modules/salsa/manifests/init.pp

   1 #
   2 class salsa inherits salsa::params {
   3
   4         # anchor things in correct order
   5         anchor { 'salsa::begin': } ->
   6         class { '::salsa::mail': } ->
   7         class { '::salsa::redis': } ->
   8         class { '::salsa::packages': } ->
   9         class { '::salsa::database': } ->
  10         anchor { 'salsa::end': }
  11
  12         # userdir-ldap users get their home in /home
  13         file { "/home/${salsa::user}":
  14                 ensure => link,
  15                 target => $salsa::home,
  16         }
  17         file { $salsa::home:
  18                 ensure => directory,
  19                 mode   => '0755',
  20                 owner  => $salsa::user,
  21                 group  => $salsa::group,
  22         }
  23
  24         file { "${salsa::home}/.credentials.yaml":
  25                 mode => '0400',
  26                 owner  => $salsa::user,
  27                 group  => $salsa::group,
  28                 content  => @("EOF"),
  29                                 ---
  30                                 # This file is maintained by puppet.
  31                                 # base secret that gitlab encrypts the DB with
  32                                 secret: "${salsa::secret}"
  33                                 database:
  34                                   name: "${salsa::db_name}"
  35                                   role: "${salsa::db_role}"
  36                                   password: "${salsa::db_password}"
  37                                 mail:
  38                                   username: "${salsa::mail_username}"
  39                                   password: "${salsa::mail_password}"
  40                                 | EOF
  41         }
  42         file { "${salsa::home}/.credentials-manual.yaml":
  43                 mode => '0400',
  44                 owner  => $salsa::user,
  45                 group  => $salsa::group,
  46                 content  => @("EOF"),
  47                                 ---
  48                                 # This file was put in place by puppet, but it won't overwrite it.
  49                                 # Please fill in from dsa-passwords/services-salsa
  50                                 # mastersecret: "swordfish"
  51                                 | EOF
  52                 replace => false,
  53         }
  54
  55         ssl::service { $servicename:
  56                 # notify  => Exec['service apache2 reload'],
  57                 key => true,
  58         }
  59 }