").append(c.replace(bN,"")).find(g):c)),d&&i.each(d,[c,b,a])}});return this},serialize:function(){return f.param(this.serializeArray())},serializeArray:function(){return this.map(function(){return this.elements?f.makeArray(this.elements):this}).filter(function(){return this.name&&!this.disabled&&(this.checked||bO.test(this.nodeName)||bI.test(this.type))}).map(function(a,b){var c=f(this).val();return c==null?null:f.isArray(c)?f.map(c,function(a,c){return{name:b.name,value:a.replace(bF,"\r\n")}}):{name:b.name,value:c.replace(bF,"\r\n")}}).get()}}),f.each("ajaxStart ajaxStop ajaxComplete ajaxError ajaxSuccess ajaxSend".split(" "),function(a,b){f.fn[b]=function(a){return this.on(b,a)}}),f.each(["get","post"],function(a,c){f[c]=function(a,d,e,g){f.isFunction(d)&&(g=g||e,e=d,d=b);return f.ajax({type:c,url:a,data:d,success:e,dataType:g})}}),f.extend({getScript:function(a,c){return f.get(a,b,c,"script")},getJSON:function(a,b,c){return f.get(a,b,c,"json")},ajaxSetup:function(a,b){b?b_(a,f.ajaxSettings):(b=a,a=f.ajaxSettings),b_(a,b);return a},ajaxSettings:{url:bV,isLocal:bJ.test(bW[1]),global:!0,type:"GET",contentType:"application/x-www-form-urlencoded",processData:!0,async:!0,accepts:{xml:"application/xml, text/xml",html:"text/html",text:"text/plain",json:"application/json, text/javascript","*":bX},contents:{xml:/xml/,html:/html/,json:/json/},responseFields:{xml:"responseXML",text:"responseText"},converters:{"* text":a.String,"text html":!0,"text json":f.parseJSON,"text xml":f.parseXML},flatOptions:{context:!0,url:!0}},ajaxPrefilter:bZ(bT),ajaxTransport:bZ(bU),ajax:function(a,c){function w(a,c,l,m){if(s!==2){s=2,q&&clearTimeout(q),p=b,n=m||"",v.readyState=a>0?4:0;var o,r,u,w=c,x=l?cb(d,v,l):b,y,z;if(a>=200&&a<300||a===304){if(d.ifModified){if(y=v.getResponseHeader("Last-Modified"))f.lastModified[k]=y;if(z=v.getResponseHeader("Etag"))f.etag[k]=z}if(a===304)w="notmodified",o=!0;else try{r=cc(d,x),w="success",o=!0}catch(A){w="parsererror",u=A}}else{u=w;if(!w||a)w="error",a<0&&(a=0)}v.status=a,v.statusText=""+(c||w),o?h.resolveWith(e,[r,w,v]):h.rejectWith(e,[v,w,u]),v.statusCode(j),j=b,t&&g.trigger("ajax"+(o?"Success":"Error"),[v,d,o?r:u]),i.fireWith(e,[v,w]),t&&(g.trigger("ajaxComplete",[v,d]),--f.active||f.event.trigger("ajaxStop"))}}typeof a=="object"&&(c=a,a=b),c=c||{};var d=f.ajaxSetup({},c),e=d.context||d,g=e!==d&&(e.nodeType||e instanceof f)?f(e):f.event,h=f.Deferred(),i=f.Callbacks("once memory"),j=d.statusCode||{},k,l={},m={},n,o,p,q,r,s=0,t,u,v={readyState:0,setRequestHeader:function(a,b){if(!s){var c=a.toLowerCase();a=m[c]=m[c]||a,l[a]=b}return this},getAllResponseHeaders:function(){return s===2?n:null},getResponseHeader:function(a){var c;if(s===2){if(!o){o={};while(c=bH.exec(n))o[c[1].toLowerCase()]=c[2]}c=o[a.toLowerCase()]}return c===b?null:c},overrideMimeType:function(a){s||(d.mimeType=a);return this},abort:function(a){a=a||"abort",p&&p.abort(a),w(0,a);return this}};h.promise(v),v.success=v.done,v.error=v.fail,v.complete=i.add,v.statusCode=function(a){if(a){var b;if(s<2)for(b in a)j[b]=[j[b],a[b]];else b=a[v.status],v.then(b,b)}return this},d.url=((a||d.url)+"").replace(bG,"").replace(bL,bW[1]+"//"),d.dataTypes=f.trim(d.dataType||"*").toLowerCase().split(bP),d.crossDomain==null&&(r=bR.exec(d.url.toLowerCase()),d.crossDomain=!(!r||r[1]==bW[1]&&r[2]==bW[2]&&(r[3]||(r[1]==="http:"?80:443))==(bW[3]||(bW[1]==="http:"?80:443)))),d.data&&d.processData&&typeof d.data!="string"&&(d.data=f.param(d.data,d.traditional)),b$(bT,d,c,v);if(s===2)return!1;t=d.global,d.type=d.type.toUpperCase(),d.hasContent=!bK.test(d.type),t&&f.active++===0&&f.event.trigger("ajaxStart");if(!d.hasContent){d.data&&(d.url+=(bM.test(d.url)?"&":"?")+d.data,delete d.data),k=d.url;if(d.cache===!1){var x=f.now(),y=d.url.replace(bQ,"$1_="+x);d.url=y+(y===d.url?(bM.test(d.url)?"&":"?")+"_="+x:"")}}(d.data&&d.hasContent&&d.contentType!==!1||c.contentType)&&v.setRequestHeader("Content-Type",d.contentType),d.ifModified&&(k=k||d.url,f.lastModified[k]&&v.setRequestHeader("If-Modified-Since",f.lastModified[k]),f.etag[k]&&v.setRequestHeader("If-None-Match",f.etag[k])),v.setRequestHeader("Accept",d.dataTypes[0]&&d.accepts[d.dataTypes[0]]?d.accepts[d.dataTypes[0]]+(d.dataTypes[0]!=="*"?", "+bX+"; q=0.01":""):d.accepts["*"]);for(u in d.headers)v.setRequestHeader(u,d.headers[u]);if(d.beforeSend&&(d.beforeSend.call(e,v,d)===!1||s===2)){v.abort();return!1}for(u in{success:1,error:1,complete:1})v[u](d[u]);p=b$(bU,d,c,v);if(!p)w(-1,"No Transport");else{v.readyState=1,t&&g.trigger("ajaxSend",[v,d]),d.async&&d.timeout>0&&(q=setTimeout(function(){v.abort("timeout")},d.timeout));try{s=1,p.send(l,w)}catch(z){if(s<2)w(-1,z);else throw z}}return v},param:function(a,c){var d=[],e=function(a,b){b=f.isFunction(b)?b():b,d[d.length]=encodeURIComponent(a)+"="+encodeURIComponent(b)};c===b&&(c=f.ajaxSettings.traditional);if(f.isArray(a)||a.jquery&&!f.isPlainObject(a))f.each(a,function(){e(this.name,this.value)});else for(var g in a)ca(g,a[g],c,e);return d.join("&").replace(bD,"+")}}),f.extend({active:0,lastModified:{},etag:{}});var cd=f.now(),ce=/(\=)\?(&|$)|\?\?/i;f.ajaxSetup({jsonp:"callback",jsonpCallback:function(){return f.expando+"_"+cd++}}),f.ajaxPrefilter("json jsonp",function(b,c,d){var e=b.contentType==="application/x-www-form-urlencoded"&&typeof b.data=="string";if(b.dataTypes[0]==="jsonp"||b.jsonp!==!1&&(ce.test(b.url)||e&&ce.test(b.data))){var g,h=b.jsonpCallback=f.isFunction(b.jsonpCallback)?b.jsonpCallback():b.jsonpCallback,i=a[h],j=b.url,k=b.data,l="$1"+h+"$2";b.jsonp!==!1&&(j=j.replace(ce,l),b.url===j&&(e&&(k=k.replace(ce,l)),b.data===k&&(j+=(/\?/.test(j)?"&":"?")