Puppet Class: uhosting::profiles::nginx

Inherits:
::uhosting
Defined in:
manifests/profiles/nginx.pp

Overview

Class: uhosting::profiles::nginx

Installs and manages Nginx webserver (nginx-extras) It also opens firewall settings

Parameters

nginx_ppa

If true the Nginx mainline PPA will get used

Authors

Tobias Brunner <tobias.brunner@vshn.ch>

Copyright 2015 Tobias Brunner, VSHN AG

Parameters:

  • nginx_ppa (Any) (defaults to: false) 


19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
 
# File 'manifests/profiles/nginx.pp', line 19

class uhosting::profiles::nginx (
  $nginx_ppa = false,
) inherits ::uhosting {

  ## Create and manage directories
  file {
    '/var/www':
      ensure => directory;
  }

  if $nginx_ppa {
    apt::source { 'nginx_ppa':
      comment     => 'Nginx Mainline PPA',
      location    => 'http://ppa.launchpad.net/nginx/development/ubuntu',
      release     => $::lsbdistcodename,
      repos       => 'main',
      key         => {
        'id' => '8B3981E7A6852F782CC4951600A6F0A3C300EE8C',
        'server' => 'hkp://keyserver.ubuntu.com:80',
      },
      include     => {
        'src' => false,
        'deb' => true,
      }
    }
  }

  ## Install and configure Nginx
  if $::uhosting::redirects {
    file {
      '/etc/nginx/redirects.conf':
        content => template('uhosting/nginx_redirects.conf.erb');
    }
    $http_cfg_append = {
      'include' => '/etc/nginx/redirects.conf',
    }
  } else {
    $http_cfg_append = undef
  }

  class { '::nginx::config':
    vhost_purge            => true,
    names_hash_bucket_size => 128,
    http_cfg_append        => $http_cfg_append,
  }

  class { '::nginx':
    package_name      => 'nginx-extras',
    configtest_enable => true,
  }

  ## Generate unique DH params for this server
  exec { 'generate_dhparams':
    command => '/usr/bin/openssl dhparam -out /etc/ssl/certs/dhparam.pem 2048',
    creates => '/etc/ssl/certs/dhparam.pem',
  }

  ## Firewall settings
  firewall {
    '020 open HTTP and HTTPS IPv4':
      dport  => [80,443],
      proto  => 'tcp',
      action => 'accept';
    '020 open HTTP and HTTPS IPv6':
      dport    => [80,443],
      proto    => 'tcp',
      action   => 'accept',
      provider => 'ip6tables';
  }

}