From 235caa63ec1d56ee63afec6a71acad2169f12b3c Mon Sep 17 00:00:00 2001 From: Silvio Rhatto Date: Tue, 29 Nov 2011 00:23:21 -0200 Subject: Adding SSL suport --- manifests/init.pp | 23 ++++++++++++++++++++++- 1 file changed, 22 insertions(+), 1 deletion(-) (limited to 'manifests') diff --git a/manifests/init.pp b/manifests/init.pp index 4c1b284..205b11f 100644 --- a/manifests/init.pp +++ b/manifests/init.pp @@ -31,6 +31,8 @@ $apache2_macros = "/etc/apache2/conf.d/macros" $apache2_conf = "/etc/apache2/apache2.conf" class apache { + include ssl + case $apache_www_folder { '': { $apache_www_folder = "/var/www" } } @@ -84,6 +86,11 @@ class apache { require => Package["apache"], } + module { "ssl": + ensure => present, + require => Package["apache"], + } + # apache mod_macro configuration file { "${apache2_macros}": ensure => present, @@ -139,7 +146,8 @@ class apache { $manage_docroot = true, $owner = 'root', $group = 'root', $mpm = true, $mpm_user = '', $mpm_group = '', $password = '*', $comment = '', $sshkey = absent, - $groups = '', $shell = '/bin/false', $manage_user = true) { + $groups = '', $shell = '/bin/false', $manage_user = true, + $ssl = false, $listen = '*') { $vhost = $filename ? { '' => "$title", @@ -202,6 +210,19 @@ class apache { } } + if $ssl == true { + ssl::cert { "$name": + group => $gid, + privmode => '0640', + ensure => $ensure, + } + + ssl::check { "$name": + file => "/etc/ssl/certs/$name.crt", + ensure => $ensure, + } + } + case $source { true: { file { "${apache2_sites}-available/$vhost": -- cgit v1.2.3