+b.jsonp+"="+h))),b.url=j,b.data=k,a[h]=function(a){g=[a]},d.always(function(){a[h]=i,g&&f.isFunction(i)&&a[h](g[0])}),b.converters["script json"]=function(){g||f.error(h+" was not called");return g[0]},b.dataTypes[0]="json";return"script"}}),f.ajaxSetup({accepts:{script:"text/javascript, application/javascript, application/ecmascript, application/x-ecmascript"},contents:{script:/javascript|ecmascript/},converters:{"text script":function(a){f.globalEval(a);return a}}}),f.ajaxPrefilter("script",function(a){a.cache===b&&(a.cache=!1),a.crossDomain&&(a.type="GET",a.global=!1)}),f.ajaxTransport("script",function(a){if(a.crossDomain){var d,e=c.head||c.getElementsByTagName("head")[0]||c.documentElement;return{send:function(f,g){d=c.createElement("script"),d.async="async",a.scriptCharset&&(d.charset=a.scriptCharset),d.src=a.url,d.onload=d.onreadystatechange=function(a,c){if(c||!d.readyState||/loaded|complete/.test(d.readyState))d.onload=d.onreadystatechange=null,e&&d.parentNode&&e.removeChild(d),d=b,c||g(200,"success")},e.insertBefore(d,e.firstChild)},abort:function(){d&&d.onload(0,1)}}}});var cf=a.ActiveXObject?function(){for(var a in ch)ch[a](0,1)}:!1,cg=0,ch;f.ajaxSettings.xhr=a.ActiveXObject?function(){return!this.isLocal&&ci()||cj()}:ci,function(a){f.extend(f.support,{ajax:!!a,cors:!!a&&"withCredentials"in a})}(f.ajaxSettings.xhr()),f.support.ajax&&f.ajaxTransport(function(c){if(!c.crossDomain||f.support.cors){var d;return{send:function(e,g){var h=c.xhr(),i,j;c.username?h.open(c.type,c.url,c.async,c.username,c.password):h.open(c.type,c.url,c.async);if(c.xhrFields)for(j in c.xhrFields)h[j]=c.xhrFields[j];c.mimeType&&h.overrideMimeType&&h.overrideMimeType(c.mimeType),!c.crossDomain&&!e["X-Requested-With"]&&(e["X-Requested-With"]="XMLHttpRequest");try{for(j in e)h.setRequestHeader(j,e[j])}catch(k){}h.send(c.hasContent&&c.data||null),d=function(a,e){var j,k,l,m,n;try{if(d&&(e||h.readyState===4)){d=b,i&&(h.onreadystatechange=f.noop,cf&&delete ch[i]);if(e)h.readyState!==4&&h.abort();else{j=h.status,l=h.getAllResponseHeaders(),m={},n=h.responseXML,n&&n.documentElement&&(m.xml=n),m.text=h.responseText;try{k=h.statusText}catch(o){k=""}!j&&c.isLocal&&!c.crossDomain?j=m.text?200:404:j===1223&&(j=204)}}}catch(p){e||g(-1,p)}m&&g(j,k,m,l)},!c.async||h.readyState===4?d():(i=++cg,cf&&(ch||(ch={},f(a).unload(cf)),ch[i]=d),h.onreadystatechange=d)},abort:function(){d&&d(0,1)}}}});var ck={},cl,cm,cn=/^(?:toggle|show|hide)$/,co=/^([+\-]=)?([\d+.\-]+)([a-z%]*)$/i,cp,cq=[["height","marginTop","marginBottom","paddingTop","paddingBottom"],["width","marginLeft","marginRight","paddingLeft","paddingRight"],["opacity"]],cr;f.fn.extend({show:function(a,b,c){var d,e;if(a||a===0)return this.animate(cu("show",3),a,b,c);for(var g=0,h=this.length;g
=i.duration+this.startTime){this.now=this.end,this.pos=this.state=1,this.update(),i.animatedProperties[this.prop]=!0;for(b in i.animatedProperties)i.animatedProperties[b]!==!0&&(g=!1);if(g){i.overflow!=null&&!f.support.shrinkWrapBlocks&&f.each(["","X","Y"],function(a,b){h.style["overflow"+b]=i.overflow[a]}),i.hide&&f(h).hide();if(i.hide||i.show)for(b in i.animatedProperties)f.style(h,b,i.orig[b]),f.removeData(h,"fxshow"+b,!0),f.removeData(h,"toggle"+b,!0);d=i.complete,d&&(i.complete=!1,d.call(h))}return!1}i.duration==Infinity?this.now=e:(c=e-this.startTime,this.state=c/i.duration,this.pos=f.easing[i.animatedProperties[this.prop]](this.state,c,0,1,i.duration),this.now=this.start+(this.end-this.start)*this.pos),this.update();return!0}},f.extend(f.fx,{tick:function(){var a,b=f.timers,c=0;for(;c-1,k={},l={},m,n;j?(l=e.position(),m=l.top,n=l.left):(m=parseFloat(h)||0,n=parseFloat(i)||0),f.isFunction(b)&&(b=b.call(a,c,g)),b.top!=null&&(k.top=b.top-g.top+m),b.left!=null&&(k.left=b.left-g.left+n),"using"in b?b.using.call(a,k):e.css(k)}},f.fn.extend({position:function(){if(!this[0])return null;var a=this[0],b=this.offsetParent(),c=this.offset(),d=cx.test(b[0].nodeName)?{top:0,left:0}:b.offset();c.top-=parseFloat(f.css(a,"marginTop"))||0,c.left-=parseFloat(f.css(a,"marginLeft"))||0,d.top+=parseFloat(f.css(b[0],"borderTopWidth"))||0,d.left+=parseFloat(f.css(b[0],"borderLeftWidth"))||0;return{top:c.top-d.top,left:c.left-d.left}},offsetParent:function(){return this.map(function(){var a=this.offsetParent||c.body;while(a&&!cx.test(a.nodeName)&&f.css(a,"position")==="static")a=a.offsetParent;return a})}}),f.each(["Left","Top"],function(a,c){var d="scroll"+c;f.fn[d]=function(c){var e,g;if(c===b){e=this[0];if(!e)return null;g=cy(e);return g?"pageXOffset"in g?g[a?"pageYOffset":"pageXOffset"]:f.support.boxModel&&g.document.documentElement[d]||g.document.body[d]:e[d]}return this.each(function(){g=cy(this),g?g.scrollTo(a?f(g).scrollLeft():c,a?c:f(g).scrollTop()):this[d]=c})}}),f.each(["Height","Width"],function(a,c){var d=c.toLowerCase();f.fn["inner"+c]=function(){var a=this[0];return a?a.style?parseFloat(f.css(a,d,"padding")):this[d]():null},f.fn["outer"+c]=function(a){var b=this[0];return b?b.style?parseFloat(f.css(b,d,a?"margin":"border")):this[d]():null},f.fn[d]=function(a){var e=this[0];if(!e)return a==null?null:this;if(f.isFunction(a))return this.each(function(b){var c=f(this);c[d](a.call(this,b,c[d]()))});if(f.isWindow(e)){var g=e.document.documentElement["client"+c],h=e.document.body;return e.document.compatMode==="CSS1Compat"&&g||h&&h["client"+c]||g}if(e.nodeType===9)return Math.max(e.documentElement["client"+c],e.body["scroll"+c],e.documentElement["scroll"+c],e.body["offset"+c],e.documentElement["offset"+c]);if(a===b){var i=f.css(e,d),j=parseFloat(i);return f.isNumeric(j)?j:i}return this.css(d,typeof a=="string"?a:a+"px")}}),a.jQuery=a.$=f,typeof define=="function"&&define.amd&&define.amd.jQuery&&define("jquery",[],function(){return f})})(window);
\ No newline at end of file
diff --git a/doc/puppet_class_list.html b/doc/puppet_class_list.html
deleted file mode 100644
index faf10f4..0000000
--- a/doc/puppet_class_list.html
+++ /dev/null
@@ -1,117 +0,0 @@
-
-
-
- Puppet Class List
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
- Puppet Class: cd_haproxy
-
- — Documentation by YARD 0.9.26
-
-
-
-
-
-
-
Puppet Class: cd_haproxy
-
-
-
-
- Defined in:
-
- manifests/init.pp
-
-
-
-
-
Summary
- Class initializes the cd_haproxy module.
-
-
Overview
-
-
-
-
cd_haproxy::init.pp Module name: cd_haproxy Author: Arne Teuke
-(arne_teuke@confdroid.com) License: This file is part of cd_haproxy.
-
-
cd_haproxy is used for providing automatic configuration of HA proxy.
