9a30d3a309
Puppetlabs-mysql 0.6.1 correctly removes the local ::1 root user in the account_security manifest. Upgrade to this version to take advantage of that. Do not upgrade to latest version (0.9.0) to minimize delta that needs testing. Change-Id: Ic8265733f1159f34ae0afcccdea4c7d8cd44e3cb
60 lines
1.6 KiB
Puppet
60 lines
1.6 KiB
Puppet
# == Class: openstack_project::wiki
|
|
#
|
|
class openstack_project::wiki (
|
|
$mysql_root_password = '',
|
|
$sysadmins = [],
|
|
$ssl_cert_file_contents = '',
|
|
$ssl_key_file_contents = '',
|
|
$ssl_chain_file_contents = ''
|
|
) {
|
|
|
|
include openssl
|
|
include subversion
|
|
|
|
class { 'openstack_project::server':
|
|
iptables_public_tcp_ports => [80, 443],
|
|
sysadmins => $sysadmins,
|
|
}
|
|
|
|
realize (
|
|
User::Virtual::Localuser['rlane'],
|
|
)
|
|
|
|
class { 'mediawiki':
|
|
role => 'all',
|
|
mediawiki_location => '/srv/mediawiki/w',
|
|
mediawiki_images_location => '/srv/mediawiki/images',
|
|
site_hostname => $::fqdn,
|
|
ssl_cert_file => "/etc/ssl/certs/${::fqdn}.pem",
|
|
ssl_key_file => "/etc/ssl/private/${::fqdn}.key",
|
|
ssl_chain_file => '/etc/ssl/certs/intermediate.pem',
|
|
ssl_cert_file_contents => $ssl_cert_file_contents,
|
|
ssl_key_file_contents => $ssl_key_file_contents,
|
|
ssl_chain_file_contents => $ssl_chain_file_contents,
|
|
}
|
|
class { 'memcached':
|
|
max_memory => 2048,
|
|
listen_ip => '127.0.0.1',
|
|
tcp_port => 11000,
|
|
udp_port => 11000,
|
|
}
|
|
class { 'mysql::server':
|
|
config_hash => {
|
|
'root_password' => $mysql_root_password,
|
|
'default_engine' => 'InnoDB',
|
|
'bind_address' => '127.0.0.1',
|
|
}
|
|
}
|
|
include mysql::server::account_security
|
|
|
|
mysql_backup::backup { 'wiki':
|
|
require => Class['mysql::server'],
|
|
}
|
|
|
|
include bup
|
|
bup::site { 'rs-ord':
|
|
backup_user => 'bup-wiki',
|
|
backup_server => 'ci-backup-rs-ord.openstack.org',
|
|
}
|
|
}
|