823 lines
29 KiB
Ruby
823 lines
29 KiB
Ruby
require 'spec_helper'
|
|
|
|
describe 'nginx::resource::vhost' do
|
|
let :title do
|
|
'www.rspec.example.com'
|
|
end
|
|
let :default_params do
|
|
{
|
|
:www_root => '/',
|
|
:ipv6_enable => true,
|
|
}
|
|
end
|
|
let :facts do
|
|
{
|
|
:osfamily => 'Debian',
|
|
:operatingsystem => 'debian',
|
|
:ipaddress6 => '::',
|
|
}
|
|
end
|
|
let :pre_condition do
|
|
[
|
|
'include ::nginx::params',
|
|
'include ::nginx::config',
|
|
]
|
|
end
|
|
|
|
describe 'os-independent items' do
|
|
|
|
describe 'basic assumptions' do
|
|
let :params do default_params end
|
|
it { is_expected.to contain_class("nginx::params") }
|
|
it { is_expected.to contain_class("nginx::config") }
|
|
it { is_expected.to contain_concat("/etc/nginx/sites-available/#{title}.conf").with({
|
|
'owner' => 'root',
|
|
'group' => 'root',
|
|
'mode' => '0644',
|
|
})}
|
|
it { is_expected.to contain_concat__fragment("#{title}-header").with_content(%r{access_log\s+/var/log/nginx/www\.rspec\.example\.com\.access\.log}) }
|
|
it { is_expected.to contain_concat__fragment("#{title}-header").with_content(%r{error_log\s+/var/log/nginx/www\.rspec\.example\.com\.error\.log}) }
|
|
it { is_expected.to contain_concat__fragment("#{title}-footer") }
|
|
it { is_expected.to contain_nginx__resource__location("#{title}-default") }
|
|
it { is_expected.not_to contain_file("/etc/nginx/fastcgi_params") }
|
|
it { is_expected.to contain_file("#{title}.conf symlink").with({
|
|
'ensure' => 'link',
|
|
'path' => "/etc/nginx/sites-enabled/#{title}.conf",
|
|
'target' => "/etc/nginx/sites-available/#{title}.conf"
|
|
})}
|
|
end
|
|
|
|
describe "vhost_header template content" do
|
|
[
|
|
{
|
|
:title => 'should not contain www to non-www rewrite',
|
|
:attr => 'rewrite_www_to_non_www',
|
|
:value => false,
|
|
:notmatch => %r|
|
|
^
|
|
\s+listen\s+\*:80;\n
|
|
\s+server_name\s+www\.rspec\.example\.com;\n
|
|
\s+return\s+301\s+http://rspec\.example\.com\$uri;
|
|
|x,
|
|
},
|
|
{
|
|
:title => 'should contain www to non-www rewrite',
|
|
:attr => 'rewrite_www_to_non_www',
|
|
:value => true,
|
|
:match => %r|
|
|
^
|
|
\s+listen\s+\*:80;\n
|
|
\s+server_name\s+www\.rspec\.example\.com;\n
|
|
\s+return\s+301\s+http://rspec\.example\.com\$uri;
|
|
|x,
|
|
},
|
|
{
|
|
:title => 'should set the IPv4 listen IP',
|
|
:attr => 'listen_ip',
|
|
:value => '127.0.0.1',
|
|
:match => %r'\s+listen\s+127.0.0.1:80;',
|
|
},
|
|
{
|
|
:title => 'should set the IPv4 listen port',
|
|
:attr => 'listen_port',
|
|
:value => 45,
|
|
:match => %r'\s+listen\s+\*:45;',
|
|
},
|
|
{
|
|
:title => 'should set the IPv4 listen options',
|
|
:attr => 'listen_options',
|
|
:value => 'spdy default',
|
|
:match => %r'\s+listen\s+\*:80 spdy default;',
|
|
},
|
|
{
|
|
:title => 'should enable IPv6',
|
|
:attr => 'ipv6_enable',
|
|
:value => true,
|
|
:match => %r'\s+listen\s+\[::\]:80 default ipv6only=on;',
|
|
},
|
|
{
|
|
:title => 'should not enable IPv6',
|
|
:attr => 'ipv6_enable',
|
|
:value => false,
|
|
:notmatch => %r'\slisten \[::\]:80 default ipv6only=on;',
|
|
},
|
|
{
|
|
:title => 'should set the IPv6 listen IP',
|
|
:attr => 'ipv6_listen_ip',
|
|
:value => '2001:0db8:85a3:0000:0000:8a2e:0370:7334',