-Copyright (C) 2017 confdroid (copyright@confdroid.com) This program is
-free software: you can redistribute it and/or modify it under the terms of
-the GNU General Public License as published by the Free Software
-Foundation, either version 3 of the License, or (at your option) any later
-version.
-
-
This program is distributed in the hope that it will be useful, but
-WITHOUT ANY WARRANTY; without even the implied warranty of MERCHANTABILITY
-or FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License
-for more details.
-
-
You should have received a copy of the GNU General Public License along
-with this program. If not, see www.gnu.org/licenses /.
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-23
-24
-25
-
-
- # File 'manifests/init.pp', line 23
-
-class cd_haproxy {
- include cd_haproxy::params
-}
-
-
-
-
-
-
-
-
- Puppet Class: cd_haproxy::firewall::iptables
-
- — Documentation by YARD 0.9.26
-
-
-
-
-
-
-
Puppet Class: cd_haproxy::firewall::iptables
-
-
-
- Inherits:
- cd_haproxy::params
-
-
-
- Defined in:
-
- manifests/firewall/iptables.pp
-
-
-
-
-
Summary
- manage firewall settings through cd_firewall or puppetlabs-firewall
-
-
Overview
-
-
-
-
cd_haproxy::firewall::iptables.pp Module name: cd_haproxy Author: Arne
-Teuke (arne_teuke@confdroid.com)
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-6
-7
-8
-9
-10
-11
-12
-13
-14
-15
-16
-17
-18
-19
-20
-21
-22
-23
-24
-25
-26
-
-
- # File 'manifests/firewall/iptables.pp', line 6
-
-class cd_haproxy::firewall::iptables (
-
-) inherits cd_haproxy::params {
-
- if ($fqdn == $hy_host_fqdn) and ($hy_manage_fw == true) {
-
- require cd_haproxy::main::files
-
- firewall { "${hy_fw_order_no}${hy_http_port} tcp port ${hy_http_port}":
- proto => 'tcp',
- dport => $hy_http_port,
- jump => 'accept',
- }
-
- firewall { "${hy_fw_order_no}${hy_https_port} tcp port ${hy_https_port}":
- proto => 'tcp',
- dport => $hy_https_port,
- jump => 'accept',
- }
- }
-}
-
-
-
-
-
-
-
-
- Puppet Class: cd_haproxy::main::config
-
- — Documentation by YARD 0.9.26
-
-
-
-
-
-
-
Puppet Class: cd_haproxy::main::config
-
-
-
- Inherits:
- cd_haproxy::params
-
-
-
- Defined in:
-
- manifests/main/config.pp
-
-
-
-
-
Summary
- Class manages all aspects of configuring the module logic for
-cd_haproxy.
-
-
Overview
-
-
-
-
cd_haproxy::main::config.pp Module name: cd_haproxy Author: Arne Teuke
-(arne_teuke@confdroid.com)
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-7
-8
-9
-10
-11
-12
-13
-14
-15
-16
-17
-18
-
-
- # File 'manifests/main/config.pp', line 7
-
-class cd_haproxy::main::config (
-
-) inherits cd_haproxy::params {
-
- include cd_haproxy::server::service
-
- if $hy_manage_fail2ban == true {
-
- include cd_haproxy::monitoring::fail2ban
-
- }
-}
-
-
-
-
-
-
-
-
- Puppet Class: cd_haproxy::main::dirs
-
- — Documentation by YARD 0.9.26
-
-
-
-
-
-
-
Puppet Class: cd_haproxy::main::dirs
-
-
-
- Inherits:
- cd_haproxy::params
-
-
-
- Defined in:
-
- manifests/main/dirs.pp
-
-
-
-
-
Summary
- Class manages all directories required for cd_haproxy.
-
-
Overview
-
-
-
-
cd_haproxy::main::dirs.pp Module name: cd_haproxy Author: Arne Teuke
-(arne_teuke@confdroid.com)
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-6
-7
-8
-9
-10
-11
-12
-13
-14
-15
-16
-17
-18
-19
-20
-21
-22
-23
-24
-25
-26
-27
-28
-29
-30
-31
-32
-33
-34
-35
-36
-37
-
-
- # File 'manifests/main/dirs.pp', line 6
-
-class cd_haproxy::main::dirs (
-
-) inherits cd_haproxy::params {
-
- if $fqdn == $hy_host_fqdn {
- require cd_haproxy::main::user
-
- # main dir
- file { $hy_main_dir:
- ensure => directory,
- owner => 'root',
- group => 'root',
- mode => '0755',
- selrange => s0,
- selrole => object_r,
- seltype => etc_t,
- seluser => system_u,
- }
-
- # errors dir
- file { $hy_errors_dir:
- ensure => directory,
- owner => 'root',
- group => 'root',
- mode => '0755',
- selrange => s0,
- selrole => object_r,
- seltype => etc_t,
- seluser => system_u,
- }
- }
-}
-
-
-
-
-
-
-
-
- Puppet Class: cd_haproxy::main::files
-
- — Documentation by YARD 0.9.26
-
-
-
-
-
-
-
Puppet Class: cd_haproxy::main::files
-
-
-
- Inherits:
- cd_haproxy::params
-
-
-
- Defined in:
-
- manifests/main/files.pp
-
-
-
-
-
Summary
- Class manages all configuration files required for cd_haproxy.
-
-
Overview
-
-
-
-
cd_haproxy::main::files.pp Module name: cd_haproxy Author: Arne Teuke
-(arne_teuke@confdroid.com)
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-6
-7
-8
-9
-10
-11
-12
-13
-14
-15
-16
-17
-18
-19
-20
-21
-22
-23
-24
-25
-26
-27
-28
-29
-30
-31
-32
-33
-34
-35
-36
-37
-38
-39
-40
-41
-42
-43
-44
-45
-46
-47
-48
-49
-50
-51
-52
-53
-54
-55
-56
-57
-58
-59
-60
-61
-62
-63
-64
-65
-66
-67
-68
-69
-70
-71
-72
-73
-74
-75
-76
-77
-78
-79
-80
-81
-82
-83
-84
-85
-86
-87
-88
-89
-90
-91
-92
-93
-94
-95
-96
-97
-98
-99
-100
-101
-102
-103
-104
-105
-106
-107
-108
-109
-110
-111
-112
-113
-114
-115
-116
-117
-118
-119
-120
-121
-122
-123
-124
-125
-126
-127
-128
-129
-130
-131
-132
-133
-134
-135
-136
-137
-138
-139
-140
-141
-142
-143
-144
-145
-146
-147
-148
-149
-150
-151
-152
-153
-154
-155
-156
-157
-158
-159
-160
-161
-
-
- # File 'manifests/main/files.pp', line 6
-
-class cd_haproxy::main::files (
-
-) inherits cd_haproxy::params {
-
- if $fqdn == $hy_host_fqdn {
- require cd_haproxy::main::dirs
-
- # create the concat target
- concat {$hy_main_config:
- ensure => present,
- owner => 'root',
- group => 'root',
- mode => '0640',
- selrange => s0,
- selrole => object_r,
- seltype => etc_t,
- seluser => system_u,
- notify => Service[$hy_service],
- }
-
- # create the header
- concat::fragment { 'header':
- target => $hy_main_config,
- content => template($hy_config_head_erb),
- order => '001',
- }
-
-
- # create the header
- concat::fragment { 'tail':
- target => $hy_main_config,
- content => template($hy_config_tail_erb),
- order => '100',
- }
-
-
- # pid file
- file { $hy_pid:
- ensure => file,
- owner => 'root',
- group => 'root',
- mode => '0644',
- selrange => s0,
- selrole => object_r,
- seltype => haproxy_var_run_t,
- seluser => system_u,
- }
-
- # error files
- file { $hy_400_file:
- ensure => file,
- owner => 'root',
- group => 'root',
- mode => '0644',
- selrange => s0,
- selrole => object_r,
- seltype => etc_t,
- seluser => system_u,
- content => template($hy_400_erb),
- notify => Service[$hy_service],
- }
-
- file { $hy_403_file:
- ensure => file,
- owner => 'root',
- group => 'root',
