sympa/manifests/init.pp

class sympa {
    class variable {
        $vhost = "ml.$domain"
    }

    class server inherits variable {
        # perl-CGI-Fast is needed for fast cgi
        # perl-Socket6 is required by perl-IO-Socket-SSL
        #  (optional requirement)
        $package_list = ['sympa', 'sympa-www', 'perl-CGI-Fast',
                         'perl-Socket6']
    
        package { $package_list:
            ensure => installed;
        }
    
        # sympa script start 5 differents script, I am not
        # sure that puppet will correctly handle this
        service { "sympa":
            ensure => running,
            hasstatus => true,
            subscribe => [ Package["sympa"], File['/etc/sympa/sympa.conf']]
        }
    
        $pgsql_password = extlookup("sympa_pgsql",'x')
        $ldap_password = extlookup("sympa_ldap",'x')
    
        @@postgresql::user { 'sympa':
            password => $pgsql_password,
        }
    
        file { '/etc/sympa/sympa.conf':
            ensure => present,
        # should be cleaner to have it root owned, but puppet do not support acl
        # and in any case, config will be reset if it change
            owner => sympa,
            group => apache,
            mode => 640,
            content => template("sympa/sympa.conf")
        }
    
        file { '/etc/sympa/auth.conf':
            ensure => present,
            owner => root,
            group => root,
            mode => 644,
            content => template("sympa/auth.conf"),
            notify => Service['httpd']
        }
    
    
        include apache::mod_fcgid
        apache::webapp_other{"sympa":
             webapp_file => "sympa/webapp_sympa.conf",
        }
   
        apache::vhost_redirect_ssl { "$vhost": }
 
        apache::vhost_other_app { "$vhost":
            vhost_file => "sympa/vhost_ml.conf",
        }

        openssl::self_signed_cert{ "$vhost":
            directory => "/etc/ssl/apache/"
        }
    

        @@postgresql::database { 'sympa':
            description => "Sympa database",
            user => "sympa",
            require => Postgresql::User["sympa"]
        }
    
        subversion::snapshot { "/etc/sympa/web_tt2":
            source => "svn://svn.mageia.org/svn/web/templates/sympa/trunk"
        }

        file { ["/etc/sympa/lists_xml/",
                "/etc/sympa/scenari/",
                "/etc/sympa/data_sources/",
                "/etc/sympa/search_filters/"]:
            ensure => directory,
            owner => root,
            group => root,
            mode => 755,
            purge => true,
            recurse => true,
            force => true,
        }

        file { ["/etc/sympa/scenari/subscribe.open_web_only_notify",
                "/etc/sympa/scenari/unsubscribe.open_web_only_notify"]:
            ensure => present,
            owner => root,
            group => root,
            mode => 755,
            source => "puppet:///modules/sympa/scenari/open_web_only_notify",
        }

        file { ["/etc/sympa/scenari/send.subscriber_moderated"]:
            ensure => present,
            owner => root,
            group => root,
            mode => 755,
            source => "puppet:///modules/sympa/scenari/subscriber_moderated",
        }

        file { ["/etc/sympa/topics.conf"]:
            ensure => present,
            owner => root,
            group => root,
            mode => 755,
            source => "puppet:///modules/sympa/topics.conf",
        }

        define ldap_search_filter {
            file { "/etc/sympa/search_filters/$name.ldap":
                ensure => present,
                owner => root,
                group => root,
                mode => 755,
                content => template('sympa/search_filters/group.ldap') 
            }
        }

        define ldap_group_datasource {
            file { "/etc/sympa/data_sources/$name.incl":
                ensure => present,
                owner => root,
                group => root,
                mode => 755,
                content => template('sympa/data_sources/ldap_group.incl') 
            }
        }

        define scenario_sender_ldap_group {
            file { "/etc/sympa/scenari/send.restricted_$name":
                ensure => present,
                owner => root,
                group => root,
                mode => 755,
                content => template('sympa/scenari/sender.ldap_group') 
            }
        }

        define scenario_sender_email {
            file { "/etc/sympa/scenari/send.restricted_$name":
                ensure => present,
                owner => root,
                group => root,
                mode => 755,
                content => template('sympa/scenari/sender.email') 
            }
        }

