b939e92624
The super group on many platforms is known as root, which a UID of 0. However, on other platforms, the UID is still 0, but the group is 'wheel'. Largely historic UNIX jargon, but suffice to say that, to support FreeBSD and others, setting the group of '0' has the same impact while supporting a wider range of platforms.
90 lines
2.7 KiB
Puppet
90 lines
2.7 KiB
Puppet
# define: nginx::resource::geo
|
|
#
|
|
# This definition creates a new geo mapping entry for NGINX
|
|
#
|
|
# Parameters:
|
|
# [*networks*] - Hash of geo lookup keys and resultant values
|
|
# [*default*] - Sets the resulting value if the source value fails to
|
|
# match any of the variants.
|
|
# [*ensure*] - Enables or disables the specified location
|
|
# [*ranges*] - Indicates that lookup keys (network addresses) are
|
|
# specified as ranges.
|
|
# [*address*] - Nginx defaults to using $remote_addr for testing.
|
|
# This allows you to override that with another variable
|
|
# name (automatically prefixed with $)
|
|
# [*delete*] - deletes the specified network (see: geo module docs)
|
|
# [*proxy_recursive*] - Changes the behavior of address acquisition when
|
|
# specifying trusted proxies via 'proxies' directive
|
|
# [*proxies*] - Hash of network->value mappings.
|
|
|
|
# Actions:
|
|
#
|
|
# Requires:
|
|
#
|
|
# Sample Usage:
|
|
#
|
|
# nginx::resource::geo { 'client_network':
|
|
# ensure => present,
|
|
# ranges => false,
|
|
# default => extra,
|
|
# proxy_recursive => false,
|
|
# proxies => [ '192.168.99.99' ],
|
|
# networks => {
|
|
# '10.0.0.0/8' => 'intra',
|
|
# '172.16.0.0/12' => 'intra',
|
|
# '192.168.0.0/16' => 'intra',
|
|
# }
|
|
# }
|
|
#
|
|
# Sample Hiera usage:
|
|
#
|
|
# nginx::geos:
|
|
# client_network:
|
|
# ensure: present
|
|
# ranges: false
|
|
# default: 'extra'
|
|
# proxy_recursive: false
|
|
# proxies:
|
|
# - 192.168.99.99
|
|
# networks:
|
|
# '10.0.0.0/8': 'intra'
|
|
# '172.16.0.0/12': 'intra'
|
|
# '192.168.0.0/16': 'intra'
|
|
|
|
|
|
define nginx::resource::geo (
|
|
$networks,
|
|
$default = undef,
|
|
$ensure = 'present',
|
|
$ranges = false,
|
|
$address = undef,
|
|
$delete = undef,
|
|
$proxies = undef,
|
|
$proxy_recursive = undef
|
|
) {
|
|
|
|
validate_hash($networks)
|
|
validate_bool($ranges)
|
|
validate_re($ensure, '^(present|absent)$',
|
|
"Invalid ensure value '${ensure}'. Expected 'present' or 'absent'")
|
|
if ($default != undef) { validate_string($default) }
|
|
if ($address != undef) { validate_string($address) }
|
|
if ($delete != undef) { validate_string($delete) }
|
|
if ($proxies != undef) { validate_array($proxies) }
|
|
if ($proxy_recursive != undef) { validate_bool($proxy_recursive) }
|
|
|
|
File {
|
|
owner => 'root',
|
|
group => '0',
|
|
mode => '0644',
|
|
}
|
|
|
|
file { "${nginx::config::conf_dir}/conf.d/${name}-geo.conf":
|
|
ensure => $ensure ? {
|
|
'absent' => absent,
|
|
default => 'file',
|
|
},
|
|
content => template('nginx/conf.d/geo.erb'),
|
|
notify => Class['nginx::service'],
|
|
}
|
|
}
|