modules/roles/manifests/snapshot_web.pp

   1 class roles::snapshot_web {
   2         include apache2
   3         include apache2::rewrite
   4         include stretch::network_online
   5
   6         ensure_packages ( [
   7                 "libapache2-mod-wsgi",
   8                 ], {
   9                 ensure => 'installed',
  10         })
  11
  12         apache2::site { '020-snapshot.debian.org':
  13                 site   => 'snapshot.debian.org',
  14                 content => template('roles/snapshot/snapshot.debian.org.conf.erb')
  15         }
  16
  17         case $::hostname {
  18                 'sallinen': {
  19                         $ipv4addr        = '193.62.202.27'
  20                         $ipv6addr        = '2001:630:206:4000:1a1a:0:c13e:ca1b'
  21                         $ipv6addr_apache = '2001:630:206:4000:1a1a:0:c13e:ca1a'
  22                 }
  23                 default: {
  24                         fail ( "unknown host $::hostname for snapshot_web." )
  25                 }
  26         }
  27
  28         @ferm::rule { 'dsa-snapshot-varnish-v4':
  29                 rule  => '&SERVICE(tcp, 6081)',
  30         }
  31         @ferm::rule { 'dsa-nat-snapshot-varnish-v4':
  32                 table => 'nat',
  33                 chain => 'PREROUTING',
  34                 rule  => "proto tcp daddr ${ipv4addr} dport 80 REDIRECT to-ports 6081",
  35         }
  36
  37         varnish::config { 'default':
  38                 listen  => [
  39                         ':6081',
  40                         "[$ipv6addr]:80"
  41                         ],
  42                 backend => 'file,/var/lib/varnish/varnish_storage.bin,8G',
  43                 content => template('roles/snapshot/snapshot.debian.org.vcl.erb'),
  44         }
  45
  46         file { '/etc/apache2/ports.conf':
  47                 content  => @("EOF"),
  48                         Listen 0.0.0.0:80
  49                         Listen [$ipv6addr_apache]:80
  50                         | EOF
  51                 require => Package['apache2'],
  52                 notify  => Service['apache2'],
  53         }
  54 }