        # add each group that could be used in a sympa ml either as 
        # - owner
        # - editor ( moderation )
        ldap_group_datasource { "mga-sysadmin": }
        ldap_group_datasource { "mga-ml_moderators": }


        # directory that will hold the list data
        # i am not sure of the name ( misc, 09/12/10 )
        file { "/var/lib/sympa/expl/":
            ensure => directory,
            owner => sympa,
            group => root,
            mode => 755,
        }
    }

    define list($subject, 
                $profile = false, 
                $language = 'en',
                $reply_to = false,
                $sender_email = false,
                $sender_ldap_group = false,
                $subscriber_ldap_group = false,
                $public_archive = true ) {

        include sympa::variable

        $xml_file = "/etc/sympa/lists_xml/$name.xml"

        if $sender_email {
            $sender_email_file = regsubst($sender_email,'\@','-at-')
        } else { 
            $sender_email_file = '' 
        }

        file { "$xml_file":
            owner => root,
            group => root,
            content => template('sympa/list.xml')    
        }

        exec { "sympa.pl --create_list --robot=$sympa::variable::vhost --input_file=$xml_file":
            require => File["$xml_file"],
            creates => "/var/lib/sympa/expl/$name",
            before => File["/var/lib/sympa/expl/$name/config"],
        }

        file { "/var/lib/sympa/expl/$name/config":
            ensure => present,
            owner => sympa,
            group => sympa,
            mode => 750,
            content => template("sympa/config"), 
        }

        if $sender_ldap_group {
            if ! defined(Sympa::Server::Scenario_sender_ldap_group[$sender_ldap_group]) {
                sympa::server::scenario_sender_ldap_group { $sender_ldap_group: }
            }
        }

        if $sender_email {
            if ! defined(Sympa::Server::Scenario_sender_email[$sender_email_file]) {
                sympa::server::scenario_sender_email { $sender_email_file: }
            }
        }
        
        if $subscriber_ldap_group {
            if ! defined(Sympa::Server::Ldap_search_filter[$subscriber_ldap_group]) {
                sympa::server::ldap_search_filter { $subscriber_ldap_group: }
            }
        }
    }

#
#   various types of list that can be directly used
#
#
    define public_list($subject, $language = 'en') {
        list { $name:
            subject => $subject,
           # profile => "public",
            language => $language,
        }
    }

    # list where announce are sent by member of ldap_group
    # reply_to is set to $reply_to
    define announce_list_group($subject, $reply_to, $sender_ldap_group, $language = 'en') {
        # profile + scenario
        list{ $name:
            subject => $subject,
            profile => "",
            language => $language,
            reply_to => $reply_to,
            sender_ldap_group => $sender_ldap_group,
        }
    }


    # list where announce are sent by $email only 
    # reply_to is set to $reply_to    
    define announce_list_email($subject, $reply_to, $sender_email, $language = 'en') {
       list{ $name:
            subject => $subject,
            profile => "",
            language => $language,
            reply_to => $reply_to,
            sender_email => $sender_email,
        }
    }

    # list where people cannot subscribe, where people from $ldap_group receive
    # mail, with public archive
    define restricted_list($subject, $subscriber_ldap_group, $language = 'en') {
       list{ $name:
            subject => $subject,
            profile => "",
            language => $language,
            subscriber_ldap_group => $subscriber_ldap_group,
            sender_ldap_group => $subscriber_ldap_group,
        }
    }

    # same as restricted list, but anybody can post
    define restricted_list_open($subject, $subscriber_ldap_group, $language = 'en') {
       list{ $name:
            subject => $subject,
            profile => "",
            language => $language,
            subscriber_ldap_group => $subscriber_ldap_group,
            sender_ldap_group => $subscriber_ldap_group,
        }        
    }

