sympa/manifests/init.pp

class sympa {
    class variable {
        $vhost = "ml.$domain"
    }

    class server inherits variable {
        # perl-CGI-Fast is needed for fast cgi
        # perl-Socket6 is required by perl-IO-Socket-SSL
        #  (optional requirement)
        $package_list = ['sympa', 'sympa-www', 'perl-CGI-Fast',
                         'perl-Socket6']
    
        package { $package_list:
            ensure => installed;
        }
    
        # sympa script start 5 differents script, I am not
        # sure that puppet will correctly handle this
        service { "sympa":
            ensure => running,
            hasstatus => true,
            subscribe => [ Package["sympa"], File['/etc/sympa/sympa.conf']]
        }
    
        $pgsql_password = extlookup("sympa_pgsql",'x')
        $ldap_password = extlookup("sympa_ldap",'x')
    
        @@postgresql::user { 'sympa':
            password => $pgsql_password,
        }
    
        file { '/etc/sympa/sympa.conf':
            ensure => present,
        # should be cleaner to have it root owned, but puppet do not support acl
        # and in any case, config will be reset if it change
            owner => sympa,
            group => apache,
            mode => 640,
            content => template("sympa/sympa.conf")
        }
    
        file { '/etc/sympa/auth.conf':
            ensure => present,
            owner => root,
            group => root,
            mode => 644,
            content => template("sympa/auth.conf"),
            notify => Service['httpd']
        }
    
    
        include apache::mod_fcgid
        apache::webapp_other{"sympa":
             webapp_file => "sympa/webapp_sympa.conf",
        }
   
        apache::vhost_redirect_ssl { "$vhost": }
 
        apache::vhost_other_app { "$vhost":
            vhost_file => "sympa/vhost_ml.conf",
        }

        openssl::self_signed_cert{ "$vhost":
            directory => "/etc/ssl/apache/"
        }
    

        @@postgresql::database { 'sympa':
            description => "Sympa database",
            user => "sympa",
            require => Postgresql::User["sympa"]
        }
    
        subversion::snapshot { "/etc/sympa/web_tt2":
            source => "svn://svn.mageia.org/svn/web/templates/sympa/trunk"
        }

        file { ["/etc/sympa/lists_xml/",
                "/etc/sympa/scenari/",
                "/etc/sympa/data_sources/",
                "/etc/sympa/search_filters/"]:
            ensure => directory,
            owner => root,
            group => root,
            mode => 755,
            purge => true,
            recurse => true,
            force => true,
        }

        file { ["/etc/sympa/scenari/subscribe.open_web_only_notify",
                "/etc/sympa/scenari/unsubscribe.open_web_only_notify"]:
            ensure => present,
            owner => root,
            group => root,
            mode => 755,
            source => "puppet:///modules/sympa/scenari/open_web_only_notify",
        }

        file { ["/etc/sympa/scenari/send.subscriber_moderated"]:
            ensure => present,
            owner => root,
            group => root,
            mode => 755,
            source => "puppet:///modules/sympa/scenari/subscriber_moderated",
        }

        file { ["/etc/sympa/scenari/create_list.forbidden"]:
            ensure => present,
            owner => root,
            group => root,
            mode => 755,
            source => "puppet:///modules/sympa/scenari/forbidden",
        }


        file { ["/etc/sympa/topics.conf"]:
            ensure => present,
            owner => root,
            group => root,
            mode => 755,
            source => "puppet:///modules/sympa/topics.conf",
        }

        define ldap_search_filter {
            file { "/etc/sympa/search_filters/$name.ldap":
                ensure => present,
                owner => root,
                group => root,
                mode => 755,
                content => template('sympa/search_filters/group.ldap') 
            }
        }

        define ldap_group_datasource {
            file { "/etc/sympa/data_sources/$name.incl":
                ensure => present,
                owner => root,
                group => root,
                mode => 755,
                content => template('sympa/data_sources/ldap_group.incl') 
            }
        }

        define scenario_sender_ldap_group {
            file { "/etc/sympa/scenari/send.restricted_$name":
                ensure => present,
                owner => root,
                group => root,
                mode => 755,
                content => template('sympa/scenari/sender.ldap_group') 
            }
        }

        define scenario_sender_email {
            $sender_email_file = regsubst($name,'\@','-at-')
            file { "/etc/sympa/scenari/send.restricted_$sender_email_file":
                ensure => present,
                owner => root,
                group => root,
                mode => 755,
                content => template('sympa/scenari/sender.email') 
            }
        }

