From a63997c9496696158751392a5efb5e6758e14c8c Mon Sep 17 00:00:00 2001
From: Magnus Svensson <magnus@ctrl-c.liu.se>
Date: Fri, 3 Dec 2021 16:12:32 +0100
Subject: [PATCH] Disable most of app management for now.
---
manifests/init.pp | 312 +++++++++++++++++-----------------
manifests/remirepo.pp | 17 --
spec/classes/remirepo_spec.rb | 13 --
3 files changed, 156 insertions(+), 186 deletions(-)
delete mode 100644 manifests/remirepo.pp
delete mode 100644 spec/classes/remirepo_spec.rb
diff --git a/manifests/init.pp b/manifests/init.pp
index c25e33a..71ea45a 100644
--- a/manifests/init.pp
+++ b/manifests/init.pp
@@ -34,7 +34,7 @@ class aim_control(
String $skadereg_ro_user = 'skadereg_ro',
){
- ::users::liu_user {
+ users::liu_user {
'samla949':
commonname => 'Samuel Larsson',
shell => '/bin/bash',
@@ -62,38 +62,38 @@ class aim_control(
'apache',
],
require => [
- ::Users::Liu_user['samla949'],
+ Users::Liu_user['samla949'],
],
}
include aim_control::firewall
- include apache
- include aim_control::remirepo
-
- class { 'apache::mod::php':
- package_name => 'php74',
- php_version => '7',
- }
- include apache::mod::rewrite
-
- package {
- 'php74-php-pdo':
- ensure => installed;
- 'php74-php-mbstring':
- ensure => installed;
- 'php74-php-mysqlnd':
- ensure => installed;
- 'php74-php-common':
- ensure => installed;
- 'php74-php':
- ensure => installed;
- }
-
- file { '/etc/httpd/modules/libphp7.so':
- ensure => link,
- target => '/opt/remi/php74/root/usr/lib64/httpd/modules/libphp7.so',
- before => Service['httpd'],
- }
+ #include apache
+ include liurepo::remi
+
+ # class { 'apache::mod::php':
+ # package_name => 'php74',
+ # php_version => '7',
+ # }
+ # include apache::mod::rewrite
+
+ # package {
+ # 'php74-php-pdo':
+ # ensure => installed;
+ # 'php74-php-mbstring':
+ # ensure => installed;
+ # 'php74-php-mysqlnd':
+ # ensure => installed;
+ # 'php74-php-common':
+ # ensure => installed;
+ # 'php74-php':
+ # ensure => installed;
+ # }
+
+ # file { '/etc/httpd/modules/libphp7.so':
+ # ensure => link,
+ # target => '/opt/remi/php74/root/usr/lib64/httpd/modules/libphp7.so',
+ # before => Service['httpd'],
+ # }
include certdist
@@ -101,131 +101,131 @@ class aim_control(
$chain = "/etc/pki/tls/certs/chain-${facts['networking']['fqdn']}.pem"
$key = "/etc/pki/tls/private/${facts['networking']['fqdn']}.key"
- apache::vhost { 'default:80':
- servername => $facts['networking']['fqdn'],
- default_vhost => true,
- port => '80',
- docroot => '/var/www/html',
- redirect_status => 'permanent',
- redirect_dest => "https://${facts['networking']['fqdn']}/",
- }
-
- apache::vhost { "${facts['networking']['fqdn']}:443":
- servername => $facts['networking']['fqdn'],
- port => '443',
- ssl => true,
- ssl_cert => $cert,
- ssl_chain => $chain,
- ssl_key => $key,
- headers => ['Set Strict-Transport-Security "max-age=31536000"',],
- docroot => '/var/www/skadereg/public',
- docroot_owner => 'apache',
- docroot_group => 'skadereg',
- directories => [
- {
- path => '/var/www/skadereg/public',
- allow_override => [ 'ALL' ],
- directoryindex => 'index.php',
- }
- ],
- }
-
- file { '/var/www/skadereg/':
- ensure => directory,
- owner => 'apache',
- group => 'skadereg',
