confdroid/confdroid_haproxy
1
0
Fork 0
Code Issues Actions Packages Projects Releases Wiki Activity

lint pproxy params

Browse Source
This commit is contained in:
Arne Teuke
2025-03-02 17:26:09 +01:00
parent f09b452830
commit 7b457b232e
10 changed files with 223 additions and 234 deletions
Download Patch File Download Diff File Expand all files Collapse all files

213
manifests/main/files.pp
View File

@@ -6,156 +6,153 @@
class haproxy_cd::main::files (
) inherits haproxy_cd::params {
if $fqdn == $hy_host_fqdn {
require haproxy_cd::main::dirs
# create the concat target
concat {$hy_main_config:
ensure => present,
owner => 'root',
group => 'root',
mode => '0640',
selrange => s0,
selrole => object_r,
seltype => etc_t,
seluser => system_u,
notify => Service[$hy_service],
concat { $hy_main_config:
ensure => present,
owner => 'root',
group => 'root',
mode => '0640',
selrange => s0,
selrole => object_r,
seltype => etc_t,
seluser => system_u,
notify => Service[$hy_service],
}
# create the header
concat::fragment { 'header':
target => $hy_main_config,
content => template($hy_config_head_erb),
order => '001',
target => $hy_main_config,
content => template($hy_config_head_erb),
order => '001',
}
# create the header
concat::fragment { 'tail':
target => $hy_main_config,
content => template($hy_config_tail_erb),
order => '100',
target => $hy_main_config,
content => template($hy_config_tail_erb),
order => '100',
}
# pid file
file { $hy_pid:
ensure => file,
owner => 'root',
group => 'root',
mode => '0644',
selrange => s0,
selrole => object_r,
seltype => haproxy_var_run_t,
seluser => system_u,
ensure => file,
owner => 'root',
group => 'root',
mode => '0644',
selrange => s0,
selrole => object_r,
seltype => haproxy_var_run_t,
seluser => system_u,
}
# error files
file { $hy_400_file:
ensure => file,
owner => 'root',
group => 'root',
mode => '0644',
selrange => s0,
selrole => object_r,
seltype => etc_t,
seluser => system_u,
content => template($hy_400_erb),
notify => Service[$hy_service],
ensure => file,
owner => 'root',
group => 'root',
mode => '0644',
selrange => s0,
selrole => object_r,
seltype => etc_t,
seluser => system_u,
content => template($hy_400_erb),
notify => Service[$hy_service],
}
file { $hy_403_file:
ensure => file,
owner => 'root',
group => 'root',
mode => '0644',
selrange => s0,
selrole => object_r,
seltype => etc_t,
seluser => system_u,
content => template($hy_403_erb),
notify => Service[$hy_service],
ensure => file,
owner => 'root',
group => 'root',
mode => '0644',
selrange => s0,
selrole => object_r,
seltype => etc_t,
seluser => system_u,
content => template($hy_403_erb),
notify => Service[$hy_service],
}
file { $hy_408_file:
ensure => file,
owner => 'root',
group => 'root',
mode => '0644',
selrange => s0,
selrole => object_r,
seltype => etc_t,
seluser => system_u,
content => template($hy_408_erb),
notify => Service[$hy_service],
ensure => file,
owner => 'root',
group => 'root',
mode => '0644',
selrange => s0,
selrole => object_r,
seltype => etc_t,
seluser => system_u,
content => template($hy_408_erb),
notify => Service[$hy_service],
}
file { $hy_500_file:
ensure => file,
owner => 'root',
group => 'root',
mode => '0644',
selrange => s0,
selrole => object_r,
seltype => etc_t,
seluser => system_u,
content => template($hy_500_erb),
notify => Service[$hy_service],
ensure => file,
owner => 'root',
group => 'root',
mode => '0644',
selrange => s0,
selrole => object_r,
seltype => etc_t,
seluser => system_u,
content => template($hy_500_erb),
notify => Service[$hy_service],
}
file { $hy_502_file:
ensure => file,
owner => 'root',
group => 'root',
mode => '0644',
selrange => s0,
selrole => object_r,
seltype => etc_t,
seluser => system_u,
content => template($hy_502_erb),
notify => Service[$hy_service],
ensure => file,
owner => 'root',
group => 'root',
mode => '0644',
selrange => s0,
selrole => object_r,
seltype => etc_t,
seluser => system_u,
content => template($hy_502_erb),
notify => Service[$hy_service],
}
file { $hy_503_file:
ensure => file,
owner => 'root',
group => 'root',
mode => '0644',
selrange => s0,
selrole => object_r,
seltype => etc_t,
seluser => system_u,
content => template($hy_503_erb),
notify => Service[$hy_service],
ensure => file,
owner => 'root',
group => 'root',
mode => '0644',
selrange => s0,
selrole => object_r,
seltype => etc_t,
seluser => system_u,
content => template($hy_503_erb),
notify => Service[$hy_service],
}
file { $hy_504_file:
ensure => file,
owner => 'root',
group => 'root',
mode => '0644',
selrange => s0,
selrole => object_r,
seltype => etc_t,
seluser => system_u,
content => template($hy_504_erb),
notify => Service[$hy_service],
ensure => file,
owner => 'root',
group => 'root',
mode => '0644',
selrange => s0,
selrole => object_r,
seltype => etc_t,
seluser => system_u,
content => template($hy_504_erb),
notify => Service[$hy_service],
}
# make sure rsyslog is logging haproxy logs
# make sure syslog is logging haproxy logs
file { '/etc/rsyslog.d/10-haproxy.conf':
ensure => file,
owner => 'root',
group => 'root',
mode => '0644',
selrange => s0,
selrole => object_r,
seltype => syslog_conf_t,
seluser => system_u,
content => template('haproxy_cd/rsyslog/10_haproxy.conf.erb'),
# notify => Service['rsyslog'], # only if using cd_rsyslog
ensure => file,
owner => 'root',
group => 'root',
mode => '0644',
selrange => s0,
selrole => object_r,
seltype => syslog_conf_t,
seluser => system_u,
content => template('haproxy_cd/rsyslog/10_haproxy.conf.erb'),
# notify => Service['rsyslog'], # only if using rsyslog_cd module
}
}
}