}
# directories
-file { "$default_puppet_conf_dir":
+file { ["$puppet_dir", "$default_puppet_conf_dir"]:
ensure => directory,
owner => "puppet",
group => "puppet",
# files in $default_puppet_conf_dir/files
-file { [ "$default_puppet_conf_dir/files",
- "$default_puppet_conf_dir/files/etc",
+file { [ "$default_puppet_conf_dir/files/etc",
"$default_puppet_conf_dir/files/etc/nginx",
"$default_puppet_conf_dir/files/etc/nagios3",
"$default_puppet_conf_dir/files/postfix",
group => "puppet",
mode => 0644,
require => [ Package["puppet"], File["$default_puppet_conf_dir/files/apache/htdocs/images"] ],
- content => template("$templates_dir/files/apache/htdocs/images/README.html"),
+ content => template("$templates_dir/apache/htdocs/images/README.html.erb"),
}
file { "$default_puppet_conf_dir/files/apache/htdocs/index.html":
owner => "puppet",
group => "puppet",
mode => 0644,
- require => [ Package["puppet"], File["$default_puppet_conf_dir/files/etc/nagios3.users"] ],
+ require => [ Package["puppet"], File["$default_puppet_conf_dir/files/etc/nagios3"] ],
content => template("$templates_dir/etc/nagios3/htpasswd.users.erb"),
}
# simple reverse-proxy
listen 80;
- server_name *.<%= domain > <%= domain >
+ server_name *.<%= domain %> <%= domain %>
# enable HSTS header
add_header Strict-Transport-Security max-age=15768000;
# https redirection by default
rewrite ^(.*) https://$host$1 redirect;
- # rewrite rules for backups.<%= domain >
+ # rewrite rules for backups.<%= domain %>
#if ($host ~* ^backups\.<%= domain %>$) {
# rewrite ^(.*) https://$host$1 redirect;
# break;
#}
- # rewrite rules for admin.<%= domain >
+ # rewrite rules for admin.<%= domain %>
#if ($host ~* ^admin\.<%= domain %>$) {
# rewrite ^(.*) https://$host$1 redirect;
# break;
#}
- # rewrite rules for munin.<%= domain >
+ # rewrite rules for munin.<%= domain %>
#if ($host ~* ^munin\.<%= domain %>$) {
# rewrite ^(.*) https://$host$1 redirect;
# break;
#}
- # rewrite rules for trac.<%= domain >
+ # rewrite rules for trac.<%= domain %>
#if ($host ~* ^trac\.<%= domain %>$) {
# rewrite ^(.*) https://$host$1 redirect;
# break;
#}
- # rewrite rules for nagios.<%= domain >
+ # rewrite rules for nagios.<%= domain %>
#if ($host ~* ^nagios\.<%= domain %>$) {
# rewrite ^(.*) https://$host$1 redirect;
# break;
#}
- # rewrite rules for htpasswd.<%= domain >
+ # rewrite rules for htpasswd.<%= domain %>
#if ($host ~* ^htpasswd\.<%= domain %>$) {
# rewrite ^(.*) https://$host$1 redirect;
# break;
#}
- # rewrite rules for postfixadmin.<%= domain >
+ # rewrite rules for postfixadmin.<%= domain %>
#if ($host ~* ^postfixadmin\.<%= domain %>$) {
# rewrite ^(.*) https://$host$1 redirect;
# break;
#}
- # rewrite rules for mail.<%= domain >
+ # rewrite rules for mail.<%= domain %>
#if ($host ~* ^mail\.<%= domain %>$) {
# rewrite ^(.*) https://$host$1 redirect;
# break;
#}
- # rewrite rules for lists.<%= domain >
+ # rewrite rules for lists.<%= domain %>
#if ($host ~* ^lists\.<%= domain %>$) {
# rewrite ^(.*) https://$host$1 redirect;
# break;
server {
# https reverse proxy
listen 443;
- server_name *.<%= domain > <%= domain >;
+ server_name *.<%= domain %> <%= domain %>;
# Don't log anything
access_log /dev/null;
proxy_read_timeout 120;
proxy_connect_timeout 120;
- # rewrite rules for admin.<%= domain >
+ # rewrite rules for admin.<%= domain %>
if ($host ~* ^admin\.<%= domain %>$) {
proxy_pass http://admin:80;
break;
}
- # rewrite rules for munin.<%= domain >
+ # rewrite rules for munin.<%= domain %>
if ($host ~* ^munin\.<%= domain %>$) {
proxy_pass http://admin:80;
break;
}
- # rewrite rules for trac.<%= domain >
+ # rewrite rules for trac.<%= domain %>
if ($host ~* ^trac\.<%= domain %>$) {
proxy_pass http://admin:80;
break;
}
- # rewrite rules for nagios.<%= domain >
+ # rewrite rules for nagios.<%= domain %>
if ($host ~* ^nagios\.<%= domain %>$) {
proxy_pass http://admin:80;
break;
}
- # rewrite rules for postfixadmin.<%= domain >
+ # rewrite rules for postfixadmin.<%= domain %>
if ($host ~* ^postfixadmin\.<%= domain %>$) {
proxy_pass http://mail:80;
break;
}
- # rewrite rules for mail.<%= domain >
+ # rewrite rules for mail.<%= domain %>
if ($host ~* ^mail\.<%= domain %>$) {
proxy_pass http://mail:80;
break;
}
- # rewrite rules for lists.<%= domain >
+ # rewrite rules for lists.<%= domain %>
if ($host ~* ^lists\.<%= domain %>$) {
proxy_pass http://mail:80;
break;