|
|
:match => %r'\s+listen\s+\[2001:0db8:85a3:0000:0000:8a2e:0370:7334\]:80 default ipv6only=on;',
|
|
},
|
|
{
|
|
:title => 'should set the IPv6 listen port',
|
|
:attr => 'ipv6_listen_port',
|
|
:value => 45,
|
|
:match => %r'\s+listen\s+\[::\]:45 default ipv6only=on;',
|
|
},
|
|
{
|
|
:title => 'should set the IPv6 listen options',
|
|
:attr => 'ipv6_listen_options',
|
|
:value => 'spdy',
|
|
:match => %r'\s+listen\s+\[::\]:80 spdy;',
|
|
},
|
|
{
|
|
:title => 'should set servername(s)',
|
|
:attr => 'server_name',
|
|
:value => ['www.foo.com','foo.com'],
|
|
:match => %r'\s+server_name\s+www.foo.com foo.com;',
|
|
},
|
|
{
|
|
:title => 'should rewrite www servername to non-www',
|
|
:attr => 'rewrite_www_to_non_www',
|
|
:value => true,
|
|
:match => %r'\s+server_name\s+rspec.example.com;',
|
|
},
|
|
{
|
|
:title => 'should not rewrite www servername to non-www',
|
|
:attr => 'rewrite_www_to_non_www',
|
|
:value => false,
|
|
:match => %r'\s+server_name\s+www.rspec.example.com;',
|
|
},
|
|
{
|
|
:title => 'should set auth_basic',
|
|
:attr => 'auth_basic',
|
|
:value => 'value',
|
|
:match => %r'\s+auth_basic\s+"value";',
|
|
},
|
|
{
|
|
:title => 'should set auth_basic_user_file',
|
|
:attr => 'auth_basic_user_file',
|
|
:value => 'value',
|
|
:match => %r'\s+auth_basic_user_file\s+value;',
|
|
},
|
|
{
|
|
:title => 'should set the client_body_timeout',
|
|
:attr => 'client_body_timeout',
|
|
:value => 'value',
|
|
:match => /^\s+client_body_timeout\s+value;/
|
|
},
|
|
{
|
|
:title => 'should set the client_header_timeout',
|
|
:attr => 'client_header_timeout',
|
|
:value => 'value',
|
|
:match => /^\s+client_header_timeout\s+value;/
|
|
},
|
|
{
|
|
:title => 'should set the gzip_types',
|
|
:attr => 'gzip_types',
|
|
:value => 'value',
|
|
:match => /^\s+gzip_types\s+value;/
|
|
},
|
|
{
|
|
:title => 'should contain raw_prepend directives',
|
|
:attr => 'raw_prepend',
|
|
:value => [
|
|
'if (a) {',
|
|
' b;',
|
|
'}'
|
|
],
|
|
:match => /^\s+if \(a\) {\n\s++b;\n\s+\}/,
|
|
},
|
|
{
|
|
:title => 'should contain ordered prepended directives',
|
|
:attr => 'vhost_cfg_prepend',
|
|
:value => { 'test1' => ['test value 1a', 'test value 1b'], 'test2' => 'test value 2', 'allow' => 'test value 3' },
|
|
:match => [
|
|
' allow test value 3;',
|
|
' test1 test value 1a;',
|
|
' test1 test value 1b;',
|
|
' test2 test value 2;',
|
|
],
|
|
},
|
|
{
|
|
:title => 'should set root',
|
|
:attr => 'use_default_location',
|
|
:value => false,
|
|
:match => ' root /;',
|
|
},
|
|
{
|
|
:title => 'should not set root',
|
|
:attr => 'use_default_location',
|
|
:value => true,
|
|
:notmatch => / root \/;/,
|
|
},
|
|
{
|
|
:title => 'should set proxy_set_header',
|
|
:attr => 'proxy_set_header',
|
|
:value => ['header1','header2'],
|
|
:match => [
|
|
' proxy_set_header header1;',
|
|
' proxy_set_header header2;',
|
|
],
|
|
},
|
|
{
|
|
:title => 'should rewrite to HTTPS',
|
|
:attr => 'rewrite_to_https',
|
|
:value => true,
|
|
:match => [
|
|
' if ($ssl_protocol = "") {',
|
|
' return 301 https://$host$request_uri;',
|
|
],
|
|
},
|
|
{
|
|
:title => 'should not rewrite to HTTPS',
|
|
:attr => 'rewrite_to_https',
|
|
:value => false,
