X-Git-Url: https://git.adam-barratt.org.uk/?a=blobdiff_plain;f=modules%2Froles%2Fmanifests%2Fjenkins.pp;h=ccff2990e033d66253d188e5bf8e4f7bb4312eb1;hb=97669532c8d024b55d005dfa3cda683acfd622be;hp=2efd7e0d77fca4cff023e2e7eb22152e3d9b772d;hpb=d21ea84dfbbf151fe5cccaf0517a88f4678057b2;p=mirror%2Fdsa-puppet.git

diff --git a/modules/roles/manifests/jenkins.pp b/modules/roles/manifests/jenkins.pp
index 2efd7e0d7..ccff2990e 100644
--- a/modules/roles/manifests/jenkins.pp
+++ b/modules/roles/manifests/jenkins.pp
@@ -1,16 +1,58 @@
+# the jenkins.debian.org CI system
 class roles::jenkins {
-	include apache2::ssl
-	apache2::module { 'proxy_http': }
+  include roles::sso_rp
 
-	apache2::site { '010-jenkins.debian.org':
-		site    => 'jenkins.debian.org',
-		source => 'puppet:///modules/roles/jenkins/jenkins.debian.org',
-	}
+  include apache2
+  include apache2::auth_digest
+  include apache2::authn_file
+  include apache2::proxy_http
+  include apache2::rewrite
+  include apache2::ssl
 
-	ssl::service { 'jenkins.debian.org':
-		notify  => Exec['service apache2 reload'],
-		key => true,
-	}
+  apache2::site { '010-jenkins.debian.org':
+    site   => 'jenkins.debian.org',
+    source => 'puppet:///modules/roles/jenkins/jenkins.debian.org',
+  }
 
-	dsa_systemd::linger { 'jenkins': }
+  ssl::service { 'jenkins.debian.org':
+    notify => Exec['service apache2 reload'],
+    key    => true,
+  }
+
+  dsa_systemd::linger { 'jenkins': }
+
+  file { '/etc/sudoers.d/jenkins':
+    mode   => '0440',
+    source => 'puppet:///modules/roles/jenkins/sudoers',
+  }
+
+  ensure_packages([
+    'debian.org-jenkins.debian.org'
+  ], { ensure => 'installed' })
+
+
+  # home directories
+  file { [
+      '/srv/jenkins.debian.org',
+      '/srv/jenkins.debian.org/home-adm'
+    ]:
+      ensure => directory,
+      mode   => '2755',
+      owner  => 'jenkins-adm',
+      group  => 'jenkins-adm',
+  }
+  file { '/home/jenkins-adm':
+    ensure => link,
+    target => '/srv/jenkins.debian.org/home-adm',
+  }
+  file { '/srv/jenkins.debian.org/home-unpriv':
+      ensure => directory,
+      mode   => '2755',
+      owner  => 'jenkins',
+      group  => 'jenkins',
+  }
+  file { '/home/jenkins':
+    ensure => link,
+    target => '/srv/jenkins.debian.org/home-unpriv',
+  }
 }