other/Puppet: modules/apache/manifests/params.pp annotate

annotate modules/apache/manifests/params.pp @ 275:d9352a684e62

Mass update of modules to remove deprecation warnings

author	IBBoard <dev@ibboard.co.uk>
date	Sun, 26 Jan 2020 11:36:07 +0000
parents	675c1cc61eaf
children	b8d6ada284dd

rev	line source
275 d9352a684e62 Mass update of modules to remove deprecation warnings IBBoard <dev@ibboard.co.uk> parents: 257 diff changeset	1 # @summary
d9352a684e62 Mass update of modules to remove deprecation warnings IBBoard <dev@ibboard.co.uk> parents: 257 diff changeset	2 # This class manages Apache parameters
0 956e484adc12 Initial public release of Puppet configs IBBoard <dev@ibboard.co.uk> parents: diff changeset	3 #
275 d9352a684e62 Mass update of modules to remove deprecation warnings IBBoard <dev@ibboard.co.uk> parents: 257 diff changeset	4 # @api private
0 956e484adc12 Initial public release of Puppet configs IBBoard <dev@ibboard.co.uk> parents: diff changeset	5 class apache::params inherits ::apache::version {
956e484adc12 Initial public release of Puppet configs IBBoard <dev@ibboard.co.uk> parents: diff changeset	6 if($::fqdn) {
956e484adc12 Initial public release of Puppet configs IBBoard <dev@ibboard.co.uk> parents: diff changeset	7 $servername = $::fqdn
956e484adc12 Initial public release of Puppet configs IBBoard <dev@ibboard.co.uk> parents: diff changeset	8 } else {
956e484adc12 Initial public release of Puppet configs IBBoard <dev@ibboard.co.uk> parents: diff changeset	9 $servername = $::hostname
956e484adc12 Initial public release of Puppet configs IBBoard <dev@ibboard.co.uk> parents: diff changeset	10 }
956e484adc12 Initial public release of Puppet configs IBBoard <dev@ibboard.co.uk> parents: diff changeset	11
956e484adc12 Initial public release of Puppet configs IBBoard <dev@ibboard.co.uk> parents: diff changeset	12 # The default error log level
956e484adc12 Initial public release of Puppet configs IBBoard <dev@ibboard.co.uk> parents: diff changeset	13 $log_level = 'warn'
36 37675581a273 Update Puppet module for Apache (pulls in concat module) IBBoard <dev@ibboard.co.uk> parents: 0 diff changeset	14 $use_optional_includes = false
0 956e484adc12 Initial public release of Puppet configs IBBoard <dev@ibboard.co.uk> parents: diff changeset	15
257 675c1cc61eaf Update Apache module to get CentOS 8 support IBBoard <dev@ibboard.co.uk> parents: 36 diff changeset	16 # Default mime types settings
675c1cc61eaf Update Apache module to get CentOS 8 support IBBoard <dev@ibboard.co.uk> parents: 36 diff changeset	17 $mime_types_additional = {
675c1cc61eaf Update Apache module to get CentOS 8 support IBBoard <dev@ibboard.co.uk> parents: 36 diff changeset	18 'AddHandler' => { 'type-map' => 'var', },
675c1cc61eaf Update Apache module to get CentOS 8 support IBBoard <dev@ibboard.co.uk> parents: 36 diff changeset	19 'AddType' => { 'text/html' => '.shtml', },
675c1cc61eaf Update Apache module to get CentOS 8 support IBBoard <dev@ibboard.co.uk> parents: 36 diff changeset	20 'AddOutputFilter' => { 'INCLUDES' => '.shtml', },
675c1cc61eaf Update Apache module to get CentOS 8 support IBBoard <dev@ibboard.co.uk> parents: 36 diff changeset	21 }
675c1cc61eaf Update Apache module to get CentOS 8 support IBBoard <dev@ibboard.co.uk> parents: 36 diff changeset	22
675c1cc61eaf Update Apache module to get CentOS 8 support IBBoard <dev@ibboard.co.uk> parents: 36 diff changeset	23 # should we use systemd module?
675c1cc61eaf Update Apache module to get CentOS 8 support IBBoard <dev@ibboard.co.uk> parents: 36 diff changeset	24 $use_systemd = true
675c1cc61eaf Update Apache module to get CentOS 8 support IBBoard <dev@ibboard.co.uk> parents: 36 diff changeset	25
675c1cc61eaf Update Apache module to get CentOS 8 support IBBoard <dev@ibboard.co.uk> parents: 36 diff changeset	26 # Default mode for files
675c1cc61eaf Update Apache module to get CentOS 8 support IBBoard <dev@ibboard.co.uk> parents: 36 diff changeset	27 $file_mode = '0644'
675c1cc61eaf Update Apache module to get CentOS 8 support IBBoard <dev@ibboard.co.uk> parents: 36 diff changeset	28
275 d9352a684e62 Mass update of modules to remove deprecation warnings IBBoard <dev@ibboard.co.uk> parents: 257 diff changeset	29 # The default value for host hame lookup
d9352a684e62 Mass update of modules to remove deprecation warnings IBBoard <dev@ibboard.co.uk> parents: 257 diff changeset	30 $hostname_lookups = 'Off'
d9352a684e62 Mass update of modules to remove deprecation warnings IBBoard <dev@ibboard.co.uk> parents: 257 diff changeset	31
257 675c1cc61eaf Update Apache module to get CentOS 8 support IBBoard <dev@ibboard.co.uk> parents: 36 diff changeset	32 # Default options for / directory
675c1cc61eaf Update Apache module to get CentOS 8 support IBBoard <dev@ibboard.co.uk> parents: 36 diff changeset	33 $root_directory_options = ['FollowSymLinks']
675c1cc61eaf Update Apache module to get CentOS 8 support IBBoard <dev@ibboard.co.uk> parents: 36 diff changeset	34
675c1cc61eaf Update Apache module to get CentOS 8 support IBBoard <dev@ibboard.co.uk> parents: 36 diff changeset	35 $vhost_include_pattern = '*'
675c1cc61eaf Update Apache module to get CentOS 8 support IBBoard <dev@ibboard.co.uk> parents: 36 diff changeset	36
675c1cc61eaf Update Apache module to get CentOS 8 support IBBoard <dev@ibboard.co.uk> parents: 36 diff changeset	37 $modsec_audit_log_parts = 'ABIJDEFHZ'
675c1cc61eaf Update Apache module to get CentOS 8 support IBBoard <dev@ibboard.co.uk> parents: 36 diff changeset	38
675c1cc61eaf Update Apache module to get CentOS 8 support IBBoard <dev@ibboard.co.uk> parents: 36 diff changeset	39 # no client certs should be trusted for auth by default.
675c1cc61eaf Update Apache module to get CentOS 8 support IBBoard <dev@ibboard.co.uk> parents: 36 diff changeset	40 $ssl_certs_dir = undef
675c1cc61eaf Update Apache module to get CentOS 8 support IBBoard <dev@ibboard.co.uk> parents: 36 diff changeset	41
275 d9352a684e62 Mass update of modules to remove deprecation warnings IBBoard <dev@ibboard.co.uk> parents: 257 diff changeset	42 if ($::apache::version::scl_httpd_version) {
d9352a684e62 Mass update of modules to remove deprecation warnings IBBoard <dev@ibboard.co.uk> parents: 257 diff changeset	43 if $::apache::version::scl_php_version == undef {
d9352a684e62 Mass update of modules to remove deprecation warnings IBBoard <dev@ibboard.co.uk> parents: 257 diff changeset	44 fail('If you define apache::version::scl_httpd_version, you also need to specify apache::version::scl_php_version')
d9352a684e62 Mass update of modules to remove deprecation warnings IBBoard <dev@ibboard.co.uk> parents: 257 diff changeset	45 }
d9352a684e62 Mass update of modules to remove deprecation warnings IBBoard <dev@ibboard.co.uk> parents: 257 diff changeset	46 $_scl_httpd_version_nodot = regsubst($::apache::version::scl_httpd_version, '\.', '')
d9352a684e62 Mass update of modules to remove deprecation warnings IBBoard <dev@ibboard.co.uk> parents: 257 diff changeset	47 $_scl_httpd_name = "httpd${_scl_httpd_version_nodot}"
d9352a684e62 Mass update of modules to remove deprecation warnings IBBoard <dev@ibboard.co.uk> parents: 257 diff changeset	48
d9352a684e62 Mass update of modules to remove deprecation warnings IBBoard <dev@ibboard.co.uk> parents: 257 diff changeset	49 $_scl_php_version_no_dot = regsubst($::apache::version::scl_php_version, '\.', '')
0 956e484adc12 Initial public release of Puppet configs IBBoard <dev@ibboard.co.uk> parents: diff changeset	50 $user = 'apache'
956e484adc12 Initial public release of Puppet configs IBBoard <dev@ibboard.co.uk> parents: diff changeset	51 $group = 'apache'
956e484adc12 Initial public release of Puppet configs IBBoard <dev@ibboard.co.uk> parents: diff changeset	52 $root_group = 'root'
275 d9352a684e62 Mass update of modules to remove deprecation warnings IBBoard <dev@ibboard.co.uk> parents: 257 diff changeset	53 $apache_name = "${_scl_httpd_name}-httpd"
d9352a684e62 Mass update of modules to remove deprecation warnings IBBoard <dev@ibboard.co.uk> parents: 257 diff changeset	54 $service_name = "${_scl_httpd_name}-httpd"
d9352a684e62 Mass update of modules to remove deprecation warnings IBBoard <dev@ibboard.co.uk> parents: 257 diff changeset	55 $httpd_root = "/opt/rh/${_scl_httpd_name}/root"
d9352a684e62 Mass update of modules to remove deprecation warnings IBBoard <dev@ibboard.co.uk> parents: 257 diff changeset	56 $httpd_dir = "${httpd_root}/etc/httpd"
d9352a684e62 Mass update of modules to remove deprecation warnings IBBoard <dev@ibboard.co.uk> parents: 257 diff changeset	57 $server_root = "${httpd_root}/etc/httpd"
0 956e484adc12 Initial public release of Puppet configs IBBoard <dev@ibboard.co.uk> parents: diff changeset	58 $conf_dir = "${httpd_dir}/conf"
956e484adc12 Initial public release of Puppet configs IBBoard <dev@ibboard.co.uk> parents: diff changeset	59 $confd_dir = "${httpd_dir}/conf.d"
257 675c1cc61eaf Update Apache module to get CentOS 8 support IBBoard <dev@ibboard.co.uk> parents: 36 diff changeset	60 $mod_dir = $::apache::version::distrelease ? {
675c1cc61eaf Update Apache module to get CentOS 8 support IBBoard <dev@ibboard.co.uk> parents: 36 diff changeset	61 '7' => "${httpd_dir}/conf.modules.d",
675c1cc61eaf Update Apache module to get CentOS 8 support IBBoard <dev@ibboard.co.uk> parents: 36 diff changeset	62 default => "${httpd_dir}/conf.d",