- mode => '0770',
- recurse => true,
- }
-
- -> vcsrepo { '/var/www/skadereg':
- ensure => latest,
- before => File['/var/www/skadereg/public'],
- provider => git,
- source => 'git@gitlab.liu.se:aim-control/laravel.git',
- user => 'apache',
- group => 'skadereg',
- }
-
- -> file { '/var/www/skadereg/.env':
- ensure => file,
- owner => 'apache',
- group => 'skadereg',
- mode => '0660',
- content => template("${module_name}/dotenv.erb"),
- }
-
- exec { 'artisan migrate':
- command => 'php artisan migrate --force -n',
- cwd => '/var/www/skadereg',
- path => [ '/opt/remi/php74/root/bin/' ],
- refreshonly => true,
- group => 'skadereg',
- user => 'apache',
- subscribe => [ Vcsrepo['/var/www/skadereg'], File[ '/var/www/skadereg' ], ],
- }
-
- cron { 'artisan schedule:run':
- minute => '*',
- hour => '*',
- monthday => '*',
- month => '*',
- weekday => '*',
- user => 'apache',
- environment => [ 'PATH=/opt/remi/php74/root/bin:/usr/bin:/bin', 'SHELL=/bin/bash' ],
- command => 'php /var/www/skadereg/artisan schedule:run &> /dev/null',
- }
-
- $db_name = 'homestead'
-
- class { 'mysql::server':
- root_password => $mysql_password,
- databases => {
- $db_name => {
- ensure => present,
- charset => 'utf8',
- },
- },
- users => {
- "${skadereg_ro_user}@%" => {
- ensure => present,
- password_hash => mysql_password($skadereg_ro_password),
- },
- },
- grants => {
- 'root@%/*.*' => {
- ensure => present,
- options => ['GRANT'],
- privileges => ['ALL'],
- table => '*.*',
- user => 'root@%',
- },
- },
- override_options => {
- mysqld => {
- 'bind-address' => '0.0.0.0',
- port => 33060,
- },
- },
- }
-
- ['entries', 'guardian_confirmations', 'users'].each |String $table| {
- mysql_grant { "${skadereg_ro_user}@%/${db_name}.${table}":
- ensure => present,
- privileges => ['SELECT'],
- table => "${db_name}.${table}",
- user => "${skadereg_ro_user}@%",
- }
- }
-
- class { 'mysql::server::backup':
- backupuser => 'backupuser',
- backuppassword => $mysql_backup_password,
- backupdir => '/root/mysql_backups',
- backupdirmode => '700',
- backupdirowner => 'root',
- backupdirgroup => 'root',
- backuprotate => '7',
- time => ['1','0'],
- }
+ # apache::vhost { 'default:80':
+ # servername => $facts['networking']['fqdn'],
+ # default_vhost => true,
+ # port => '80',
+ # docroot => '/var/www/html',
+ # redirect_status => 'permanent',
+ # redirect_dest => "https://${facts['networking']['fqdn']}/",
+ # }
+
+ # apache::vhost { "${facts['networking']['fqdn']}:443":
+ # servername => $facts['networking']['fqdn'],
+ # port => '443',
+ # ssl => true,
+ # ssl_cert => $cert,
+ # ssl_chain => $chain,
+ # ssl_key => $key,
+ # headers => ['Set Strict-Transport-Security "max-age=31536000"',],
+ # docroot => '/var/www/skadereg/public',
+ # docroot_owner => 'apache',
+ # docroot_group => 'skadereg',
+ # directories => [
+ # {
+ # path => '/var/www/skadereg/public',
+ # allow_override => [ 'ALL' ],
+ # directoryindex => 'index.php',
+ # }
+ # ],
+ # }
+
+ # file { '/var/www/skadereg/':
+ # ensure => directory,
+ # owner => 'apache',
+ # group => 'skadereg',
+ # mode => '0770',
+ # recurse => true,
+ # }
+
+ # -> vcsrepo { '/var/www/skadereg':
+ # ensure => latest,
