser => system_u,
+ content => template($hy_503_erb),
+ notify => Service[$hy_service],
+ }
+
+ file { $hy_504_file:
+ ensure => file,
+ owner => 'root',
+ group => 'root',
+ mode => '0644',
+ selrange => s0,
+ selrole => object_r,
+ seltype => etc_t,
+ seluser => system_u,
+ content => template($hy_504_erb),
+ notify => Service[$hy_service],
+ }
+
+ # make sure syslog is logging haproxy logs
+
+ file { '/etc/rsyslog.d/10-haproxy.conf':
+ ensure => file,
+ owner => 'root',
+ group => 'root',
+ mode => '0644',
+ selrange => s0,
+ selrole => object_r,
+ seltype => syslog_conf_t,
+ seluser => system_u,
+ content => template('haproxy_cd/rsyslog/10_haproxy.conf.erb'),
+# notify => Service['rsyslog'], # only if using rsyslog_cd module
+ }
+ }
+}
+
+
+
+
+
+
+
+
+ Puppet Class: haproxy_cd::main::install
+
+ — Documentation by YARD 0.9.36
+
+
+
+
+
+
+
Puppet Class: haproxy_cd::main::install
+
+
+
+ Inherits:
+ haproxy_cd::params
+
+
+
+ Defined in:
+
+ manifests/main/install.pp
+
+
+
+
+
Summary
+ Class installs binaries required for haproxy_cd
+
+
Overview
+
+
+
+
haproxy_cd::main::install.pp Module name: haproxy_cd Author: Arne Teuke (arne_teuke@confdroid.com)
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+6
+7
+8
+9
+10
+11
+12
+13
+14
+
+
+ # File 'manifests/main/install.pp', line 6
+
+class haproxy_cd::main::install (
+
+) inherits haproxy_cd::params {
+ if $fqdn == $hy_host_fqdn {
+ package { $reqpackages:
+ ensure => $pkg_ensure,
+ }
+ }
+}
+
+
+
+
+
+
+
+
+ Puppet Class: haproxy_cd::main::user
+
+ — Documentation by YARD 0.9.36
+
+
+
+
+
+
+
Puppet Class: haproxy_cd::main::user
+
+
+
+ Inherits:
+ haproxy_cd::params
+
+
+
+ Defined in:
+
+ manifests/main/user.pp
+
+
+
+
+
Summary
+ Class manages service users for haproxy_cd.
+
+
Overview
+
+
+
+
haproxy_cd::main::user.pp Module name: haproxy_cd Author: Arne Teuke (arne_teuke@ConfDroid.com)
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+6
+7
+8
+9
+10
+11
+12
+13
+14
+15
+16
+17
+18
+19
+20
+21
+22
+23
+24
+25
+26
+27
+28
+29
+30
+
+
+ # File 'manifests/main/user.pp', line 6
+
+class haproxy_cd::main::user (
+
+) inherits haproxy_cd::params {
+ if $fqdn == $hy_host_fqdn {
+ require haproxy_cd::main::install
+
+ # manage user
+ user { $hy_user_name:
+ ensure => present,
+ name => $hy_user_name,
+ allowdupe => false,
+ comment => $hy_user_comment,
+ gid => $hy_user_name,
+ managehome => true,
+ home => $hy_user_home,
+ shell => $hy_user_shell,
+ }
+
+ group { $hy_user_name:
+ ensure => present,
+ name => $hy_user_name,
+ allowdupe => false,
+ }
+ }
+}
+
+
+
+
+
+
+
+
+ Puppet Class: haproxy_cd::monitoring::fail2ban
+
+ — Documentation by YARD 0.9.36
+
+
+
+
+
+
+
Puppet Class: haproxy_cd::monitoring::fail2ban
+
+
+
+ Inherits:
+ haproxy_cd::params
+
+
+
+ Defined in:
+
+ manifests/monitoring/fail2ban.pp
+
+
+
+
+
Summary
+ Class manages fail2ban settings
+
+
Overview
+
+
+
+
