confdroid/confdroid_haproxy
1
0
Fork 0
Code Issues Actions Packages Projects Releases Wiki Activity

lint pproxy params

Browse Source
This commit is contained in:
Arne Teuke
2025-03-02 17:26:09 +01:00
parent f09b452830
commit 7b457b232e
10 changed files with 223 additions and 234 deletions
Download Patch File Download Diff File Expand all files Collapse all files

4
manifests/firewall/iptables.pp
View File

@@ -6,11 +6,7 @@
class haproxy_cd::firewall::iptables (
) inherits haproxy_cd::params {
if ($fqdn == $hy_host_fqdn) and ($hy_manage_fw == true) {
require haproxy_cd::main::files
firewall { "${hy_fw_order_no}${hy_http_port} tcp port ${hy_http_port}":
proto => 'tcp',
dport => $hy_http_port,

6
manifests/main/config.pp
View File

@@ -1,18 +1,14 @@
## haproxy_cd::main::config.pp
# Module name: haproxy_cd
# Author: Arne Teuke (arne_teuke@confdroid.com)
# @summary Class manages all aspects of configuring the module logic for
# haproxy_cd.
# @summary Class manages module logic for haproxy_cd.
##############################################################################
class haproxy_cd::main::config (
) inherits haproxy_cd::params {
include haproxy_cd::server::service
if $hy_manage_fail2ban == true {
include haproxy_cd::monitoring::fail2ban
}
}

1
manifests/main/dirs.pp
View File

@@ -6,7 +6,6 @@
class haproxy_cd::main::dirs (
) inherits haproxy_cd::params {
if $fqdn == $hy_host_fqdn {
require haproxy_cd::main::user

7
manifests/main/files.pp
View File

@@ -6,7 +6,6 @@
class haproxy_cd::main::files (
) inherits haproxy_cd::params {
if $fqdn == $hy_host_fqdn {
require haproxy_cd::main::dirs
@@ -30,7 +29,6 @@ class haproxy_cd::main::files (
order => '001',
}
# create the header
concat::fragment { 'tail':
target => $hy_main_config,
@@ -38,7 +36,6 @@ class haproxy_cd::main::files (
order => '100',
}
# pid file
file { $hy_pid:
ensure => file,
@@ -143,7 +140,7 @@ class haproxy_cd::main::files (
notify => Service[$hy_service],
}
# make sure rsyslog is logging haproxy logs
# make sure syslog is logging haproxy logs
file { '/etc/rsyslog.d/10-haproxy.conf':
ensure => file,
@@ -155,7 +152,7 @@ class haproxy_cd::main::files (
seltype => syslog_conf_t,
seluser => system_u,
content => template('haproxy_cd/rsyslog/10_haproxy.conf.erb'),
# notify => Service['rsyslog'], # only if using cd_rsyslog
# notify => Service['rsyslog'], # only if using rsyslog_cd module
}
}
}

4
manifests/main/install.pp
View File

@@ -1,13 +1,11 @@
## haproxy_cd::main::install.pp
# Module name: haproxy_cd
# Author: Arne Teuke (arne_teuke@confdroid.com)
# @summary Class manage all aspects of installing binaries required for
# haproxy_cd
# @summary Class installs binaries required for haproxy_cd
###############################################################################
class haproxy_cd::main::install (
) inherits haproxy_cd::params {
if $fqdn == $hy_host_fqdn {
package { $reqpackages:
ensure => $pkg_ensure,

1
manifests/main/user.pp
View File

@@ -6,7 +6,6 @@
class haproxy_cd::main::user (
) inherits haproxy_cd::params {
if $fqdn == $hy_host_fqdn {
require haproxy_cd::main::install

4
manifests/monitoring/fail2ban.pp
View File

@@ -5,10 +5,8 @@
class haproxy_cd::monitoring::fail2ban (
) inherits haproxy_cd::params {
if $hy_manage_fail2ban == true {
require cd_fail2ban
require fail2ban_cd # (external module)
# configure filter

2
manifests/params.pp
View File

@@ -130,6 +130,8 @@ class haproxy_cd::params (
String $hy_be_userlist = '####',
) {
$fqdn = $facts['networking']['fqdn']
# service
$hy_service = 'haproxy'