|
|
:notmatch => [
|
|
%r'if \(\$ssl_protocol = ""\) \{',
|
|
%r'\s+return 301 https://\$host\$request_uri;',
|
|
],
|
|
},
|
|
{
|
|
:title => 'should set access_log',
|
|
:attr => 'access_log',
|
|
:value => '/path/to/access.log',
|
|
:match => ' access_log /path/to/access.log;',
|
|
},
|
|
{
|
|
:title => 'should set error_log',
|
|
:attr => 'error_log',
|
|
:value => '/path/to/error.log',
|
|
:match => ' error_log /path/to/error.log;',
|
|
},
|
|
].each do |param|
|
|
context "when #{param[:attr]} is #{param[:value]}" do
|
|
let :params do default_params.merge({ param[:attr].to_sym => param[:value] }) end
|
|
|
|
it { is_expected.to contain_concat__fragment("#{title}-header") }
|
|
it param[:title] do
|
|
matches = Array(param[:match])
|
|
|
|
if matches.all? { |m| m.is_a? Regexp }
|
|
matches.each { |item| is_expected.to contain_concat__fragment("#{title}-header").with_content(item) }
|
|
else
|
|
lines = subject.resource('concat::fragment', "#{title}-header").send(:parameters)[:content].split("\n")
|
|
expect(lines & Array(param[:match])).to eq(Array(param[:match]))
|
|
end
|
|
Array(param[:notmatch]).each do |item|
|
|
is_expected.to contain_concat__fragment("#{title}-header").without_content(item)
|
|
end
|
|
end
|
|
end
|
|
end
|
|
end
|
|
|
|
describe "vhost_footer template content" do
|
|
[
|
|
{
|
|
:title => 'should not contain www to non-www rewrite',
|
|
:attr => 'rewrite_www_to_non_www',
|
|
:value => false,
|
|
:notmatch => %r|
|
|
^
|
|
\s+listen\s+\*:443\s+ssl;\n
|
|
\s+server_name\s+www\.rspec\.example\.com;\n
|
|
\s+return\s+301\s+https://rspec\.example\.com\$uri;
|
|
|x,
|
|
},
|
|
{
|
|
:title => 'should contain include directives',
|
|
:attr => 'include_files',
|
|
:value => [ '/file1', '/file2' ],
|
|
:match => [
|
|
%r'^\s+include\s+/file1;',
|
|
%r'^\s+include\s+/file2;',
|
|
],
|
|
},
|
|
{
|
|
:title => 'should contain ordered appended directives',
|
|
:attr => 'vhost_cfg_append',
|
|
:value => { 'test1' => 'test value 1', 'test2' => ['test value 2a', 'test value 2b'], 'allow' => 'test value 3' },
|
|
:match => [
|
|
' allow test value 3;',
|
|
' test1 test value 1;',
|
|
' test2 test value 2a;',
|
|
' test2 test value 2b;',
|
|
],
|
|
},
|
|
{
|
|
:title => 'should contain raw_append directives',
|
|
:attr => 'raw_append',
|
|
:value => [
|
|
'if (a) {',
|
|
' b;',
|
|
'}'
|
|
],
|
|
:match => /^\s+if \(a\) {\n\s++b;\n\s+\}/,
|
|
},
|
|
].each do |param|
|
|
context "when #{param[:attr]} is #{param[:value]}" do
|
|
let :params do default_params.merge({ param[:attr].to_sym => param[:value] }) end
|
|
|
|
it { is_expected.to contain_concat__fragment("#{title}-footer") }
|
|
it param[:title] do
|
|
matches = Array(param[:match])
|
|
|
|
if matches.all? { |m| m.is_a? Regexp }
|
|
matches.each { |item| is_expected.to contain_concat__fragment("#{title}-footer").with_content(item) }
|
|
else
|
|
lines = subject.resource('concat::fragment', "#{title}-footer").send(:parameters)[:content].split("\n")
|
|
expect(lines & Array(param[:match])).to eq(Array(param[:match]))
|
|
end
|
|
Array(param[:notmatch]).each do |item|
|
|
is_expected.to contain_concat__fragment("#{title}-footer").without_content(item)
|
|
end
|
|
end
|
|
end
