manifests/nodes/alamut.pp

# web apps
node alamut {
# Location: IELO datacenter (marseille)
#
# TODO:
# - Review board
# - api
# - pastebin
# - LDAP slave
#
    include common::default_mageia_server_no_smtp
    include postgresql::server
    postgresql::tagged { 'default': }

    timezone::timezone { 'Europe/Paris': }

    include catdap
    include mga-mirrors

    class {'epoll::var':
        db_password => extlookup('epoll_pgsql','x'),
    }
    include epoll
    include epoll::create_db

    include bugzilla
    include sympa::server
    include postfix::server::primary

    # temporary, just the time the vm is running there
    host { 'friteuse':
        ensure       => 'present',
        ip           => '192.168.122.131',
        host_aliases => [ "friteuse.$domain", "forums.$domain" ],
    }

    # to create all phpbb database on alamut
    phpbb::databases { $fqdn: }

    apache::vhost::redirect_ssl { "forums.$domain": }
    apache::vhost_redirect { "forum.$domain":
        url => "https://forums.$domain/",
    }
    apache::vhost_redirect { "ssl_forum.$domain":
        url     => "https://forums.$domain/",
        vhost   => "forum.$domain",
        use_ssl => true,
    }

    # connect to ssl so the proxy do not shoke if trying to
    # enforce ssl ( note that this has not been tested, maybe this
    # is uneeded )
    apache::vhost::reverse_proxy { "ssl_forums.$domain":
        url     => "https://forums.$domain/",
        vhost   => "forums.$domain",
        use_ssl => true,
        content => '
        RewriteEngine On
        RewriteCond %{QUERY_STRING} mode=register
        RewriteRule .*ucp.php - [forbidden]
        ',
    }

    include tld_redirections

    include libvirtd::kvm
    include lists
    include dns::server
    include repositories::svn_mirror
    include viewvc

    # disabled until fixed
    #Enable back to test.
    include repositories::git_mirror
    include cgit
    include gitmirror

    include xymon::server
    apache::vhost_simple { "xymon.$domain":
        location => '/var/lib/xymon/www',
    }

    youri-check::report_www { 'check': }

    youri-check::config {'config_cauldron':
        version => 'cauldron',
    }
    youri-check::report { 'report_cauldron':
        version => 'cauldron',
        hour    => '*',
        minute  => '24'
    }

    youri-check::config {'config_1':
        version => '1',
    }
    youri-check::report {'report_1':
        version => '1',
        hour    => '*',
        minute  => '54'
    }

    youri-check::config {'config_2':
        version => '2',
    }
    youri-check::report {'report_2':
        version => '2',
        hour    => '*',
        minute  => '9'
    }

    include wikis
    include websites::perl
    include websites::www

    class { 'mgapeople':
        ldap_server => 'ldap.mageia.org',
        binddn      => 'cn=mgapeople-alamut,ou=System Accounts,dc=mageia,dc=org',
        bindpw      => extlookup('mgapeople_ldap','x'),
        vhost       => 'people.mageia.org',
        vhostdir    => '/var/www/vhosts/people.mageia.org',
        maintdburl  => 'http://pkgsubmit.mageia.org/data/maintdb.txt',
    }

    class { 'mga-treasurer':
        vhost    => 'treasurer.mageia.org',
        vhostdir => '/var/www/vhosts/treasurer.mageia.org',
    }

