Puppet Class: nginx
- Inherits:
- nginx::params
- Defined in:
- manifests/init.pp
Summary
Manage NGINXOverview
Packaged NGINX
- RHEL: EPEL or custom package
- Debian/Ubuntu: Default Install or custom package
- SuSE: Default Install or custom package
401 402 403 404 405 406 407 408 409 410 411 412 413 414 415 416 417 418 419 420 421 422 423 424 425 426 427 428 429 430 431 432 433 434 435 436 437 438 439 440 441 442 443 444 445 446 447 448 449 450 451 452 453 454 455 456 457 458 459 460 461 462 463 464 465 466 467 468 469 470 471 472 473 474 475 476 477 478 479 480 481 482 483 484 485 486 487 488 489 490 491 492 493 494 495 496 497 498 499 500 501 502 503 504 505 506 507 508 509 510 511 512 513 514 515 516 517 518 519 520 521 522 523 524 525 526 527 528 529 530 531 532 533 534 535 536 537 538 539 540 541 542 543 544 545 546 547 548 549 550 551 552 553 554 555 556 557 558 559 560 561 562 563 564 565 566 567 568 569 570 571 572 573 574 575 576 577 578 579 580 581 582 583 584 585 586 587 588 589 590 591 592 593 594 595 596 597 598 599 600 601 602 603 604 605 606 607 608 609 610 611 612 613 614 615 616 617 618 619 620 621 622 623 624 625 626 627 628 629 630 631 632 633 634 635 636 637 638 639 640 641 |
# File 'manifests/init.pp', line 401
class nginx (
### START Nginx Configuration ###
Optional[Variant[Stdlib::Absolutepath, Tuple[Stdlib::Absolutepath, Integer, 1, 4]]]
$client_body_temp_path = undef, # 'client_body_temp'
Optional[Boolean] $recursive_error_pages = undef, # off
Boolean $confd_only = false,
Boolean $confd_purge = false,
Stdlib::Absolutepath $conf_dir = $nginx::params::conf_dir,
Optional[Nginx::Switch] $daemon = undef, # 'on'
String[1] $daemon_user = $nginx::params::daemon_user,
Optional[String[1]] $daemon_group = undef,
Array[String] $dynamic_modules = [],
String[1] $global_owner = 'root',
String[1] $global_group = $nginx::params::global_group,
Stdlib::Filemode $global_mode = '0644',
Optional[Hash[String, Nginx::LimitReqZone]] $limit_req_zone = undef,
Stdlib::Absolutepath $log_dir = $nginx::params::log_dir,
Boolean $manage_log_dir = true,
String[1] $log_user = $nginx::params::log_user,
String[1] $log_group = $nginx::params::log_group,
Stdlib::Filemode $log_mode = $nginx::params::log_mode,
Variant[
String,
Array[String],
Hash[String, String]
] $http_access_log = "${log_dir}/access.log",
Optional[String] $http_format_log = undef, # 'combined'
Variant[String, Array[String]] $stream_access_log = "${log_dir}/stream-access.log",
Optional[String] $stream_custom_format_log = undef,
Variant[String, Array[String]] $nginx_error_log = "${log_dir}/error.log",
Nginx::ErrorLogSeverity $nginx_error_log_severity = 'error',
Variant[Stdlib::Absolutepath, Boolean] $pid = $nginx::params::pid,
Optional[Variant[Stdlib::Absolutepath, Tuple[Stdlib::Absolutepath, Integer, 1, 4]]]
$proxy_temp_path = undef, # 'proxy_temp'
Optional[String] $proxy_cache_key = undef, # $scheme$proxy_host$request_uri
String[1] $root_group = $nginx::params::root_group,
String[1] $sites_available_owner = 'root',
String[1] $sites_available_group = $nginx::params::sites_available_group,
Stdlib::Filemode $sites_available_mode = '0644',
Boolean $super_user = true,
Stdlib::Absolutepath $temp_dir = '/tmp',
Boolean $server_purge = false,
Boolean $include_modules_enabled = $nginx::params::include_modules_enabled,