|
|
end
|
|
end
|
|
|
|
describe "vhost_ssl_header template content" do
|
|
[
|
|
{
|
|
:title => 'should not contain www to non-www rewrite',
|
|
:attr => 'rewrite_www_to_non_www',
|
|
:value => false,
|
|
:notmatch => %r|
|
|
^
|
|
\s+listen\s+\*:443\s+ssl;\n
|
|
\s+server_name\s+www\.rspec\.example\.com;\n
|
|
\s+return\s+301\s+https://rspec\.example\.com\$uri;
|
|
|x,
|
|
},
|
|
{
|
|
:title => 'should contain www to non-www rewrite',
|
|
:attr => 'rewrite_www_to_non_www',
|
|
:value => true,
|
|
:match => %r|
|
|
^
|
|
\s+listen\s+\*:443\s+ssl;\n
|
|
\s+server_name\s+www\.rspec\.example\.com;\n
|
|
\s+return\s+301\s+https://rspec\.example\.com\$uri;
|
|
|x,
|
|
},
|
|
{
|
|
:title => 'should set the IPv4 listen IP',
|
|
:attr => 'listen_ip',
|
|
:value => '127.0.0.1',
|
|
:match => %r'\s+listen\s+127.0.0.1:443 ssl;',
|
|
},
|
|
{
|
|
:title => 'should set the IPv4 SSL listen port',
|
|
:attr => 'ssl_port',
|
|
:value => 45,
|
|
:match => %r'\s+listen\s+\*:45 ssl;',
|
|
},
|
|
{
|
|
:title => 'should set SPDY',
|
|
:attr => 'spdy',
|
|
:value => 'on',
|
|
:match => %r'\s+listen\s+\*:443 ssl spdy;',
|
|
},
|
|
{
|
|
:title => 'should not set SPDY',
|
|
:attr => 'spdy',
|
|
:value => 'off',
|
|
:match => %r'\s+listen\s+\*:443 ssl;',
|
|
},
|
|
{
|
|
:title => 'should set the IPv4 listen options',
|
|
:attr => 'listen_options',
|
|
:value => 'default',
|
|
:match => %r'\s+listen\s+\*:443 ssl default;',
|
|
},
|
|
{
|
|
:title => 'should enable IPv6',
|
|
:attr => 'ipv6_enable',
|
|
:value => true,
|
|
:match => %r'\s+listen\s+\[::\]:443 ssl default ipv6only=on;',
|
|
},
|
|
{
|
|
:title => 'should disable IPv6',
|
|
:attr => 'ipv6_enable',
|
|
:value => false,
|
|
:notmatch => / listen \[::\]:443 ssl default ipv6only=on;/,
|
|
},
|
|
{
|
|
:title => 'should set the IPv6 listen IP',
|
|
:attr => 'ipv6_listen_ip',
|
|
:value => '2001:0db8:85a3:0000:0000:8a2e:0370:7334',
|
|
:match => %r'\s+listen\s+\[2001:0db8:85a3:0000:0000:8a2e:0370:7334\]:443 ssl default ipv6only=on;',
|
|
},
|
|
{
|
|
:title => 'should set the IPv6 listen port',
|
|
:attr => 'ssl_port',
|
|
:value => 45,
|
|
:match => %r'\s+listen\s+\[::\]:45 ssl default ipv6only=on;',
|
|
},
|
|
{
|
|
:title => 'should set the IPv6 listen options',
|
|
:attr => 'ipv6_listen_options',
|
|
:value => 'spdy default',
|
|
:match => %r'\s+listen\s+\[::\]:443 ssl spdy default;',
|
|
},
|
|
{
|
|
:title => 'should set servername(s)',
|
|
:attr => 'server_name',
|
|
:value => ['www.foo.com','foo.com'],
|
|
:match => %r'\s+server_name\s+www.foo.com foo.com;',
|
|
},
|
|
{
|
|
:title => 'should rewrite www servername to non-www',
|
|
:attr => 'rewrite_www_to_non_www',
|
|
:value => true,
|
|
:match => %r'\s+server_name\s+rspec.example.com;',
|
|
},
|
|
{
|
|
:title => 'should not rewrite www servername to non-www',
|
|
:attr => 'rewrite_www_to_non_www',
|
|
:value => false,
|
|
:match => %r'\s+server_name\s+www.rspec.example.com;',
|
|
},
|
|
{
|
|
:title => 'should set the SSL cache',
|
|
:attr => 'ssl_cache',
|
|
:value => 'shared:SSL:1m',
|
|
:match => %r'\s+ssl_session_cache\s+shared:SSL:1m;',
|
|
},
|
|
{
|
|
:title => 'should set the SSL protocols',
|
|
:attr => 'ssl_protocols',
|
|
:value => 'SSLv3',