        # add each group that could be used in a sympa ml either as 
        # - owner
        # - editor ( moderation )
        ldap_group_datasource { "mga-sysadmin": }
        ldap_group_datasource { "mga-ml_moderators": }


        # directory that will hold the list data
        # i am not sure of the name ( misc, 09/12/10 )
        file { "/var/lib/sympa/expl/":
            ensure => directory,
            owner => sympa,
            group => root,
            mode => 755,
        }
    }

    define list($subject, 
                $profile = false, 
                $language = 'en',
                $topics = false,
                $reply_to = false,
                $sender_email = false,
                $sender_ldap_group = false,
                $subscriber_ldap_group = false,
                $public_archive = true ) {

        include sympa::variable

        $xml_file = "/etc/sympa/lists_xml/$name.xml"

        if $sender_email {
            $sender_email_file = regsubst($sender_email,'\@','-at-')
        } else { 
            $sender_email_file = '' 
        }

        file { "$xml_file":
            owner => root,
            group => root,
            content => template('sympa/list.xml')    
        }

        exec { "sympa.pl --create_list --robot=$sympa::variable::vhost --input_file=$xml_file":
            require => File["$xml_file"],
            creates => "/var/lib/sympa/expl/$name",
            before => File["/var/lib/sympa/expl/$name/config"],
        }

        file { "/var/lib/sympa/expl/$name/config":
            ensure => present,
            owner => sympa,
            group => sympa,
            mode => 750,
            content => template("sympa/config"), 
            notify => Service['sympa'],
        }

        if $sender_ldap_group {
            if ! defined(Sympa::Server::Scenario_sender_ldap_group[$sender_ldap_group]) {
                sympa::server::scenario_sender_ldap_group { $sender_ldap_group: }
            }
        }

        if $sender_email {
            if ! defined(Sympa::Server::Scenario_sender_email[$sender_email]) {
                sympa::server::scenario_sender_email { $sender_email: }
            }
        }
        
        if $subscriber_ldap_group {
            if ! defined(Sympa::Server::Ldap_search_filter[$subscriber_ldap_group]) {
                sympa::server::ldap_search_filter { $subscriber_ldap_group: }
            }
        }
    }

#
#   various types of list that can be directly used
#
#
    define public_list($subject, $language = 'en', $topics = false) {
        list { $name:
            subject => $subject,
           # profile => "public",
            language => $language,
            topics => $topics,
        }
    }

    # list where announce are sent by member of ldap_group
    # reply_to is set to $reply_to
    define announce_list_group($subject, $reply_to, $sender_ldap_group, $language = 'en', $topics = false) {
        # profile + scenario
        list{ $name:
            subject => $subject,
            profile => "",
            language => $language,
            topics => $topics,
            reply_to => $reply_to,
            sender_ldap_group => $sender_ldap_group,
        }
    }


    # list where announce are sent by $email only 
    # reply_to is set to $reply_to    
    define announce_list_email($subject, $reply_to, $sender_email, $language = 'en', $topics = false) {
       list{ $name:
            subject => $subject,
            profile => "",
            language => $language,
            topics => $topics,
            reply_to => $reply_to,
            sender_email => $sender_email,
        }
    }

    # list where people cannot subscribe, where people from $ldap_group receive
    # mail, with public archive
    define restricted_list($subject, $subscriber_ldap_group, $language = 'en', $topics = false) {
       list{ $name:
            subject => $subject,
            profile => "",
            topics => $topics,
            language => $language,
            subscriber_ldap_group => $subscriber_ldap_group,
            sender_ldap_group => $subscriber_ldap_group,
        }
    }

    # same as restricted list, but anybody can post
    define restricted_list_open($subject, $subscriber_ldap_group, $language = 'en', $topics = false) {
       list{ $name:
            subject => $subject,
            profile => "",
            language => $language,
            topics => $topics,
            subscriber_ldap_group => $subscriber_ldap_group,
            sender_ldap_group => $subscriber_ldap_group,
        }        
    }

    # list with private archive, restricted to member of $ldap_group
    define private_list($subject, $subscriber_ldap_group, $language ='en', $topics = false) {
       list{ $name:
            subject => $subject,
            profile => "",
            language => $language,
            topics => $topics,
            subscriber_ldap_group => $subscriber_ldap_group,
            sender_ldap_group => $subscriber_ldap_group,
            public_archive => false,
        }
    }
    
