mirror of https://github.com/zulip/zulip.git
55 lines
1.7 KiB
Puppet
55 lines
1.7 KiB
Puppet
class zulip_ops::app_frontend {
|
|
include zulip::app_frontend_base
|
|
include zulip::profile::memcached
|
|
include zulip::profile::rabbitmq
|
|
include zulip::postfix_localmail
|
|
include zulip::static_asset_compiler
|
|
include zulip::hooks::sentry
|
|
include zulip_ops::app_frontend_monitoring
|
|
$app_packages = [# Needed for the ssh tunnel to the redis server
|
|
'autossh',
|
|
]
|
|
package { $app_packages: ensure => installed }
|
|
$redis_hostname = zulipconf('redis', 'hostname', undef)
|
|
|
|
zulip_ops::firewall_allow{ 'smtp': }
|
|
zulip_ops::firewall_allow{ 'http': }
|
|
zulip_ops::firewall_allow{ 'https': }
|
|
|
|
file { '/etc/logrotate.d/zulip':
|
|
ensure => file,
|
|
owner => 'root',
|
|
group => 'root',
|
|
mode => '0644',
|
|
source => 'puppet:///modules/zulip/logrotate/zulip',
|
|
}
|
|
|
|
file { "${zulip::common::supervisor_conf_dir}/redis_tunnel.conf":
|
|
ensure => file,
|
|
require => Package['supervisor', 'autossh'],
|
|
owner => 'root',
|
|
group => 'root',
|
|
mode => '0644',
|
|
content => template('zulip_ops/supervisor/conf.d/redis_tunnel.conf.template.erb'),
|
|
notify => Service['supervisor'],
|
|
}
|
|
# Need redis_password in its own file for Nagios
|
|
file { '/var/lib/nagios/redis_password':
|
|
ensure => file,
|
|
mode => '0600',
|
|
owner => 'nagios',
|
|
group => 'nagios',
|
|
content => zulipsecret('secrets', 'redis_password', ''),
|
|
}
|
|
|
|
# Each server does its own fetching of contributor data, since
|
|
# we don't have a way to synchronize that among several servers.
|
|
file { '/etc/cron.d/fetch-contributor-data':
|
|
ensure => file,
|
|
owner => 'root',
|
|
group => 'root',
|
|
mode => '0644',
|
|
source => 'puppet:///modules/zulip_ops/cron.d/fetch-contributor-data',
|
|
}
|
|
}
|