|
|
:match => %r'\s+ssl_protocols\s+SSLv3;',
|
|
},
|
|
{
|
|
:title => 'should set the SSL ciphers',
|
|
:attr => 'ssl_ciphers',
|
|
:value => 'HIGH',
|
|
:match => %r'\s+ssl_ciphers\s+HIGH;',
|
|
},
|
|
{
|
|
:title => 'should set auth_basic',
|
|
:attr => 'auth_basic',
|
|
:value => 'value',
|
|
:match => %r'\s+auth_basic\s+"value";',
|
|
},
|
|
{
|
|
:title => 'should set auth_basic_user_file',
|
|
:attr => 'auth_basic_user_file',
|
|
:value => 'value',
|
|
:match => %r'\s+auth_basic_user_file\s+"value";',
|
|
},
|
|
{
|
|
:title => 'should set the client_body_timeout',
|
|
:attr => 'client_body_timeout',
|
|
:value => 'value',
|
|
:match => /^\s+client_body_timeout\s+value;/
|
|
},
|
|
{
|
|
:title => 'should set the client_header_timeout',
|
|
:attr => 'client_header_timeout',
|
|
:value => 'value',
|
|
:match => /^\s+client_header_timeout\s+value;/
|
|
},
|
|
{
|
|
:title => 'should set the gzip_types',
|
|
:attr => 'gzip_types',
|
|
:value => 'value',
|
|
:match => /^\s+gzip_types\s+value;/
|
|
},
|
|
{
|
|
:title => 'should set access_log',
|
|
:attr => 'access_log',
|
|
:value => '/path/to/access.log',
|
|
:match => ' access_log /path/to/access.log;',
|
|
},
|
|
{
|
|
:title => 'should set error_log',
|
|
:attr => 'error_log',
|
|
:value => '/path/to/error.log',
|
|
:match => ' error_log /path/to/error.log;',
|
|
},
|
|
{
|
|
:title => 'should contain raw_prepend directives',
|
|
:attr => 'raw_prepend',
|
|
:value => [
|
|
'if (a) {',
|
|
' b;',
|
|
'}'
|
|
],
|
|
:match => /^\s+if \(a\) {\n\s++b;\n\s+\}/,
|
|
},
|
|
{
|
|
:title => 'should contain ordered prepend directives',
|
|
:attr => 'vhost_cfg_prepend',
|
|
:value => { 'test1' => 'test value 1', 'test2' => ['test value 2a', 'test value 2b'], 'allow' => 'test value 3' },
|
|
:match => [
|
|
' allow test value 3;',
|
|
' test1 test value 1;',
|
|
' test2 test value 2a;',
|
|
' test2 test value 2b;',
|
|
]
|
|
},
|
|
{
|
|
:title => 'should contain ordered ssl prepend directives',
|
|
:attr => 'vhost_cfg_ssl_prepend',
|
|
:value => { 'test1' => 'test value 1', 'test2' => ['test value 2a', 'test value 2b'], 'allow' => 'test value 3' },
|
|
:match => [
|
|
' allow test value 3;',
|
|
' test1 test value 1;',
|
|
' test2 test value 2a;',
|
|
' test2 test value 2b;',
|
|
]
|
|
},
|
|
{
|
|
:title => 'should set root',
|
|
:attr => 'use_default_location',
|
|
:value => false,
|
|
:match => ' root /;',
|
|
},
|
|
{
|
|
:title => 'should not set root',
|
|
:attr => 'use_default_location',
|
|
:value => true,
|
|
:notmatch => / root \/;/,
|
|
},
|
|
].each do |param|
|
|
context "when #{param[:attr]} is #{param[:value]}" do
|
|
let :params do default_params.merge({
|
|
param[:attr].to_sym => param[:value],
|
|
:ssl => true,
|
|
:ssl_key => 'dummy.key',
|
|
:ssl_cert => 'dummy.crt',
|
|
}) end
|
|
it { is_expected.to contain_concat__fragment("#{title}-ssl-header") }
|
|
it param[:title] do
|
|
matches = Array(param[:match])
|
|
|
|
if matches.all? { |m| m.is_a? Regexp }
|
|
matches.each { |item| is_expected.to contain_concat__fragment("#{title}-ssl-header").with_content(item) }
|
|
else
|
|
lines = subject.resource('concat::fragment', "#{title}-ssl-header").send(:parameters)[:content].split("\n")
