modules/apache2/manifests/init.pp

   1 class apache2 {
   2         include munin-node::apache
   3
   4         package {
   5                 "apache2": ensure => installed;
   6                 "logrotate": ensure => installed;
   7         }
   8
   9         case $php5 {
  10                 "true": { package {
  11                                 "php5-suhosin": ensure => installed;
  12                         }
  13                           file { "/etc/php5/conf.d/suhosin.ini":
  14                                         source  => [ "puppet:///apache2/per-host/$fqdn/etc/php5/conf.d/suhosin.ini",
  15                                                      "puppet:///apache2/common/etc/php5/conf.d/suhosin.ini" ],
  16                                         require => Package["apache2", "php5-suhosin"],
  17                                         notify  => Exec["force-reload-apache2"];
  18                         }
  19                 }
  20         }
  21
  22
  23         define activate_apache_site($ensure=present, $site=$name) {
  24                 case $site {
  25                         "": { $base = $name }
  26                         default: { $base = $site }
  27                 }
  28
  29                 case $ensure {
  30                         present: {
  31                                 file { "/etc/apache2/sites-enabled/$name":
  32                                          ensure => "/etc/apache2/sites-available/$base",
  33                                          require => Package["apache2"],
  34                                          notify => Exec["reload-apache2"];
  35                                 }
  36                         }
  37                         absent: {
  38                                 file { "/etc/apache2/sites-enabled/$name":
  39                                          ensure => $ensure,
  40                                          notify => Exec["reload-apache2"];
  41                                 }
  42                         }
  43                         default: { err ( "Unknown ensure value: '$ensure'" ) }
  44                 }
  45         }
  46
  47         define enable_module($ensure=present) {
  48                 case $ensure {
  49                         present: {
  50                                 exec { "/usr/sbin/a2enmod $name":
  51                                         unless => "/bin/sh -c '[ -L /etc/apache2/mods-enabled/${name}.load ]'",
  52                                         notify => Exec["force-reload-apache2"],
  53                                 }
  54                         }
  55                         absent: {
  56                                 exec { "/usr/sbin/a2dismod $name":
  57                                         onlyif => "/bin/sh -c '[ -L /etc/apache2/mods-enabled/${name}.load ]'",
  58                                         notify => Exec["force-reload-apache2"],
  59                                 }
  60                         }
  61                         default: { err ( "Unknown ensure value: '$ensure'" ) }
  62                  }
  63         }
  64
  65         enable_module {
  66                 "info":;
  67                 "status":;
  68         }
  69
  70         activate_apache_site {
  71                 "00-default": site => "default-debian.org";
  72                 "000-default": ensure => absent;
  73         }
  74
  75         file {
  76                 "/etc/apache2/conf.d/ressource-limits":
  77                         content => template("apache2/ressource-limits.erb"),
  78                         require => Package["apache2"],
  79                         notify  => Exec["reload-apache2"];
  80                 "/etc/apache2/conf.d/security":
  81                         source  => [ "puppet:///apache2/per-host/$fqdn/etc/apache2/conf.d/security",
  82                                      "puppet:///apache2/common/etc/apache2/conf.d/security" ],
  83                         require => Package["apache2"],
  84                         notify  => Exec["reload-apache2"];
  85                 "/etc/apache2/conf.d/local-serverinfo":
  86                         source  => [ "puppet:///apache2/per-host/$fqdn/etc/apache2/conf.d/local-serverinfo",
  87                                      "puppet:///apache2/common/etc/apache2/conf.d/local-serverinfo" ],
  88                         require => Package["apache2"],
  89                         notify  => Exec["reload-apache2"];
  90                 "/etc/apache2/conf.d/server-status":
  91                         source  => [ "puppet:///apache2/per-host/$fqdn/etc/apache2/conf.d/server-status",
  92                                      "puppet:///apache2/common/etc/apache2/conf.d/server-status" ],
  93                         require => Package["apache2"],
  94                         notify  => Exec["reload-apache2"];
  95
  96                 "/etc/apache2/sites-available/default-debian.org":
  97                         content => template("apache2/default-debian.org.erb"),
  98                         require => Package["apache2"],
  99                         notify  => Exec["reload-apache2"];
 100
 101                 "/etc/logrotate.d/apache2":
 102                         source  => [ "puppet:///apache2/per-host/$fqdn/etc/logrotate.d/apache2",
 103                                      "puppet:///apache2/common/etc/logrotate.d/apache2" ];
 104
 105                 "/srv/www":
 106                         mode    => 755,
 107                         ensure  => directory;
 108                 "/srv/www/default.debian.org":
 109                         mode    => 755,
 110                         ensure  => directory;
 111                 "/srv/www/default.debian.org/htdocs":
 112                         mode    => 755,
 113                         ensure  => directory;
 114                 "/srv/www/default.debian.org/htdocs/index.html":
 115                         content => template("apache2/default-index.html");
 116
 117                 # sometimes this is a symlink
 118                 #"/var/log/apache2":
 119                 #       mode    => 755,
 120                 #       ensure  => directory;
 121         }
 122
 123         exec { "reload-apache2":
 124                command => "/etc/init.d/apache2 reload",
 125                refreshonly => true,
 126         }
 127
 128         exec { "force-reload-apache2":
 129                command => "/etc/init.d/apache2 force-reload",
 130                refreshonly => true,
 131         }
 132         @ferm::rule { "dsa-apache":
 133                 domain          => "(ip ip6)",
 134                 description     => "Allow web access",
 135                 rule            => "proto tcp mod state state (NEW) dport (80) ACCEPT"
 136         }
 137 }