    # list with private archive, restricted to member of $ldap_group
    define private_list($subject, $subscriber_ldap_group, $language ='en') {
       list{ $name:
            subject => $subject,
            profile => "",
            language => $language,
            subscriber_ldap_group => $subscriber_ldap_group,
            sender_ldap_group => $subscriber_ldap_group,
            public_archive => false,
        }
    }
    
    # list with private archive, restricted to member of $ldap_group
    # everybody can post 
    # used for contact alias
    define private_list_open($subject, $subscriber_ldap_group, $language ='en') {
       list{ $name:
            subject => $subject,
            profile => "",
            language => $language,
            subscriber_ldap_group => $subscriber_ldap_group,
            public_archive => false,
        }
    }

    # same as private_list, but post are restricted to $email
    # ( scripting )
    define private_list_email($subject, $subscriber_ldap_group, $sender_email, $language ='en') {
        list{ $name:
            subject => $subject,
            profile => "",
            language => $language,
            subscriber_ldap_group => $subscriber_ldap_group,
            sender_email => $sender_email,
            public_archive => false,
        }
    }
}

1	dmorgan	234	class sympa {
2	misc	562	class variable {
3			$vhost = "ml.$domain"
4			}
5
6			class server inherits variable {
7	misc	551	# perl-CGI-Fast is needed for fast cgi
8			# perl-Socket6 is required by perl-IO-Socket-SSL
9			# (optional requirement)
10			$package_list = ['sympa', 'sympa-www', 'perl-CGI-Fast',
11			'perl-Socket6']
12	misc	533
13	misc	551	package { $package_list:
14			ensure => installed;
15			}
16
17			# sympa script start 5 differents script, I am not
18			# sure that puppet will correctly handle this
19			service { "sympa":
20			ensure => running,
21			hasstatus => true,
22	misc	566	subscribe => [ Package["sympa"], File['/etc/sympa/sympa.conf']]
23	misc	551	}
24
25	misc	624	$pgsql_password = extlookup("sympa_pgsql",'x')
26			$ldap_password = extlookup("sympa_ldap",'x')
27	misc	551
28			@@postgresql::user { 'sympa':
29	misc	624	password => $pgsql_password,
30	misc	551	}
31
32			file { '/etc/sympa/sympa.conf':
33			ensure => present,
34			# should be cleaner to have it root owned, but puppet do not support acl
35			# and in any case, config will be reset if it change
36			owner => sympa,
37			group => apache,
38			mode => 640,
39			content => template("sympa/sympa.conf")
40			}
41
42			file { '/etc/sympa/auth.conf':
43			ensure => present,
44			owner => root,
45			group => root,
46			mode => 644,
47	misc	571	content => template("sympa/auth.conf"),
48			notify => Service['httpd']
49	misc	551	}
50
51
52			include apache::mod_fcgid
53			apache::webapp_other{"sympa":
54	misc	560	webapp_file => "sympa/webapp_sympa.conf",
55	misc	551	}
56	misc	560
57	misc	562	apache::vhost_redirect_ssl { "$vhost": }
58	misc	560
59	misc	562	apache::vhost_other_app { "$vhost":
60	misc	551	vhost_file => "sympa/vhost_ml.conf",
61			}
62	misc	560
63	misc	562	openssl::self_signed_cert{ "$vhost":
64	misc	560	directory => "/etc/ssl/apache/"
65			}
66	misc	551
67	misc	560
68	misc	551	@@postgresql::database { 'sympa':
69			description => "Sympa database",
70			user => "sympa",
71			require => Postgresql::User["sympa"]
72			}
73
74			subversion::snapshot { "/etc/sympa/web_tt2":
75			source => "svn://svn.mageia.org/svn/web/templates/sympa/trunk"
76			}
77	misc	553
78	misc	576	file { ["/etc/sympa/lists_xml/",
79	misc	578	"/etc/sympa/scenari/",
80	misc	576	"/etc/sympa/data_sources/",
81			"/etc/sympa/search_filters/"]:
82	misc	553	ensure => directory,
