Add stunnel for search

diff --git a/hieradata/common.yaml b/hieradata/common.yaml
index c67c8b6a04d26b74bf0abbbd945e8e6c155ba34e..533305a092210730df37e3578cc487ad08334595 100644 (file)
--- a/hieradata/common.yaml
+++ b/hieradata/common.yaml
@@ -83,6 +83,10 @@ roles:
     - soler.debian.org
   rtc:
     - vogler.debian.org
+  search_backend:
+    - wolkenstein.debian.org
+  search_frontend:
+    - search-grnet-01.debian.org
   sso:
     - diabelli.debian.org
   static_master:

diff --git a/modules/roles/manifests/init.pp b/modules/roles/manifests/init.pp
index 09ccdc3f8c41172cccd69deff586552068f93ca8..d79c0e81baa9f991d9ec37113a3864a42e62c148 100644 (file)
--- a/modules/roles/manifests/init.pp
+++ b/modules/roles/manifests/init.pp
@@ -229,4 +229,11 @@ class roles {
                        tlsaport => 0,
                }
        }
+
+       if has_role('search_backend') {
+               include search_backend
+       }
+       if has_role('search_frontend') {
+               include search_frontend
+       }
 }

diff --git a/modules/roles/manifests/search_backend.pp b/modules/roles/manifests/search_backend.pp
new file mode 100644 (file)
index 0000000..3b14a67
--- /dev/null
+++ b/modules/roles/manifests/search_backend.pp
@@ -0,0 +1,6 @@
+class roles::search_backend {
+       stunnel4::server { 'searchsync':
+               accept      => '17010',
+               connect     => 7010,
+       }
+}

diff --git a/modules/roles/manifests/search_frontend.pp b/modules/roles/manifests/search_frontend.pp
new file mode 100644 (file)
index 0000000..69398ee
--- /dev/null
+++ b/modules/roles/manifests/search_frontend.pp
@@ -0,0 +1,7 @@
+class roles::search_frontend {
+       stunnel4::client { 'searchsync':
+               accept      => '127.0.0.1:7010',
+               connecthost => 'wolkenstein.debian.org',
+               connectport => 17010,
+       }
+}