zulip/puppet/zulip_ops/manifests/app_frontend.pp

84 lines
2.3 KiB
Puppet

class zulip_ops::app_frontend {
include zulip::app_frontend_base
include zulip::memcached
include zulip::rabbit
include zulip::postfix_localmail
include zulip::static_asset_compiler
$app_packages = [# Needed for the ssh tunnel to the redis server
'autossh',
]
package { $app_packages: ensure => 'installed' }
$default_host_domain = zulipconf('nagios', 'default_host_domain', undef)
file { '/etc/logrotate.d/zulip':
ensure => file,
owner => 'root',
group => 'root',
mode => '0644',
source => 'puppet:///modules/zulip/logrotate/zulip',
}
file { '/etc/log2zulip.conf':
ensure => file,
owner => 'zulip',
group => 'zulip',
mode => '0644',
source => 'puppet:///modules/zulip_ops/log2zulip.conf',
}
file { '/etc/cron.d/log2zulip':
ensure => absent,
}
file { '/etc/log2zulip.zuliprc':
ensure => file,
owner => 'zulip',
group => 'zulip',
mode => '0600',
source => 'puppet:///modules/zulip_ops/log2zulip.zuliprc',
}
file { '/etc/cron.d/check-apns-tokens':
ensure => absent,
}
file { '/etc/supervisor/conf.d/redis_tunnel.conf':
ensure => file,
require => Package['supervisor', 'autossh'],
owner => 'root',
group => 'root',
mode => '0644',
content => template('zulip_ops/supervisor/conf.d/redis_tunnel.conf.template.erb'),
notify => Service['supervisor'],
}
# Need redis_password in its own file for Nagios
file { '/var/lib/nagios/redis_password':
ensure => file,
mode => '0600',
owner => 'nagios',
group => 'nagios',
content => zulipsecret('secrets', 'redis_password', ''),
}
# Each server does its own fetching of contributor data, since
# we don't have a way to synchronize that among several servers.
file { '/etc/cron.d/fetch-contributor-data':
ensure => file,
owner => 'root',
group => 'root',
mode => '0644',
source => 'puppet:///modules/zulip_ops/cron.d/fetch-contributor-data',
}
# Enable some munin plugins
$munin_plugins = [
'rabbitmq_connections',
'rabbitmq_consumers',
'rabbitmq_messages',
'rabbitmq_messages_unacknowledged',
'rabbitmq_messages_uncommitted',
'rabbitmq_queue_memory',
'zulip_send_receive_timing',
]
zulip_ops::munin_plugin { $munin_plugins: }
}