- mode => '0644',
- selrange => s0,
- selrole => object_r,
- seltype => etc_t,
- seluser => system_u,
- content => template($hy_403_erb),
- notify => Service[$hy_service],
- }
-
- file { $hy_408_file:
- ensure => file,
- owner => 'root',
- group => 'root',
- mode => '0644',
- selrange => s0,
- selrole => object_r,
- seltype => etc_t,
- seluser => system_u,
- content => template($hy_408_erb),
- notify => Service[$hy_service],
- }
-
- file { $hy_500_file:
- ensure => file,
- owner => 'root',
- group => 'root',
- mode => '0644',
- selrange => s0,
- selrole => object_r,
- seltype => etc_t,
- seluser => system_u,
- content => template($hy_500_erb),
- notify => Service[$hy_service],
- }
-
- file { $hy_502_file:
- ensure => file,
- owner => 'root',
- group => 'root',
- mode => '0644',
- selrange => s0,
- selrole => object_r,
- seltype => etc_t,
- seluser => system_u,
- content => template($hy_502_erb),
- notify => Service[$hy_service],
- }
-
- file { $hy_503_file:
- ensure => file,
- owner => 'root',
- group => 'root',
- mode => '0644',
- selrange => s0,
- selrole => object_r,
- seltype => etc_t,
- seluser => system_u,
- content => template($hy_503_erb),
- notify => Service[$hy_service],
- }
-
- file { $hy_504_file:
- ensure => file,
- owner => 'root',
- group => 'root',
- mode => '0644',
- selrange => s0,
- selrole => object_r,
- seltype => etc_t,
- seluser => system_u,
- content => template($hy_504_erb),
- notify => Service[$hy_service],
- }
-
- # make sure rsyslog is logging haproxy logs
-
- file { '/etc/rsyslog.d/10-haproxy.conf':
- ensure => file,
- owner => 'root',
- group => 'root',
- mode => '0644',
- selrange => s0,
- selrole => object_r,
- seltype => syslog_conf_t,
- seluser => system_u,
- content => template('cd_haproxy/rsyslog/10_haproxy.conf.erb'),
-# notify => Service['rsyslog'], # only if using cd_rsyslog
- }
- }
-}
-
-
-
-
-
-
-
-
- Puppet Class: cd_haproxy::main::install
-
- — Documentation by YARD 0.9.26
-
-
-
-
-
-
-
Puppet Class: cd_haproxy::main::install
-
-
-
- Inherits:
- cd_haproxy::params
-
-
-
- Defined in:
-
- manifests/main/install.pp
-
-
-
-
-
Summary
- Class manage all aspects of installing binaries required for
-cd_haproxy
-
-
Overview
-
-
-
-
cd_haproxy::main::install.pp Module name: cd_haproxy Author: Arne Teuke
-(arne_teuke@confdroid.com)
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-7
-8
-9
-10
-11
-12
-13
-14
-15
-16
-
-
- # File 'manifests/main/install.pp', line 7
-
-class cd_haproxy::main::install (
-
-) inherits cd_haproxy::params {
-
- if $fqdn == $hy_host_fqdn {
- package {$reqpackages:
- ensure => $pkg_ensure,
- }
- }
-}
-
-
-
-
-
-
-
-
- Puppet Class: cd_haproxy::main::user
-
- — Documentation by YARD 0.9.26
-
-
-
-
-
-
-
Puppet Class: cd_haproxy::main::user
-
-
-
- Inherits:
- cd_haproxy::params
-
-
-
- Defined in:
-
- manifests/main/user.pp
-
-
-
-
-
Summary
- Class manages service users for cd_haproxy.
-
-
Overview
-
-
-
-
cd_haproxy::main::user.pp Module name: cd_haproxy Author: Arne Teuke
-(arne_teuke@ConfDroid.com)
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-6
-7
-8
-9
-10
-11
-12
-13
-14
-15
-16
-17
-18
-19
-20
-21
-22
-23
-24
-25
-26
-27
-28
-29
-30
-31
-
-
- # File 'manifests/main/user.pp', line 6
-
-class cd_haproxy::main::user (
-
-) inherits cd_haproxy::params {
-
- if $fqdn == $hy_host_fqdn {
- require cd_haproxy::main::install
-
- # manage user
- user { $hy_user_name:
- ensure => present,
- name => $hy_user_name,
- allowdupe => false,
- comment => $hy_user_comment,
- gid => $hy_user_name,
- managehome => true,
- home => $hy_user_home,
- shell => $hy_user_shell,
- }
-
- group { $hy_user_name:
- ensure => present,
- name => $hy_user_name,
- allowdupe => false,
- }
- }
-}
-
-
-
-
-
-
-
-
- Puppet Class: cd_haproxy::monitoring::fail2ban
-
- — Documentation by YARD 0.9.26
-
-
-
-
-
-
-
Puppet Class: cd_haproxy::monitoring::fail2ban
-
-
-
- Inherits:
- cd_haproxy::params
-
-
-
- Defined in:
-
- manifests/monitoring/fail2ban.pp
-
-
-
-
-
Summary
- Class manages fail2ban settings
-
-
Overview
-
-
-
-
Module name: cd_haproxy Author: Arne Teuke (arne_teuke@confdroid.com)
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-5
-6
-7
-8
-9
-10
-11
-12
-13
-14
-15
-16
-17
-18
-19
-20
-21
-22
-23
-24
-25
-26
-27
-28
-29
-30
-31
-32
-33
-34
-35
-36
-37
-38
-39
-40
-41
-
-
- # File 'manifests/monitoring/fail2ban.pp', line 5
-
-class cd_haproxy::monitoring::fail2ban (
-
-) inherits cd_haproxy::params {
-
- if $hy_manage_fail2ban == true {
-
- require cd_fail2ban
-
- # configure filter
-
- file { '/etc/fail2ban/filter.d/haproxy.conf':
- ensure => file,
- owner => 'root',
- group => 'root',
- mode => '0644',
- selrange => s0,
- selrole => object_r,
- seltype => etc_t,
- seluser => system_u,
- content => template('cd_haproxy/fail2ban/f2b_haproxy.conf.erb'),
- notify => Service['fail2ban'],
- }
-
- file { '/etc/fail2ban/jail.d/010-haproxy.conf':
- ensure => file,
- owner => 'root',
- group => 'root',
- mode => '0644',
- selrange => s0,
- selrole => object_r,
- seltype => etc_t,
- seluser => system_u,
- content => template('cd_haproxy/fail2ban/010_jail.d_haproxy.conf.erb'),
- notify => Service['fail2ban'],
- }
- }
-}
-
-
-
-
-
-
-
-
- Puppet Class: cd_haproxy::params
-
- — Documentation by YARD 0.9.26
-
-
-
-
-
-
-
Puppet Class: cd_haproxy::params
-
-
-
Overview
-
-
-
-
cd_haproxy::params.pp Module name: cd_haproxy Author: Arne Teuke
-(arne_teuke@confdroid.com)
-
-
-
-
-
-
-
-
-
-
-
-
-58
-59
-60
-61
-62
-63
-64
-65
-66
-67
-68
-69
-70
-71
-72
-73
-74
-75
-76
-77
-78
-79
-80
-81
-82
-83
-84
-85
-86
-87
-88
-89
-90
-91
-92
-93
-94
-95
-96
-97
-98
-99
-100
-101
-102
-103
-104
-105
-106
-107
-108
-109
-110
-111
-112
-113
-114
-115
-116
-117
-118
-119
-120
-121
-122
-123
-124
-125
-126
-127
-128
-129
-130
-131
-132
-133
-134
-135
-136
-137
-138
-139
-140
-141
-142
-143
-144
-145
-
-
- # File 'manifests/params.pp', line 58
-
-class cd_haproxy::params (
-
-$pkg_ensure = 'latest',
-$reqpackages = ['haproxy','httpd-tools'],
-
-$hy_host_fqdn = undef,
-
-# firewall
-$hy_manage_fw = true,
-$hy_fw_order_no = '50',
-
-# fail2ban
-$hy_manage_fail2ban = false,
-
-# main config
-$hy_http_port = '80',
-$hy_https_port = '443',
-$hy_chroot = '/var/lib/haproxy',
-$hy_pid = '/var/run/haproxy.pid',
-$hy_maxconn = '4000',
-$hy_show_stats = false,
-$hy_stats_socket = '/var/lib/haproxy/stats',
-$hy_default_mode = 'tcp',
-$hy_use_http_server_close = false,
-$hy_use_forward_for = false,
