site.pp
2.93 KB
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
# Define: nginx::fcgi::site
#
# Create a fcgi site config from template using parameters.
# You can use my php5-fpm class to manage fastcgi servers.
#
# Parameters :
# * ensure: typically set to "present" or "absent". Defaults to "present"
# * root: document root (Required)
# * fastcgi_pass : port or socket on which the FastCGI-server is listening (Required)
# * server_name : server_name directive (could be an array)
# * listen : address/port the server listen to. Defaults to 80. Auto enable ssl if 443
# * access_log : custom acces logs. Defaults to /var/log/nginx/$name_access.log
# * include : custom include for the site (could be an array). Include files must exists
# to avoid nginx reload errors. Use with nginx::site_include
# * ssl_certificate : ssl_certificate path. If empty auto-generating ssl cert
# * ssl_certificate_key : ssl_certificate_key path. If empty auto-generating ssl cert key
# See http://wiki.nginx.org for details.
#
# Templates :
# * nginx/fcgi_site.erb
#
# Sample Usage :
# nginx::fcgi::site { 'default':
# root => '/var/www/nginx-default',
# fastcgi_pass => '127.0.0.1:9000',
# server_name => ['localhost', $hostname, $fqdn],
# }
#
# nginx::fcgi::site { 'default-ssl':
# listen => '443',
# root => '/var/www/nginx-default',
# fastcgi_pass => '127.0.0.1:9000',
# server_name => $fqdn,
# }
#
define nginx::fcgi::site(
$root,
$fastcgi_pass,
$ensure = 'present',
$index = 'index.php',
$include = '',
$listen = '80',
$server_name = undef,
$access_log = undef,
$ssl_certificate = undef,
$ssl_certificate_key = undef,
$ssl_session_timeout = '5m') {
$real_server_name = $server_name ? {
undef => $name,
default => $server_name,
}
$real_access_log = $access_log ? {
undef => "/var/log/nginx/${name}_access.log",
default => $access_log,
}
# Autogenerating ssl certs
if $listen == '443' and $ensure == 'present' and ($ssl_certificate == undef or $ssl_certificate_key == undef) {
exec { "generate-${name}-certs":
command => "/usr/bin/openssl req -new -inform PEM -x509 -nodes -days 999 -subj \
'/C=ZZ/ST=AutoSign/O=AutoSign/localityName=AutoSign/commonName=${real_server_name}/organizationalUnitName=AutoSign/emailAddress=AutoSign/' \
-newkey rsa:2048 -out /etc/nginx/ssl/${name}.pem -keyout /etc/nginx/ssl/${name}.key",
unless => "/usr/bin/test -f /etc/nginx/ssl/${name}.pem",
require => File['/etc/nginx/ssl'],
notify => Service['nginx'],
}
}
$real_ssl_certificate = $ssl_certificate ? {
undef => "/etc/nginx/ssl/${name}.pem",
default => $ssl_certificate,
}
$real_ssl_certificate_key = $ssl_certificate_key ? {
undef => "/etc/nginx/ssl/${name}.key",
default => $ssl_certificate_key,
}
nginx::site { $name:
ensure => $ensure,
content => template('nginx/fcgi_site.erb'),
}
}