Puppet Class: isp3node::nginx::defaulthost

Defined in:
manifests/nginx/defaulthost.pp

Summary

Set up a default page on hosts FQDN

Overview

Places a default startpage on the hosts FQDN containing links to tools for the customers like mailman, webmail, phpmyadmin or ispconfig. RSpamd is not listed as link, because usually not ment for public access.

Examples:

include isp3node::nginx::defaulthost


9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
 
# File 'manifests/nginx/defaulthost.pp', line 9

class isp3node::nginx::defaulthost {
  file{'/var/www':
    ensure  => directory,
  }
  -> file{'/var/www/default':
    ensure  => directory,
  }
  -> concat{'/var/www/default/index.html':
    ensure  => present,
  }

  concat::fragment{'startpage_header':
    target  => '/var/www/default/index.html',
    content => epp('isp3node/web/startpage.head.html'),
    order   => '00'
  }
  concat::fragment{'startpage_begin':
    target  => '/var/www/default/index.html',
    content => epp('isp3node/web/startpage.body1.html'),
    order   => '01'
  }
  concat::fragment{'startpage_end':
    target  => '/var/www/default/index.html',
    content => epp('isp3node/web/startpage.body2.html'),
    order   => '98'
  }

  nginx::resource::server { "${facts['fqdn']}-http":
    ensure              => present,
    server_name         => [$facts['fqdn']],
    listen_ip           => $facts['networking']['ip'],
    ipv6_listen_ip      => $facts['networking']['ip6'],
    www_root            => '/var/www/default',
    location_cfg_append => {
      'rewrite' => '^ https://$server_name$request_uri? permanent'
    },
  }

  nginx::resource::server { $facts['fqdn']:
    ensure         => present,
    listen_port    => 443,
    listen_ip      => $facts['networking']['ip'],
    ipv6_listen_ip => $facts['networking']['ip6'],
    www_root       => '/var/www/default',
    ssl            => true,
    ssl_cert       => "/etc/ssl/local/${facts['fqdn']}.bundle.crt",
    ssl_key        => "/etc/ssl/local/${facts['fqdn']}.key",
  }

  unless (lookup('isp3node::base::ssl::letsencrypt', undef, undef, false)){
    File["/etc/ssl/local/${facts['fqdn']}.bundle.crt"] ~> Service['nginx']
  }
}