# Primary Templates
String[1] $conf_template = 'nginx/conf.d/nginx.conf.erb',
String[1] $fastcgi_conf_template = 'nginx/server/fastcgi.conf.erb',
String[1] $uwsgi_params_template = 'nginx/server/uwsgi_params.erb',
### START Nginx Configuration ### # default:
Optional[Nginx::Switch] $absolute_redirect = undef, # 'on'
Optional[Nginx::Switch] $accept_mutex = undef, # 'on' (nginx < 1.11.3), 'off' (nginx >= 1.11.3)
Optional[Nginx::Time] $accept_mutex_delay = undef, # 500ms
Optional[Nginx::Size] $client_body_buffer_size = undef, # 8k|16k
Optional[Nginx::Size] $client_max_body_size = undef, # 1m
Optional[Nginx::Time] $client_body_timeout = undef, # 60s
Optional[Nginx::Time] $send_timeout = undef, # 60s
Optional[Nginx::Time] $lingering_timeout = undef, # 5s
Optional[Variant[Nginx::Switch, Enum['always']]]
$lingering_close = undef,
Optional[String[1]] $lingering_time = undef,
Optional[Nginx::Switch] $etag = undef, # 'on'
Optional[Nginx::ConnectionProcessing] $events_use = undef, # 'epoll'
Array[Nginx::DebugConnection] $debug_connections = [],
Optional[String] $fastcgi_cache_key = undef, # undef
Optional[Hash[Stdlib::Unixpath, Nginx::CachePath, 1]] $fastcgi_cache_path = undef, # undef
Optional[Variant[Nginx::CacheUseStale, Array[Nginx::CacheUseStale]]]
$fastcgi_cache_use_stale = undef, # 'off'
Nginx::Switch $gzip = false, # 'on'
Optional[Nginx::Buffers] $gzip_buffers = undef, # '32 4k|16 8k'
Optional[Integer] $gzip_comp_level = undef, # 1
Optional[Variant[String, Array[String, 1]]] $gzip_disable = undef, # undef
Optional[Integer] $gzip_min_length = undef, # 20
Optional[Enum['1.0', '1.1']] $gzip_http_version = undef, # '1.1'
Optional[
Variant[
Nginx::GzipProxied,
Array[Nginx::GzipProxied]
]
] $gzip_proxied = undef, # 'off'
Optional[Variant[String, Array[String, 1]]] $gzip_types = undef, # 'text/html'
Optional[Nginx::Switch] $gzip_vary = undef, # 'off'
Optional[Nginx::ConfigSet] $http_cfg_prepend = undef,
Optional[Nginx::ConfigSet] $http_cfg_append = undef,
Optional[
Variant[
Enum['always'],
Nginx::Switch
]
] $gzip_static = undef,
Optional[Variant[Array[String], String]] $http_raw_prepend = undef,
Optional[Variant[Array[String], String]] $http_raw_append = undef,
Optional[Nginx::Switch] $http_tcp_nodelay = undef, # 'on'
Optional[Nginx::Switch] $http_tcp_nopush = undef, # 'off'
Optional[Nginx::Time] $keepalive_timeout = undef, # 75
Optional[Integer] $keepalive_requests = undef, # 100
Hash[String[1], Nginx::LogFormat] $log_format = {},
Hash[String[1], Nginx::LogFormat] $stream_log_format = {},
Boolean $mail = false,
Optional[Integer] $map_hash_bucket_size = undef,
Optional[Integer] $map_hash_max_size = undef,
Variant[String, Boolean] $mime_types_path = 'mime.types',
Boolean $stream = false,
Optional[Nginx::Switch] $multi_accept = undef, # 'off'
Optional[Integer] $names_hash_bucket_size = undef, # 32|64|128
Optional[Integer] $names_hash_max_size = undef, # 512
Optional[Nginx::ConfigSet] $nginx_cfg_prepend = undef,
Optional[Nginx::Switch] $proxy_buffering = undef, # on
Optional[Nginx::Buffers] $proxy_buffers = undef, # '8 4k|8 8k'
Optional[Nginx::Size] $proxy_buffer_size = undef, # '4k|8k'
Optional[String] $proxy_cache = undef, # off
Optional[Hash[Stdlib::Unixpath, Nginx::CachePath, 1]]
$proxy_cache_path = undef, # undef
Optional[Nginx::Time] $proxy_connect_timeout = undef, # 60s