Module name: haproxy_cd Author: Arne Teuke (arne_teuke@confdroid.com)
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+5
+6
+7
+8
+9
+10
+11
+12
+13
+14
+15
+16
+17
+18
+19
+20
+21
+22
+23
+24
+25
+26
+27
+28
+29
+30
+31
+32
+33
+34
+35
+36
+37
+38
+39
+
+
+ # File 'manifests/monitoring/fail2ban.pp', line 5
+
+class haproxy_cd::monitoring::fail2ban (
+
+) inherits haproxy_cd::params {
+ if $hy_manage_fail2ban == true {
+ require confdroid_fail2ban # (external module)
+
+ # configure filter
+
+ file { '/etc/fail2ban/filter.d/haproxy.conf':
+ ensure => file,
+ owner => 'root',
+ group => 'root',
+ mode => '0644',
+ selrange => s0,
+ selrole => object_r,
+ seltype => etc_t,
+ seluser => system_u,
+ content => template('haproxy_cd/fail2ban/f2b_haproxy.conf.erb'),
+ notify => Service['fail2ban'],
+ }
+
+ file { '/etc/fail2ban/jail.d/010-haproxy.conf':
+ ensure => file,
+ owner => 'root',
+ group => 'root',
+ mode => '0644',
+ selrange => s0,
+ selrole => object_r,
+ seltype => etc_t,
+ seluser => system_u,
+ content => template('haproxy_cd/fail2ban/010_jail.d_haproxy.conf.erb'),
+ notify => Service['fail2ban'],
+ }
+ }
+}
+
+
+
+
+
+
+
+
+ Puppet Class: haproxy_cd::params
+
+ — Documentation by YARD 0.9.36
+
+
+
+
+
+
+
Puppet Class: haproxy_cd::params
+
+
+
Overview
+
+
+
+
haproxy_cd::params.pp Module name: haproxy_cd Author: Arne Teuke (arne_teuke@confdroid.com)
+
+
+
+
+
+
+
+
+
+
+
+
+
+58
+59
+60
+61
+62
+63
+64
+65
+66
+67
+68
+69
+70
+71
+72
+73
+74
+75
+76
+77
+78
+79
+80
+81
+82
+83
+84
+85
+86
+87
+88
+89
+90
+91
+92
+93
+94
+95
+96
+97
+98
+99
+100
+101
+102
+103
+104
+105
+106
+107
+108
+109
+110
+111
+112
+113
+114
+115
+116
+117
+118
+119
+120
+121
+122
+123
+124
+125
+126
+127
+128
+129
+130
+131
+132
+133
+134
+135
+136
+137
+138
+139
+140
+141
+142
+143
+144
+145
+146
+
+
+ # File 'manifests/params.pp', line 58
+
+class haproxy_cd::params (
+
+ String $pkg_ensure = 'latest',
+ Array $reqpackages = ['haproxy','httpd-tools'],
+
+ String $hy_host_fqdn = undef,
+
+# firewall
+ Boolean $hy_manage_fw = true,
+ String $hy_fw_order_no = '50',
+
+# fail2ban
+ Boolean $hy_manage_fail2ban = false,
+
+# main config
+ String $hy_http_port = '80',
+ String $hy_https_port = '443',
+ String $hy_chroot = '/var/lib/haproxy',
+ String $hy_pid = '/var/run/haproxy.pid',
+ String $hy_maxconn = '4000',
+ Boolean $hy_show_stats = false,
+ String $hy_stats_socket = '/var/lib/haproxy/stats',
+ String $hy_default_mode = 'tcp',
+ Boolean $hy_use_http_server_close = false,
+ Boolean $hy_use_forward_for = false,
+ Boolean $hy_use_redispatch = true,
+ String $hy_max_retries = '3',
+ String $hy_timeout_http_request = '10s',
+ String $hy_timeout_queue = '1m',
+ String $hy_timeout_connect = '10s',
+ String $hy_timeout_client = '1m',
+ String $hy_timeout_server = '1m',
+ String $hy_timeout_http_keep_alive = '10s',
+ String $hy_timeout_check = '10s',
+ Boolean $hy_hard_stop = true,
+ String $hy_hard_stop_value = '60s',
