confdroid/confdroid_haproxy
1
0
Fork 0
Code Issues Actions Packages Projects Releases Wiki Activity

lint pproxy params

Browse Source
This commit is contained in:
Arne Teuke
2025-03-02 17:26:09 +01:00
parent f09b452830
commit 7b457b232e
10 changed files with 223 additions and 234 deletions
Download Patch File Download Diff File Expand all files Collapse all files

6
manifests/main/config.pp
View File

@@ -1,18 +1,14 @@
## haproxy_cd::main::config.pp
# Module name: haproxy_cd
# Author: Arne Teuke (arne_teuke@confdroid.com)
# @summary Class manages all aspects of configuring the module logic for
# haproxy_cd.
# @summary Class manages module logic for haproxy_cd.
##############################################################################
class haproxy_cd::main::config (
) inherits haproxy_cd::params {
include haproxy_cd::server::service
if $hy_manage_fail2ban == true {
include haproxy_cd::monitoring::fail2ban
}
}

33
manifests/main/dirs.pp
View File

@@ -6,32 +6,31 @@
class haproxy_cd::main::dirs (
) inherits haproxy_cd::params {
if $fqdn == $hy_host_fqdn {
require haproxy_cd::main::user
# main dir
file { $hy_main_dir:
ensure => directory,
owner => 'root',
group => 'root',
mode => '0755',
selrange => s0,
selrole => object_r,
seltype => etc_t,
seluser => system_u,
ensure => directory,
owner => 'root',
group => 'root',
mode => '0755',
selrange => s0,
selrole => object_r,
seltype => etc_t,
seluser => system_u,
}
# errors dir
file { $hy_errors_dir:
ensure => directory,
owner => 'root',
group => 'root',
mode => '0755',
selrange => s0,
selrole => object_r,
seltype => etc_t,
seluser => system_u,
ensure => directory,
owner => 'root',
group => 'root',
mode => '0755',
selrange => s0,
selrole => object_r,
seltype => etc_t,
seluser => system_u,
}
}
}

