confdroid/confdroid_haproxy
1
0
Fork 0
Code Issues Actions Packages Projects Releases Wiki Activity

lint pproxy params

Browse Source
This commit is contained in:
Arne Teuke
2025-03-02 17:26:09 +01:00
parent f09b452830
commit 7b457b232e
10 changed files with 223 additions and 234 deletions
Download Patch File Download Diff File Expand all files Collapse all files

4
manifests/firewall/iptables.pp
View File

@@ -6,11 +6,7 @@
class haproxy_cd::firewall::iptables ( class haproxy_cd::firewall::iptables (
) inherits haproxy_cd::params { ) inherits haproxy_cd::params {
if ($fqdn == $hy_host_fqdn) and ($hy_manage_fw == true) { if ($fqdn == $hy_host_fqdn) and ($hy_manage_fw == true) {
require haproxy_cd::main::files
firewall { "${hy_fw_order_no}${hy_http_port} tcp port ${hy_http_port}": firewall { "${hy_fw_order_no}${hy_http_port} tcp port ${hy_http_port}":
proto => 'tcp', proto => 'tcp',
dport => $hy_http_port, dport => $hy_http_port,

6
manifests/main/config.pp
View File

@@ -1,18 +1,14 @@
## haproxy_cd::main::config.pp ## haproxy_cd::main::config.pp
# Module name: haproxy_cd # Module name: haproxy_cd
# Author: Arne Teuke (arne_teuke@confdroid.com) # Author: Arne Teuke (arne_teuke@confdroid.com)
# @summary Class manages all aspects of configuring the module logic for # @summary Class manages module logic for haproxy_cd.
# haproxy_cd.
############################################################################## ##############################################################################
class haproxy_cd::main::config ( class haproxy_cd::main::config (
) inherits haproxy_cd::params { ) inherits haproxy_cd::params {
include haproxy_cd::server::service include haproxy_cd::server::service
if $hy_manage_fail2ban == true { if $hy_manage_fail2ban == true {
include haproxy_cd::monitoring::fail2ban include haproxy_cd::monitoring::fail2ban
} }
} }

1
manifests/main/dirs.pp
View File

@@ -6,7 +6,6 @@
class haproxy_cd::main::dirs ( class haproxy_cd::main::dirs (
) inherits haproxy_cd::params { ) inherits haproxy_cd::params {
if $fqdn == $hy_host_fqdn { if $fqdn == $hy_host_fqdn {
require haproxy_cd::main::user require haproxy_cd::main::user

7
manifests/main/files.pp
View File

@@ -6,7 +6,6 @@
class haproxy_cd::main::files ( class haproxy_cd::main::files (
) inherits haproxy_cd::params { ) inherits haproxy_cd::params {
if $fqdn == $hy_host_fqdn { if $fqdn == $hy_host_fqdn {
require haproxy_cd::main::dirs require haproxy_cd::main::dirs
@@ -30,7 +29,6 @@ class haproxy_cd::main::files (
order => '001', order => '001',
} }
# create the header # create the header
concat::fragment { 'tail': concat::fragment { 'tail':
target => $hy_main_config, target => $hy_main_config,
@@ -38,7 +36,6 @@ class haproxy_cd::main::files (
order => '100', order => '100',
} }
# pid file # pid file
file { $hy_pid: file { $hy_pid:
ensure => file, ensure => file,
@@ -143,7 +140,7 @@ class haproxy_cd::main::files (
notify => Service[$hy_service], notify => Service[$hy_service],
} }
# make sure rsyslog is logging haproxy logs # make sure syslog is logging haproxy logs
file { '/etc/rsyslog.d/10-haproxy.conf': file { '/etc/rsyslog.d/10-haproxy.conf':
ensure => file, ensure => file,
@@ -155,7 +152,7 @@ class haproxy_cd::main::files (
seltype => syslog_conf_t, seltype => syslog_conf_t,
seluser => system_u, seluser => system_u,
content => template('haproxy_cd/rsyslog/10_haproxy.conf.erb'), content => template('haproxy_cd/rsyslog/10_haproxy.conf.erb'),
# notify => Service['rsyslog'], # only if using cd_rsyslog # notify => Service['rsyslog'], # only if using rsyslog_cd module
} }
} }
} }