675c1cc61eaf Update Apache module to get CentOS 8 support IBBoard <dev@ibboard.co.uk> parents: 36 diff changeset	63 }
36 37675581a273 Update Puppet module for Apache (pulls in concat module) IBBoard <dev@ibboard.co.uk> parents: 0 diff changeset	64 $mod_enable_dir = undef
0 956e484adc12 Initial public release of Puppet configs IBBoard <dev@ibboard.co.uk> parents: diff changeset	65 $vhost_dir = "${httpd_dir}/conf.d"
36 37675581a273 Update Puppet module for Apache (pulls in concat module) IBBoard <dev@ibboard.co.uk> parents: 0 diff changeset	66 $vhost_enable_dir = undef
0 956e484adc12 Initial public release of Puppet configs IBBoard <dev@ibboard.co.uk> parents: diff changeset	67 $conf_file = 'httpd.conf'
275 d9352a684e62 Mass update of modules to remove deprecation warnings IBBoard <dev@ibboard.co.uk> parents: 257 diff changeset	68 $conf_enabled = undef
d9352a684e62 Mass update of modules to remove deprecation warnings IBBoard <dev@ibboard.co.uk> parents: 257 diff changeset	69 $ports_file = "${conf_dir}/ports.conf"
d9352a684e62 Mass update of modules to remove deprecation warnings IBBoard <dev@ibboard.co.uk> parents: 257 diff changeset	70 $pidfile = 'run/httpd.pid'
d9352a684e62 Mass update of modules to remove deprecation warnings IBBoard <dev@ibboard.co.uk> parents: 257 diff changeset	71 $logroot = "/var/log/${_scl_httpd_name}"
d9352a684e62 Mass update of modules to remove deprecation warnings IBBoard <dev@ibboard.co.uk> parents: 257 diff changeset	72 $logroot_mode = undef
d9352a684e62 Mass update of modules to remove deprecation warnings IBBoard <dev@ibboard.co.uk> parents: 257 diff changeset	73 $lib_path = 'modules'
d9352a684e62 Mass update of modules to remove deprecation warnings IBBoard <dev@ibboard.co.uk> parents: 257 diff changeset	74 $mpm_module = 'prefork'
d9352a684e62 Mass update of modules to remove deprecation warnings IBBoard <dev@ibboard.co.uk> parents: 257 diff changeset	75 $dev_packages = "${_scl_httpd_name}-httpd-devel"
d9352a684e62 Mass update of modules to remove deprecation warnings IBBoard <dev@ibboard.co.uk> parents: 257 diff changeset	76 $default_ssl_cert = '/etc/pki/tls/certs/localhost.crt'
d9352a684e62 Mass update of modules to remove deprecation warnings IBBoard <dev@ibboard.co.uk> parents: 257 diff changeset	77 $default_ssl_key = '/etc/pki/tls/private/localhost.key'
d9352a684e62 Mass update of modules to remove deprecation warnings IBBoard <dev@ibboard.co.uk> parents: 257 diff changeset	78 $ssl_sessioncache = '/var/cache/mod_ssl/scache(512000)'
d9352a684e62 Mass update of modules to remove deprecation warnings IBBoard <dev@ibboard.co.uk> parents: 257 diff changeset	79 $passenger_conf_file = 'passenger_extra.conf'
d9352a684e62 Mass update of modules to remove deprecation warnings IBBoard <dev@ibboard.co.uk> parents: 257 diff changeset	80 $passenger_conf_package_file = 'passenger.conf'
d9352a684e62 Mass update of modules to remove deprecation warnings IBBoard <dev@ibboard.co.uk> parents: 257 diff changeset	81 $passenger_root = undef
d9352a684e62 Mass update of modules to remove deprecation warnings IBBoard <dev@ibboard.co.uk> parents: 257 diff changeset	82 $passenger_ruby = undef
d9352a684e62 Mass update of modules to remove deprecation warnings IBBoard <dev@ibboard.co.uk> parents: 257 diff changeset	83 $passenger_default_ruby = undef
d9352a684e62 Mass update of modules to remove deprecation warnings IBBoard <dev@ibboard.co.uk> parents: 257 diff changeset	84 $suphp_addhandler = 'php5-script'
d9352a684e62 Mass update of modules to remove deprecation warnings IBBoard <dev@ibboard.co.uk> parents: 257 diff changeset	85 $suphp_engine = 'off'
d9352a684e62 Mass update of modules to remove deprecation warnings IBBoard <dev@ibboard.co.uk> parents: 257 diff changeset	86 $suphp_configpath = undef
d9352a684e62 Mass update of modules to remove deprecation warnings IBBoard <dev@ibboard.co.uk> parents: 257 diff changeset	87 $php_version = $::apache::version::scl_php_version
d9352a684e62 Mass update of modules to remove deprecation warnings IBBoard <dev@ibboard.co.uk> parents: 257 diff changeset	88 $mod_packages = {
d9352a684e62 Mass update of modules to remove deprecation warnings IBBoard <dev@ibboard.co.uk> parents: 257 diff changeset	89 'authnz_ldap' => "${_scl_httpd_name}-mod_ldap",
d9352a684e62 Mass update of modules to remove deprecation warnings IBBoard <dev@ibboard.co.uk> parents: 257 diff changeset	90 'ldap' => "${_scl_httpd_name}-mod_ldap",
d9352a684e62 Mass update of modules to remove deprecation warnings IBBoard <dev@ibboard.co.uk> parents: 257 diff changeset	91 "php${::apache::version::scl_php_version}" => "rh-php${_scl_php_version_no_dot}-php",
d9352a684e62 Mass update of modules to remove deprecation warnings IBBoard <dev@ibboard.co.uk> parents: 257 diff changeset	92 'ssl' => "${_scl_httpd_name}-mod_ssl",
d9352a684e62 Mass update of modules to remove deprecation warnings IBBoard <dev@ibboard.co.uk> parents: 257 diff changeset	93 }
d9352a684e62 Mass update of modules to remove deprecation warnings IBBoard <dev@ibboard.co.uk> parents: 257 diff changeset	94 $mod_libs = {
d9352a684e62 Mass update of modules to remove deprecation warnings IBBoard <dev@ibboard.co.uk> parents: 257 diff changeset	95 'nss' => 'libmodnss.so',
d9352a684e62 Mass update of modules to remove deprecation warnings IBBoard <dev@ibboard.co.uk> parents: 257 diff changeset	96 }
d9352a684e62 Mass update of modules to remove deprecation warnings IBBoard <dev@ibboard.co.uk> parents: 257 diff changeset	97 $conf_template = 'apache/httpd.conf.erb'
d9352a684e62 Mass update of modules to remove deprecation warnings IBBoard <dev@ibboard.co.uk> parents: 257 diff changeset	98 $http_protocol_options = undef
d9352a684e62 Mass update of modules to remove deprecation warnings IBBoard <dev@ibboard.co.uk> parents: 257 diff changeset	99 $keepalive = 'On'
d9352a684e62 Mass update of modules to remove deprecation warnings IBBoard <dev@ibboard.co.uk> parents: 257 diff changeset	100 $keepalive_timeout = 15
d9352a684e62 Mass update of modules to remove deprecation warnings IBBoard <dev@ibboard.co.uk> parents: 257 diff changeset	101 $max_keepalive_requests = 100
d9352a684e62 Mass update of modules to remove deprecation warnings IBBoard <dev@ibboard.co.uk> parents: 257 diff changeset	102 $fastcgi_lib_path = undef
d9352a684e62 Mass update of modules to remove deprecation warnings IBBoard <dev@ibboard.co.uk> parents: 257 diff changeset	103 $mime_support_package = 'mailcap'
d9352a684e62 Mass update of modules to remove deprecation warnings IBBoard <dev@ibboard.co.uk> parents: 257 diff changeset	104 $mime_types_config = '/etc/mime.types'
d9352a684e62 Mass update of modules to remove deprecation warnings IBBoard <dev@ibboard.co.uk> parents: 257 diff changeset	105 $docroot = "${httpd_root}/var/www/html"
d9352a684e62 Mass update of modules to remove deprecation warnings IBBoard <dev@ibboard.co.uk> parents: 257 diff changeset	106 $alias_icons_path = $::apache::version::distrelease ? {
d9352a684e62 Mass update of modules to remove deprecation warnings IBBoard <dev@ibboard.co.uk> parents: 257 diff changeset	107 '7' => "${httpd_root}/usr/share/httpd/icons",
d9352a684e62 Mass update of modules to remove deprecation warnings IBBoard <dev@ibboard.co.uk> parents: 257 diff changeset	108 default => '/var/www/icons',
d9352a684e62 Mass update of modules to remove deprecation warnings IBBoard <dev@ibboard.co.uk> parents: 257 diff changeset	109 }
d9352a684e62 Mass update of modules to remove deprecation warnings IBBoard <dev@ibboard.co.uk> parents: 257 diff changeset	110 $error_documents_path = $::apache::version::distrelease ? {
d9352a684e62 Mass update of modules to remove deprecation warnings IBBoard <dev@ibboard.co.uk> parents: 257 diff changeset	111 '7' => "${httpd_root}/usr/share/httpd/error",
d9352a684e62 Mass update of modules to remove deprecation warnings IBBoard <dev@ibboard.co.uk> parents: 257 diff changeset	112 default => '/var/www/error'
d9352a684e62 Mass update of modules to remove deprecation warnings IBBoard <dev@ibboard.co.uk> parents: 257 diff changeset	113 }
d9352a684e62 Mass update of modules to remove deprecation warnings IBBoard <dev@ibboard.co.uk> parents: 257 diff changeset	114 if $::osfamily == 'RedHat' {
d9352a684e62 Mass update of modules to remove deprecation warnings IBBoard <dev@ibboard.co.uk> parents: 257 diff changeset	115 $wsgi_socket_prefix = '/var/run/wsgi'
d9352a684e62 Mass update of modules to remove deprecation warnings IBBoard <dev@ibboard.co.uk> parents: 257 diff changeset	116 } else {
d9352a684e62 Mass update of modules to remove deprecation warnings IBBoard <dev@ibboard.co.uk> parents: 257 diff changeset	117 $wsgi_socket_prefix = undef
d9352a684e62 Mass update of modules to remove deprecation warnings IBBoard <dev@ibboard.co.uk> parents: 257 diff changeset	118 }
d9352a684e62 Mass update of modules to remove deprecation warnings IBBoard <dev@ibboard.co.uk> parents: 257 diff changeset	119 $cas_cookie_path = '/var/cache/mod_auth_cas/'
d9352a684e62 Mass update of modules to remove deprecation warnings IBBoard <dev@ibboard.co.uk> parents: 257 diff changeset	120 $mellon_lock_file = '/run/mod_auth_mellon/lock'
d9352a684e62 Mass update of modules to remove deprecation warnings IBBoard <dev@ibboard.co.uk> parents: 257 diff changeset	121 $mellon_cache_size = 100
d9352a684e62 Mass update of modules to remove deprecation warnings IBBoard <dev@ibboard.co.uk> parents: 257 diff changeset	122 $mellon_post_directory = undef