    # Forward ports to arm1 and arm2 ssh, to access them from outside
    xinetd::port_forward {"forward_arm1":
        target_ip => 'arm1.mageia.org',
        target_port => '22',
        port => '4251',
        proto => 'tcp',
    }
    xinetd::port_forward {"forward_arm2":
        target_ip => 'arm2.mageia.org',
        target_port => '22',
        port => '4252',
        proto => 'tcp',
    }
}
1	misc	2303	# web apps
2			node alamut {
3			# Location: IELO datacenter (marseille)
4			#
5			# TODO:
6			# - Review board
7			# - api
8			# - pastebin
9			# - LDAP slave
10	misc	2600	#
11	misc	2303	include common::default_mageia_server_no_smtp
12			include postgresql::server
13	misc	2600	postgresql::tagged { 'default': }
14	misc	2303
15	misc	2600	timezone::timezone { 'Europe/Paris': }
16	misc	2303
17			include catdap
18			include mga-mirrors
19	boklm	2972
20			class {'epoll::var':
21			db_password => extlookup('epoll_pgsql','x'),
22			}
23	misc	2303	include epoll
24	boklm	2975	include epoll::create_db
25	boklm	2972
26	misc	2303	include bugzilla
27			include sympa::server
28	misc	2674	include postfix::server::primary
29	misc	2303
30			# temporary, just the time the vm is running there
31			host { 'friteuse':
32	misc	2600	ensure => 'present',
33			ip => '192.168.122.131',
34	misc	2303	host_aliases => [ "friteuse.$domain", "forums.$domain" ],
35			}
36
37			# to create all phpbb database on alamut
38			phpbb::databases { $fqdn: }
39
40	misc	2691	apache::vhost::redirect_ssl { "forums.$domain": }
41	misc	2303	apache::vhost_redirect { "forum.$domain":
42	misc	2600	url => "https://forums.$domain/",
43	misc	2303	}
44			apache::vhost_redirect { "ssl_forum.$domain":
45	misc	2600	url => "https://forums.$domain/",
46			vhost => "forum.$domain",
47	misc	2303	use_ssl => true,
48			}
49
50	misc	2600	# connect to ssl so the proxy do not shoke if trying to
51	misc	2303	# enforce ssl ( note that this has not been tested, maybe this
52			# is uneeded )
53	misc	2704	apache::vhost::reverse_proxy { "ssl_forums.$domain":
54	misc	2600	url => "https://forums.$domain/",
55			vhost => "forums.$domain",
56	misc	2303	use_ssl => true,
57	boklm	3349	content => '
58	boklm	3351	RewriteEngine On
59	boklm	3349	RewriteCond %{QUERY_STRING} mode=register
60	boklm	3350	RewriteRule .*ucp.php - [forbidden]
61	boklm	3349	',
62	misc	2303	}
63
64			include tld_redirections
65
66			include libvirtd::kvm
67			include lists
68	misc	2600	include dns::server
69	misc	2303	include repositories::svn_mirror
70			include viewvc
71
72			# disabled until fixed
73	dmorgan	2852	#Enable back to test.
74			include repositories::git_mirror
75	colin	3239	include cgit
76	colin	3407	include gitmirror
77	misc	2303
78			include xymon::server
79			apache::vhost_simple { "xymon.$domain":
80	misc	2600	location => '/var/lib/xymon/www',
81	misc	2303	}
82
83	misc	2600	youri-check::report_www { 'check': }
84	misc	2303
85	misc	2600	youri-check::config {'config_cauldron':
86			version => 'cauldron',
87	pterjan	2466	}
88	misc	2600	youri-check::report { 'report_cauldron':
89			version => 'cauldron',
90			hour => '*',
91			minute => '24'
92	pterjan	2466	}
93
94	misc	2600	youri-check::config {'config_1':
95			version => '1',
96	pterjan	2466	}
97	misc	2600	youri-check::report {'report_1':
98			version => '1',
99			hour => '*',
100			minute => '54'
101	pterjan	2466	}
102
103	pterjan	2794	youri-check::config {'config_2':
104			version => '2',
105			}
106			youri-check::report {'report_2':
107			version => '2',
108			hour => '*',
109			minute => '9'
110			}
111
112	misc	2303	include wikis
113	boklm	2755	include websites::perl
114	boklm	3090	include websites::www
115	boklm	3008
116			class { 'mgapeople':
117			ldap_server => 'ldap.mageia.org',
118			binddn => 'cn=mgapeople-alamut,ou=System Accounts,dc=mageia,dc=org',
119			bindpw => extlookup('mgapeople_ldap','x'),
120			vhost => 'people.mageia.org',
121			vhostdir => '/var/www/vhosts/people.mageia.org',
122	boklm	3015	maintdburl => 'http://pkgsubmit.mageia.org/data/maintdb.txt',
123	boklm	3008	}
124	boklm	3085
125			class { 'mga-treasurer':
126	boklm	3086	vhost => 'treasurer.mageia.org',
127			vhostdir => '/var/www/vhosts/treasurer.mageia.org',
128	boklm	3085	}
129	boklm	3092
130			# Forward ports to arm1 and arm2 ssh, to access them from outside
131			xinetd::port_forward {"forward_arm1":
132			target_ip => 'arm1.mageia.org',
133			target_port => '22',
134			port => '4251',
135			proto => 'tcp',
136			}
137			xinetd::port_forward {"forward_arm2":
138			target_ip => 'arm2.mageia.org',
139			target_port => '22',
140			port => '4252',
141			proto => 'tcp',
142			}
143	misc	2303	}