X-Git-Url: https://git.adam-barratt.org.uk/?a=blobdiff_plain;f=modules%2Fapache2%2Fmanifests%2Finit.pp;h=81e182a99af66ec764a9211824e8b4232eb3cf85;hb=29cbe59430d1e7d7d5575579b48513c56227e2f7;hp=ce7c9273b429c4fdb4bf05a06fe48737b2a1771a;hpb=1795fd9783dafaaf24a229f7d6bd82df0e47eee8;p=mirror%2Fdsa-puppet.git diff --git a/modules/apache2/manifests/init.pp b/modules/apache2/manifests/init.pp index ce7c9273b..81e182a99 100644 --- a/modules/apache2/manifests/init.pp +++ b/modules/apache2/manifests/init.pp @@ -54,6 +54,12 @@ class apache2 { } else { $memlimit = 192 * 1024 * 1024 } + # debbugs cgis like to fork and don't deal well with EAGAIN + if has_role('bugs_base') { + $proclimit = 450 + } else { + $proclimit = 256 + } apache2::config { 'resource-limits': content => template('apache2/resource-limits.erb'), @@ -87,10 +93,6 @@ class apache2 { content => template('apache2/puppet-config.erb'), } - apache2::config { 'pratchett': - ensure => 'absent', - } - apache2::config { 'headers': source => 'puppet:///modules/apache2/headers', } @@ -111,27 +113,10 @@ class apache2 { content => template('apache2/mpm_worker.erb'), } - file { '/etc/apache2/sites-available/common-ssl.inc': - ensure => absent, - } - file { '/etc/logrotate.d/apache2': source => 'puppet:///modules/apache2/apache2.logrotate', } - file { [ '/srv/www', '/srv/www/default.debian.org', '/srv/www/default.debian.org/htdocs', '/srv/www/default.debian.org/htdocs-disabled' ]: - ensure => directory, - mode => '0755', - } - - file { '/srv/www/default.debian.org/htdocs/index.html': - content => template('apache2/default-index.html'), - } - - file { '/srv/www/default.debian.org/htdocs-disabled/index.html': - content => template('apache2/disabled-index.html'), - } - file { '/var/log/apache2': ensure => directory, mode => '0755', @@ -157,13 +142,13 @@ class apache2 { if has_role('apache_ratelimited') { include apache2::dynamic } else { - @ferm::rule { 'dsa-http': + ferm::rule { 'dsa-http': prio => '23', description => 'Allow web access', rule => '&SERVICE(tcp, (http https))' } - @ferm::rule { 'dsa-http-v6': + ferm::rule { 'dsa-http-v6': domain => '(ip6)', prio => '23', description => 'Allow web access',