summaryrefslogtreecommitdiff
path: root/manifests/site.pp
diff options
context:
space:
mode:
Diffstat (limited to 'manifests/site.pp')
-rw-r--r--manifests/site.pp47
1 files changed, 27 insertions, 20 deletions
diff --git a/manifests/site.pp b/manifests/site.pp
index 983fc88..4455f45 100644
--- a/manifests/site.pp
+++ b/manifests/site.pp
@@ -1,16 +1,17 @@
define nginx::site(
- $ensure = present,
- $ssl = present,
- $source = 'template',
- $certbot = true,
- $template = 'site',
- $backend = 'weblocal',
- $aliases = "*.${name}",
- $cache = false,
- $cache_levels = '1:2',
- $cache_size = '10m',
- $cache_inactive = '600s',
- $cache_max_size = '1m',
+ $ensure = present,
+ $ssl = present,
+ $source = 'template',
+ $certbot = true,
+ $template = 'site',
+ $backend = 'weblocal',
+ $aliases = "*.${name}",
+ $cache = false,
+ $cache_levels = '1:2',
+ $cache_size = '10m',
+ $cache_inactive = '600s',
+ $cache_max_size = '1m',
+ $x_frame_options = 'DENY',
) {
nginx::site::config { $name:
ensure => $ensure,
@@ -32,17 +33,23 @@ define nginx::site(
}
nginx::site::config { "${name}-ssl":
- server_name => $name,
- ensure => $ensure ? {
+ server_name => $name,
+ ensure => $ensure ? {
'present' => $ssl,
default => absent,
},
- source => $source,
- template => "${template}-ssl",
- backend => $backend,
- aliases => $aliases,
- require => $certbot ? {
- true => $ensure ? {
+ source => $source,
+ template => "${template}-ssl",
+ backend => $backend,
+ aliases => $aliases,
+ cache => $cache,
+ cache_levels => $cache_levels,
+ cache_size => $cache_size,
+ cache_inactive => $cache_inactive,
+ cache_max_size => $cache_max_size,
+ x_frame_options => $x_frame_options,
+ require => $certbot ? {
+ true => $ensure ? {
'present' => Certbot::Manage[$name],
default => undef,
},