modules/stunnel4/manifests/generic.pp

   1 define stunnel4::generic ($client, $verify, $cafile, $accept, $connect, $crlfile=false, $local=false) {
   2
   3         include stunnel4
   4
   5         file { "/etc/stunnel/puppet-${name}.conf":
   6                 content => template('stunnel4/stunnel.conf.erb'),
   7                 notify  => Exec["restart_stunnel_${name}"],
   8         }
   9
  10         if $client {
  11                 $certfile = '/etc/ssl/debian/certs/thishost.crt'
  12                 $keyfile = '/etc/ssl/debian/keys/thishost.key'
  13         } else {
  14                 $certfile = '/etc/exim4/ssl/thishost.crt'
  15                 $keyfile = '/etc/exim4/ssl/thishost.key'
  16         }
  17
  18         exec { "restart_stunnel_${name}":
  19                 command => "true && cd / && env -i /etc/init.d/stunnel4 restart puppet-${name}",
  20                 require => [
  21                         File['/etc/stunnel/stunnel.conf'],
  22                         File['/etc/init.d/stunnel4'],
  23                         Exec['enable_stunnel4'],
  24                         Exec['kill_file_override'],
  25                         Package['stunnel4']
  26                 ],
  27                 subscribe => [ File[$certfile], File[$keyfile] ],
  28                 refreshonly => true,
  29         }
  30 }