modules/dacs/manifests/init.pp

   1 # = Class: dacs
   2 #
   3 # This class installs and configures dacs for web auth
   4 #
   5 # == Sample Usage:
   6 #
   7 #   include dacs
   8 #
   9 class dacs {
  10         package { 'dacs':
  11                 ensure => installed,
  12         }
  13         package { 'libapache2-mod-dacs':
  14                 ensure => installed,
  15         }
  16
  17         file { '/var/log/dacs':
  18                 ensure  => directory,
  19                 owner   => root,
  20                 group   => www-data,
  21                 mode    => '0770',
  22                 purge   => true,
  23         }
  24         file { [
  25                         '/etc/dacs/federations',
  26                         '/etc/dacs/federations/debian.org/',
  27                         '/etc/dacs/federations/debian.org/DEBIAN',
  28                         '/etc/dacs/federations/debian.org/DEBIAN/acls',
  29                         '/etc/dacs/federations/debian.org/DEBIAN/groups',
  30                         '/etc/dacs/federations/debian.org/DEBIAN/groups/DACS'
  31                 ]:
  32                 ensure  => directory,
  33                 owner   => root,
  34                 group   => www-data,
  35                 mode    => '0750',
  36                 require => Package['libapache2-mod-dacs'],
  37                 purge   => true
  38         }
  39         file { '/etc/dacs/federations/site.conf':
  40                 source  => 'puppet:///modules/dacs/common/site.conf',
  41                 mode    => '0640',
  42                 owner   => root,
  43                 group   => www-data
  44         }
  45         file { '/etc/dacs/federations/debian.org/DEBIAN/dacs.conf':
  46                 source => 'puppet:///modules/dacs/common/dacs.conf',
  47                 mode    => '0640',
  48                 owner   => root,
  49                 group   => www-data
  50         }
  51         file { '/etc/dacs/federations/debian.org/DEBIAN/acls/revocations':
  52                 source  => 'puppet:///modules/dacs/common/revocations',
  53                 mode    => '0640',
  54                 owner   => root,
  55                 group   => www-data
  56         }
  57         file { '/etc/dacs/federations/debian.org/DEBIAN/groups/DACS/jurisdictions.grp':
  58                 source  => 'puppet:///modules/dacs/common/jurisdictions.grp',
  59                 mode    => '0640',
  60                 owner   => root,
  61                 group   => www-data
  62         }
  63         file { '/etc/dacs/federations/debian.org/DEBIAN/acls/acl-noauth.0':
  64                 source  => [ "puppet:///modules/dacs/per-host/${::fqdn}/acl-noauth.0",
  65                         'puppet:///modules/dacs/common/acl-noauth.0' ],
  66                 mode    => '0640',
  67                 owner   => root,
  68                 group   => www-data,
  69                 notify  => Exec['dacsacl']
  70         }
  71         file { '/etc/dacs/federations/debian.org/DEBIAN/acls/acl-private.0':
  72                 source  => [ "puppet:///modules/dacs/per-host/${::fqdn}/acl-private.0",
  73                         'puppet:///modules/dacs/common/acl-private.0' ],
  74                 mode    => '0640',
  75                 owner   => root,
  76                 group   => www-data,
  77                 notify  => Exec['dacsacl']
  78         }
  79         file { '/etc/dacs/federations/debian.org/federation_keyfile':
  80                 source  => 'puppet:///modules/dacs/private/debian.org_federation_keyfile',
  81                 mode    => '0640',
  82                 owner   => root,
  83                 group   => www-data
  84         }
  85         file { '/etc/dacs/federations/debian.org/DEBIAN/jurisdiction_keyfile':
  86                 source  => 'puppet:///modules/dacs/private/DEBIAN_jurisdiction_keyfile',
  87                 mode    => '0640',
  88                 owner   => root,
  89                 group   => www-data
  90         }
  91
  92         exec { 'dacsacl':
  93                 command     => 'dacsacl -sc /etc/dacs/federations/site.conf -c /etc/dacs/federations/debian.org/DEBIAN/dacs.conf -uj DEBIAN && chown root:www-data /etc/dacs/federations/debian.org/DEBIAN/acls/INDEX',
  94                 refreshonly => true,
  95         }
  96
  97 }