mirror of https://github.com/zulip/zulip.git
[manual] puppet: Make RabbitMQ and epmd only listen on localhost
To apply this change, we must not only do a puppet apply, but also restart rabbitmq and epmd. Rabbitmq is easy to restart, but epmd is a little more annoying. epmd is run as a side effect of starting up rabbitmq-server, but is not stopped when rabbitmq-server is stopped. Therefore, the correct procedure is to stop rabbitmq-server, kill epmd (by running `epmd -kill`), and then start rabbitmq-server again. (imported from commit a651e5363a8b9a04b713c31baef379c566d5dbfc)
This commit is contained in:
parent
196706cc64
commit
c97278ee8f
|
@ -0,0 +1,11 @@
|
||||||
|
# This file is sourced by /etc/init.d/rabbitmq-server. Its primary
|
||||||
|
# reason for existing is to allow adjustment of system limits for the
|
||||||
|
# rabbitmq-server process.
|
||||||
|
#
|
||||||
|
# Maximum number of open file handles. This will need to be increased
|
||||||
|
# to handle many simultaneous connections. Refer to the system
|
||||||
|
# documentation for ulimit (in man bash) for more information.
|
||||||
|
#
|
||||||
|
#ulimit -n 1024
|
||||||
|
|
||||||
|
export ERL_EPMD_ADDRESS=127.0.0.1
|
|
@ -0,0 +1,4 @@
|
||||||
|
[{kernel, [{inet_dist_use_interface, {127,0,0,1}}]},
|
||||||
|
{rabbit, [{tcp_listeners, [{"127.0.0.1", 5672}]}]},
|
||||||
|
{rabbitmq_mochiweb, [{listeners, [{mgmt, [{ip, "127.0.0.1"},
|
||||||
|
{port, 55672}]}]}]}].
|
|
@ -19,5 +19,23 @@ class zulip::rabbit {
|
||||||
source => "puppet:///modules/zulip/cron.d/rabbitmq-numconsumers",
|
source => "puppet:///modules/zulip/cron.d/rabbitmq-numconsumers",
|
||||||
}
|
}
|
||||||
|
|
||||||
|
file { "/etc/default/rabbitmq-server":
|
||||||
|
require => Package[rabbitmq-server],
|
||||||
|
ensure => file,
|
||||||
|
owner => "root",
|
||||||
|
group => "root",
|
||||||
|
mode => 644,
|
||||||
|
source => "puppet:///modules/zulip/rabbitmq/rabbitmq-server",
|
||||||
|
}
|
||||||
|
|
||||||
|
file { "/etc/rabbitmq/rabbitmq.config":
|
||||||
|
require => Package[rabbitmq-server],
|
||||||
|
ensure => file,
|
||||||
|
owner => "root",
|
||||||
|
group => "root",
|
||||||
|
mode => 644,
|
||||||
|
source => "puppet:///modules/zulip/rabbitmq/rabbitmq.config",
|
||||||
|
}
|
||||||
|
|
||||||
# TODO: Should also call exactly once "servers/configure-rabbitmq"
|
# TODO: Should also call exactly once "servers/configure-rabbitmq"
|
||||||
}
|
}
|
||||||
|
|
Loading…
Reference in New Issue