d9352a684e62 Mass update of modules to remove deprecation warnings IBBoard <dev@ibboard.co.uk> parents: 257 diff changeset	123 $modsec_version = 1
d9352a684e62 Mass update of modules to remove deprecation warnings IBBoard <dev@ibboard.co.uk> parents: 257 diff changeset	124 $modsec_crs_package = 'mod_security_crs'
d9352a684e62 Mass update of modules to remove deprecation warnings IBBoard <dev@ibboard.co.uk> parents: 257 diff changeset	125 $modsec_crs_path = '/usr/lib/modsecurity.d'
d9352a684e62 Mass update of modules to remove deprecation warnings IBBoard <dev@ibboard.co.uk> parents: 257 diff changeset	126 $modsec_dir = '/etc/httpd/modsecurity.d'
d9352a684e62 Mass update of modules to remove deprecation warnings IBBoard <dev@ibboard.co.uk> parents: 257 diff changeset	127 $secpcrematchlimit = 1500
d9352a684e62 Mass update of modules to remove deprecation warnings IBBoard <dev@ibboard.co.uk> parents: 257 diff changeset	128 $secpcrematchlimitrecursion = 1500
d9352a684e62 Mass update of modules to remove deprecation warnings IBBoard <dev@ibboard.co.uk> parents: 257 diff changeset	129 $modsec_secruleengine = 'On'
d9352a684e62 Mass update of modules to remove deprecation warnings IBBoard <dev@ibboard.co.uk> parents: 257 diff changeset	130 $modsec_default_rules = [
d9352a684e62 Mass update of modules to remove deprecation warnings IBBoard <dev@ibboard.co.uk> parents: 257 diff changeset	131 'base_rules/modsecurity_35_bad_robots.data',
d9352a684e62 Mass update of modules to remove deprecation warnings IBBoard <dev@ibboard.co.uk> parents: 257 diff changeset	132 'base_rules/modsecurity_35_scanners.data',
d9352a684e62 Mass update of modules to remove deprecation warnings IBBoard <dev@ibboard.co.uk> parents: 257 diff changeset	133 'base_rules/modsecurity_40_generic_attacks.data',
d9352a684e62 Mass update of modules to remove deprecation warnings IBBoard <dev@ibboard.co.uk> parents: 257 diff changeset	134 'base_rules/modsecurity_50_outbound.data',
d9352a684e62 Mass update of modules to remove deprecation warnings IBBoard <dev@ibboard.co.uk> parents: 257 diff changeset	135 'base_rules/modsecurity_50_outbound_malware.data',
d9352a684e62 Mass update of modules to remove deprecation warnings IBBoard <dev@ibboard.co.uk> parents: 257 diff changeset	136 'base_rules/modsecurity_crs_20_protocol_violations.conf',
d9352a684e62 Mass update of modules to remove deprecation warnings IBBoard <dev@ibboard.co.uk> parents: 257 diff changeset	137 'base_rules/modsecurity_crs_21_protocol_anomalies.conf',
d9352a684e62 Mass update of modules to remove deprecation warnings IBBoard <dev@ibboard.co.uk> parents: 257 diff changeset	138 'base_rules/modsecurity_crs_23_request_limits.conf',
d9352a684e62 Mass update of modules to remove deprecation warnings IBBoard <dev@ibboard.co.uk> parents: 257 diff changeset	139 'base_rules/modsecurity_crs_30_http_policy.conf',
d9352a684e62 Mass update of modules to remove deprecation warnings IBBoard <dev@ibboard.co.uk> parents: 257 diff changeset	140 'base_rules/modsecurity_crs_35_bad_robots.conf',
d9352a684e62 Mass update of modules to remove deprecation warnings IBBoard <dev@ibboard.co.uk> parents: 257 diff changeset	141 'base_rules/modsecurity_crs_40_generic_attacks.conf',
d9352a684e62 Mass update of modules to remove deprecation warnings IBBoard <dev@ibboard.co.uk> parents: 257 diff changeset	142 'base_rules/modsecurity_crs_41_sql_injection_attacks.conf',
d9352a684e62 Mass update of modules to remove deprecation warnings IBBoard <dev@ibboard.co.uk> parents: 257 diff changeset	143 'base_rules/modsecurity_crs_41_xss_attacks.conf',
d9352a684e62 Mass update of modules to remove deprecation warnings IBBoard <dev@ibboard.co.uk> parents: 257 diff changeset	144 'base_rules/modsecurity_crs_42_tight_security.conf',
d9352a684e62 Mass update of modules to remove deprecation warnings IBBoard <dev@ibboard.co.uk> parents: 257 diff changeset	145 'base_rules/modsecurity_crs_45_trojans.conf',
d9352a684e62 Mass update of modules to remove deprecation warnings IBBoard <dev@ibboard.co.uk> parents: 257 diff changeset	146 'base_rules/modsecurity_crs_47_common_exceptions.conf',
d9352a684e62 Mass update of modules to remove deprecation warnings IBBoard <dev@ibboard.co.uk> parents: 257 diff changeset	147 'base_rules/modsecurity_crs_49_inbound_blocking.conf',
d9352a684e62 Mass update of modules to remove deprecation warnings IBBoard <dev@ibboard.co.uk> parents: 257 diff changeset	148 'base_rules/modsecurity_crs_50_outbound.conf',
d9352a684e62 Mass update of modules to remove deprecation warnings IBBoard <dev@ibboard.co.uk> parents: 257 diff changeset	149 'base_rules/modsecurity_crs_59_outbound_blocking.conf',
d9352a684e62 Mass update of modules to remove deprecation warnings IBBoard <dev@ibboard.co.uk> parents: 257 diff changeset	150 'base_rules/modsecurity_crs_60_correlation.conf',
d9352a684e62 Mass update of modules to remove deprecation warnings IBBoard <dev@ibboard.co.uk> parents: 257 diff changeset	151 ]
d9352a684e62 Mass update of modules to remove deprecation warnings IBBoard <dev@ibboard.co.uk> parents: 257 diff changeset	152 $error_log = 'error_log'
d9352a684e62 Mass update of modules to remove deprecation warnings IBBoard <dev@ibboard.co.uk> parents: 257 diff changeset	153 $scriptalias = "${httpd_root}/var/www/cgi-bin"
d9352a684e62 Mass update of modules to remove deprecation warnings IBBoard <dev@ibboard.co.uk> parents: 257 diff changeset	154 $access_log_file = 'access_log'
d9352a684e62 Mass update of modules to remove deprecation warnings IBBoard <dev@ibboard.co.uk> parents: 257 diff changeset	155 }
d9352a684e62 Mass update of modules to remove deprecation warnings IBBoard <dev@ibboard.co.uk> parents: 257 diff changeset	156 elsif $::osfamily == 'RedHat' or $::operatingsystem =~ /^[Aa]mazon$/ {
d9352a684e62 Mass update of modules to remove deprecation warnings IBBoard <dev@ibboard.co.uk> parents: 257 diff changeset	157 $user = 'apache'
d9352a684e62 Mass update of modules to remove deprecation warnings IBBoard <dev@ibboard.co.uk> parents: 257 diff changeset	158 $group = 'apache'
d9352a684e62 Mass update of modules to remove deprecation warnings IBBoard <dev@ibboard.co.uk> parents: 257 diff changeset	159 $root_group = 'root'
d9352a684e62 Mass update of modules to remove deprecation warnings IBBoard <dev@ibboard.co.uk> parents: 257 diff changeset	160 $apache_name = 'httpd'
d9352a684e62 Mass update of modules to remove deprecation warnings IBBoard <dev@ibboard.co.uk> parents: 257 diff changeset	161 $service_name = 'httpd'
d9352a684e62 Mass update of modules to remove deprecation warnings IBBoard <dev@ibboard.co.uk> parents: 257 diff changeset	162 $httpd_dir = '/etc/httpd'
d9352a684e62 Mass update of modules to remove deprecation warnings IBBoard <dev@ibboard.co.uk> parents: 257 diff changeset	163 $server_root = '/etc/httpd'
d9352a684e62 Mass update of modules to remove deprecation warnings IBBoard <dev@ibboard.co.uk> parents: 257 diff changeset	164 $conf_dir = "${httpd_dir}/conf"
d9352a684e62 Mass update of modules to remove deprecation warnings IBBoard <dev@ibboard.co.uk> parents: 257 diff changeset	165 $confd_dir = "${httpd_dir}/conf.d"
d9352a684e62 Mass update of modules to remove deprecation warnings IBBoard <dev@ibboard.co.uk> parents: 257 diff changeset	166 $conf_enabled = undef
d9352a684e62 Mass update of modules to remove deprecation warnings IBBoard <dev@ibboard.co.uk> parents: 257 diff changeset	167 if $::operatingsystem =~ /^[Aa]mazon$/ and $::operatingsystemmajrelease == '2' {
d9352a684e62 Mass update of modules to remove deprecation warnings IBBoard <dev@ibboard.co.uk> parents: 257 diff changeset	168 # Amazon Linux 2 uses the /conf.modules.d/ dir
d9352a684e62 Mass update of modules to remove deprecation warnings IBBoard <dev@ibboard.co.uk> parents: 257 diff changeset	169 $mod_dir = "${httpd_dir}/conf.modules.d"
d9352a684e62 Mass update of modules to remove deprecation warnings IBBoard <dev@ibboard.co.uk> parents: 257 diff changeset	170 } else {
d9352a684e62 Mass update of modules to remove deprecation warnings IBBoard <dev@ibboard.co.uk> parents: 257 diff changeset	171 $mod_dir = $::apache::version::distrelease ? {
d9352a684e62 Mass update of modules to remove deprecation warnings IBBoard <dev@ibboard.co.uk> parents: 257 diff changeset	172 '7' => "${httpd_dir}/conf.modules.d",
d9352a684e62 Mass update of modules to remove deprecation warnings IBBoard <dev@ibboard.co.uk> parents: 257 diff changeset	173 default => "${httpd_dir}/conf.d",
d9352a684e62 Mass update of modules to remove deprecation warnings IBBoard <dev@ibboard.co.uk> parents: 257 diff changeset	174 }
d9352a684e62 Mass update of modules to remove deprecation warnings IBBoard <dev@ibboard.co.uk> parents: 257 diff changeset	175 }
d9352a684e62 Mass update of modules to remove deprecation warnings IBBoard <dev@ibboard.co.uk> parents: 257 diff changeset	176 $mod_enable_dir = undef
d9352a684e62 Mass update of modules to remove deprecation warnings IBBoard <dev@ibboard.co.uk> parents: 257 diff changeset	177 $vhost_dir = "${httpd_dir}/conf.d"
d9352a684e62 Mass update of modules to remove deprecation warnings IBBoard <dev@ibboard.co.uk> parents: 257 diff changeset	178 $vhost_enable_dir = undef
d9352a684e62 Mass update of modules to remove deprecation warnings IBBoard <dev@ibboard.co.uk> parents: 257 diff changeset	179 $conf_file = 'httpd.conf'
