confdroid_nagios/manifests/server/files.pp

## cd_nagios::server::files.pp
# Module name: cd_nagios
# Author: Arne Teuke (arne_teuke@ConfDroid.com)
# @summary  Class manages all configuration files required for cd_nagios.
##############################################################################
class cd_nagios::server::files (

) inherits cd_nagios::params {
  if $::fqdn == $ng_nagios_server {
    if $ng_use_https == true {
      if $ng_enable_certbot == true {
        require cd_nagios::certbot::certs
      }
    }

    require cd_nagios::main::dirs

    # manage nagios.cfg

    file { $ng_nagios_cfg_file:
      ensure   => file,
      path     => $ng_nagios_cfg_file,
      owner    => 'root',
      group    => 'root',
      mode     => '0644',
      selrange => s0,
      selrole  => object_r,
      seltype  => nagios_etc_t,
      seluser  => system_u,
      content  => template($ng_nagios_cfg_erb),
      notify   => Service[$ng_service],
    }

    # manage cgi.cfg

    file { $ng_cgi_cfg_file:
      ensure   => file,
      path     => $ng_cgi_cfg_file,
      owner    => 'root',
      group    => 'root',
      mode     => '0644',
      selrange => s0,
      selrole  => object_r,
      seltype  => nagios_etc_t,
      seluser  => system_u,
      content  => template($ng_cgi_cfg_erb),
      notify   => Service[$ng_service],
    }

    ## Apache files
    # since we use vhost files, we do not want the regular file to appear
    # after upgrades to avoid conflicts

    file { $ng_nagios_conf:
      ensure   => absent,
    }

    file { $ng_forward_conf:
      ensure   => file,
      path     => $ng_forward_conf,
      owner    => 'root',
      group    => 'root',
      mode     => '0644',
      selrange => s0,
      selrole  => object_r,
      seltype  => httpd_config_t,
      seluser  => system_u,
      content  => template($ng_forward_conf_erb),
      notify   => Service[$ae_service],
    }

    if $ng_use_https == true {
      # create ssl vhost

      file { $ng_ssl_vhost_file:
        ensure   => file,
        path     => $ng_ssl_vhost_file,
        owner    => 'root',
        group    => 'root',
        mode     => '0644',
        selrange => s0,
        selrole  => object_r,
        seltype  => httpd_config_t,
        seluser  => system_u,
        content  => template($ng_ssl_vhost_erb),
        notify   => Service[$ae_service],
      }
    }

    if $ng_use_https != true {
      # remove ssl_vhost

      file { $ng_ssl_vhost_file:
        ensure => absent,
      }
    }
  }
}