213
manifests/main/files.pp
View File

@@ -6,156 +6,153 @@
class haproxy_cd::main::files (
) inherits haproxy_cd::params {
if $fqdn == $hy_host_fqdn {
require haproxy_cd::main::dirs
# create the concat target
concat {$hy_main_config:
ensure => present,
owner => 'root',
group => 'root',
mode => '0640',
selrange => s0,
selrole => object_r,
seltype => etc_t,
seluser => system_u,
notify => Service[$hy_service],
concat { $hy_main_config:
ensure => present,
owner => 'root',
group => 'root',
mode => '0640',
selrange => s0,
selrole => object_r,
seltype => etc_t,
seluser => system_u,
notify => Service[$hy_service],
}
# create the header
concat::fragment { 'header':
target => $hy_main_config,
content => template($hy_config_head_erb),
order => '001',
target => $hy_main_config,
content => template($hy_config_head_erb),
order => '001',
}
# create the header
concat::fragment { 'tail':
target => $hy_main_config,
content => template($hy_config_tail_erb),
order => '100',
target => $hy_main_config,
content => template($hy_config_tail_erb),
order => '100',
}
# pid file
file { $hy_pid:
ensure => file,
owner => 'root',
group => 'root',
mode => '0644',
selrange => s0,
selrole => object_r,
seltype => haproxy_var_run_t,
seluser => system_u,
ensure => file,
owner => 'root',
group => 'root',
mode => '0644',
selrange => s0,
selrole => object_r,
seltype => haproxy_var_run_t,
seluser => system_u,
}
# error files
file { $hy_400_file:
ensure => file,
owner => 'root',
group => 'root',
mode => '0644',
selrange => s0,
selrole => object_r,
seltype => etc_t,
seluser => system_u,
content => template($hy_400_erb),
notify => Service[$hy_service],
ensure => file,
owner => 'root',
group => 'root',
mode => '0644',
selrange => s0,
selrole => object_r,
seltype => etc_t,
seluser => system_u,
content => template($hy_400_erb),
notify => Service[$hy_service],
}
file { $hy_403_file:
ensure => file,
owner => 'root',
group => 'root',
mode => '0644',
selrange => s0,
selrole => object_r,
seltype => etc_t,
seluser => system_u,
content => template($hy_403_erb),
notify => Service[$hy_service],
ensure => file,
owner => 'root',
group => 'root',
mode => '0644',
selrange => s0,
selrole => object_r,
seltype => etc_t,
seluser => system_u,
content => template($hy_403_erb),
notify => Service[$hy_service],
}
file { $hy_408_file:
ensure => file,
owner => 'root',
group => 'root',
mode => '0644',
selrange => s0,
selrole => object_r,
seltype => etc_t,
seluser => system_u,
content => template($hy_408_erb),
notify => Service[$hy_service],
ensure => file,
owner => 'root',
group => 'root',
mode => '0644',
selrange => s0,
selrole => object_r,
seltype => etc_t,
seluser => system_u,
content => template($hy_408_erb),
notify => Service[$hy_service],
}
file { $hy_500_file:
ensure => file,
owner => 'root',
group => 'root',
mode => '0644',
selrange => s0,
selrole => object_r,
seltype => etc_t,
seluser => system_u,
content => template($hy_500_erb),
notify => Service[$hy_service],
ensure => file,
owner => 'root',
group => 'root',
mode => '0644',
selrange => s0,
selrole => object_r,
seltype => etc_t,
seluser => system_u,
content => template($hy_500_erb),
notify => Service[$hy_service],
}
file { $hy_502_file:
ensure => file,
owner => 'root',
group => 'root',
mode => '0644',
selrange => s0,
selrole => object_r,
seltype => etc_t,
seluser => system_u,
content => template($hy_502_erb),
notify => Service[$hy_service],
ensure => file,
owner => 'root',
group => 'root',
mode => '0644',
selrange => s0,
selrole => object_r,
seltype => etc_t,
seluser => system_u,
content => template($hy_502_erb),
notify => Service[$hy_service],
}
file { $hy_503_file:
ensure => file,
owner => 'root',
group => 'root',
mode => '0644',
selrange => s0,
selrole => object_r,
seltype => etc_t,
seluser => system_u,
content => template($hy_503_erb),
notify => Service[$hy_service],
ensure => file,
owner => 'root',
group => 'root',
mode => '0644',
selrange => s0,
selrole => object_r,
seltype => etc_t,
seluser => system_u,
content => template($hy_503_erb),
notify => Service[$hy_service],
}
file { $hy_504_file:
ensure => file,
owner => 'root',
group => 'root',
mode => '0644',
selrange => s0,
selrole => object_r,
seltype => etc_t,
seluser => system_u,
content => template($hy_504_erb),
notify => Service[$hy_service],
ensure => file,
owner => 'root',
group => 'root',
mode => '0644',
selrange => s0,
selrole => object_r,
seltype => etc_t,
seluser => system_u,
content => template($hy_504_erb),
notify => Service[$hy_service],
}
# make sure rsyslog is logging haproxy logs
# make sure syslog is logging haproxy logs
file { '/etc/rsyslog.d/10-haproxy.conf':
ensure => file,
owner => 'root',
group => 'root',
mode => '0644',
selrange => s0,
selrole => object_r,
seltype => syslog_conf_t,
seluser => system_u,
content => template('haproxy_cd/rsyslog/10_haproxy.conf.erb'),
# notify => Service['rsyslog'], # only if using cd_rsyslog
ensure => file,
owner => 'root',
group => 'root',
mode => '0644',
selrange => s0,
selrole => object_r,
seltype => syslog_conf_t,
seluser => system_u,
content => template('haproxy_cd/rsyslog/10_haproxy.conf.erb'),
# notify => Service['rsyslog'], # only if using rsyslog_cd module
}
}
}

6
manifests/main/install.pp
View File

@@ -1,15 +1,13 @@
## haproxy_cd::main::install.pp
# Module name: haproxy_cd
# Author: Arne Teuke (arne_teuke@confdroid.com)
# @summary Class manage all aspects of installing binaries required for
# haproxy_cd
# @summary Class installs binaries required for haproxy_cd
###############################################################################
class haproxy_cd::main::install (
) inherits haproxy_cd::params {
if $fqdn == $hy_host_fqdn {
package {$reqpackages:
package { $reqpackages:
ensure => $pkg_ensure,
}
}

23
manifests/main/user.pp
View File

@@ -6,26 +6,25 @@
class haproxy_cd::main::user (
) inherits haproxy_cd::params {
if $fqdn == $hy_host_fqdn {
require haproxy_cd::main::install
# manage user
user { $hy_user_name:
ensure => present,
name => $hy_user_name,
allowdupe => false,
comment => $hy_user_comment,
gid => $hy_user_name,
managehome => true,
home => $hy_user_home,
shell => $hy_user_shell,
ensure => present,
name => $hy_user_name,
allowdupe => false,
comment => $hy_user_comment,
gid => $hy_user_name,
managehome => true,
home => $hy_user_home,
shell => $hy_user_shell,
}
group { $hy_user_name:
ensure => present,
name => $hy_user_name,
allowdupe => false,
ensure => present,
name => $hy_user_name,
allowdupe => false,
}
}
}