0 956e484adc12 Initial public release of Puppet configs IBBoard <dev@ibboard.co.uk> parents: diff changeset	180 $ports_file = "${conf_dir}/ports.conf"
257 675c1cc61eaf Update Apache module to get CentOS 8 support IBBoard <dev@ibboard.co.uk> parents: 36 diff changeset	181 $pidfile = 'run/httpd.pid'
0 956e484adc12 Initial public release of Puppet configs IBBoard <dev@ibboard.co.uk> parents: diff changeset	182 $logroot = '/var/log/httpd'
36 37675581a273 Update Puppet module for Apache (pulls in concat module) IBBoard <dev@ibboard.co.uk> parents: 0 diff changeset	183 $logroot_mode = undef
0 956e484adc12 Initial public release of Puppet configs IBBoard <dev@ibboard.co.uk> parents: diff changeset	184 $lib_path = 'modules'
956e484adc12 Initial public release of Puppet configs IBBoard <dev@ibboard.co.uk> parents: diff changeset	185 $mpm_module = 'prefork'
956e484adc12 Initial public release of Puppet configs IBBoard <dev@ibboard.co.uk> parents: diff changeset	186 $dev_packages = 'httpd-devel'
956e484adc12 Initial public release of Puppet configs IBBoard <dev@ibboard.co.uk> parents: diff changeset	187 $default_ssl_cert = '/etc/pki/tls/certs/localhost.crt'
956e484adc12 Initial public release of Puppet configs IBBoard <dev@ibboard.co.uk> parents: diff changeset	188 $default_ssl_key = '/etc/pki/tls/private/localhost.key'
275 d9352a684e62 Mass update of modules to remove deprecation warnings IBBoard <dev@ibboard.co.uk> parents: 257 diff changeset	189 $ssl_sessioncache = '/var/cache/mod_ssl/scache(512000)'
0 956e484adc12 Initial public release of Puppet configs IBBoard <dev@ibboard.co.uk> parents: diff changeset	190 $passenger_conf_file = 'passenger_extra.conf'
956e484adc12 Initial public release of Puppet configs IBBoard <dev@ibboard.co.uk> parents: diff changeset	191 $passenger_conf_package_file = 'passenger.conf'
956e484adc12 Initial public release of Puppet configs IBBoard <dev@ibboard.co.uk> parents: diff changeset	192 $passenger_root = undef
956e484adc12 Initial public release of Puppet configs IBBoard <dev@ibboard.co.uk> parents: diff changeset	193 $passenger_ruby = undef
36 37675581a273 Update Puppet module for Apache (pulls in concat module) IBBoard <dev@ibboard.co.uk> parents: 0 diff changeset	194 $passenger_default_ruby = undef
0 956e484adc12 Initial public release of Puppet configs IBBoard <dev@ibboard.co.uk> parents: diff changeset	195 $suphp_addhandler = 'php5-script'
956e484adc12 Initial public release of Puppet configs IBBoard <dev@ibboard.co.uk> parents: diff changeset	196 $suphp_engine = 'off'
956e484adc12 Initial public release of Puppet configs IBBoard <dev@ibboard.co.uk> parents: diff changeset	197 $suphp_configpath = undef
275 d9352a684e62 Mass update of modules to remove deprecation warnings IBBoard <dev@ibboard.co.uk> parents: 257 diff changeset	198 $php_version = $facts['operatingsystemmajrelease'] ? {
d9352a684e62 Mass update of modules to remove deprecation warnings IBBoard <dev@ibboard.co.uk> parents: 257 diff changeset	199 '8' => '7', # RedHat8
d9352a684e62 Mass update of modules to remove deprecation warnings IBBoard <dev@ibboard.co.uk> parents: 257 diff changeset	200 default => '5', # RedHat5, RedHat6, RedHat7
d9352a684e62 Mass update of modules to remove deprecation warnings IBBoard <dev@ibboard.co.uk> parents: 257 diff changeset	201 }
0 956e484adc12 Initial public release of Puppet configs IBBoard <dev@ibboard.co.uk> parents: diff changeset	202 $mod_packages = {
257 675c1cc61eaf Update Apache module to get CentOS 8 support IBBoard <dev@ibboard.co.uk> parents: 36 diff changeset	203 # NOTE: The auth_cas module isn't available on RH/CentOS without providing dependency packages provided by EPEL.
275 d9352a684e62 Mass update of modules to remove deprecation warnings IBBoard <dev@ibboard.co.uk> parents: 257 diff changeset	204 'auth_cas' => 'mod_auth_cas',
d9352a684e62 Mass update of modules to remove deprecation warnings IBBoard <dev@ibboard.co.uk> parents: 257 diff changeset	205 'auth_kerb' => 'mod_auth_kerb',
d9352a684e62 Mass update of modules to remove deprecation warnings IBBoard <dev@ibboard.co.uk> parents: 257 diff changeset	206 'auth_gssapi' => 'mod_auth_gssapi',
d9352a684e62 Mass update of modules to remove deprecation warnings IBBoard <dev@ibboard.co.uk> parents: 257 diff changeset	207 'auth_mellon' => 'mod_auth_mellon',
d9352a684e62 Mass update of modules to remove deprecation warnings IBBoard <dev@ibboard.co.uk> parents: 257 diff changeset	208 'authnz_ldap' => $::apache::version::distrelease ? {
36 37675581a273 Update Puppet module for Apache (pulls in concat module) IBBoard <dev@ibboard.co.uk> parents: 0 diff changeset	209 '7' => 'mod_ldap',
37675581a273 Update Puppet module for Apache (pulls in concat module) IBBoard <dev@ibboard.co.uk> parents: 0 diff changeset	210 default => 'mod_authz_ldap',
37675581a273 Update Puppet module for Apache (pulls in concat module) IBBoard <dev@ibboard.co.uk> parents: 0 diff changeset	211 },
275 d9352a684e62 Mass update of modules to remove deprecation warnings IBBoard <dev@ibboard.co.uk> parents: 257 diff changeset	212 'authnz_pam' => 'mod_authnz_pam',
d9352a684e62 Mass update of modules to remove deprecation warnings IBBoard <dev@ibboard.co.uk> parents: 257 diff changeset	213 'fastcgi' => $::apache::version::distrelease ? {
d9352a684e62 Mass update of modules to remove deprecation warnings IBBoard <dev@ibboard.co.uk> parents: 257 diff changeset	214 '5' => 'mod_fastcgi',
d9352a684e62 Mass update of modules to remove deprecation warnings IBBoard <dev@ibboard.co.uk> parents: 257 diff changeset	215 '6' => 'mod_fastcgi',
257 675c1cc61eaf Update Apache module to get CentOS 8 support IBBoard <dev@ibboard.co.uk> parents: 36 diff changeset	216 default => undef,
675c1cc61eaf Update Apache module to get CentOS 8 support IBBoard <dev@ibboard.co.uk> parents: 36 diff changeset	217 },
275 d9352a684e62 Mass update of modules to remove deprecation warnings IBBoard <dev@ibboard.co.uk> parents: 257 diff changeset	218 'fcgid' => 'mod_fcgid',
d9352a684e62 Mass update of modules to remove deprecation warnings IBBoard <dev@ibboard.co.uk> parents: 257 diff changeset	219 'geoip' => 'mod_geoip',
d9352a684e62 Mass update of modules to remove deprecation warnings IBBoard <dev@ibboard.co.uk> parents: 257 diff changeset	220 'intercept_form_submit' => 'mod_intercept_form_submit',
d9352a684e62 Mass update of modules to remove deprecation warnings IBBoard <dev@ibboard.co.uk> parents: 257 diff changeset	221 'ldap' => 'mod_ldap',
d9352a684e62 Mass update of modules to remove deprecation warnings IBBoard <dev@ibboard.co.uk> parents: 257 diff changeset	222 'lookup_identity' => 'mod_lookup_identity',
d9352a684e62 Mass update of modules to remove deprecation warnings IBBoard <dev@ibboard.co.uk> parents: 257 diff changeset	223 'pagespeed' => 'mod-pagespeed-stable',
257 675c1cc61eaf Update Apache module to get CentOS 8 support IBBoard <dev@ibboard.co.uk> parents: 36 diff changeset	224 # NOTE: The passenger module isn't available on RH/CentOS without
675c1cc61eaf Update Apache module to get CentOS 8 support IBBoard <dev@ibboard.co.uk> parents: 36 diff changeset	225 # providing dependency packages provided by EPEL and passenger
675c1cc61eaf Update Apache module to get CentOS 8 support IBBoard <dev@ibboard.co.uk> parents: 36 diff changeset	226 # repositories. See
675c1cc61eaf Update Apache module to get CentOS 8 support IBBoard <dev@ibboard.co.uk> parents: 36 diff changeset	227 # https://www.phusionpassenger.com/library/install/apache/install/oss/el7/
275 d9352a684e62 Mass update of modules to remove deprecation warnings IBBoard <dev@ibboard.co.uk> parents: 257 diff changeset	228 'passenger' => 'mod_passenger',
d9352a684e62 Mass update of modules to remove deprecation warnings IBBoard <dev@ibboard.co.uk> parents: 257 diff changeset	229 'perl' => 'mod_perl',
d9352a684e62 Mass update of modules to remove deprecation warnings IBBoard <dev@ibboard.co.uk> parents: 257 diff changeset	230 'php5' => $::apache::version::distrelease ? {
0 956e484adc12 Initial public release of Puppet configs IBBoard <dev@ibboard.co.uk> parents: diff changeset	231 '5' => 'php53',
956e484adc12 Initial public release of Puppet configs IBBoard <dev@ibboard.co.uk> parents: diff changeset	232 default => 'php',
956e484adc12 Initial public release of Puppet configs IBBoard <dev@ibboard.co.uk> parents: diff changeset	233 },
275 d9352a684e62 Mass update of modules to remove deprecation warnings IBBoard <dev@ibboard.co.uk> parents: 257 diff changeset	234 'phpXXX' => 'php',
d9352a684e62 Mass update of modules to remove deprecation warnings IBBoard <dev@ibboard.co.uk> parents: 257 diff changeset	235 'proxy_html' => 'mod_proxy_html',
d9352a684e62 Mass update of modules to remove deprecation warnings IBBoard <dev@ibboard.co.uk> parents: 257 diff changeset	236 'python' => 'mod_python',
d9352a684e62 Mass update of modules to remove deprecation warnings IBBoard <dev@ibboard.co.uk> parents: 257 diff changeset	237 'security' => 'mod_security',
257 675c1cc61eaf Update Apache module to get CentOS 8 support IBBoard <dev@ibboard.co.uk> parents: 36 diff changeset	238 # NOTE: The module for Shibboleth is not available on RH/CentOS without
675c1cc61eaf Update Apache module to get CentOS 8 support IBBoard <dev@ibboard.co.uk> parents: 36 diff changeset	239 # providing dependency packages provided by Shibboleth's repositories.