4
manifests/main/install.pp
View File

@@ -1,13 +1,11 @@
## haproxy_cd::main::install.pp ## haproxy_cd::main::install.pp
# Module name: haproxy_cd # Module name: haproxy_cd
# Author: Arne Teuke (arne_teuke@confdroid.com) # Author: Arne Teuke (arne_teuke@confdroid.com)
# @summary Class manage all aspects of installing binaries required for # @summary Class installs binaries required for haproxy_cd
# haproxy_cd
############################################################################### ###############################################################################
class haproxy_cd::main::install ( class haproxy_cd::main::install (
) inherits haproxy_cd::params { ) inherits haproxy_cd::params {
if $fqdn == $hy_host_fqdn { if $fqdn == $hy_host_fqdn {
package { $reqpackages: package { $reqpackages:
ensure => $pkg_ensure, ensure => $pkg_ensure,

1
manifests/main/user.pp
View File

@@ -6,7 +6,6 @@
class haproxy_cd::main::user ( class haproxy_cd::main::user (
) inherits haproxy_cd::params { ) inherits haproxy_cd::params {
if $fqdn == $hy_host_fqdn { if $fqdn == $hy_host_fqdn {
require haproxy_cd::main::install require haproxy_cd::main::install

4
manifests/monitoring/fail2ban.pp
View File

@@ -5,10 +5,8 @@
class haproxy_cd::monitoring::fail2ban ( class haproxy_cd::monitoring::fail2ban (
) inherits haproxy_cd::params { ) inherits haproxy_cd::params {
if $hy_manage_fail2ban == true { if $hy_manage_fail2ban == true {
require fail2ban_cd # (external module)
require cd_fail2ban
# configure filter # configure filter

2
manifests/params.pp
View File

@@ -130,6 +130,8 @@ class haproxy_cd::params (
String $hy_be_userlist = '####', String $hy_be_userlist = '####',
) { ) {
$fqdn = $facts['networking']['fqdn']
# service # service
$hy_service = 'haproxy' $hy_service = 'haproxy'

