addpackages

manifests/init.pp

@@ -7,37 +7,14 @@
 class omni (
 ) {
   include profiles::letsencrypt
-  include postgresql::server
-
-  package { 'python39':
-    ensure => 'installed',
-  }
+  include omni::nginx
+  include omni::postgres
 
   firewalld_service { 'Allow SSH in the liu zone':
     ensure  => present,
     zone    => 'liu',
     service => 'ssh',
   }
-  firewalld_service { 'Allow http in the liu Zone':
-    ensure  => present,
-    zone    => 'liu',
-    service => 'http',
-  }
-  firewalld_service { 'Allow https in the liu Zone':
-    ensure  => present,
-    zone    => 'liu',
-    service => 'https',
-  }
-  firewalld_service { 'Allow http in the public Zone':
-    ensure  => present,
-    zone    => 'public',
-    service => 'http',
-  }
-  firewalld_service { 'Allow https in the public Zone':
-    ensure  => present,
-    zone    => 'public',
-    service => 'https',
-  }
 
   users::liu_user { 'mange61':
     commonname => 'Måns Gezelius',

manifests/js.pp

+# remark
+class omni::js( ) {
+  package { 'nodejs':
+    ensure => 'installed',
+    notify => Exec['yarn'],
+  }
+
+  exec { 'yarn':
+    command     => 'npm install --global yarn',
+    path        => ['/bin', '/usr/bin'],
+    refreshonly => true,
+  }
+}

manifests/nginx.pp

+# intelligent comment here
+class omni::nginx( ) {
+  package { 'nginx':
+    ensure => 'installed',
+  }
+  # inserf conf. files here
+  service { 'nginx':
+    enable => true,
+    ensure => 'running',
+  }
+  firewalld_service { 'Allow http in the liu Zone':
+    ensure  => present,
+    zone    => 'liu',
+    service => 'http',
+  }
+  firewalld_service { 'Allow https in the liu Zone':
+    ensure  => present,
+    zone    => 'liu',
+    service => 'https',
+  }
+  firewalld_service { 'Allow http in the public Zone':
+    ensure  => present,
+    zone    => 'public',
+    service => 'http',
+  }
+  firewalld_service { 'Allow https in the public Zone':
+    ensure  => present,
+    zone    => 'public',
+    service => 'https',
+  }
+}

manifests/postgres.pp

+# Comment
+class omni::postgres( ) {
+  $passwd = 'quetzalcoatl'
+  include postgresql::server
+
+  postgresql::server::db {
+    default:
+      encoding => 'UTF8',
+      locale   => 'en_US.UTF-8';
+    'omni':
+       user     => 'omni',
+       password => postgresql::postgresql_password('omni', $passwd);
+  }
+
+  postgresql::server::role { 'admin':
+    createrole    => true,
+    superuser     => true,
+    password_hash => postgresql::postgresql_password('admin', $passwd),
+  }
+
+  postgresql::server::database_grant { 'omni':
+    privilege => 'ALL',
+    db        => 'omni',
+    role      => 'admin',
+  }
+}

manifests/python.pp

+# well ...
+class omni::python( ) {
+  package { 'python3':
+    ensure => 'installed',
+  }
+  package { 'python3-gunicorn':
+    ensure => 'installed',
+    require => 'package['python3'],
+  }
+}