Optional[Nginx::Size] $proxy_headers_hash_bucket_size = undef, # 64
Optional[Enum['1.0', '1.1']] $proxy_http_version = undef, # '1.0'
Optional[Nginx::Time] $proxy_read_timeout = undef, # 60
Optional[String] $proxy_redirect = undef, # 'default'
Optional[Nginx::Time] $proxy_send_timeout = undef, # 60
Array[String] $proxy_set_header = [], # ['Host $proxy_host', 'Connection close']
Array[String] $proxy_hide_header = [],
Array[String] $proxy_pass_header = [],
Array[String] $proxy_ignore_header = [],
Optional[Nginx::Size] $proxy_max_temp_file_size = undef,
Optional[Nginx::Size] $proxy_busy_buffers_size = undef,
Optional[Nginx::Switch] $sendfile = undef, # 'off'
Optional[Nginx::Switch] $server_tokens = undef, # 'on',
Nginx::Switch $spdy = false,
Nginx::Switch $http2 = false,
Nginx::Switch $ssl_stapling = false,
Optional[Nginx::Switch] $ssl_stapling_verify = undef, # 'off',
Stdlib::Absolutepath $snippets_dir = $nginx::params::snippets_dir,
Boolean $manage_snippets_dir = false,
Optional[Nginx::Size] $types_hash_bucket_size = undef, # 64
Optional[Nginx::Size] $types_hash_max_size = undef, # 1024
Integer $worker_connections = 1024, # 512
Nginx::Switch $ssl_prefer_server_ciphers = true,
Variant[Enum['auto'], Integer] $worker_processes = 'auto', # 1
Optional[Integer] $worker_rlimit_nofile = undef, # undef
Optional[Nginx::Switch] $pcre_jit = undef,
# keep TLSv1.1 for legacy compatibility
String $ssl_protocols = 'TLSv1.1 TLSv1.2 TLSv1.3',
String $ssl_ciphers = 'ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES128-GCM-SHA256:ECDHE-ECDSA-AES256-GCM-SHA384:ECDHE-RSA-AES256-GCM-SHA384:ECDHE-ECDSA-CHACHA20-POLY1305:ECDHE-RSA-CHACHA20-POLY1305:DHE-RSA-AES128-GCM-SHA256:DHE-RSA-AES256-GCM-SHA384:DHE-RSA-CHACHA20-POLY1305:ECDHE-ECDSA-AES128-SHA256:ECDHE-RSA-AES128-SHA256:ECDHE-ECDSA-AES256-SHA384:ECDHE-RSA-AES256-SHA384:DHE-RSA-AES128-SHA256:DHE-RSA-AES256-SHA256:AES128-GCM-SHA256:AES256-GCM-SHA384:AES128-SHA256:AES256-SHA256', # lint:ignore:140chars
Optional[Stdlib::Unixpath] $ssl_dhparam = undef,
Optional[Nginx::FileCache] $open_file_cache = undef, # 'off'
Nginx::Time $open_file_cache_valid = 60,
Integer $open_file_cache_min_uses = 1,
Boolean $proxy_connection_upgrade = true, # see http://nginx.org/en/docs/http/websocket.html
Optional[Boolean] $proxy_cache_lock = undef, # 'off'
Optional[String] $default_type = undef, # 'text/plain'
Optional[String] $charset_types = undef, # 'text/html text/xml text/plain text/vnd.wap.wml'
# 'application/javascript application/rss+xml'
Optional[String] $charset = undef, # 'off'
Optional[String] $index = undef, # 'index.html'
Optional[Boolean] $msie_padding = undef, # 'on'
Optional[Boolean] $port_in_redirect = undef, # 'on'
Optional[Nginx::Time] $client_header_timeout = undef, # 60s
Optional[Nginx::Switch] $ignore_invalid_headers = undef, # 'on'
Optional[Nginx::Buffers] $fastcgi_buffers = undef, # '8 4k|8 8k'
Optional[Nginx::Size] $fastcgi_buffer_size = undef, # '4k|8k'
Optional[String] $ssl_ecdh_curve = undef, # 'auto'
Optional[String] $ssl_session_cache = undef, # 'none'
Optional[Nginx::Time] $ssl_session_timeout = undef, # 5m
Optional[Nginx::Switch] $ssl_session_tickets = undef, # 'on'
Optional[Stdlib::Absolutepath] $ssl_session_ticket_key = undef,
Optional[Nginx::Size] $ssl_buffer_size = undef, # 16k