-$hy_use_redispatch = true,
-$hy_max_retries = '3',
-$hy_timeout_http_request = '10s',
-$hy_timeout_queue = '1m',
-$hy_timeout_connect = '10s',
-$hy_timeout_client = '1m',
-$hy_timeout_server = '1m',
-$hy_timeout_http_keep_alive = '10s',
-$hy_timeout_check = '10s',
-$hy_hard_stop = true,
-$hy_hard_stop_value = '60s',
-
-# user
-$hy_user_name = 'haproxy',
-$hy_user_comment = 'haproxy user',
-$hy_user_home = '/var/lib/haproxy',
-$hy_user_shell = '/sbin/nologin',
-
-# logging
-$hy_log_local0 = '127.0.0.1:514 local0',
-$hy_log_local1 = '127.0.0.1:514 local1 notice',
-$hy_log_target = '127.0.0.1',
-$hy_log_facility = 'local2',
-$hy_log_default = 'global',
-$hy_use_tcplog = true,
-$hy_use_httplog = false,
-$hy_use_dontlognull = true,
-$hy_manage_be_users = false,
-$hy_be_userlist = '####',
-
-) {
-
-# service
-$hy_service = 'haproxy'
-
-# directories
-$hy_main_dir = '/etc/haproxy'
-$hy_errors_dir = "${hy_main_dir}/errors"
-
-# files
-$hy_main_config = "${hy_main_dir}/haproxy.cfg"
-$hy_config_head_erb = 'cd_haproxy/haproxy_head.erb'
-$hy_config_tail_erb = 'cd_haproxy/haproxy_tail.erb'
-$hy_400_file = "${hy_errors_dir}/400.http"
-$hy_400_erb = 'cd_haproxy/errors/400_http.erb'
-$hy_403_file = "${hy_errors_dir}/403.http"
-$hy_403_erb = 'cd_haproxy/errors/403_http.erb'
-$hy_408_file = "${hy_errors_dir}/408.http"
-$hy_408_erb = 'cd_haproxy/errors/408_http.erb'
-$hy_500_file = "${hy_errors_dir}/500.http"
-$hy_500_erb = 'cd_haproxy/errors/500_http.erb'
-$hy_502_file = "${hy_errors_dir}/502.http"
-$hy_502_erb = 'cd_haproxy/errors/502_http.erb'
-$hy_503_file = "${hy_errors_dir}/503.http"
-$hy_503_erb = 'cd_haproxy/errors/503_http.erb'
-$hy_504_file = "${hy_errors_dir}/504.http"
-$hy_504_erb = 'cd_haproxy/errors/504_http.erb'
-
-# includes must be last
-
- include cd_haproxy::main::config
-
-}
-
-
-
-
-
-
-
-
- Puppet Class: cd_haproxy::server::proxy_test
-
- — Documentation by YARD 0.9.26
-
-
-
-
-
-
-
Puppet Class: cd_haproxy::server::proxy_test
-
-
-
- Inherits:
- cd_haproxy::params
-
-
-
- Defined in:
-
- manifests/server/proxy_test.pp
-
-
-
-
-
Summary
- Define manages the proxies for cd_haproxy.
-
-
Overview
-
-
-
-
cd_haproxy::server::proxy_test.pp Module name: cd_haproxy Author: Arne
-Teuke (arne_teuke@ConfDroid.com)
-
-
License:
-
-
This file is part of cd_haproxy.
-
-
cd_haproxy is used for providing automatic configuration of HAProxy
-Copyright (C) 2016 ConfDroid (copyright@ConfDroid.com) This program is
-free software: you can redistribute it and/or modify it under the terms of
-the GNU General Public License as published by the Free Software
-Foundation, either version 3 of the License, or (at your option) any later
-version.
-
-
This program is distributed in the hope that it will be useful, but
-WITHOUT ANY WARRANTY; without even the implied warranty of MERCHANTABILITY
-or FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License
-for more details.
-
-
You should have received a copy of the GNU General Public License along
-with this program. If not, see www.gnu.org/licenses /.
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-23
-24
-25
-26
-27
-28
-29
-30
-31
-32
-33
-34
-35
-36
-37
-38
-39
-
-
- # File 'manifests/server/proxy_test.pp', line 23
-
-class cd_haproxy::server::proxy_test (
-
-) inherits cd_haproxy::params {
-
- cd_haproxy::server::proxy { 'testing':
- haproxy_fqdn => 'pxe703.studydivision.local',
- frontend_name => 'test01-frontend',
- frontend_mode => 'http',
- acl_rule => ['too_fast fe_sess_rate ge 10',
- 'network_allowed src 0.0.0.0/0'],
- fe_maxconn => '10000',
- backend_name => 'test01-backend',
- be_server_name => ['web01 web01.confdroid.com:80 check',
- 'web02 web02.confdroid.com:80 check'],
-
- }
-}
-
-
-
-
-
-
-
-
- Puppet Class: cd_haproxy::server::service
-
- — Documentation by YARD 0.9.26
-
-
-
-
-
-
-
Puppet Class: cd_haproxy::server::service
-
-
-
- Inherits:
- cd_haproxy::params
-
-
-
- Defined in:
-
- manifests/server/service.pp
-
-
-
-
-
Summary
- Class manages the service(s) for cd_haproxy.
-
-
Overview
-
-
-
-
cd_haproxy::server::service.pp Module name: cd_haproxy Author: Arne Teuke
-(arne_teuke@confdroid.com)
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-6
-7
-8
-9
-10
-11
-12
-13
-14
-15
-16
-17
-18
-19
-20
-21
-
-
- # File 'manifests/server/service.pp', line 6
-
-class cd_haproxy::server::service (
-
-) inherits cd_haproxy::params {
-
- if $fqdn == $hy_host_fqdn {
-
- require cd_haproxy::firewall::iptables
-
- service { $hy_service:
- ensure => running,
- hasstatus => true,
- hasrestart => true,
- enable => true,
- }
- }
-}
-
-
-
-
-
-
-
-
- Puppet Class: haproxy_cd
-
- — Documentation by YARD 0.9.26
-
-
-
-
-
-
-
Puppet Class: haproxy_cd
-
-
-
-
- Defined in:
-
- manifests/init.pp
-
-
-
-
-
Summary
- Class initializes the haproxy_cd module.
-
-
Overview
-
-
-
-
haproxy_cd::init.pp Module name: haproxy_cd Author: Arne Teuke
-(arne_teuke@confdroid.com)
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-6
-7
-8
-
-
- # File 'manifests/init.pp', line 6
-
-class haproxy_cd {
- include haproxy_cd::params
-}
-
-
-
-
-
-
-
-
- Puppet Class: haproxy_cd::firewall::iptables
-
- — Documentation by YARD 0.9.26
-
-
-
-
-
-
-
Puppet Class: haproxy_cd::firewall::iptables
-
-
-
- Inherits:
- haproxy_cd::params
-
-
-
- Defined in:
-
- manifests/firewall/iptables.pp
-
-
-
-
-
Summary
- manage firewall settings through cd_firewall or puppetlabs-firewall
-
-
Overview
-
-
-
-
haproxy_cd::firewall::iptables.pp Module name: haproxy_cd Author: Arne
-Teuke (arne_teuke@confdroid.com)
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-6
-7
-8
-9
-10
-11
-12
-13
-14
-15
-16
-17
-18
-19
-20
-21
-22
-
-
- # File 'manifests/firewall/iptables.pp', line 6
-
-class haproxy_cd::firewall::iptables (
-
-) inherits haproxy_cd::params {
- if ($fqdn == $hy_host_fqdn) and ($hy_manage_fw == true) {
- firewall { "${hy_fw_order_no}${hy_http_port} tcp port ${hy_http_port}":
- proto => 'tcp',
- dport => $hy_http_port,
- jump => 'accept',
- }
-
- firewall { "${hy_fw_order_no}${hy_https_port} tcp port ${hy_https_port}":
- proto => 'tcp',
- dport => $hy_https_port,
- jump => 'accept',
- }
- }
-}
-
-
-
-
-
-
-
-
- Puppet Class: haproxy_cd::main::config
-
- — Documentation by YARD 0.9.26
-
-
-
-
-
-
-
Puppet Class: haproxy_cd::main::config
-
-
-
- Inherits:
- haproxy_cd::params
-
-
-
- Defined in:
-
- manifests/main/config.pp
-
-
-
-
-
Summary
- Class manages module logic for haproxy_cd.