675c1cc61eaf Update Apache module to get CentOS 8 support IBBoard <dev@ibboard.co.uk> parents: 36 diff changeset	240 # See http://wiki.aaf.edu.au/tech-info/sp-install-guide
275 d9352a684e62 Mass update of modules to remove deprecation warnings IBBoard <dev@ibboard.co.uk> parents: 257 diff changeset	241 'shibboleth' => 'shibboleth',
d9352a684e62 Mass update of modules to remove deprecation warnings IBBoard <dev@ibboard.co.uk> parents: 257 diff changeset	242 'ssl' => 'mod_ssl',
d9352a684e62 Mass update of modules to remove deprecation warnings IBBoard <dev@ibboard.co.uk> parents: 257 diff changeset	243 'wsgi' => 'mod_wsgi',
d9352a684e62 Mass update of modules to remove deprecation warnings IBBoard <dev@ibboard.co.uk> parents: 257 diff changeset	244 'dav_svn' => 'mod_dav_svn',
d9352a684e62 Mass update of modules to remove deprecation warnings IBBoard <dev@ibboard.co.uk> parents: 257 diff changeset	245 'suphp' => 'mod_suphp',
d9352a684e62 Mass update of modules to remove deprecation warnings IBBoard <dev@ibboard.co.uk> parents: 257 diff changeset	246 'xsendfile' => 'mod_xsendfile',
d9352a684e62 Mass update of modules to remove deprecation warnings IBBoard <dev@ibboard.co.uk> parents: 257 diff changeset	247 'nss' => 'mod_nss',
d9352a684e62 Mass update of modules to remove deprecation warnings IBBoard <dev@ibboard.co.uk> parents: 257 diff changeset	248 'shib2' => 'shibboleth',
0 956e484adc12 Initial public release of Puppet configs IBBoard <dev@ibboard.co.uk> parents: diff changeset	249 }
956e484adc12 Initial public release of Puppet configs IBBoard <dev@ibboard.co.uk> parents: diff changeset	250 $mod_libs = {
257 675c1cc61eaf Update Apache module to get CentOS 8 support IBBoard <dev@ibboard.co.uk> parents: 36 diff changeset	251 'nss' => 'libmodnss.so',
0 956e484adc12 Initial public release of Puppet configs IBBoard <dev@ibboard.co.uk> parents: diff changeset	252 }
956e484adc12 Initial public release of Puppet configs IBBoard <dev@ibboard.co.uk> parents: diff changeset	253 $conf_template = 'apache/httpd.conf.erb'
275 d9352a684e62 Mass update of modules to remove deprecation warnings IBBoard <dev@ibboard.co.uk> parents: 257 diff changeset	254 $http_protocol_options = undef
d9352a684e62 Mass update of modules to remove deprecation warnings IBBoard <dev@ibboard.co.uk> parents: 257 diff changeset	255 $keepalive = 'On'
0 956e484adc12 Initial public release of Puppet configs IBBoard <dev@ibboard.co.uk> parents: diff changeset	256 $keepalive_timeout = 15
956e484adc12 Initial public release of Puppet configs IBBoard <dev@ibboard.co.uk> parents: diff changeset	257 $max_keepalive_requests = 100
956e484adc12 Initial public release of Puppet configs IBBoard <dev@ibboard.co.uk> parents: diff changeset	258 $fastcgi_lib_path = undef
956e484adc12 Initial public release of Puppet configs IBBoard <dev@ibboard.co.uk> parents: diff changeset	259 $mime_support_package = 'mailcap'
956e484adc12 Initial public release of Puppet configs IBBoard <dev@ibboard.co.uk> parents: diff changeset	260 $mime_types_config = '/etc/mime.types'
36 37675581a273 Update Puppet module for Apache (pulls in concat module) IBBoard <dev@ibboard.co.uk> parents: 0 diff changeset	261 $docroot = '/var/www/html'
257 675c1cc61eaf Update Apache module to get CentOS 8 support IBBoard <dev@ibboard.co.uk> parents: 36 diff changeset	262 $alias_icons_path = $::apache::version::distrelease ? {
675c1cc61eaf Update Apache module to get CentOS 8 support IBBoard <dev@ibboard.co.uk> parents: 36 diff changeset	263 '7' => '/usr/share/httpd/icons',
675c1cc61eaf Update Apache module to get CentOS 8 support IBBoard <dev@ibboard.co.uk> parents: 36 diff changeset	264 default => '/var/www/icons',
675c1cc61eaf Update Apache module to get CentOS 8 support IBBoard <dev@ibboard.co.uk> parents: 36 diff changeset	265 }
36 37675581a273 Update Puppet module for Apache (pulls in concat module) IBBoard <dev@ibboard.co.uk> parents: 0 diff changeset	266 $error_documents_path = $::apache::version::distrelease ? {
37675581a273 Update Puppet module for Apache (pulls in concat module) IBBoard <dev@ibboard.co.uk> parents: 0 diff changeset	267 '7' => '/usr/share/httpd/error',
37675581a273 Update Puppet module for Apache (pulls in concat module) IBBoard <dev@ibboard.co.uk> parents: 0 diff changeset	268 default => '/var/www/error'
37675581a273 Update Puppet module for Apache (pulls in concat module) IBBoard <dev@ibboard.co.uk> parents: 0 diff changeset	269 }
37675581a273 Update Puppet module for Apache (pulls in concat module) IBBoard <dev@ibboard.co.uk> parents: 0 diff changeset	270 if $::osfamily == 'RedHat' {
37675581a273 Update Puppet module for Apache (pulls in concat module) IBBoard <dev@ibboard.co.uk> parents: 0 diff changeset	271 $wsgi_socket_prefix = '/var/run/wsgi'
37675581a273 Update Puppet module for Apache (pulls in concat module) IBBoard <dev@ibboard.co.uk> parents: 0 diff changeset	272 } else {
37675581a273 Update Puppet module for Apache (pulls in concat module) IBBoard <dev@ibboard.co.uk> parents: 0 diff changeset	273 $wsgi_socket_prefix = undef
37675581a273 Update Puppet module for Apache (pulls in concat module) IBBoard <dev@ibboard.co.uk> parents: 0 diff changeset	274 }
37675581a273 Update Puppet module for Apache (pulls in concat module) IBBoard <dev@ibboard.co.uk> parents: 0 diff changeset	275 $cas_cookie_path = '/var/cache/mod_auth_cas/'
257 675c1cc61eaf Update Apache module to get CentOS 8 support IBBoard <dev@ibboard.co.uk> parents: 36 diff changeset	276 $mellon_lock_file = '/run/mod_auth_mellon/lock'
675c1cc61eaf Update Apache module to get CentOS 8 support IBBoard <dev@ibboard.co.uk> parents: 36 diff changeset	277 $mellon_cache_size = 100
675c1cc61eaf Update Apache module to get CentOS 8 support IBBoard <dev@ibboard.co.uk> parents: 36 diff changeset	278 $mellon_post_directory = undef
275 d9352a684e62 Mass update of modules to remove deprecation warnings IBBoard <dev@ibboard.co.uk> parents: 257 diff changeset	279 $modsec_version = 1
36 37675581a273 Update Puppet module for Apache (pulls in concat module) IBBoard <dev@ibboard.co.uk> parents: 0 diff changeset	280 $modsec_crs_package = 'mod_security_crs'
37675581a273 Update Puppet module for Apache (pulls in concat module) IBBoard <dev@ibboard.co.uk> parents: 0 diff changeset	281 $modsec_crs_path = '/usr/lib/modsecurity.d'
37675581a273 Update Puppet module for Apache (pulls in concat module) IBBoard <dev@ibboard.co.uk> parents: 0 diff changeset	282 $modsec_dir = '/etc/httpd/modsecurity.d'
257 675c1cc61eaf Update Apache module to get CentOS 8 support IBBoard <dev@ibboard.co.uk> parents: 36 diff changeset	283 $secpcrematchlimit = 1500
675c1cc61eaf Update Apache module to get CentOS 8 support IBBoard <dev@ibboard.co.uk> parents: 36 diff changeset	284 $secpcrematchlimitrecursion = 1500
675c1cc61eaf Update Apache module to get CentOS 8 support IBBoard <dev@ibboard.co.uk> parents: 36 diff changeset	285 $modsec_secruleengine = 'On'
36 37675581a273 Update Puppet module for Apache (pulls in concat module) IBBoard <dev@ibboard.co.uk> parents: 0 diff changeset	286 $modsec_default_rules = [
37675581a273 Update Puppet module for Apache (pulls in concat module) IBBoard <dev@ibboard.co.uk> parents: 0 diff changeset	287 'base_rules/modsecurity_35_bad_robots.data',
37675581a273 Update Puppet module for Apache (pulls in concat module) IBBoard <dev@ibboard.co.uk> parents: 0 diff changeset	288 'base_rules/modsecurity_35_scanners.data',
37675581a273 Update Puppet module for Apache (pulls in concat module) IBBoard <dev@ibboard.co.uk> parents: 0 diff changeset	289 'base_rules/modsecurity_40_generic_attacks.data',
37675581a273 Update Puppet module for Apache (pulls in concat module) IBBoard <dev@ibboard.co.uk> parents: 0 diff changeset	290 'base_rules/modsecurity_50_outbound.data',
37675581a273 Update Puppet module for Apache (pulls in concat module) IBBoard <dev@ibboard.co.uk> parents: 0 diff changeset	291 'base_rules/modsecurity_50_outbound_malware.data',
37675581a273 Update Puppet module for Apache (pulls in concat module) IBBoard <dev@ibboard.co.uk> parents: 0 diff changeset	292 'base_rules/modsecurity_crs_20_protocol_violations.conf',
37675581a273 Update Puppet module for Apache (pulls in concat module) IBBoard <dev@ibboard.co.uk> parents: 0 diff changeset	293 'base_rules/modsecurity_crs_21_protocol_anomalies.conf',
37675581a273 Update Puppet module for Apache (pulls in concat module) IBBoard <dev@ibboard.co.uk> parents: 0 diff changeset	294 'base_rules/modsecurity_crs_23_request_limits.conf',
37675581a273 Update Puppet module for Apache (pulls in concat module) IBBoard <dev@ibboard.co.uk> parents: 0 diff changeset	295 'base_rules/modsecurity_crs_30_http_policy.conf',
37675581a273 Update Puppet module for Apache (pulls in concat module) IBBoard <dev@ibboard.co.uk> parents: 0 diff changeset	296 'base_rules/modsecurity_crs_35_bad_robots.conf',