|
|
expect(lines & Array(param[:match])).to eq(Array(param[:match]))
|
|
end
|
|
Array(param[:notmatch]).each do |item|
|
|
is_expected.to contain_concat__fragment("#{title}-ssl-header").without_content(item)
|
|
end
|
|
end
|
|
end
|
|
end
|
|
end
|
|
|
|
describe "vhost_ssl_footer template content" do
|
|
[
|
|
{
|
|
:title => 'should not contain www to non-www rewrite',
|
|
:attr => 'rewrite_www_to_non_www',
|
|
:value => false,
|
|
:notmatch => %r|
|
|
^
|
|
\s+listen\s+\*:443\s+ssl;\n
|
|
\s+server_name\s+www\.rspec\.example\.com;\n
|
|
\s+return\s+301\s+https://rspec\.example\.com\$uri;
|
|
|x,
|
|
},
|
|
{
|
|
:title => 'should contain include directives',
|
|
:attr => 'include_files',
|
|
:value => [ '/file1', '/file2' ],
|
|
:match => [
|
|
%r'^\s+include\s+/file1;',
|
|
%r'^\s+include\s+/file2;',
|
|
],
|
|
},
|
|
{
|
|
:title => 'should contain ordered appended directives',
|
|
:attr => 'vhost_cfg_append',
|
|
:value => { 'test1' => 'test value 1', 'test2' => 'test value 2', 'allow' => 'test value 3' },
|
|
:match => [
|
|
' allow test value 3;',
|
|
' test1 test value 1;',
|
|
' test2 test value 2;',
|
|
]
|
|
},
|
|
{
|
|
:title => 'should contain raw_append directives',
|
|
:attr => 'raw_append',
|
|
:value => [
|
|
'if (a) {',
|
|
' b;',
|
|
'}'
|
|
],
|
|
:match => /^\s+if \(a\) {\n\s++b;\n\s+\}/,
|
|
},
|
|
{
|
|
:title => 'should contain ordered ssl appended directives',
|
|
:attr => 'vhost_cfg_ssl_append',
|
|
:value => { 'test1' => 'test value 1', 'test2' => ['test value 2a', 'test value 2b'], 'allow' => 'test value 3' },
|
|
:match => [
|
|
' allow test value 3;',
|
|
' test1 test value 1;',
|
|
' test2 test value 2a;',
|
|
' test2 test value 2b;',
|
|
]
|
|
},
|
|
].each do |param|
|
|
context "when #{param[:attr]} is #{param[:value]}" do
|
|
let :params do default_params.merge({
|
|
param[:attr].to_sym => param[:value],
|
|
:ssl => true,
|
|
:ssl_key => 'dummy.key',
|
|
:ssl_cert => 'dummy.crt',
|
|
}) end
|
|
|
|
it { is_expected.to contain_concat__fragment("#{title}-ssl-footer") }
|
|
it param[:title] do
|
|
matches = Array(param[:match])
|
|
|
|
if matches.all? { |m| m.is_a? Regexp }
|
|
matches.each { |item| is_expected.to contain_concat__fragment("#{title}-ssl-footer").with_content(item) }
|
|
else
|
|
lines = subject.resource('concat::fragment', "#{title}-ssl-footer").send(:parameters)[:content].split("\n")
|
|
expect(lines & Array(param[:match])).to eq(Array(param[:match]))
|
|
end
|
|
Array(param[:notmatch]).each do |item|
|
|
is_expected.to contain_concat__fragment("#{title}-ssl-footer").without_content(item)
|
|
end
|
|
end
|
|
end
|
|
end
|
|
end
|
|
|
|
context 'attribute resources' do
|
|
context "with SSL enabled, www rewrite to naked domain with multiple server_names" do
|
|
let :title do 'foo.com' end
|
|
let(:params) do
|
|
{
|
|
:ssl => true,
|
|
:ssl_cert => 'cert',
|
|
:ssl_key => 'key',
|
|
:server_name => %w(www.foo.com bar.foo.com foo.com),
|
|
:use_default_location => false,
|
|
:rewrite_www_to_non_www => true,
|
|
}
|
|
end
|
|
|
|
it "should set the server_name of the rewrite server stanza to the first server_name with 'www.' stripped" do
|
|
is_expected.to contain_concat__fragment("#{title}-ssl-header").with_content(/^\s+server_name\s+foo.com;/)