-
-
Overview
-
-
-
-
haproxy_cd::main::config.pp Module name: haproxy_cd Author: Arne Teuke
-(arne_teuke@confdroid.com)
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-6
-7
-8
-9
-10
-11
-12
-13
-14
-
-
- # File 'manifests/main/config.pp', line 6
-
-class haproxy_cd::main::config (
-
-) inherits haproxy_cd::params {
- include haproxy_cd::server::service
-
- if $hy_manage_fail2ban == true {
- include haproxy_cd::monitoring::fail2ban
- }
-}
-
-
-
-
-
-
-
-
- Puppet Class: haproxy_cd::main::dirs
-
- — Documentation by YARD 0.9.26
-
-
-
-
-
-
-
Puppet Class: haproxy_cd::main::dirs
-
-
-
- Inherits:
- haproxy_cd::params
-
-
-
- Defined in:
-
- manifests/main/dirs.pp
-
-
-
-
-
Summary
- Class manages all directories required for haproxy_cd.
-
-
Overview
-
-
-
-
haproxy_cd::main::dirs.pp Module name: haproxy_cd Author: Arne Teuke
-(arne_teuke@confdroid.com)
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-6
-7
-8
-9
-10
-11
-12
-13
-14
-15
-16
-17
-18
-19
-20
-21
-22
-23
-24
-25
-26
-27
-28
-29
-30
-31
-32
-33
-34
-35
-36
-
-
- # File 'manifests/main/dirs.pp', line 6
-
-class haproxy_cd::main::dirs (
-
-) inherits haproxy_cd::params {
- if $fqdn == $hy_host_fqdn {
- require haproxy_cd::main::user
-
- # main dir
- file { $hy_main_dir:
- ensure => directory,
- owner => 'root',
- group => 'root',
- mode => '0755',
- selrange => s0,
- selrole => object_r,
- seltype => etc_t,
- seluser => system_u,
- }
-
- # errors dir
- file { $hy_errors_dir:
- ensure => directory,
- owner => 'root',
- group => 'root',
- mode => '0755',
- selrange => s0,
- selrole => object_r,
- seltype => etc_t,
- seluser => system_u,
- }
- }
-}
-
-
-
-
-
-
-
-
- Puppet Class: haproxy_cd::main::files
-
- — Documentation by YARD 0.9.26
-
-
-
-
-
-
-
Puppet Class: haproxy_cd::main::files
-
-
-
- Inherits:
- haproxy_cd::params
-
-
-
- Defined in:
-
- manifests/main/files.pp
-
-
-
-
-
Summary
- Class manages all configuration files required for haproxy_cd.
-
-
Overview
-
-
-
-
haproxy_cd::main::files.pp Module name: haproxy_cd Author: Arne Teuke
-(arne_teuke@confdroid.com)
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-6
-7
-8
-9
-10
-11
-12
-13
-14
-15
-16
-17
-18
-19
-20
-21
-22
-23
-24
-25
-26
-27
-28
-29
-30
-31
-32
-33
-34
-35
-36
-37
-38
-39
-40
-41
-42
-43
-44
-45
-46
-47
-48
-49
-50
-51
-52
-53
-54
-55
-56
-57
-58
-59
-60
-61
-62
-63
-64
-65
-66
-67
-68
-69
-70
-71
-72
-73
-74
-75
-76
-77
-78
-79
-80
-81
-82
-83
-84
-85
-86
-87
-88
-89
-90
-91
-92
-93
-94
-95
-96
-97
-98
-99
-100
-101
-102
-103
-104
-105
-106
-107
-108
-109
-110
-111
-112
-113
-114
-115
-116
-117
-118
-119
-120
-121
-122
-123
-124
-125
-126
-127
-128
-129
-130
-131
-132
-133
-134
-135
-136
-137
-138
-139
-140
-141
-142
-143
-144
-145
-146
-147
-148
-149
-150
-151
-152
-153
-154
-155
-156
-157
-158
-
-
- # File 'manifests/main/files.pp', line 6
-
-class haproxy_cd::main::files (
-
-) inherits haproxy_cd::params {
- if $fqdn == $hy_host_fqdn {
- require haproxy_cd::main::dirs
-
- # create the concat target
- concat { $hy_main_config:
- ensure => present,
- owner => 'root',
- group => 'root',
- mode => '0640',
- selrange => s0,
- selrole => object_r,
- seltype => etc_t,
- seluser => system_u,
- notify => Service[$hy_service],
- }
-
- # create the header
- concat::fragment { 'header':
- target => $hy_main_config,
- content => template($hy_config_head_erb),
- order => '001',
- }
-
- # create the header
- concat::fragment { 'tail':
- target => $hy_main_config,
- content => template($hy_config_tail_erb),
- order => '100',
- }
-
- # pid file
- file { $hy_pid:
- ensure => file,
- owner => 'root',
- group => 'root',
- mode => '0644',
- selrange => s0,
- selrole => object_r,
- seltype => haproxy_var_run_t,
- seluser => system_u,
- }
-
- # error files
- file { $hy_400_file:
- ensure => file,
- owner => 'root',
- group => 'root',
- mode => '0644',
- selrange => s0,
- selrole => object_r,
- seltype => etc_t,
- seluser => system_u,
- content => template($hy_400_erb),
- notify => Service[$hy_service],
- }
-
- file { $hy_403_file:
- ensure => file,
- owner => 'root',
- group => 'root',
- mode => '0644',
- selrange => s0,
- selrole => object_r,
- seltype => etc_t,
- seluser => system_u,
- content => template($hy_403_erb),
- notify => Service[$hy_service],
- }
-
- file { $hy_408_file:
- ensure => file,
- owner => 'root',
- group => 'root',
- mode => '0644',
- selrange => s0,
- selrole => object_r,
- seltype => etc_t,
- seluser => system_u,
- content => template($hy_408_erb),
- notify => Service[$hy_service],
- }
-
- file { $hy_500_file:
- ensure => file,
- owner => 'root',
- group => 'root',
- mode => '0644',
- selrange => s0,
- selrole => object_r,
- seltype => etc_t,
- seluser => system_u,
- content => template($hy_500_erb),
- notify => Service[$hy_service],
- }
-
- file { $hy_502_file:
- ensure => file,
- owner => 'root',
- group => 'root',
- mode => '0644',
- selrange => s0,
- selrole => object_r,
- seltype => etc_t,
- seluser => system_u,
- content => template($hy_502_erb),
- notify => Service[$hy_service],
- }
-
- file { $hy_503_file:
- ensure => file,
- owner => 'root',
- group => 'root',
- mode => '0644',
- selrange => s0,
- selrole => object_r,
- seltype => etc_t,
- seluser => system_u,
- content => template($hy_503_erb),
- notify => Service[$hy_service],
- }
-
- file { $hy_504_file:
- ensure => file,
- owner => 'root',
- group => 'root',
- mode => '0644',
- selrange => s0,
- selrole => object_r,
- seltype => etc_t,
- seluser => system_u,
- content => template($hy_504_erb),
- notify => Service[$hy_service],
- }
-
- # make sure syslog is logging haproxy logs
-
- file { '/etc/rsyslog.d/10-haproxy.conf':
- ensure => file,
- owner => 'root',
- group => 'root',
- mode => '0644',
- selrange => s0,
- selrole => object_r,
- seltype => syslog_conf_t,
- seluser => system_u,
- content => template('haproxy_cd/rsyslog/10_haproxy.conf.erb'),
-# notify => Service['rsyslog'], # only if using rsyslog_cd module
- }
- }
-}
-
-
-
-
-
-
-
-
- Puppet Class: haproxy_cd::main::install
-
- — Documentation by YARD 0.9.26
-
-
-
-
-
-
-
Puppet Class: haproxy_cd::main::install
-
-
-
- Inherits:
- haproxy_cd::params
-
-
-
- Defined in:
-
- manifests/main/install.pp
-
-
-
-
-
Summary
- Class installs binaries required for haproxy_cd
-
-
Overview
-
-
-
-
haproxy_cd::main::install.pp Module name: haproxy_cd Author: Arne Teuke
-(arne_teuke@confdroid.com)
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-6
-7
-8
-9
-10
-11
-12
-13
-14
-
-
- # File 'manifests/main/install.pp', line 6
-
-class haproxy_cd::main::install (
-
-) inherits haproxy_cd::params {
- if $fqdn == $hy_host_fqdn {
- package { $reqpackages:
- ensure => $pkg_ensure,
- }
- }
-}
-
-
-
-
-
-
-
-
- Puppet Class: haproxy_cd::main::user
-
- — Documentation by YARD 0.9.26
-
-
-
-
-
-
-
Puppet Class: haproxy_cd::main::user
-
-
-
- Inherits:
- haproxy_cd::params
-
-
-
- Defined in:
-
- manifests/main/user.pp
-
-
-
-
-
Summary
- Class manages service users for haproxy_cd.