37675581a273 Update Puppet module for Apache (pulls in concat module) IBBoard <dev@ibboard.co.uk> parents: 0 diff changeset	297 'base_rules/modsecurity_crs_40_generic_attacks.conf',
37675581a273 Update Puppet module for Apache (pulls in concat module) IBBoard <dev@ibboard.co.uk> parents: 0 diff changeset	298 'base_rules/modsecurity_crs_41_sql_injection_attacks.conf',
37675581a273 Update Puppet module for Apache (pulls in concat module) IBBoard <dev@ibboard.co.uk> parents: 0 diff changeset	299 'base_rules/modsecurity_crs_41_xss_attacks.conf',
37675581a273 Update Puppet module for Apache (pulls in concat module) IBBoard <dev@ibboard.co.uk> parents: 0 diff changeset	300 'base_rules/modsecurity_crs_42_tight_security.conf',
37675581a273 Update Puppet module for Apache (pulls in concat module) IBBoard <dev@ibboard.co.uk> parents: 0 diff changeset	301 'base_rules/modsecurity_crs_45_trojans.conf',
37675581a273 Update Puppet module for Apache (pulls in concat module) IBBoard <dev@ibboard.co.uk> parents: 0 diff changeset	302 'base_rules/modsecurity_crs_47_common_exceptions.conf',
37675581a273 Update Puppet module for Apache (pulls in concat module) IBBoard <dev@ibboard.co.uk> parents: 0 diff changeset	303 'base_rules/modsecurity_crs_49_inbound_blocking.conf',
37675581a273 Update Puppet module for Apache (pulls in concat module) IBBoard <dev@ibboard.co.uk> parents: 0 diff changeset	304 'base_rules/modsecurity_crs_50_outbound.conf',
37675581a273 Update Puppet module for Apache (pulls in concat module) IBBoard <dev@ibboard.co.uk> parents: 0 diff changeset	305 'base_rules/modsecurity_crs_59_outbound_blocking.conf',
257 675c1cc61eaf Update Apache module to get CentOS 8 support IBBoard <dev@ibboard.co.uk> parents: 36 diff changeset	306 'base_rules/modsecurity_crs_60_correlation.conf',
36 37675581a273 Update Puppet module for Apache (pulls in concat module) IBBoard <dev@ibboard.co.uk> parents: 0 diff changeset	307 ]
257 675c1cc61eaf Update Apache module to get CentOS 8 support IBBoard <dev@ibboard.co.uk> parents: 36 diff changeset	308 $error_log = 'error_log'
675c1cc61eaf Update Apache module to get CentOS 8 support IBBoard <dev@ibboard.co.uk> parents: 36 diff changeset	309 $scriptalias = '/var/www/cgi-bin'
675c1cc61eaf Update Apache module to get CentOS 8 support IBBoard <dev@ibboard.co.uk> parents: 36 diff changeset	310 $access_log_file = 'access_log'
0 956e484adc12 Initial public release of Puppet configs IBBoard <dev@ibboard.co.uk> parents: diff changeset	311 } elsif $::osfamily == 'Debian' {
956e484adc12 Initial public release of Puppet configs IBBoard <dev@ibboard.co.uk> parents: diff changeset	312 $user = 'www-data'
956e484adc12 Initial public release of Puppet configs IBBoard <dev@ibboard.co.uk> parents: diff changeset	313 $group = 'www-data'
956e484adc12 Initial public release of Puppet configs IBBoard <dev@ibboard.co.uk> parents: diff changeset	314 $root_group = 'root'
956e484adc12 Initial public release of Puppet configs IBBoard <dev@ibboard.co.uk> parents: diff changeset	315 $apache_name = 'apache2'
956e484adc12 Initial public release of Puppet configs IBBoard <dev@ibboard.co.uk> parents: diff changeset	316 $service_name = 'apache2'
956e484adc12 Initial public release of Puppet configs IBBoard <dev@ibboard.co.uk> parents: diff changeset	317 $httpd_dir = '/etc/apache2'
956e484adc12 Initial public release of Puppet configs IBBoard <dev@ibboard.co.uk> parents: diff changeset	318 $server_root = '/etc/apache2'
956e484adc12 Initial public release of Puppet configs IBBoard <dev@ibboard.co.uk> parents: diff changeset	319 $conf_dir = $httpd_dir
956e484adc12 Initial public release of Puppet configs IBBoard <dev@ibboard.co.uk> parents: diff changeset	320 $confd_dir = "${httpd_dir}/conf.d"
275 d9352a684e62 Mass update of modules to remove deprecation warnings IBBoard <dev@ibboard.co.uk> parents: 257 diff changeset	321 # Overwrite conf_enabled causes errors with Shibboleth when enabled on Ubuntu 18.04
d9352a684e62 Mass update of modules to remove deprecation warnings IBBoard <dev@ibboard.co.uk> parents: 257 diff changeset	322 $conf_enabled = undef #"${httpd_dir}/conf-enabled.d"
0 956e484adc12 Initial public release of Puppet configs IBBoard <dev@ibboard.co.uk> parents: diff changeset	323 $mod_dir = "${httpd_dir}/mods-available"
956e484adc12 Initial public release of Puppet configs IBBoard <dev@ibboard.co.uk> parents: diff changeset	324 $mod_enable_dir = "${httpd_dir}/mods-enabled"
956e484adc12 Initial public release of Puppet configs IBBoard <dev@ibboard.co.uk> parents: diff changeset	325 $vhost_dir = "${httpd_dir}/sites-available"
956e484adc12 Initial public release of Puppet configs IBBoard <dev@ibboard.co.uk> parents: diff changeset	326 $vhost_enable_dir = "${httpd_dir}/sites-enabled"
956e484adc12 Initial public release of Puppet configs IBBoard <dev@ibboard.co.uk> parents: diff changeset	327 $conf_file = 'apache2.conf'
956e484adc12 Initial public release of Puppet configs IBBoard <dev@ibboard.co.uk> parents: diff changeset	328 $ports_file = "${conf_dir}/ports.conf"
257 675c1cc61eaf Update Apache module to get CentOS 8 support IBBoard <dev@ibboard.co.uk> parents: 36 diff changeset	329 $pidfile = "\${APACHE_PID_FILE}"
0 956e484adc12 Initial public release of Puppet configs IBBoard <dev@ibboard.co.uk> parents: diff changeset	330 $logroot = '/var/log/apache2'
36 37675581a273 Update Puppet module for Apache (pulls in concat module) IBBoard <dev@ibboard.co.uk> parents: 0 diff changeset	331 $logroot_mode = undef
0 956e484adc12 Initial public release of Puppet configs IBBoard <dev@ibboard.co.uk> parents: diff changeset	332 $lib_path = '/usr/lib/apache2/modules'
956e484adc12 Initial public release of Puppet configs IBBoard <dev@ibboard.co.uk> parents: diff changeset	333 $mpm_module = 'worker'
956e484adc12 Initial public release of Puppet configs IBBoard <dev@ibboard.co.uk> parents: diff changeset	334 $default_ssl_cert = '/etc/ssl/certs/ssl-cert-snakeoil.pem'
956e484adc12 Initial public release of Puppet configs IBBoard <dev@ibboard.co.uk> parents: diff changeset	335 $default_ssl_key = '/etc/ssl/private/ssl-cert-snakeoil.key'
275 d9352a684e62 Mass update of modules to remove deprecation warnings IBBoard <dev@ibboard.co.uk> parents: 257 diff changeset	336 $ssl_sessioncache = "\${APACHE_RUN_DIR}/ssl_scache(512000)"
0 956e484adc12 Initial public release of Puppet configs IBBoard <dev@ibboard.co.uk> parents: diff changeset	337 $suphp_addhandler = 'x-httpd-php'
956e484adc12 Initial public release of Puppet configs IBBoard <dev@ibboard.co.uk> parents: diff changeset	338 $suphp_engine = 'off'
956e484adc12 Initial public release of Puppet configs IBBoard <dev@ibboard.co.uk> parents: diff changeset	339 $suphp_configpath = '/etc/php5/apache2'
257 675c1cc61eaf Update Apache module to get CentOS 8 support IBBoard <dev@ibboard.co.uk> parents: 36 diff changeset	340 if ($::operatingsystem == 'Ubuntu' and versioncmp($::operatingsystemrelease, '16.04') < 0) or ($::operatingsystem == 'Debian' and versioncmp($::operatingsystemrelease, '9') < 0) {
675c1cc61eaf Update Apache module to get CentOS 8 support IBBoard <dev@ibboard.co.uk> parents: 36 diff changeset	341 # Only the major version is used here
675c1cc61eaf Update Apache module to get CentOS 8 support IBBoard <dev@ibboard.co.uk> parents: 36 diff changeset	342 $php_version = '5'
275 d9352a684e62 Mass update of modules to remove deprecation warnings IBBoard <dev@ibboard.co.uk> parents: 257 diff changeset	343 $mod_packages = {
d9352a684e62 Mass update of modules to remove deprecation warnings IBBoard <dev@ibboard.co.uk> parents: 257 diff changeset	344 'auth_cas' => 'libapache2-mod-auth-cas',
d9352a684e62 Mass update of modules to remove deprecation warnings IBBoard <dev@ibboard.co.uk> parents: 257 diff changeset	345 'auth_kerb' => 'libapache2-mod-auth-kerb',
d9352a684e62 Mass update of modules to remove deprecation warnings IBBoard <dev@ibboard.co.uk> parents: 257 diff changeset	346 'auth_gssapi' => 'libapache2-mod-auth-gssapi',
d9352a684e62 Mass update of modules to remove deprecation warnings IBBoard <dev@ibboard.co.uk> parents: 257 diff changeset	347 'auth_mellon' => 'libapache2-mod-auth-mellon',
d9352a684e62 Mass update of modules to remove deprecation warnings IBBoard <dev@ibboard.co.uk> parents: 257 diff changeset	348 'authnz_pam' => 'libapache2-mod-authnz-pam',
d9352a684e62 Mass update of modules to remove deprecation warnings IBBoard <dev@ibboard.co.uk> parents: 257 diff changeset	349 'dav_svn' => 'libapache2-svn',
d9352a684e62 Mass update of modules to remove deprecation warnings IBBoard <dev@ibboard.co.uk> parents: 257 diff changeset	350 'fastcgi' => 'libapache2-mod-fastcgi',
d9352a684e62 Mass update of modules to remove deprecation warnings IBBoard <dev@ibboard.co.uk> parents: 257 diff changeset	351 'fcgid' => 'libapache2-mod-fcgid',
d9352a684e62 Mass update of modules to remove deprecation warnings IBBoard <dev@ibboard.co.uk> parents: 257 diff changeset	352 'geoip' => 'libapache2-mod-geoip',