83			owner => root,
84			group => root,
85			mode => 755,
86	misc	635	purge => true,
87			recurse => true,
88			force => true,
89	misc	553	}
90	misc	569
91	misc	588	file { ["/etc/sympa/scenari/subscribe.open_web_only_notify",
92			"/etc/sympa/scenari/unsubscribe.open_web_only_notify"]:
93			ensure => present,
94			owner => root,
95			group => root,
96			mode => 755,
97			source => "puppet:///modules/sympa/scenari/open_web_only_notify",
98			}
99
100	misc	611	file { ["/etc/sympa/scenari/send.subscriber_moderated"]:
101			ensure => present,
102			owner => root,
103			group => root,
104			mode => 755,
105			source => "puppet:///modules/sympa/scenari/subscriber_moderated",
106			}
107
108	misc	643	file { ["/etc/sympa/topics.conf"]:
109			ensure => present,
110			owner => root,
111			group => root,
112			mode => 755,
113			source => "puppet:///modules/sympa/topics.conf",
114			}
115
116	misc	576	define ldap_search_filter {
117	misc	604	file { "/etc/sympa/search_filters/$name.ldap":
118	misc	576	ensure => present,
119			owner => root,
120			group => root,
121			mode => 755,
122	misc	587	content => template('sympa/search_filters/group.ldap')
123	misc	576	}
124			}
125
126	misc	574	define ldap_group_datasource {
127	misc	598	file { "/etc/sympa/data_sources/$name.incl":
128	misc	574	ensure => present,
129			owner => root,
130			group => root,
131			mode => 755,
132	misc	587	content => template('sympa/data_sources/ldap_group.incl')
133	misc	574	}
134			}
135	misc	581
136			define scenario_sender_ldap_group {
137	misc	606	file { "/etc/sympa/scenari/send.restricted_$name":
138	misc	589	ensure => present,
139			owner => root,
140			group => root,
141			mode => 755,
142			content => template('sympa/scenari/sender.ldap_group')
143			}
144	misc	581	}
145
146			define scenario_sender_email {
147	misc	606	file { "/etc/sympa/scenari/send.restricted_$name":
148	misc	589	ensure => present,
149			owner => root,
150			group => root,
151			mode => 755,
152			content => template('sympa/scenari/sender.email')
153			}
154	misc	581	}
155
156	misc	574	# add each group that could be used in a sympa ml either as
157			# - owner
158			# - editor ( moderation )
159	misc	602	ldap_group_datasource { "mga-sysadmin": }
160	misc	574	ldap_group_datasource { "mga-ml_moderators": }
161
162	misc	576
163	misc	569	# directory that will hold the list data
164			# i am not sure of the name ( misc, 09/12/10 )
165			file { "/var/lib/sympa/expl/":
166			ensure => directory,
167			owner => sympa,
168			group => root,
169			mode => 755,
170			}
171	dmorgan	234	}
172	misc	557
173	misc	580	define list($subject,
174			$profile = false,
175			$language = 'en',
176			$reply_to = false,
177			$sender_email = false,
178			$sender_ldap_group = false,
179			$subscriber_ldap_group = false,
180			$public_archive = true ) {
181	misc	557
182	misc	562	include sympa::variable
183
184	misc	557	$xml_file = "/etc/sympa/lists_xml/$name.xml"
185
186	misc	607	if $sender_email {
187			$sender_email_file = regsubst($sender_email,'\@','-at-')
188			} else {
189			$sender_email_file = ''
190			}
191
192	misc	557	file { "$xml_file":
193			owner => root,
194			group => root,
195			content => template('sympa/list.xml')
196			}
197
198	misc	562	exec { "sympa.pl --create_list --robot=$sympa::variable::vhost --input_file=$xml_file":
199	misc	590	require => File["$xml_file"],
200	misc	592	creates => "/var/lib/sympa/expl/$name",
201	misc	580	before => File["/var/lib/sympa/expl/$name/config"],
202	misc	557	}
203	misc	580
204			file { "/var/lib/sympa/expl/$name/config":
205			ensure => present,
206			owner => sympa,
207			group => sympa,
208			mode => 750,
209			content => template("sympa/config"),
210			}
211	misc	581