-
-
Overview
-
-
-
-
haproxy_cd::main::user.pp Module name: haproxy_cd Author: Arne Teuke
-(arne_teuke@ConfDroid.com)
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-6
-7
-8
-9
-10
-11
-12
-13
-14
-15
-16
-17
-18
-19
-20
-21
-22
-23
-24
-25
-26
-27
-28
-29
-30
-
-
- # File 'manifests/main/user.pp', line 6
-
-class haproxy_cd::main::user (
-
-) inherits haproxy_cd::params {
- if $fqdn == $hy_host_fqdn {
- require haproxy_cd::main::install
-
- # manage user
- user { $hy_user_name:
- ensure => present,
- name => $hy_user_name,
- allowdupe => false,
- comment => $hy_user_comment,
- gid => $hy_user_name,
- managehome => true,
- home => $hy_user_home,
- shell => $hy_user_shell,
- }
-
- group { $hy_user_name:
- ensure => present,
- name => $hy_user_name,
- allowdupe => false,
- }
- }
-}
-
-
-
-
-
-
-
-
- Puppet Class: haproxy_cd::monitoring::fail2ban
-
- — Documentation by YARD 0.9.26
-
-
-
-
-
-
-
Puppet Class: haproxy_cd::monitoring::fail2ban
-
-
-
- Inherits:
- haproxy_cd::params
-
-
-
- Defined in:
-
- manifests/monitoring/fail2ban.pp
-
-
-
-
-
Summary
- Class manages fail2ban settings
-
-
Overview
-
-
-
-
Module name: haproxy_cd Author: Arne Teuke (arne_teuke@confdroid.com)
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-5
-6
-7
-8
-9
-10
-11
-12
-13
-14
-15
-16
-17
-18
-19
-20
-21
-22
-23
-24
-25
-26
-27
-28
-29
-30
-31
-32
-33
-34
-35
-36
-37
-38
-39
-
-
- # File 'manifests/monitoring/fail2ban.pp', line 5
-
-class haproxy_cd::monitoring::fail2ban (
-
-) inherits haproxy_cd::params {
- if $hy_manage_fail2ban == true {
- require fail2ban_cd # (external module)
-
- # configure filter
-
- file { '/etc/fail2ban/filter.d/haproxy.conf':
- ensure => file,
- owner => 'root',
- group => 'root',
- mode => '0644',
- selrange => s0,
- selrole => object_r,
- seltype => etc_t,
- seluser => system_u,
- content => template('haproxy_cd/fail2ban/f2b_haproxy.conf.erb'),
- notify => Service['fail2ban'],
- }
-
- file { '/etc/fail2ban/jail.d/010-haproxy.conf':
- ensure => file,
- owner => 'root',
- group => 'root',
- mode => '0644',
- selrange => s0,
- selrole => object_r,
- seltype => etc_t,
- seluser => system_u,
- content => template('haproxy_cd/fail2ban/010_jail.d_haproxy.conf.erb'),
- notify => Service['fail2ban'],
- }
- }
-}
-
-
-
-
-
-
-
-
- Puppet Class: haproxy_cd::params
-
- — Documentation by YARD 0.9.26
-
-
-
-
-
-
-
Puppet Class: haproxy_cd::params
-
-
-
Overview
-
-
-
-
haproxy_cd::params.pp Module name: haproxy_cd Author: Arne Teuke
-(arne_teuke@confdroid.com)
-
-
-
-
-
-
-
-
-
-
-
-
-76
-77
-78
-79
-80
-81
-82
-83
-84
-85
-86
-87
-88
-89
-90
-91
-92
-93
-94
-95
-96
-97
-98
-99
-100
-101
-102
-103
-104
-105
-106
-107
-108
-109
-110
-111
-112
-113
-114
-115
-116
-117
-118
-119
-120
-121
-122
-123
-124
-125
-126
-127
-128
-129
-130
-131
-132
-133
-134
-135
-136
-137
-138
-139
-140
-141
-142
-143
-144
-145
-146
-147
-148
-149
-150
-151
-152
-153
-154
-155
-156
-157
-158
-159
-160
-161
-162
-163
-
-
- # File 'manifests/params.pp', line 76
-
-class haproxy_cd::params (
-
- String $pkg_ensure = 'latest',
- Array $reqpackages = ['haproxy','httpd-tools'],
-
- String $hy_host_fqdn = undef,
-
-# firewall
- Boolean $hy_manage_fw = true,
- String $hy_fw_order_no = '50',
-
-# fail2ban
- Boolean $hy_manage_fail2ban = false,
-
-# main config
- String $hy_http_port = '80',
- String $hy_https_port = '443',
- String $hy_chroot = '/var/lib/haproxy',
- String $hy_pid = '/var/run/haproxy.pid',
- String $hy_maxconn = '4000',
- Boolean $hy_show_stats = false,
- String $hy_stats_socket = '/var/lib/haproxy/stats',
- String $hy_default_mode = 'tcp',
- Boolean $hy_use_http_server_close = false,
- Boolean $hy_use_forward_for = false,
- Boolean $hy_use_redispatch = true,
- String $hy_max_retries = '3',
- String $hy_timeout_http_request = '10s',
- String $hy_timeout_queue = '1m',
- String $hy_timeout_connect = '10s',
- String $hy_timeout_client = '1m',
- String $hy_timeout_server = '1m',
- String $hy_timeout_http_keep_alive = '10s',
- String $hy_timeout_check = '10s',
- Boolean $hy_hard_stop = true,
- String $hy_hard_stop_value = '60s',
- String $hy_stats_auth = 'admin:password',
-
-# user
- String $hy_user_name = 'haproxy',
- String $hy_user_comment = 'haproxy user',
- String $hy_user_home = '/var/lib/haproxy',
- String $hy_user_shell = '/sbin/nologin',
-
-# logging
- String $hy_log_local0 = '127.0.0.1:514 local0',
- String $hy_log_local1 = '127.0.0.1:514 local1 notice',
- String $hy_log_target = '127.0.0.1',
- String $hy_log_facility = 'local2',
- String $hy_log_default = 'global',
- Boolean $hy_use_tcplog = true,
- Boolean $hy_use_httplog = false,
- Boolean $hy_use_dontlognull = true,
- Boolean $hy_manage_be_users = false,
- String $hy_be_userlist = '####',
-
-) {
- $fqdn = $facts['networking']['fqdn']
-
- # service
- $hy_service = 'haproxy'
-
- # directories
- $hy_main_dir = '/etc/haproxy'
- $hy_errors_dir = "${hy_main_dir}/errors"
-
- # files
- $hy_main_config = "${hy_main_dir}/haproxy.cfg"
- $hy_config_head_erb = 'haproxy_cd/haproxy_head.erb'
- $hy_config_tail_erb = 'haproxy_cd/haproxy_tail.erb'
- $hy_400_file = "${hy_errors_dir}/400.http"
- $hy_400_erb = 'haproxy_cd/errors/400_http.erb'
- $hy_403_file = "${hy_errors_dir}/403.http"
- $hy_403_erb = 'haproxy_cd/errors/403_http.erb'
- $hy_408_file = "${hy_errors_dir}/408.http"
- $hy_408_erb = 'haproxy_cd/errors/408_http.erb'
- $hy_500_file = "${hy_errors_dir}/500.http"
- $hy_500_erb = 'haproxy_cd/errors/500_http.erb'
- $hy_502_file = "${hy_errors_dir}/502.http"
- $hy_502_erb = 'haproxy_cd/errors/502_http.erb'
- $hy_503_file = "${hy_errors_dir}/503.http"
- $hy_503_erb = 'haproxy_cd/errors/503_http.erb'
- $hy_504_file = "${hy_errors_dir}/504.http"
- $hy_504_erb = 'haproxy_cd/errors/504_http.erb'
-
- # includes must be last
- include haproxy_cd::main::config
-}
-
-
-
-
-
-
-
-
- Puppet Class: haproxy_cd::server::service
-
- — Documentation by YARD 0.9.26
-
-
-
-
-
-
-
Puppet Class: haproxy_cd::server::service
-
-
-
- Inherits:
- haproxy_cd::params
-
-
-
- Defined in:
-
- manifests/server/service.pp
-
-
-
-
-
Summary
- Class manages the service(s) for haproxy_cd.