    # list with private archive, restricted to member of $ldap_group
    # everybody can post 
    # used for contact alias
    define private_list_open($subject, $subscriber_ldap_group, $language ='en', $topics = false) {
       list{ $name:
            subject => $subject,
            profile => "",
            language => $language,
            topics => $topics,
            subscriber_ldap_group => $subscriber_ldap_group,
            public_archive => false,
        }
    }

    # same as private_list, but post are restricted to $email
    # ( scripting )
    define private_list_email($subject, $subscriber_ldap_group, $sender_email, $language ='en', $topics = false) {
        list{ $name:
            subject => $subject,
            profile => "",
            language => $language,
            topics => $topics,
            subscriber_ldap_group => $subscriber_ldap_group,
            sender_email => $sender_email,
            public_archive => false,
        }
    }
}

1	dmorgan	234	class sympa {
2	misc	562	class variable {
3			$vhost = "ml.$domain"
4			}
5
6			class server inherits variable {
7	misc	551	# perl-CGI-Fast is needed for fast cgi
8			# perl-Socket6 is required by perl-IO-Socket-SSL
9			# (optional requirement)
10			$package_list = ['sympa', 'sympa-www', 'perl-CGI-Fast',
11			'perl-Socket6']
12	misc	533
13	misc	551	package { $package_list:
14			ensure => installed;
15			}
16
17			# sympa script start 5 differents script, I am not
18			# sure that puppet will correctly handle this
19			service { "sympa":
20			ensure => running,
21			hasstatus => true,
22	misc	566	subscribe => [ Package["sympa"], File['/etc/sympa/sympa.conf']]
23	misc	551	}
24
25	misc	624	$pgsql_password = extlookup("sympa_pgsql",'x')
26			$ldap_password = extlookup("sympa_ldap",'x')
27	misc	551
28			@@postgresql::user { 'sympa':
29	misc	624	password => $pgsql_password,
30	misc	551	}
31
32			file { '/etc/sympa/sympa.conf':
33			ensure => present,
34			# should be cleaner to have it root owned, but puppet do not support acl
35			# and in any case, config will be reset if it change
36			owner => sympa,
37			group => apache,
38			mode => 640,
39			content => template("sympa/sympa.conf")
40			}
41
42			file { '/etc/sympa/auth.conf':
43			ensure => present,
44			owner => root,
45			group => root,
46			mode => 644,
47	misc	571	content => template("sympa/auth.conf"),
48			notify => Service['httpd']
49	misc	551	}
50
51
52			include apache::mod_fcgid
53			apache::webapp_other{"sympa":
54	misc	560	webapp_file => "sympa/webapp_sympa.conf",
55	misc	551	}
56	misc	560
57	misc	562	apache::vhost_redirect_ssl { "$vhost": }
58	misc	560
59	misc	562	apache::vhost_other_app { "$vhost":
60	misc	551	vhost_file => "sympa/vhost_ml.conf",
61			}
62	misc	560
63	misc	562	openssl::self_signed_cert{ "$vhost":
64	misc	560	directory => "/etc/ssl/apache/"
65			}
66	misc	551
67	misc	560
68	misc	551	@@postgresql::database { 'sympa':
69			description => "Sympa database",
70			user => "sympa",
71			require => Postgresql::User["sympa"]
72			}
73
74			subversion::snapshot { "/etc/sympa/web_tt2":
75			source => "svn://svn.mageia.org/svn/web/templates/sympa/trunk"
76			}
77	misc	553
78	misc	576	file { ["/etc/sympa/lists_xml/",
79	misc	578	"/etc/sympa/scenari/",
80	misc	576	"/etc/sympa/data_sources/",
81			"/etc/sympa/search_filters/"]:
82	misc	553	ensure => directory,
83			owner => root,
84			group => root,
85			mode => 755,
86	misc	635	purge => true,
87			recurse => true,
88			force => true,
89	misc	553	}
90	misc	569
91	misc	588	file { ["/etc/sympa/scenari/subscribe.open_web_only_notify",
92			"/etc/sympa/scenari/unsubscribe.open_web_only_notify"]:
93			ensure => present,
94			owner => root,
95			group => root,
96			mode => 755,
97			source => "puppet:///modules/sympa/scenari/open_web_only_notify",
98			}
99
100	misc	611	file { ["/etc/sympa/scenari/send.subscriber_moderated"]:
101			ensure => present,