d9352a684e62 Mass update of modules to remove deprecation warnings IBBoard <dev@ibboard.co.uk> parents: 257 diff changeset	353 'intercept_form_submit' => 'libapache2-mod-intercept-form-submit',
d9352a684e62 Mass update of modules to remove deprecation warnings IBBoard <dev@ibboard.co.uk> parents: 257 diff changeset	354 'jk' => 'libapache2-mod-jk',
d9352a684e62 Mass update of modules to remove deprecation warnings IBBoard <dev@ibboard.co.uk> parents: 257 diff changeset	355 'lookup_identity' => 'libapache2-mod-lookup-identity',
d9352a684e62 Mass update of modules to remove deprecation warnings IBBoard <dev@ibboard.co.uk> parents: 257 diff changeset	356 'nss' => 'libapache2-mod-nss',
d9352a684e62 Mass update of modules to remove deprecation warnings IBBoard <dev@ibboard.co.uk> parents: 257 diff changeset	357 'pagespeed' => 'mod-pagespeed-stable',
d9352a684e62 Mass update of modules to remove deprecation warnings IBBoard <dev@ibboard.co.uk> parents: 257 diff changeset	358 'passenger' => 'libapache2-mod-passenger',
d9352a684e62 Mass update of modules to remove deprecation warnings IBBoard <dev@ibboard.co.uk> parents: 257 diff changeset	359 'perl' => 'libapache2-mod-perl2',
d9352a684e62 Mass update of modules to remove deprecation warnings IBBoard <dev@ibboard.co.uk> parents: 257 diff changeset	360 'phpXXX' => 'libapache2-mod-phpXXX',
d9352a684e62 Mass update of modules to remove deprecation warnings IBBoard <dev@ibboard.co.uk> parents: 257 diff changeset	361 'proxy_html' => 'libapache2-mod-proxy-html',
d9352a684e62 Mass update of modules to remove deprecation warnings IBBoard <dev@ibboard.co.uk> parents: 257 diff changeset	362 'python' => 'libapache2-mod-python',
d9352a684e62 Mass update of modules to remove deprecation warnings IBBoard <dev@ibboard.co.uk> parents: 257 diff changeset	363 'rpaf' => 'libapache2-mod-rpaf',
d9352a684e62 Mass update of modules to remove deprecation warnings IBBoard <dev@ibboard.co.uk> parents: 257 diff changeset	364 'security' => 'libapache2-modsecurity',
d9352a684e62 Mass update of modules to remove deprecation warnings IBBoard <dev@ibboard.co.uk> parents: 257 diff changeset	365 'shib2' => 'libapache2-mod-shib2',
d9352a684e62 Mass update of modules to remove deprecation warnings IBBoard <dev@ibboard.co.uk> parents: 257 diff changeset	366 'suphp' => 'libapache2-mod-suphp',
d9352a684e62 Mass update of modules to remove deprecation warnings IBBoard <dev@ibboard.co.uk> parents: 257 diff changeset	367 'wsgi' => 'libapache2-mod-wsgi',
d9352a684e62 Mass update of modules to remove deprecation warnings IBBoard <dev@ibboard.co.uk> parents: 257 diff changeset	368 'xsendfile' => 'libapache2-mod-xsendfile',
d9352a684e62 Mass update of modules to remove deprecation warnings IBBoard <dev@ibboard.co.uk> parents: 257 diff changeset	369 }
d9352a684e62 Mass update of modules to remove deprecation warnings IBBoard <dev@ibboard.co.uk> parents: 257 diff changeset	370 } elsif ($::operatingsystem == 'Debian' and versioncmp($::operatingsystemrelease, '9') >= 0) or ($::operatingsystem == 'Ubuntu' and versioncmp($::operatingsystemrelease, '18.04') >= 0) {
d9352a684e62 Mass update of modules to remove deprecation warnings IBBoard <dev@ibboard.co.uk> parents: 257 diff changeset	371 $php_version = $facts['operatingsystemmajrelease'] ? {
d9352a684e62 Mass update of modules to remove deprecation warnings IBBoard <dev@ibboard.co.uk> parents: 257 diff changeset	372 '9' => '7.0', # Debian Stretch
d9352a684e62 Mass update of modules to remove deprecation warnings IBBoard <dev@ibboard.co.uk> parents: 257 diff changeset	373 '10' => '7.3', # Debian Buster
d9352a684e62 Mass update of modules to remove deprecation warnings IBBoard <dev@ibboard.co.uk> parents: 257 diff changeset	374 default => '7.2', # Ubuntu Bionic, Cosmic and Disco
d9352a684e62 Mass update of modules to remove deprecation warnings IBBoard <dev@ibboard.co.uk> parents: 257 diff changeset	375 }
d9352a684e62 Mass update of modules to remove deprecation warnings IBBoard <dev@ibboard.co.uk> parents: 257 diff changeset	376 $mod_packages = {
d9352a684e62 Mass update of modules to remove deprecation warnings IBBoard <dev@ibboard.co.uk> parents: 257 diff changeset	377 'auth_cas' => 'libapache2-mod-auth-cas',
d9352a684e62 Mass update of modules to remove deprecation warnings IBBoard <dev@ibboard.co.uk> parents: 257 diff changeset	378 'auth_kerb' => 'libapache2-mod-auth-kerb',
d9352a684e62 Mass update of modules to remove deprecation warnings IBBoard <dev@ibboard.co.uk> parents: 257 diff changeset	379 'auth_gssapi' => 'libapache2-mod-auth-gssapi',
d9352a684e62 Mass update of modules to remove deprecation warnings IBBoard <dev@ibboard.co.uk> parents: 257 diff changeset	380 'auth_mellon' => 'libapache2-mod-auth-mellon',
d9352a684e62 Mass update of modules to remove deprecation warnings IBBoard <dev@ibboard.co.uk> parents: 257 diff changeset	381 'authnz_pam' => 'libapache2-mod-authnz-pam',
d9352a684e62 Mass update of modules to remove deprecation warnings IBBoard <dev@ibboard.co.uk> parents: 257 diff changeset	382 'dav_svn' => 'libapache2-mod-svn',
d9352a684e62 Mass update of modules to remove deprecation warnings IBBoard <dev@ibboard.co.uk> parents: 257 diff changeset	383 'fastcgi' => 'libapache2-mod-fastcgi',
d9352a684e62 Mass update of modules to remove deprecation warnings IBBoard <dev@ibboard.co.uk> parents: 257 diff changeset	384 'geoip' => 'libapache2-mod-geoip',
d9352a684e62 Mass update of modules to remove deprecation warnings IBBoard <dev@ibboard.co.uk> parents: 257 diff changeset	385 'intercept_form_submit' => 'libapache2-mod-intercept-form-submit',
d9352a684e62 Mass update of modules to remove deprecation warnings IBBoard <dev@ibboard.co.uk> parents: 257 diff changeset	386 'jk' => 'libapache2-mod-jk',
d9352a684e62 Mass update of modules to remove deprecation warnings IBBoard <dev@ibboard.co.uk> parents: 257 diff changeset	387 'lookup_identity' => 'libapache2-mod-lookup-identity',
d9352a684e62 Mass update of modules to remove deprecation warnings IBBoard <dev@ibboard.co.uk> parents: 257 diff changeset	388 'nss' => 'libapache2-mod-nss',
d9352a684e62 Mass update of modules to remove deprecation warnings IBBoard <dev@ibboard.co.uk> parents: 257 diff changeset	389 'pagespeed' => 'mod-pagespeed-stable',
d9352a684e62 Mass update of modules to remove deprecation warnings IBBoard <dev@ibboard.co.uk> parents: 257 diff changeset	390 'passenger' => 'libapache2-mod-passenger',
d9352a684e62 Mass update of modules to remove deprecation warnings IBBoard <dev@ibboard.co.uk> parents: 257 diff changeset	391 'perl' => 'libapache2-mod-perl2',
d9352a684e62 Mass update of modules to remove deprecation warnings IBBoard <dev@ibboard.co.uk> parents: 257 diff changeset	392 'phpXXX' => 'libapache2-mod-phpXXX',
d9352a684e62 Mass update of modules to remove deprecation warnings IBBoard <dev@ibboard.co.uk> parents: 257 diff changeset	393 'python' => 'libapache2-mod-python',
d9352a684e62 Mass update of modules to remove deprecation warnings IBBoard <dev@ibboard.co.uk> parents: 257 diff changeset	394 'rpaf' => 'libapache2-mod-rpaf',
d9352a684e62 Mass update of modules to remove deprecation warnings IBBoard <dev@ibboard.co.uk> parents: 257 diff changeset	395 'security' => 'libapache2-mod-security2',
d9352a684e62 Mass update of modules to remove deprecation warnings IBBoard <dev@ibboard.co.uk> parents: 257 diff changeset	396 'shib2' => 'libapache2-mod-shib2',
d9352a684e62 Mass update of modules to remove deprecation warnings IBBoard <dev@ibboard.co.uk> parents: 257 diff changeset	397 'wsgi' => 'libapache2-mod-wsgi',
d9352a684e62 Mass update of modules to remove deprecation warnings IBBoard <dev@ibboard.co.uk> parents: 257 diff changeset	398 'xsendfile' => 'libapache2-mod-xsendfile',
d9352a684e62 Mass update of modules to remove deprecation warnings IBBoard <dev@ibboard.co.uk> parents: 257 diff changeset	399 }
257 675c1cc61eaf Update Apache module to get CentOS 8 support IBBoard <dev@ibboard.co.uk> parents: 36 diff changeset	400 } else {
275 d9352a684e62 Mass update of modules to remove deprecation warnings IBBoard <dev@ibboard.co.uk> parents: 257 diff changeset	401 # Ubuntu Xenial
257 675c1cc61eaf Update Apache module to get CentOS 8 support IBBoard <dev@ibboard.co.uk> parents: 36 diff changeset	402 $php_version = '7.0'
275 d9352a684e62 Mass update of modules to remove deprecation warnings IBBoard <dev@ibboard.co.uk> parents: 257 diff changeset	403 $mod_packages = {
d9352a684e62 Mass update of modules to remove deprecation warnings IBBoard <dev@ibboard.co.uk> parents: 257 diff changeset	404 'auth_cas' => 'libapache2-mod-auth-cas',
d9352a684e62 Mass update of modules to remove deprecation warnings IBBoard <dev@ibboard.co.uk> parents: 257 diff changeset	405 'auth_kerb' => 'libapache2-mod-auth-kerb',
d9352a684e62 Mass update of modules to remove deprecation warnings IBBoard <dev@ibboard.co.uk> parents: 257 diff changeset	406 'auth_gssapi' => 'libapache2-mod-auth-gssapi',