-
-
Overview
-
-
-
-
haproxy_cd::server::service.pp Module name: haproxy_cd Author: Arne Teuke
-(arne_teuke@confdroid.com)
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-6
-7
-8
-9
-10
-11
-12
-13
-14
-15
-16
-17
-18
-19
-20
-
-
- # File 'manifests/server/service.pp', line 6
-
-class haproxy_cd::server::service (
-
-) inherits haproxy_cd::params {
- if $fqdn == $hy_host_fqdn {
- require haproxy_cd::firewall::iptables
- require haproxy_cd::main::files
-
- service { $hy_service:
- ensure => running,
- hasstatus => true,
- hasrestart => true,
- enable => true,
- }
- }
-}
-
-
-
-
-
-
-
-
Defined Type List
-
- Defined Type: cd_haproxy::server::proxy
-
- — Documentation by YARD 0.9.26
-
-
-
-
-
-
-
Defined Type: cd_haproxy::server::proxy
-
-
- Defined in:
-
- manifests/server/proxy.pp
-
-
-
-
-
Summary
- Define manages the proxies for cd_haproxy.
-
-
Overview
-
-
-
-
cd_haproxy::server::proxy.pp Module name: cd_haproxy Author: Arne Teuke
-(arne_teuke@ConfDroid.com)
-
-
-
-
-
-
-
-
-
-
-
-
-24
-25
-26
-27
-28
-29
-30
-31
-32
-33
-34
-35
-36
-37
-38
-39
-40
-41
-42
-43
-44
-45
-46
-47
-48
-49
-50
-51
-52
-53
-54
-55
-56
-57
-58
-59
-60
-61
-62
-63
-64
-65
-66
-67
-68
-69
-70
-71
-72
-73
-74
-75
-76
-77
-78
-79
-80
-81
-82
-83
-84
-85
-86
-87
-88
-89
-
-
- # File 'manifests/server/proxy.pp', line 24
-
-define cd_haproxy::server::proxy (
-
- $haproxy_fqdn = undef,
- $frontend_name = undef,
- $frontend_mode = undef,
- $fe_use_backend = '',
- $fe_bind_mode = undef,
- $fe_option = '',
- $frontend_order = '010',
- $acl_rule_front = '',
- $acl_rule_back = '',
- $backend_name = '',
- $backend_order = '030',
- $fe_maxconn = '',
- $be_server_name = '',
- $be_balance = '',
- $be_mode = '',
- $default_backend = '',
- $be_option = '',
- $fe_tcp_request = '',
- $fe_http_request = '',
- $backend_configs = [],
- $be_stick_table = '',
- $be_stick_on = '',
- $be_http_check = '',
- $be_http_request = '',
- $be_acl_rule = '',
-
-) {
-
- $hy_main_config = '/etc/haproxy/haproxy.cfg'
- $hy_frontendrule = 'cd_haproxy/haproxy_frontend_rule.erb'
- $hy_backendrule = 'cd_haproxy/haproxy_backend_rule.erb'
- $hy_acl_rule = 'cd_haproxy/haproxy_acl_rule.erb'
-
-
-
- # Ensure acl_rule_front and acl_rule_back are arrays
- $acl_rule_front_array = split($acl_rule_front, ';')
- $acl_rule_back_array = split($acl_rule_back, ';')
- $fe_use_backend_array = split($fe_use_backend,';')
- $backend_name_array = split($backend_name, ';')
- $be_server_name_array = split($be_server_name, ';')
- $be_option_array = split($be_option, ';')
- $fe_tcp_request_array = split($fe_tcp_request, ';')
- $fe_option_array = split($fe_option, ';')
- $fe_http_request_array = split($fe_http_request, ';')
-
- # create frontend section
- concat::fragment { "frontend_${name}":
- target => $hy_main_config,
- content => template($hy_frontendrule),
- order => $frontend_order,
- }
-
- # Ensure backends are only created once
- ensure_resource('concat::fragment', "backends_${name}", {
- 'target' => $hy_main_config,
- 'content' => template($hy_backendrule),
- 'order' => $backend_order,
- })
-
- # open sepcific firewall ports
-
-
-}
-
-
-
-
-
-
-
-
- Defined Type: haproxy_cd::server::proxy
-
- — Documentation by YARD 0.9.26
-
-
-
-
-
-
-
Defined Type: haproxy_cd::server::proxy
-
-
- Defined in:
-
- manifests/server/proxy.pp
-
-
-
-
-
Summary
- Define manages the proxies for haproxy_cd.
-
-
Overview
-
-
-
-
haproxy_cd::server::proxy.pp Module name: haproxy_cd Author: Arne Teuke
-(arne_teuke@ConfDroid.com)
-
-
-
-
-
-
-
-
-
-
-
-
-34
-35
-36
-37
-38
-39
-40
-41
-42
-43
-44
-45
-46
-47
-48
-49
-50
-51
-52
-53
-54
-55
-56
-57
-58
-59
-60
-61
-62
-63
-64
-65
-66
-67
-68
-69
-70
-71
-72
-73
-74
-75
-76
-77
-78
-79
-80
-81
-82
-83
-84
-85
-86
-87
-88
-89
-90
-91
-92
-93
-94
-
-
- # File 'manifests/server/proxy.pp', line 34
-
-define haproxy_cd::server::proxy (
-
- String $haproxy_fqdn = undef,
- String $frontend_name = undef,
- String $frontend_mode = undef,
- String $fe_use_backend = '',
- String $fe_bind_mode = undef,
- String $fe_option = '',
- String $frontend_order = '010',
- String $acl_rule_front = '',
- String $acl_rule_back = '',
- String $backend_name = '',
- String $backend_order = '030',
- String $fe_maxconn = '',
- String $be_server_name = '',
- String $be_balance = '',
- String $be_mode = '',
- String $default_backend = '',
- String $be_option = '',
- String $fe_tcp_request = '',
- String $fe_http_request = '',
- Array $backend_configs = [],
- String $be_stick_table = '',
- String $be_stick_on = '',
- String $be_http_check = '',
- String $be_http_request = '',
- String $be_acl_rule = '',
-
-) {
- $hy_main_config = '/etc/haproxy/haproxy.cfg'
- $hy_frontendrule = 'haproxy_cd/haproxy_frontend_rule.erb'
- $hy_backendrule = 'haproxy_cd/haproxy_backend_rule.erb'
- $hy_acl_rule = 'haproxy_cd/haproxy_acl_rule.erb'
-
- # Ensure acl_rule_front and acl_rule_back are arrays
- $acl_rule_front_array = split($acl_rule_front, ';')
- $acl_rule_back_array = split($acl_rule_back, ';')
- $fe_use_backend_array = split($fe_use_backend,';')
- $backend_name_array = split($backend_name, ';')
- $be_server_name_array = split($be_server_name, ';')
- $be_option_array = split($be_option, ';')
- $fe_tcp_request_array = split($fe_tcp_request, ';')
- $fe_option_array = split($fe_option, ';')
- $fe_http_request_array = split($fe_http_request, ';')
-
- # create frontend section
- concat::fragment { "frontend_${name}":
- target => $hy_main_config,
- content => template($hy_frontendrule),
- order => $frontend_order,
- }
-
- # Ensure backends are only created once
- ensure_resource('concat::fragment', "backends_${name}", {
- 'target' => $hy_main_config,
- 'content' => template($hy_backendrule),
- 'order' => $backend_order,
- })
-
- # open specific firewall ports
-}
-
-
-
-
-
-
-
-
- Top Level Namespace
-
- — Documentation by YARD 0.9.26
-
-
-
-
-
-
-
Top Level Namespace
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-