102			owner => root,
103			group => root,
104			mode => 755,
105			source => "puppet:///modules/sympa/scenari/subscriber_moderated",
106			}
107
108	misc	690	file { ["/etc/sympa/scenari/create_list.forbidden"]:
109			ensure => present,
110			owner => root,
111			group => root,
112			mode => 755,
113			source => "puppet:///modules/sympa/scenari/forbidden",
114			}
115
116
117	misc	643	file { ["/etc/sympa/topics.conf"]:
118			ensure => present,
119			owner => root,
120			group => root,
121			mode => 755,
122			source => "puppet:///modules/sympa/topics.conf",
123			}
124
125	misc	576	define ldap_search_filter {
126	misc	604	file { "/etc/sympa/search_filters/$name.ldap":
127	misc	576	ensure => present,
128			owner => root,
129			group => root,
130			mode => 755,
131	misc	587	content => template('sympa/search_filters/group.ldap')
132	misc	576	}
133			}
134
135	misc	574	define ldap_group_datasource {
136	misc	598	file { "/etc/sympa/data_sources/$name.incl":
137	misc	574	ensure => present,
138			owner => root,
139			group => root,
140			mode => 755,
141	misc	587	content => template('sympa/data_sources/ldap_group.incl')
142	misc	574	}
143			}
144	misc	581
145			define scenario_sender_ldap_group {
146	misc	606	file { "/etc/sympa/scenari/send.restricted_$name":
147	misc	589	ensure => present,
148			owner => root,
149			group => root,
150			mode => 755,
151			content => template('sympa/scenari/sender.ldap_group')
152			}
153	misc	581	}
154
155			define scenario_sender_email {
156	misc	758	$sender_email_file = regsubst($name,'\@','-at-')
157			file { "/etc/sympa/scenari/send.restricted_$sender_email_file":
158	misc	589	ensure => present,
159			owner => root,
160			group => root,
161			mode => 755,
162			content => template('sympa/scenari/sender.email')
163			}
164	misc	581	}
165
166	misc	574	# add each group that could be used in a sympa ml either as
167			# - owner
168			# - editor ( moderation )
169	misc	602	ldap_group_datasource { "mga-sysadmin": }
170	misc	574	ldap_group_datasource { "mga-ml_moderators": }
171
172	misc	576
173	misc	569	# directory that will hold the list data
174			# i am not sure of the name ( misc, 09/12/10 )
175			file { "/var/lib/sympa/expl/":
176			ensure => directory,
177			owner => sympa,
178			group => root,
179			mode => 755,
180			}
181	dmorgan	234	}
182	misc	557
183	misc	580	define list($subject,
184			$profile = false,
185			$language = 'en',
186	misc	644	$topics = false,
187	misc	580	$reply_to = false,
188			$sender_email = false,
189			$sender_ldap_group = false,
190			$subscriber_ldap_group = false,
191			$public_archive = true ) {
192	misc	557
193	misc	562	include sympa::variable
194
195	misc	557	$xml_file = "/etc/sympa/lists_xml/$name.xml"
196
197	misc	607	if $sender_email {
198			$sender_email_file = regsubst($sender_email,'\@','-at-')
199			} else {
200			$sender_email_file = ''
201			}
202
203	misc	557	file { "$xml_file":
204			owner => root,
205			group => root,
206			content => template('sympa/list.xml')
207			}
208
209	misc	562	exec { "sympa.pl --create_list --robot=$sympa::variable::vhost --input_file=$xml_file":
210	misc	590	require => File["$xml_file"],
211	misc	592	creates => "/var/lib/sympa/expl/$name",
212	misc	580	before => File["/var/lib/sympa/expl/$name/config"],
213	misc	557	}
214	misc	580
215			file { "/var/lib/sympa/expl/$name/config":
216			ensure => present,
217			owner => sympa,
218			group => sympa,
219			mode => 750,
220			content => template("sympa/config"),
221	misc	645	notify => Service['sympa'],
222	misc	580	}
223	misc	581
224			if $sender_ldap_group {
225			if ! defined(Sympa::Server::Scenario_sender_ldap_group[$sender_ldap_group]) {
226			sympa::server::scenario_sender_ldap_group { $sender_ldap_group: }
227			}
228			}
229
230			if $sender_email {
231	misc	758	if ! defined(Sympa::Server::Scenario_sender_email[$sender_email]) {
232			sympa::server::scenario_sender_email { $sender_email: }
