Puppet Class: puppet::server::passenger

Defined in:
manifests/server/passenger.pp

Overview

Private class



2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
 
# File 'manifests/server/passenger.pp', line 2

class puppet::server::passenger {
  class { 'puppet::server::standalone': enabled => false }

  if $::kernel == 'Darwin' {
    fail('puppet::server::passenger not supported on OS X')
  }

  include apache
  include apache::mod::ssl
  include apache::mod::passenger
  include puppet::server::rack

  apache::vhost { 'puppetmaster':
    servername        => $puppet::server::servername,
    ip                => $puppet::server::bindaddress,
    port              => '8140',
    priority          => '10',
    docroot           => '/etc/puppet/rack/public/',
    ssl               => true,
    ssl_cipher        => $puppet::server::ssl_ciphers,
    ssl_protocol      => $puppet::server::ssl_protocols,
    ssl_cert          => "${puppet::ssldir}/certs/${puppet::server::servername}.pem",
    ssl_key           => "${puppet::ssldir}/private_keys/${puppet::server::servername}.pem",
    ssl_chain         => "${puppet::ssldir}/certs/ca.pem",
    ssl_ca            => "${puppet::ssldir}/ca/ca_crt.pem",
    ssl_crl           => "${puppet::ssldir}/ca/ca_crl.pem",
    ssl_verify_client => 'optional',
    ssl_verify_depth  => '1',
    ssl_options       => ['+StdEnvVars', '+ExportCertData'],
    request_headers   => [
      'set X-SSL-Subject %{SSL_CLIENT_S_DN}e',
      'set X-Client-DN %{SSL_CLIENT_S_DN}e',
      'set X-Client-Verify %{SSL_CLIENT_VERIFY}e',
    ],
  }
}