+ String $hy_stats_auth = 'admin:password',
+
+# user
+ String $hy_user_name = 'haproxy',
+ String $hy_user_comment = 'haproxy user',
+ String $hy_user_home = '/var/lib/haproxy',
+ String $hy_user_shell = '/sbin/nologin',
+
+# logging
+ String $hy_log_local0 = '127.0.0.1:514 local0',
+ String $hy_log_local1 = '127.0.0.1:514 local1 notice',
+ String $hy_log_target = '127.0.0.1',
+ String $hy_log_facility = 'local2',
+ String $hy_log_default = 'global',
+ Boolean $hy_use_tcplog = true,
+ Boolean $hy_use_httplog = false,
+ Boolean $hy_use_dontlognull = true,
+ Boolean $hy_manage_be_users = false,
+ String $hy_be_userlist = '####',
+
+) {
+ $fqdn = $facts['networking']['fqdn']
+
+ # service
+ $hy_service = 'haproxy'
+
+ # directories
+ $hy_main_dir = '/etc/haproxy'
+ $hy_errors_dir = "${hy_main_dir}/errors"
+ $hy_certs_dir = "${hy_main_dir}/certs"
+
+ # files
+ $hy_main_config = "${hy_main_dir}/haproxy.cfg"
+ $hy_config_head_erb = 'haproxy_cd/haproxy_head.erb'
+ $hy_config_tail_erb = 'haproxy_cd/haproxy_tail.erb'
+ $hy_400_file = "${hy_errors_dir}/400.http"
+ $hy_400_erb = 'haproxy_cd/errors/400_http.erb'
+ $hy_403_file = "${hy_errors_dir}/403.http"
+ $hy_403_erb = 'haproxy_cd/errors/403_http.erb'
+ $hy_408_file = "${hy_errors_dir}/408.http"
+ $hy_408_erb = 'haproxy_cd/errors/408_http.erb'
+ $hy_500_file = "${hy_errors_dir}/500.http"
+ $hy_500_erb = 'haproxy_cd/errors/500_http.erb'
+ $hy_502_file = "${hy_errors_dir}/502.http"
+ $hy_502_erb = 'haproxy_cd/errors/502_http.erb'
+ $hy_503_file = "${hy_errors_dir}/503.http"
+ $hy_503_erb = 'haproxy_cd/errors/503_http.erb'
+ $hy_504_file = "${hy_errors_dir}/504.http"
+ $hy_504_erb = 'haproxy_cd/errors/504_http.erb'
+
+ # includes must be last
+ include haproxy_cd::main::config
+}
+
+
+
+
+
+
+
+
+ Puppet Class: haproxy_cd::server::service
+
+ — Documentation by YARD 0.9.36
+
+
+
+
+
+
+
Puppet Class: haproxy_cd::server::service
+
+
+
+ Inherits:
+ haproxy_cd::params
+
+
+
+ Defined in:
+
+ manifests/server/service.pp
+
+
+
+
+
Summary
+ Class manages the service(s) for haproxy_cd.
+
+
Overview
+
+
+
+
haproxy_cd::server::service.pp Module name: haproxy_cd Author: Arne Teuke (arne_teuke@confdroid.com)
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+6
+7
+8
+9
+10
+11
+12
+13
+14
+15
+16
+17
+18
+19
+20
+
+
+ # File 'manifests/server/service.pp', line 6
+
+class haproxy_cd::server::service (
+
+) inherits haproxy_cd::params {
+ if $fqdn == $hy_host_fqdn {
+ require haproxy_cd::firewall::iptables
+ require haproxy_cd::main::files
+
+ service { $hy_service:
+ ensure => running,
+ hasstatus => true,
+ hasrestart => true,
+ enable => true,
+ }
+ }
+}
+
+
+
+
+
+
+
+
Defined Type List
+
+ Defined Type: haproxy_cd::server::proxy
+
+ — Documentation by YARD 0.9.36
+
+
+
+
+
+
+
Defined Type: haproxy_cd::server::proxy
+
+
+ Defined in:
+
+ manifests/server/proxy.pp
+
+
+
+
+
Summary
+ Define manages the proxies for haproxy_cd.