81
manifests/server/proxy.pp
View File

@@ -4,60 +4,67 @@
# @summary Define manages the proxies for haproxy_cd.
# @param [string] haproxy_fqdn the fqdn of the haproxy server in question.
# @param [string] frontend_name the name for the frontend section rule.
# @param [string] frontend_order the order where the concat should appear
# in the file.
# @param [string] frontend_order where the concat should appear in the file.
# @param [string] frontend_mode mode for the loadbalancer instance: http or tcp
# @param [string] fe_use_backend which backend to use. if left empty, the
# default backend will be used.
# @param [string] fe_bind_mode which bind mode to use, i.e. to which interface
# and poort to bind.
# @param [string] acl_rule an ACL rule to be inserted if required. Empty values
# will not be populated.
# @param [string] acl_order the order where the acl rule should be inserted,
# so it will be within the correct lb instance configuration.
# and port to bind.
# @param [string] backend_name the backend name to be used for the rule.
# @param [string] backend_order the order for the backend name, so it will be
# within the correct lb instance configuration.
# @param [string] fe_maxconn the maximum connections for the lb instance.
# @param [string] be_server_name set the name for the backend server
# @param [string] be_balance what kind of balance should be used
# @param [string] be_mode which backend mode should be used
# @param [string] default_backend value for the default backend
# @param [string] be_option value for a backend option
# @param [string] fe_tcp_request value for a frontend tcp request
# @param [string] fe_http_request value for a frontend http request
# @param [string] fe_option value for a frontend option
# @param [string] acl_rule_front value for a frontend acl rule
# @param [string] acl_rule_back value for a backend acl rule
# @param [array] backend_configs array of values for the backend
# @param [string] be_stick_table value for the backend stickiness
# @param [string] be_stick_on value for th backend stickiness
# @param [string] be_http_check value for backend http check
# @param [string] be_http_request value for a backend http request
# @param [string] be_acl_rule value for a backend acl rule
###############################################################################
define haproxy_cd::server::proxy (
$haproxy_fqdn = undef,
$frontend_name = undef,
$frontend_mode = undef,
$fe_use_backend = '',
$fe_bind_mode = undef,
$fe_option = '',
$frontend_order = '010',
$acl_rule_front = '',
$acl_rule_back = '',
$backend_name = '',
$backend_order = '030',
$fe_maxconn = '',
$be_server_name = '',
$be_balance = '',
$be_mode = '',
$default_backend = '',
$be_option = '',
$fe_tcp_request = '',
$fe_http_request = '',
$backend_configs = [],
$be_stick_table = '',
$be_stick_on = '',
$be_http_check = '',
$be_http_request = '',
$be_acl_rule = '',
String $haproxy_fqdn = undef,
String $frontend_name = undef,
String $frontend_mode = undef,
String $fe_use_backend = '',
String $fe_bind_mode = undef,
String $fe_option = '',
String $frontend_order = '010',
String $acl_rule_front = '',
String $acl_rule_back = '',
String $backend_name = '',
String $backend_order = '030',
String $fe_maxconn = '',
String $be_server_name = '',
String $be_balance = '',
String $be_mode = '',
String $default_backend = '',
String $be_option = '',
String $fe_tcp_request = '',
String $fe_http_request = '',
Array $backend_configs = [],
String $be_stick_table = '',
String $be_stick_on = '',
String $be_http_check = '',
String $be_http_request = '',
String $be_acl_rule = '',
) {
$hy_main_config = '/etc/haproxy/haproxy.cfg'
$hy_frontendrule = 'haproxy_cd/haproxy_frontend_rule.erb'
$hy_backendrule = 'haproxy_cd/haproxy_backend_rule.erb'
$hy_acl_rule = 'haproxy_cd/haproxy_acl_rule.erb'
# Ensure acl_rule_front and acl_rule_back are arrays
$acl_rule_front_array = split($acl_rule_front, ';')
$acl_rule_back_array = split($acl_rule_back, ';')
@@ -83,7 +90,5 @@ define haproxy_cd::server::proxy (
'order' => $backend_order,
})
# open sepcific firewall ports
# open specific firewall ports
}

3
manifests/server/service.pp
View File

@@ -6,10 +6,9 @@
class haproxy_cd::server::service (
) inherits haproxy_cd::params {
if $fqdn == $hy_host_fqdn {
require haproxy_cd::firewall::iptables
require haproxy_cd::main::files
service { $hy_service:
ensure => running,