+ # before => File['/var/www/skadereg/public'],
+ # provider => git,
+ # source => 'git@gitlab.liu.se:aim-control/laravel.git',
+ # user => 'apache',
+ # group => 'skadereg',
+ # }
+
+ # -> file { '/var/www/skadereg/.env':
+ # ensure => file,
+ # owner => 'apache',
+ # group => 'skadereg',
+ # mode => '0660',
+ # content => template("${module_name}/dotenv.erb"),
+ # }
+
+ # exec { 'artisan migrate':
+ # command => 'php artisan migrate --force -n',
+ # cwd => '/var/www/skadereg',
+ # path => [ '/opt/remi/php74/root/bin/' ],
+ # refreshonly => true,
+ # group => 'skadereg',
+ # user => 'apache',
+ # subscribe => [ Vcsrepo['/var/www/skadereg'], File[ '/var/www/skadereg' ], ],
+ # }
+
+ # cron { 'artisan schedule:run':
+ # minute => '*',
+ # hour => '*',
+ # monthday => '*',
+ # month => '*',
+ # weekday => '*',
+ # user => 'apache',
+ # environment => [ 'PATH=/opt/remi/php74/root/bin:/usr/bin:/bin', 'SHELL=/bin/bash' ],
+ # command => 'php /var/www/skadereg/artisan schedule:run &> /dev/null',
+ # }
+
+ # $db_name = 'homestead'
+
+ # class { 'mysql::server':
+ # root_password => $mysql_password,
+ # databases => {
+ # $db_name => {
+ # ensure => present,
+ # charset => 'utf8',
+ # },
+ # },
+ # users => {
+ # "${skadereg_ro_user}@%" => {
+ # ensure => present,
+ # password_hash => mysql_password($skadereg_ro_password),
+ # },
+ # },
+ # grants => {
+ # 'root@%/*.*' => {
+ # ensure => present,
+ # options => ['GRANT'],
+ # privileges => ['ALL'],
+ # table => '*.*',
+ # user => 'root@%',
+ # },
+ # },
+ # override_options => {
+ # mysqld => {
+ # 'bind-address' => '0.0.0.0',
+ # port => 33060,
+ # },
+ # },
+ # }
+
+ # ['entries', 'guardian_confirmations', 'users'].each |String $table| {
+ # mysql_grant { "${skadereg_ro_user}@%/${db_name}.${table}":
+ # ensure => present,
+ # privileges => ['SELECT'],
+ # table => "${db_name}.${table}",
+ # user => "${skadereg_ro_user}@%",
+ # }
+ # }
+
+ # class { 'mysql::server::backup':
+ # backupuser => 'backupuser',
+ # backuppassword => $mysql_backup_password,
+ # backupdir => '/root/mysql_backups',
+ # backupdirmode => '700',
+ # backupdirowner => 'root',
+ # backupdirgroup => 'root',
+ # backuprotate => '7',
+ # time => ['1','0'],
+ # }
}
diff --git a/manifests/remirepo.pp b/manifests/remirepo.pp
deleted file mode 100644
index 7051175..0000000
--- a/manifests/remirepo.pp
+++ /dev/null
@@ -1,17 +0,0 @@
-class aim_control::remirepo(
-) {
-
- package { 'remi-release' :
- ensure => 'installed',
- provider => 'yum',
- source => 'https://rpms.remirepo.net/enterprise/remi-release-7.rpm',
- notify => Exec[ 'enable remi' ],
- }
-
- exec { 'enable remi' :
- command => 'yum-config-manager --enable remi-php74',
- path => ['/bin', '/usr/bin' ],
- refreshonly => true,
- creates => '/opt/remi',
- }
-}
diff --git a/spec/classes/remirepo_spec.rb b/spec/classes/remirepo_spec.rb
deleted file mode 100644
index 96cceb9..0000000
--- a/spec/classes/remirepo_spec.rb
+++ /dev/null
@@ -1,13 +0,0 @@
-# frozen_string_literal: true
-
-require 'spec_helper'
-
-describe 'aim_control::remirepo' do
- on_supported_os.each do |os, os_facts|
- context "on #{os}" do
- let(:facts) { os_facts }
-
- it { is_expected.to compile }
- end
- end
-end
--
GitLab