Optional[Stdlib::Absolutepath] $ssl_crl = undef,
Optional[Stdlib::Absolutepath] $ssl_stapling_file = undef,
Optional[String] $ssl_stapling_responder = undef,
Optional[Stdlib::Absolutepath] $ssl_trusted_certificate = undef,
Optional[Integer] $ssl_verify_depth = undef, # 1
Optional[Stdlib::Absolutepath] $ssl_password_file = undef,
Optional[Nginx::Switch] $reset_timedout_connection = undef,
### START Package Configuration ###
String $package_ensure = installed,
String $package_name = $nginx::params::package_name,
Nginx::Package_source $package_source = 'nginx',
Optional[String] $package_flavor = undef,
Boolean $manage_repo = $nginx::params::manage_repo,
Variant[Boolean, Enum['absent']] $yum_repo_sslverify = 'absent',
Hash[String[1], String[1]] $mime_types = $nginx::params::mime_types,
Boolean $mime_types_preserve_defaults = false,
Optional[String] $repo_release = undef,
String $passenger_package_ensure = installed,
String[1] $passenger_package_name = $nginx::params::passenger_package_name,
Optional[Stdlib::HTTPUrl] $repo_source = undef,
### END Package Configuration ###
### START Service Configuation ###
Stdlib::Ensure::Service $service_ensure = 'running',
Boolean $service_enable = true,
Optional[String] $service_flags = undef,
Optional[String] $service_restart = undef,
String $service_name = 'nginx',
Boolean $service_manage = true,
Boolean $service_config_check = false,
String $service_config_check_command = 'nginx -t',
### END Service Configuration ###
### START Hiera Lookups ###
Hash $geo_mappings = {},
Hash $geo_mappings_defaults = {},
Hash $string_mappings = {},
Hash $string_mappings_defaults = {},
Hash $nginx_snippets = {},
Hash $nginx_snippets_defaults = {},
Hash $nginx_locations = {},
Hash $nginx_locations_defaults = {},
Hash $nginx_mailhosts = {},
Hash $nginx_mailhosts_defaults = {},
Hash $nginx_servers = {},
Hash $nginx_servers_defaults = {},
Hash $nginx_streamhosts = {},
Hash $nginx_streamhosts_defaults = {},
Hash $nginx_upstreams = {},
Nginx::UpstreamDefaults $nginx_upstreams_defaults = {},
Boolean $purge_passenger_repo = true,
String[1] $nginx_version = pick($facts['nginx_version'], '1.16.0'),
### END Hiera Lookups ###
) inherits nginx::params {
contain 'nginx::package'
contain 'nginx::config'
contain 'nginx::service'
create_resources( 'nginx::resource::geo', $geo_mappings, $geo_mappings_defaults )
create_resources( 'nginx::resource::snippet', $nginx_snippets, $nginx_snippets_defaults )
create_resources( 'nginx::resource::location', $nginx_locations, $nginx_locations_defaults )
create_resources( 'nginx::resource::mailhost', $nginx_mailhosts, $nginx_mailhosts_defaults )
create_resources( 'nginx::resource::map', $string_mappings, $string_mappings_defaults )
create_resources( 'nginx::resource::server', $nginx_servers, $nginx_servers_defaults )
create_resources( 'nginx::resource::streamhost', $nginx_streamhosts, $nginx_streamhosts_defaults )
create_resources( 'nginx::resource::upstream', $nginx_upstreams, $nginx_upstreams_defaults )
# Allow the end user to establish relationships to the "main" class
# and preserve the relationship to the implementation classes through
# a transitive relationship to the composite class.
Class['nginx::package'] -> Class['nginx::config'] ~> Class['nginx::service']
Class['nginx::package'] ~> Class['nginx::service']
}
|