3 Commits

Author	SHA1	Message	Date
Alex Vandiver	6c72698df2	puppet: Move zulip_ops supervisor config into /etc/supervisor/conf.d/zulip/. ... This is similar cleanup to 3ab9b31d2f, but only affects zulip_ops services; it serves to ensure that any of these services which are no longer enabled are automatically removed from supervisor. Note that this will cause a supervisor restart on all affected hosts, which will restart all supervisor services.	2021-06-14 17:12:59 -07:00
Alex Vandiver	c9141785fd	puppet: Use concat fragments to place port allows next to services. ... This means that services will only open their ports if they are actually run, without having to clutter rules.v4 with a log of `if` statements. This does not go as far as using `puppetlabs/firewall`[1] because that would represent an additional DSL to learn; raw IPtables sections can easily be inserted into the generated iptables file via `concat::fragment` (either inline, or as a separate file), but config can be centralized next to the appropriate service. [1] https://forge.puppet.com/modules/puppetlabs/firewall	2021-05-27 21:14:48 -07:00
Alex Vandiver	9f25389bff	puppet: Move top-level zulip_ops deployments to zulip_ops::profile.	2020-10-27 13:29:19 -07:00