|
|
end
|
|
end
|
|
|
|
context "with SSL disabled, www rewrite to naked domain with multiple server_names" do
|
|
let :title do 'foo.com' end
|
|
let(:params) do
|
|
{
|
|
:server_name => %w(www.foo.com bar.foo.com foo.com),
|
|
:use_default_location => false,
|
|
:rewrite_www_to_non_www => true,
|
|
}
|
|
end
|
|
|
|
it "should set the server_name of the rewrite server stanza to the first server_name with 'www.' stripped" do
|
|
is_expected.to contain_concat__fragment("#{title}-header").with_content(/^\s+server_name\s+foo.com;/)
|
|
end
|
|
end
|
|
|
|
context "SSL cert missing" do
|
|
let(:params) {{ :ssl => true, :ssl_key => 'key' }}
|
|
|
|
it { expect { is_expected.to contain_class('nginx::resource::vhost') }.to raise_error(Puppet::Error) }
|
|
end
|
|
|
|
context "SSL key missing" do
|
|
let(:params) {{ :ssl => true, :ssl_cert => 'cert' }}
|
|
|
|
it { expect { is_expected.to contain_class('nginx::resource::vhost') }.to raise_error(Puppet::Error) }
|
|
end
|
|
|
|
context 'when use_default_location => true' do
|
|
let :params do default_params.merge({
|
|
:use_default_location => true,
|
|
}) end
|
|
|
|
it { is_expected.to contain_nginx__resource__location("#{title}-default") }
|
|
end
|
|
|
|
context 'when use_default_location => false' do
|
|
let :params do default_params.merge({
|
|
:use_default_location => false,
|
|
}) end
|
|
|
|
it { is_expected.not_to contain_nginx__resource__location("#{title}-default") }
|
|
end
|
|
|
|
context 'when location_cfg_prepend => { key => value }' do
|
|
let :params do default_params.merge({
|
|
:location_cfg_prepend => { 'key' => 'value' },
|
|
}) end
|
|
|
|
it { is_expected.to contain_nginx__resource__location("#{title}-default").with_location_cfg_prepend({ 'key' => 'value' }) }
|
|
end
|
|
|
|
context "when location_raw_prepend => [ 'foo;' ]" do
|
|
let :params do default_params.merge({
|
|
:location_raw_prepend => [ 'foo;' ],
|
|
}) end
|
|
|
|
it { is_expected.to contain_nginx__resource__location("#{title}-default").with_raw_prepend([ 'foo;' ]) }
|
|
end
|
|
|
|
context "when location_raw_append => [ 'foo;' ]" do
|
|
let :params do default_params.merge({
|
|
:location_raw_append => [ 'foo;' ],
|
|
}) end
|
|
|
|
it { is_expected.to contain_nginx__resource__location("#{title}-default").with_raw_append([ 'foo;' ]) }
|
|
end
|
|
|
|
context 'when location_cfg_append => { key => value }' do
|
|
let :params do default_params.merge({
|
|
:location_cfg_append => { 'key' => 'value' },
|
|
}) end
|
|
|
|
it { is_expected.to contain_nginx__resource__location("#{title}-default").with_location_cfg_append({ 'key' => 'value' }) }
|
|
end
|
|
|
|
context 'when fastcgi => "localhost:9000"' do
|
|
let :params do default_params.merge({
|
|
:fastcgi => 'localhost:9000',
|
|
}) end
|
|
|
|
it { is_expected.to contain_file('/etc/nginx/fastcgi_params').with_mode('0770') }
|
|
end
|
|
|
|
context 'when listen_port == ssl_port' do
|
|
let :params do default_params.merge({
|
|
:listen_port => 80,
|
|
:ssl_port => 80,
|
|
}) end
|
|
|
|
it { is_expected.not_to contain_concat__fragment("#{title}-header") }
|
|
it { is_expected.not_to contain_concat__fragment("#{title}-footer") }
|
|