233	misc	581	}
234			}
235
236			if $subscriber_ldap_group {
237			if ! defined(Sympa::Server::Ldap_search_filter[$subscriber_ldap_group]) {
238			sympa::server::ldap_search_filter { $subscriber_ldap_group: }
239			}
240			}
241	misc	557	}
242	misc	582
243			#
244			# various types of list that can be directly used
245			#
246			#
247	misc	644	define public_list($subject, $language = 'en', $topics = false) {
248	misc	582	list { $name:
249			subject => $subject,
250			# profile => "public",
251			language => $language,
252	misc	675	topics => $topics,
253	misc	582	}
254			}
255
256			# list where announce are sent by member of ldap_group
257			# reply_to is set to $reply_to
258	misc	644	define announce_list_group($subject, $reply_to, $sender_ldap_group, $language = 'en', $topics = false) {
259	misc	582	# profile + scenario
260			list{ $name:
261			subject => $subject,
262			profile => "",
263			language => $language,
264	misc	675	topics => $topics,
265	misc	582	reply_to => $reply_to,
266			sender_ldap_group => $sender_ldap_group,
267			}
268			}
269
270
271			# list where announce are sent by $email only
272			# reply_to is set to $reply_to
273	misc	644	define announce_list_email($subject, $reply_to, $sender_email, $language = 'en', $topics = false) {
274	misc	582	list{ $name:
275			subject => $subject,
276			profile => "",
277			language => $language,
278	misc	675	topics => $topics,
279	misc	582	reply_to => $reply_to,
280			sender_email => $sender_email,
281			}
282			}
283
284			# list where people cannot subscribe, where people from $ldap_group receive
285			# mail, with public archive
286	misc	644	define restricted_list($subject, $subscriber_ldap_group, $language = 'en', $topics = false) {
287	misc	582	list{ $name:
288			subject => $subject,
289			profile => "",
290	misc	675	topics => $topics,
291	misc	582	language => $language,
292			subscriber_ldap_group => $subscriber_ldap_group,
293			sender_ldap_group => $subscriber_ldap_group,
294			}
295			}
296
297			# same as restricted list, but anybody can post
298	misc	644	define restricted_list_open($subject, $subscriber_ldap_group, $language = 'en', $topics = false) {
299	misc	582	list{ $name:
300			subject => $subject,
301			profile => "",
302			language => $language,
303	misc	675	topics => $topics,
304	misc	582	subscriber_ldap_group => $subscriber_ldap_group,
305			sender_ldap_group => $subscriber_ldap_group,
306			}
307			}
308
309			# list with private archive, restricted to member of $ldap_group
310	misc	644	define private_list($subject, $subscriber_ldap_group, $language ='en', $topics = false) {
311	misc	582	list{ $name:
312			subject => $subject,
313			profile => "",
314			language => $language,
315	misc	675	topics => $topics,
316	misc	582	subscriber_ldap_group => $subscriber_ldap_group,
317			sender_ldap_group => $subscriber_ldap_group,
318			public_archive => false,
319			}
320			}
321
322			# list with private archive, restricted to member of $ldap_group
323			# everybody can post
324			# used for contact alias
325	misc	644	define private_list_open($subject, $subscriber_ldap_group, $language ='en', $topics = false) {
326	misc	582	list{ $name:
327			subject => $subject,
328			profile => "",
329			language => $language,
330	misc	675	topics => $topics,
331	misc	582	subscriber_ldap_group => $subscriber_ldap_group,
332			public_archive => false,
333			}
334			}
335
336			# same as private_list, but post are restricted to $email
337			# ( scripting )
338	misc	644	define private_list_email($subject, $subscriber_ldap_group, $sender_email, $language ='en', $topics = false) {
339	misc	582	list{ $name:
340			subject => $subject,
341			profile => "",
342			language => $language,
343	misc	675	topics => $topics,
344	misc	582	subscriber_ldap_group => $subscriber_ldap_group,
345			sender_email => $sender_email,
346			public_archive => false,
347			}
348			}
349	dmorgan	234	}
350