X-Git-Url: https://git.adam-barratt.org.uk/?a=blobdiff_plain;f=modules%2Fonion%2Fmanifests%2Fservice.pp;h=4f822991272989450928d2967177e1d1bfe04778;hb=d5ce68a830c42fd613e08e377ace6348a2799e9d;hp=1bfdb8d9543d14716008cb671a01b31305b5c0a5;hpb=4865d94fb841087441566652caec53af7f8ccbd8;p=mirror%2Fdsa-puppet.git

diff --git a/modules/onion/manifests/service.pp b/modules/onion/manifests/service.pp
index 1bfdb8d95..4f8229912 100644
--- a/modules/onion/manifests/service.pp
+++ b/modules/onion/manifests/service.pp
@@ -1,13 +1,57 @@
 define onion::service (
 	$port,
 	$target_address,
-	$target_port
+	$target_port,
+	$ensure = present,
+	$direct = false
 ) {
-	include onion
+	if ($ensure == "ifstatic") {
+		$my_ensure = has_static_component($name) ? {
+			true => "present",
+			false => "absent"
+		}
+	} else {
+		$my_ensure = $ensure
+	}
+
+	if ($my_ensure == "present") {
+		include onion
+
+		concat::fragment { "onion::torrc_onionservice::${name}":
+			target  => "/etc/tor/torrc",
+			order   => '50',
+			content  => @("EOF"),
+				HiddenServiceDir /var/lib/tor/onion/${name}
+				HiddenServiceVersion 2
+				HiddenServicePort ${port} ${target_address}:${target_port}
+
+				| EOF
+		}
+
+		$onion_hn = onion_tor_service_hostname($name)
+		if $onion_hn {
+			$hostname_without_onion = regsubst($onion_hn, '\.onion$', '')
 
-	concat::fragment { "onion::torrc_onionservice::${name}":
-		target  => "/etc/tor/torrc",
-		order   => 10,
-		content => "HiddenServiceDir /var/lib/tor/onion/${name}\nHiddenServicePort ${port} ${target_address}:${target_port}\n\n",
+			if ($direct) {
+				@@concat::fragment { "onion::balance::onionbalance-services.yaml::${name}":
+					target  => "/srv/puppet.debian.org/puppet-facts/onionbalance-services.yaml",
+					content => "{\"${name}\": \"${onion_hn}\"}\n",
+					tag     => "onionbalance-services.yaml",
+				}
+			} else {
+				@@concat::fragment { "onion::balance::instance::dsa-snippet::$name::$fqdn":
+					target  => "/etc/onionbalance/config-dsa-snippet.yaml",
+					content => "- service: ${name}\n  address: ${hostname_without_onion}\n  name: ${hostname}-${name}\n",
+					tag     => "onion::balance::dsa-snippet",
+				}
+			}
+		}
+	} elsif ($my_ensure == "absent") {
+		file { "/var/lib/tor/onion/${name}":
+			ensure => absent,
+			force  => true,
+		}
+	} else {
+		fail("Invalid ensure value ${my_ensure}")
 	}
 }