end
|
|
|
|
context 'when listen_port != ssl_port' do
|
|
let :params do default_params.merge({
|
|
:listen_port => 80,
|
|
:ssl_port => 443,
|
|
}) end
|
|
|
|
it { is_expected.to contain_concat__fragment("#{title}-header") }
|
|
it { is_expected.to contain_concat__fragment("#{title}-footer") }
|
|
end
|
|
|
|
context 'when ensure => absent' do
|
|
let :params do default_params.merge({
|
|
:ensure => 'absent',
|
|
:ssl => true,
|
|
:ssl_key => 'dummy.key',
|
|
:ssl_cert => 'dummy.cert',
|
|
}) end
|
|
|
|
it { is_expected.to contain_nginx__resource__location("#{title}-default").with_ensure('absent') }
|
|
it { is_expected.to contain_file("#{title}.conf symlink").with_ensure('absent') }
|
|
end
|
|
|
|
context 'when ssl => true and ssl_port == listen_port' do
|
|
let :params do default_params.merge({
|
|
:ssl => true,
|
|
:listen_port => 80,
|
|
:ssl_port => 80,
|
|
:ssl_key => 'dummy.key',
|
|
:ssl_cert => 'dummy.cert',
|
|
}) end
|
|
|
|
it { is_expected.to contain_nginx__resource__location("#{title}-default").with_ssl_only(true) }
|
|
it { is_expected.to contain_concat__fragment("#{title}-ssl-header").with_content(%r{access_log\s+/var/log/nginx/ssl-www\.rspec\.example\.com\.access\.log}) }
|
|
it { is_expected.to contain_concat__fragment("#{title}-ssl-header").with_content(%r{error_log\s+/var/log/nginx/ssl-www\.rspec\.example\.com\.error\.log}) }
|
|
it { is_expected.to contain_concat__fragment("#{title}-ssl-footer") }
|
|
it { is_expected.to contain_file("/etc/nginx/#{title}.crt") }
|
|
it { is_expected.to contain_file("/etc/nginx/#{title}.key") }
|
|
end
|
|
|
|
context 'when passenger_cgi_param is set' do
|
|
let :params do default_params.merge({
|
|
:passenger_cgi_param => { 'test1' => 'test value 1', 'test2' => 'test value 2', 'test3' => 'test value 3' }
|
|
}) end
|
|
|
|
it { is_expected.to contain_concat__fragment("#{title}-header").with_content( /passenger_set_cgi_param test1 test value 1;/ ) }
|
|
it { is_expected.to contain_concat__fragment("#{title}-header").with_content( /passenger_set_cgi_param test2 test value 2;/ ) }
|
|
it { is_expected.to contain_concat__fragment("#{title}-header").with_content( /passenger_set_cgi_param test3 test value 3;/ ) }
|
|
end
|
|
|
|
context 'when passenger_cgi_param is set and ssl => true' do
|
|
let :params do default_params.merge({
|
|
:passenger_cgi_param => { 'test1' => 'test value 1', 'test2' => 'test value 2', 'test3' => 'test value 3' },
|
|
:ssl => true,
|
|
:ssl_key => 'dummy.key',
|
|
:ssl_cert => 'dummy.cert',
|
|
}) end
|
|
|
|
it { is_expected.to contain_concat__fragment("#{title}-ssl-header").with_content( /passenger_set_cgi_param test1 test value 1;/ ) }
|
|
it { is_expected.to contain_concat__fragment("#{title}-ssl-header").with_content( /passenger_set_cgi_param test2 test value 2;/ ) }
|
|
it { is_expected.to contain_concat__fragment("#{title}-ssl-header").with_content( /passenger_set_cgi_param test3 test value 3;/ ) }
|
|
end
|
|
|
|
context 'when vhost name is sanitized' do
|
|
let :title do 'www rspec-vhost com' end
|
|
let :params do default_params end
|
|
|
|
it { is_expected.to contain_concat('/etc/nginx/sites-available/www_rspec-vhost_com.conf') }
|
|
end
|
|
end
|
|
end
|
|
end
|