encode backuphost in label for basebackups
[mirror/dsa-puppet.git] / modules / apache2 / manifests / init.pp
1 # = Class: apache2
2 #
3 # Standard apache config debian.org hosts
4 #
5 # == Sample Usage:
6 #
7 #   include apache2
8 #
9 class apache2 {
10         package { 'apache2':
11                 ensure => installed,
12         }
13
14         service { 'apache2':
15                 ensure  => running,
16                 require => Package['apache2'],
17         }
18
19         apache2::module { 'info': }
20         apache2::module { 'status': }
21         apache2::module { 'headers': }
22
23         package { 'libapache2-mod-macro':
24                 ensure => installed
25         }
26
27         apache2::module { 'macro':
28                 require => Package['libapache2-mod-macro']
29         }
30
31         apache2::site { '00-default':
32                 site     => 'default-debian.org',
33                 content  => template('apache2/default-debian.org.erb'),
34         }
35
36         apache2::site { '000-default':
37                 ensure => absent,
38         }
39
40         apache2::config { 'serve-cgi-bin':
41                 ensure => absent,
42         }
43
44         apache2::config { 'ressource-limits':
45                 ensure => absent,
46         }
47
48         if has_role('udd') {
49                 $memlimit = 512 * 1024 * 1024
50         } elsif has_role('dgit_git') {
51                 $memlimit = 512 * 1024 * 1024
52         } elsif has_role('sso') {
53                 $memlimit = 512 * 1024 * 1024
54         } elsif has_role('popcon') {
55                 $memlimit = 512 * 1024 * 1024
56         } elsif has_role('qamaster') {
57                 $memlimit = 300 * 1024 * 1024
58         } else {
59                 $memlimit = 192 * 1024 * 1024
60         }
61
62         apache2::config { 'resource-limits':
63                 content => template('apache2/resource-limits.erb'),
64         }
65
66         apache2::config { 'security':
67                 source => 'puppet:///modules/apache2/security',
68         }
69
70         apache2::config { 'logformat-privacy':
71                 source => 'puppet:///modules/apache2/logformat-privacy',
72         }
73
74         apache2::config { 'local-serverinfo':
75                 source => 'puppet:///modules/apache2/local-serverinfo',
76         }
77
78         apache2::config { 'server-status':
79                 source => 'puppet:///modules/apache2/server-status',
80         }
81
82         apache2::config { 'puppet-ssl-macros':
83                 source => 'puppet:///modules/apache2/puppet-ssl-macros',
84         }
85
86         apache2::config { 'puppet-config':
87                 content => template('apache2/puppet-config.erb'),
88         }
89
90         apache2::config { 'pratchett':
91                 source => 'puppet:///modules/apache2/pratchett',
92         }
93
94         if $::lsbmajdistrelease > 7 {
95                 file { '/etc/apache2/mods-available/mpm_worker.conf':
96                         content => template('apache2/mpm_worker.erb'),
97                 }
98         }
99
100         file { '/etc/apache2/sites-available/common-ssl.inc':
101                 ensure => absent,
102         }
103
104         file { '/etc/logrotate.d/apache2':
105                 source => 'puppet:///modules/apache2/apache2.logrotate',
106         }
107
108         file { [ '/srv/www', '/srv/www/default.debian.org', '/srv/www/default.debian.org/htdocs' ]:
109                 ensure  => directory,
110                 mode    => '0755',
111         }
112
113         file { '/srv/www/default.debian.org/htdocs/index.html':
114                 content => template('apache2/default-index.html'),
115         }
116
117         file { '/var/log/apache2/.nobackup':
118                 mode    => '0644',
119                 content => '',
120         }
121
122         munin::check { 'apache_accesses': }
123         munin::check { 'apache_processes': }
124         munin::check { 'apache_volume': }
125         munin::check { 'apache_servers': }
126         munin::check { 'ps_apache2':
127                 script => 'ps_',
128         }
129
130         if $::hostname in [beach,buxtehude,picconi,pkgmirror-1and1] {
131                 include apache2::dynamic
132         } else {
133                 @ferm::rule { 'dsa-http':
134                         prio        => '23',
135                         description => 'Allow web access',
136                         rule        => '&SERVICE(tcp, (http https))'
137                 }
138         }
139
140         @ferm::rule { 'dsa-http-v6':
141                 domain          => '(ip6)',
142                 prio            => '23',
143                 description     => 'Allow web access',
144                 rule            => '&SERVICE(tcp, (http https))'
145         }
146
147         exec { 'service apache2 reload':
148                 path        => '/usr/bin:/usr/sbin:/bin:/sbin',
149                 command     => 'service apache2 reload',
150                 refreshonly => true,
151                 require =>  Package['apache2'],
152         }
153 }