81
manifests/server/proxy.pp
View File

@@ -4,60 +4,67 @@
# @summary Define manages the proxies for haproxy_cd. # @summary Define manages the proxies for haproxy_cd.
# @param [string] haproxy_fqdn the fqdn of the haproxy server in question. # @param [string] haproxy_fqdn the fqdn of the haproxy server in question.
# @param [string] frontend_name the name for the frontend section rule. # @param [string] frontend_name the name for the frontend section rule.
# @param [string] frontend_order the order where the concat should appear # @param [string] frontend_order where the concat should appear in the file.
# in the file.
# @param [string] frontend_mode mode for the loadbalancer instance: http or tcp # @param [string] frontend_mode mode for the loadbalancer instance: http or tcp
# @param [string] fe_use_backend which backend to use. if left empty, the # @param [string] fe_use_backend which backend to use. if left empty, the
# default backend will be used. # default backend will be used.
# @param [string] fe_bind_mode which bind mode to use, i.e. to which interface # @param [string] fe_bind_mode which bind mode to use, i.e. to which interface
# and poort to bind. # and port to bind.
# @param [string] acl_rule an ACL rule to be inserted if required. Empty values
# will not be populated.
# @param [string] acl_order the order where the acl rule should be inserted,
# so it will be within the correct lb instance configuration.
# @param [string] backend_name the backend name to be used for the rule. # @param [string] backend_name the backend name to be used for the rule.
# @param [string] backend_order the order for the backend name, so it will be # @param [string] backend_order the order for the backend name, so it will be
# within the correct lb instance configuration. # within the correct lb instance configuration.
# @param [string] fe_maxconn the maximum connections for the lb instance. # @param [string] fe_maxconn the maximum connections for the lb instance.
# @param [string] be_server_name set the name for the backend server # @param [string] be_server_name set the name for the backend server
# @param [string] be_balance what kind of balance should be used
# @param [string] be_mode which backend mode should be used
# @param [string] default_backend value for the default backend
# @param [string] be_option value for a backend option
# @param [string] fe_tcp_request value for a frontend tcp request
# @param [string] fe_http_request value for a frontend http request
# @param [string] fe_option value for a frontend option
# @param [string] acl_rule_front value for a frontend acl rule
# @param [string] acl_rule_back value for a backend acl rule
# @param [array] backend_configs array of values for the backend
# @param [string] be_stick_table value for the backend stickiness
# @param [string] be_stick_on value for th backend stickiness
# @param [string] be_http_check value for backend http check
# @param [string] be_http_request value for a backend http request
# @param [string] be_acl_rule value for a backend acl rule
############################################################################### ###############################################################################
define haproxy_cd::server::proxy ( define haproxy_cd::server::proxy (
$haproxy_fqdn = undef, String $haproxy_fqdn = undef,
$frontend_name = undef, String $frontend_name = undef,
$frontend_mode = undef, String $frontend_mode = undef,
$fe_use_backend = '', String $fe_use_backend = '',
$fe_bind_mode = undef, String $fe_bind_mode = undef,
$fe_option = '', String $fe_option = '',
$frontend_order = '010', String $frontend_order = '010',
$acl_rule_front = '', String $acl_rule_front = '',
$acl_rule_back = '', String $acl_rule_back = '',
$backend_name = '', String $backend_name = '',
$backend_order = '030', String $backend_order = '030',
$fe_maxconn = '', String $fe_maxconn = '',
$be_server_name = '', String $be_server_name = '',
$be_balance = '', String $be_balance = '',
$be_mode = '', String $be_mode = '',
$default_backend = '', String $default_backend = '',
$be_option = '', String $be_option = '',
$fe_tcp_request = '', String $fe_tcp_request = '',
$fe_http_request = '', String $fe_http_request = '',
$backend_configs = [], Array $backend_configs = [],
$be_stick_table = '', String $be_stick_table = '',
$be_stick_on = '', String $be_stick_on = '',
$be_http_check = '', String $be_http_check = '',
$be_http_request = '', String $be_http_request = '',
$be_acl_rule = '', String $be_acl_rule = '',
) { ) {
$hy_main_config = '/etc/haproxy/haproxy.cfg' $hy_main_config = '/etc/haproxy/haproxy.cfg'
$hy_frontendrule = 'haproxy_cd/haproxy_frontend_rule.erb' $hy_frontendrule = 'haproxy_cd/haproxy_frontend_rule.erb'
$hy_backendrule = 'haproxy_cd/haproxy_backend_rule.erb' $hy_backendrule = 'haproxy_cd/haproxy_backend_rule.erb'
$hy_acl_rule = 'haproxy_cd/haproxy_acl_rule.erb' $hy_acl_rule = 'haproxy_cd/haproxy_acl_rule.erb'
# Ensure acl_rule_front and acl_rule_back are arrays # Ensure acl_rule_front and acl_rule_back are arrays
$acl_rule_front_array = split($acl_rule_front, ';') $acl_rule_front_array = split($acl_rule_front, ';')
$acl_rule_back_array = split($acl_rule_back, ';') $acl_rule_back_array = split($acl_rule_back, ';')
@@ -83,7 +90,5 @@ define haproxy_cd::server::proxy (
'order' => $backend_order, 'order' => $backend_order,
}) })
# open sepcific firewall ports # open specific firewall ports
} }

3
manifests/server/service.pp
View File

@@ -6,10 +6,9 @@
class haproxy_cd::server::service ( class haproxy_cd::server::service (
) inherits haproxy_cd::params { ) inherits haproxy_cd::params {
if $fqdn == $hy_host_fqdn { if $fqdn == $hy_host_fqdn {
require haproxy_cd::firewall::iptables require haproxy_cd::firewall::iptables
require haproxy_cd::main::files
service { $hy_service: service { $hy_service:
ensure => running, ensure => running,