X-Git-Url: https://git.adam-barratt.org.uk/?a=blobdiff_plain;f=modules%2Fonion%2Fmanifests%2Fservice.pp;h=4f822991272989450928d2967177e1d1bfe04778;hb=ed3fa843350ea51e5505c3fae278590a6958e298;hp=c8ea548e8c5ff4a44a7f35ed56c34522e9e93015;hpb=d46e15fc9edead0044eb283fc6c5d57fc383bda3;p=mirror%2Fdsa-puppet.git diff --git a/modules/onion/manifests/service.pp b/modules/onion/manifests/service.pp index c8ea548e8..4f8229912 100644 --- a/modules/onion/manifests/service.pp +++ b/modules/onion/manifests/service.pp @@ -2,7 +2,8 @@ define onion::service ( $port, $target_address, $target_port, - $ensure = present + $ensure = present, + $direct = false ) { if ($ensure == "ifstatic") { $my_ensure = has_static_component($name) ? { @@ -18,19 +19,39 @@ define onion::service ( concat::fragment { "onion::torrc_onionservice::${name}": target => "/etc/tor/torrc", - order => 50, - content => "HiddenServiceDir /var/lib/tor/onion/${name}\nHiddenServicePort ${port} ${target_address}:${target_port}\n\n", + order => '50', + content => @("EOF"), + HiddenServiceDir /var/lib/tor/onion/${name} + HiddenServiceVersion 2 + HiddenServicePort ${port} ${target_address}:${target_port} + + | EOF } $onion_hn = onion_tor_service_hostname($name) if $onion_hn { $hostname_without_onion = regsubst($onion_hn, '\.onion$', '') - @@concat::fragment { "onion::balance::instance::$name::$fqdn": - target => "/etc/onionbalance/config.yaml", - content => " - address: ${hostname_without_onion}\n name: ${hostname}-${name}\n", - order => "50-${name}-20", - tag => "onion::balance::$name", + + if ($direct) { + @@concat::fragment { "onion::balance::onionbalance-services.yaml::${name}": + target => "/srv/puppet.debian.org/puppet-facts/onionbalance-services.yaml", + content => "{\"${name}\": \"${onion_hn}\"}\n", + tag => "onionbalance-services.yaml", + } + } else { + @@concat::fragment { "onion::balance::instance::dsa-snippet::$name::$fqdn": + target => "/etc/onionbalance/config-dsa-snippet.yaml", + content => "- service: ${name}\n address: ${hostname_without_onion}\n name: ${hostname}-${name}\n", + tag => "onion::balance::dsa-snippet", + } } } + } elsif ($my_ensure == "absent") { + file { "/var/lib/tor/onion/${name}": + ensure => absent, + force => true, + } + } else { + fail("Invalid ensure value ${my_ensure}") } }