212			if $sender_ldap_group {
213			if ! defined(Sympa::Server::Scenario_sender_ldap_group[$sender_ldap_group]) {
214			sympa::server::scenario_sender_ldap_group { $sender_ldap_group: }
215			}
216			}
217
218			if $sender_email {
219	misc	607	if ! defined(Sympa::Server::Scenario_sender_email[$sender_email_file]) {
220			sympa::server::scenario_sender_email { $sender_email_file: }
221	misc	581	}
222			}
223
224			if $subscriber_ldap_group {
225			if ! defined(Sympa::Server::Ldap_search_filter[$subscriber_ldap_group]) {
226			sympa::server::ldap_search_filter { $subscriber_ldap_group: }
227			}
228			}
229	misc	557	}
230	misc	582
231			#
232			# various types of list that can be directly used
233			#
234			#
235			define public_list($subject, $language = 'en') {
236			list { $name:
237			subject => $subject,
238			# profile => "public",
239			language => $language,
240			}
241			}
242
243			# list where announce are sent by member of ldap_group
244			# reply_to is set to $reply_to
245			define announce_list_group($subject, $reply_to, $sender_ldap_group, $language = 'en') {
246			# profile + scenario
247			list{ $name:
248			subject => $subject,
249			profile => "",
250			language => $language,
251			reply_to => $reply_to,
252			sender_ldap_group => $sender_ldap_group,
253			}
254			}
255
256
257			# list where announce are sent by $email only
258			# reply_to is set to $reply_to
259			define announce_list_email($subject, $reply_to, $sender_email, $language = 'en') {
260			list{ $name:
261			subject => $subject,
262			profile => "",
263			language => $language,
264			reply_to => $reply_to,
265			sender_email => $sender_email,
266			}
267			}
268
269			# list where people cannot subscribe, where people from $ldap_group receive
270			# mail, with public archive
271			define restricted_list($subject, $subscriber_ldap_group, $language = 'en') {
272			list{ $name:
273			subject => $subject,
274			profile => "",
275			language => $language,
276			subscriber_ldap_group => $subscriber_ldap_group,
277			sender_ldap_group => $subscriber_ldap_group,
278			}
279			}
280
281			# same as restricted list, but anybody can post
282			define restricted_list_open($subject, $subscriber_ldap_group, $language = 'en') {
283			list{ $name:
284			subject => $subject,
285			profile => "",
286			language => $language,
287			subscriber_ldap_group => $subscriber_ldap_group,
288			sender_ldap_group => $subscriber_ldap_group,
289			}
290			}
291
292			# list with private archive, restricted to member of $ldap_group
293			define private_list($subject, $subscriber_ldap_group, $language ='en') {
294			list{ $name:
295			subject => $subject,
296			profile => "",
297			language => $language,
298			subscriber_ldap_group => $subscriber_ldap_group,
299			sender_ldap_group => $subscriber_ldap_group,
300			public_archive => false,
301			}
302			}
303
304			# list with private archive, restricted to member of $ldap_group
305			# everybody can post
306			# used for contact alias
307			define private_list_open($subject, $subscriber_ldap_group, $language ='en') {
308			list{ $name:
309			subject => $subject,
310			profile => "",
311			language => $language,
312			subscriber_ldap_group => $subscriber_ldap_group,
313			public_archive => false,
314			}
315			}
316
317			# same as private_list, but post are restricted to $email
318			# ( scripting )
319			define private_list_email($subject, $subscriber_ldap_group, $sender_email, $language ='en') {
320			list{ $name:
321			subject => $subject,
322			profile => "",
323			language => $language,
324			subscriber_ldap_group => $subscriber_ldap_group,
325			sender_email => $sender_email,
326			public_archive => false,
327			}
328			}
329	dmorgan	234	}
330