+
+
Overview
+
+
+
+
haproxy_cd::server::proxy.pp Module name: haproxy_cd Author: Arne Teuke (arne_teuke@ConfDroid.com)
+
+
+
+
+
+
+
+
+
+
+
+
+
+34
+35
+36
+37
+38
+39
+40
+41
+42
+43
+44
+45
+46
+47
+48
+49
+50
+51
+52
+53
+54
+55
+56
+57
+58
+59
+60
+61
+62
+63
+64
+65
+66
+67
+68
+69
+70
+71
+72
+73
+74
+75
+76
+77
+78
+79
+80
+81
+82
+83
+84
+85
+86
+87
+88
+89
+90
+91
+92
+93
+94
+95
+96
+
+
+ # File 'manifests/server/proxy.pp', line 34
+
+define haproxy_cd::server::proxy (
+
+ String $haproxy_fqdn = undef,
+ String $frontend_name = undef,
+ String $frontend_mode = undef,
+ String $fe_use_backend = '',
+ String $fe_bind_mode = undef,
+ String $fe_option = '',
+ String $frontend_order = '010',
+ String $acl_rule_front = '',
+ String $acl_rule_back = '',
+ String $backend_name = '',
+ String $backend_order = '030',
+ String $fe_maxconn = '',
+ String $be_server_name = '',
+ String $be_balance = '',
+ String $be_mode = '',
+ String $default_backend = '',
+ String $be_option = '',
+ String $fe_tcp_request = '',
+ String $fe_http_request = '',
+ Array $backend_configs = [],
+ String $be_stick_table = '',
+ String $be_stick_on = '',
+ String $be_http_check = '',
+ String $be_http_request = '',
+ String $be_acl_rule = '',
+
+) {
+ $fqdn = $facts['networking']['fqdn']
+
+ $hy_main_config = '/etc/haproxy/haproxy.cfg'
+ $hy_frontendrule = 'haproxy_cd/haproxy_frontend_rule.erb'
+ $hy_backendrule = 'haproxy_cd/haproxy_backend_rule.erb'
+ $hy_acl_rule = 'haproxy_cd/haproxy_acl_rule.erb'
+
+ # Ensure acl_rule_front and acl_rule_back are arrays
+ $acl_rule_front_array = split($acl_rule_front, ';')
+ $acl_rule_back_array = split($acl_rule_back, ';')
+ $fe_use_backend_array = split($fe_use_backend,';')
+ $backend_name_array = split($backend_name, ';')
+ $be_server_name_array = split($be_server_name, ';')
+ $be_option_array = split($be_option, ';')
+ $fe_tcp_request_array = split($fe_tcp_request, ';')
+ $fe_option_array = split($fe_option, ';')
+ $fe_http_request_array = split($fe_http_request, ';')
+
+ # create frontend section
+ concat::fragment { "frontend_${name}":
+ target => $hy_main_config,
+ content => template($hy_frontendrule),
+ order => $frontend_order,
+ }
+
+ # Ensure backends are only created once
+ ensure_resource('concat::fragment', "backends_${name}", {
+ 'target' => $hy_main_config,
+ 'content' => template($hy_backendrule),
+ 'order' => $backend_order,
+ })
+
+ # open specific firewall ports
+}
+
+
+
+
+
+
+
+
+ Top Level Namespace
+
+ — Documentation by YARD 0.9.36
+
+
+
+
+
+
+
Top Level Namespace
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+