]> git.donarmstrong.com Git - dsa-puppet.git/blob - modules/roles/manifests/static_mirror.pp
appstream ssl
[dsa-puppet.git] / modules / roles / manifests / static_mirror.pp
1 class roles::static_mirror {
2
3         include roles::static_source
4         include apache2::cache
5
6         package { 'libapache2-mod-geoip': ensure => installed, }
7         package { 'geoip-database': ensure => installed, }
8
9         apache2::module { 'include': }
10         apache2::module { 'ssl': }
11         apache2::module { 'geoip': require => [Package['libapache2-mod-geoip'], Package['geoip-database']]; }
12
13         file { '/usr/local/bin/static-mirror-run':
14                 source => 'puppet:///modules/roles/static-mirroring/static-mirror-run',
15                 mode   => '0555',
16         }
17
18         file { '/usr/local/bin/static-mirror-run-all':
19                 source => 'puppet:///modules/roles/static-mirroring/static-mirror-run-all',
20                 mode   => '0555',
21         }
22
23         file { '/srv/static.debian.org':
24                 ensure => directory,
25                 owner  => staticsync,
26                 group  => staticsync,
27                 mode   => '02755'
28         }
29
30         file { '/etc/cron.d/puppet-static-mirror':
31                         content => "MAILTO=root\nPATH=/usr/local/bin:/usr/bin:/bin\n@reboot staticsync sleep 60; chronic static-mirror-run-all\n",
32         }
33
34         $vhost_listen = $::hostname ? {
35                 klecker => '130.89.148.14:80 [2001:610:1908:b000::148:14]:80',
36                 default => '*:80',
37         }
38         $vhost_listen_443 = $::hostname ? {
39                 klecker => '130.89.148.14:443 [2001:610:1908:b000::148:14]:443',
40                 default => '*:443',
41         }
42
43         apache2::config { 'local-static-vhost.conf':
44                 content => template('roles/static-mirroring/static-vhost.conf.erb'),
45         }
46
47         apache2::site { '010-planet.debian.org':
48                 site    => 'planet.debian.org',
49                 content => template('roles/static-mirroring/vhost/planet.debian.org.erb'),
50         }
51
52         apache2::site { '010-lintian.debian.org':
53                 site    => 'lintian.debian.org',
54                 content => template('roles/static-mirroring/vhost/lintian.debian.org.erb'),
55         }
56
57         apache2::site { '010-static-vhosts-simple':
58                 site => 'static-vhosts-simple',
59                 content => template('roles/static-mirroring/vhost/static-vhosts-simple.erb'),
60         }
61
62         $wwwdo_document_root = '/srv/static.debian.org/mirrors/www.debian.org/cur'
63         apache2::site { '005-www.debian.org':
64                 site   => 'www.debian.org',
65                 content => template('roles/apache-www.debian.org.erb'),
66         }
67
68         ssl::service { 'dsa.debian.org':
69                 notify => Service['apache2'],
70         }
71         ssl::service { 'www.debian.org':
72                 notify => Service['apache2'],
73         }
74         ssl::service { 'bits.debian.org':
75                 notify => Service['apache2'],
76         }
77         ssl::service { 'lintian.debian.org':
78                 notify => Service['apache2'],
79         }
80         ssl::service { 'rtc.debian.org':
81                 notify => Service['apache2'],
82         }
83         ssl::service { 'appstream.debian.org':
84                 notify => Service['apache2'],
85         }
86 }