d9352a684e62 Mass update of modules to remove deprecation warnings IBBoard <dev@ibboard.co.uk> parents: 257 diff changeset	407 'auth_mellon' => 'libapache2-mod-auth-mellon',
d9352a684e62 Mass update of modules to remove deprecation warnings IBBoard <dev@ibboard.co.uk> parents: 257 diff changeset	408 'authnz_pam' => 'libapache2-mod-authnz-pam',
d9352a684e62 Mass update of modules to remove deprecation warnings IBBoard <dev@ibboard.co.uk> parents: 257 diff changeset	409 'dav_svn' => 'libapache2-svn',
d9352a684e62 Mass update of modules to remove deprecation warnings IBBoard <dev@ibboard.co.uk> parents: 257 diff changeset	410 'fastcgi' => 'libapache2-mod-fastcgi',
d9352a684e62 Mass update of modules to remove deprecation warnings IBBoard <dev@ibboard.co.uk> parents: 257 diff changeset	411 'fcgid' => 'libapache2-mod-fcgid',
d9352a684e62 Mass update of modules to remove deprecation warnings IBBoard <dev@ibboard.co.uk> parents: 257 diff changeset	412 'geoip' => 'libapache2-mod-geoip',
d9352a684e62 Mass update of modules to remove deprecation warnings IBBoard <dev@ibboard.co.uk> parents: 257 diff changeset	413 'intercept_form_submit' => 'libapache2-mod-intercept-form-submit',
d9352a684e62 Mass update of modules to remove deprecation warnings IBBoard <dev@ibboard.co.uk> parents: 257 diff changeset	414 'jk' => 'libapache2-mod-jk',
d9352a684e62 Mass update of modules to remove deprecation warnings IBBoard <dev@ibboard.co.uk> parents: 257 diff changeset	415 'lookup_identity' => 'libapache2-mod-lookup-identity',
d9352a684e62 Mass update of modules to remove deprecation warnings IBBoard <dev@ibboard.co.uk> parents: 257 diff changeset	416 'nss' => 'libapache2-mod-nss',
d9352a684e62 Mass update of modules to remove deprecation warnings IBBoard <dev@ibboard.co.uk> parents: 257 diff changeset	417 'pagespeed' => 'mod-pagespeed-stable',
d9352a684e62 Mass update of modules to remove deprecation warnings IBBoard <dev@ibboard.co.uk> parents: 257 diff changeset	418 'passenger' => 'libapache2-mod-passenger',
d9352a684e62 Mass update of modules to remove deprecation warnings IBBoard <dev@ibboard.co.uk> parents: 257 diff changeset	419 'perl' => 'libapache2-mod-perl2',
d9352a684e62 Mass update of modules to remove deprecation warnings IBBoard <dev@ibboard.co.uk> parents: 257 diff changeset	420 'phpXXX' => 'libapache2-mod-phpXXX',
d9352a684e62 Mass update of modules to remove deprecation warnings IBBoard <dev@ibboard.co.uk> parents: 257 diff changeset	421 'python' => 'libapache2-mod-python',
d9352a684e62 Mass update of modules to remove deprecation warnings IBBoard <dev@ibboard.co.uk> parents: 257 diff changeset	422 'rpaf' => 'libapache2-mod-rpaf',
d9352a684e62 Mass update of modules to remove deprecation warnings IBBoard <dev@ibboard.co.uk> parents: 257 diff changeset	423 'security' => 'libapache2-modsecurity',
d9352a684e62 Mass update of modules to remove deprecation warnings IBBoard <dev@ibboard.co.uk> parents: 257 diff changeset	424 'shib2' => 'libapache2-mod-shib2',
d9352a684e62 Mass update of modules to remove deprecation warnings IBBoard <dev@ibboard.co.uk> parents: 257 diff changeset	425 'suphp' => 'libapache2-mod-suphp',
d9352a684e62 Mass update of modules to remove deprecation warnings IBBoard <dev@ibboard.co.uk> parents: 257 diff changeset	426 'wsgi' => 'libapache2-mod-wsgi',
d9352a684e62 Mass update of modules to remove deprecation warnings IBBoard <dev@ibboard.co.uk> parents: 257 diff changeset	427 'xsendfile' => 'libapache2-mod-xsendfile',
d9352a684e62 Mass update of modules to remove deprecation warnings IBBoard <dev@ibboard.co.uk> parents: 257 diff changeset	428 }
257 675c1cc61eaf Update Apache module to get CentOS 8 support IBBoard <dev@ibboard.co.uk> parents: 36 diff changeset	429 }
675c1cc61eaf Update Apache module to get CentOS 8 support IBBoard <dev@ibboard.co.uk> parents: 36 diff changeset	430 $error_log = 'error.log'
675c1cc61eaf Update Apache module to get CentOS 8 support IBBoard <dev@ibboard.co.uk> parents: 36 diff changeset	431 $scriptalias = '/usr/lib/cgi-bin'
675c1cc61eaf Update Apache module to get CentOS 8 support IBBoard <dev@ibboard.co.uk> parents: 36 diff changeset	432 $access_log_file = 'access.log'
675c1cc61eaf Update Apache module to get CentOS 8 support IBBoard <dev@ibboard.co.uk> parents: 36 diff changeset	433 if $::osfamily == 'Debian' and versioncmp($::operatingsystemrelease, '8') < 0 {
675c1cc61eaf Update Apache module to get CentOS 8 support IBBoard <dev@ibboard.co.uk> parents: 36 diff changeset	434 $shib2_lib = 'mod_shib_22.so'
275 d9352a684e62 Mass update of modules to remove deprecation warnings IBBoard <dev@ibboard.co.uk> parents: 257 diff changeset	435 } elsif ($::operatingsystem == 'Ubuntu' and versioncmp($::operatingsystemrelease, '19.04') < 0) or ($::operatingsystem == 'Debian' and versioncmp($::operatingsystemrelease, '10') < 0) {
d9352a684e62 Mass update of modules to remove deprecation warnings IBBoard <dev@ibboard.co.uk> parents: 257 diff changeset	436 $shib2_lib = 'mod_shib2.so'
257 675c1cc61eaf Update Apache module to get CentOS 8 support IBBoard <dev@ibboard.co.uk> parents: 36 diff changeset	437 } else {
275 d9352a684e62 Mass update of modules to remove deprecation warnings IBBoard <dev@ibboard.co.uk> parents: 257 diff changeset	438 $shib2_lib = 'mod_shib.so'
0 956e484adc12 Initial public release of Puppet configs IBBoard <dev@ibboard.co.uk> parents: diff changeset	439 }
956e484adc12 Initial public release of Puppet configs IBBoard <dev@ibboard.co.uk> parents: diff changeset	440 $mod_libs = {
257 675c1cc61eaf Update Apache module to get CentOS 8 support IBBoard <dev@ibboard.co.uk> parents: 36 diff changeset	441 'shib2' => $shib2_lib,
0 956e484adc12 Initial public release of Puppet configs IBBoard <dev@ibboard.co.uk> parents: diff changeset	442 }
956e484adc12 Initial public release of Puppet configs IBBoard <dev@ibboard.co.uk> parents: diff changeset	443 $conf_template = 'apache/httpd.conf.erb'
275 d9352a684e62 Mass update of modules to remove deprecation warnings IBBoard <dev@ibboard.co.uk> parents: 257 diff changeset	444 $http_protocol_options = undef
d9352a684e62 Mass update of modules to remove deprecation warnings IBBoard <dev@ibboard.co.uk> parents: 257 diff changeset	445 $keepalive = 'On'
0 956e484adc12 Initial public release of Puppet configs IBBoard <dev@ibboard.co.uk> parents: diff changeset	446 $keepalive_timeout = 15
956e484adc12 Initial public release of Puppet configs IBBoard <dev@ibboard.co.uk> parents: diff changeset	447 $max_keepalive_requests = 100
956e484adc12 Initial public release of Puppet configs IBBoard <dev@ibboard.co.uk> parents: diff changeset	448 $fastcgi_lib_path = '/var/lib/apache2/fastcgi'
956e484adc12 Initial public release of Puppet configs IBBoard <dev@ibboard.co.uk> parents: diff changeset	449 $mime_support_package = 'mime-support'
956e484adc12 Initial public release of Puppet configs IBBoard <dev@ibboard.co.uk> parents: diff changeset	450 $mime_types_config = '/etc/mime.types'
257 675c1cc61eaf Update Apache module to get CentOS 8 support IBBoard <dev@ibboard.co.uk> parents: 36 diff changeset	451 if ($::operatingsystem == 'Ubuntu' and versioncmp($::operatingsystemrelease, '13.10') >= 0) or ($::operatingsystem == 'Debian' and versioncmp($::operatingsystemrelease, '8') >= 0) {
675c1cc61eaf Update Apache module to get CentOS 8 support IBBoard <dev@ibboard.co.uk> parents: 36 diff changeset	452 $docroot = '/var/www/html'
675c1cc61eaf Update Apache module to get CentOS 8 support IBBoard <dev@ibboard.co.uk> parents: 36 diff changeset	453 } else {
675c1cc61eaf Update Apache module to get CentOS 8 support IBBoard <dev@ibboard.co.uk> parents: 36 diff changeset	454 $docroot = '/var/www'
675c1cc61eaf Update Apache module to get CentOS 8 support IBBoard <dev@ibboard.co.uk> parents: 36 diff changeset	455 }
36 37675581a273 Update Puppet module for Apache (pulls in concat module) IBBoard <dev@ibboard.co.uk> parents: 0 diff changeset	456 $cas_cookie_path = '/var/cache/apache2/mod_auth_cas/'
257 675c1cc61eaf Update Apache module to get CentOS 8 support IBBoard <dev@ibboard.co.uk> parents: 36 diff changeset	457 $mellon_lock_file = undef
675c1cc61eaf Update Apache module to get CentOS 8 support IBBoard <dev@ibboard.co.uk> parents: 36 diff changeset	458 $mellon_cache_size = undef
675c1cc61eaf Update Apache module to get CentOS 8 support IBBoard <dev@ibboard.co.uk> parents: 36 diff changeset	459 $mellon_post_directory = '/var/cache/apache2/mod_auth_mellon/'
275 d9352a684e62 Mass update of modules to remove deprecation warnings IBBoard <dev@ibboard.co.uk> parents: 257 diff changeset	460 $modsec_version = 1
36 37675581a273 Update Puppet module for Apache (pulls in concat module) IBBoard <dev@ibboard.co.uk> parents: 0 diff changeset	461 $modsec_crs_package = 'modsecurity-crs'
37675581a273 Update Puppet module for Apache (pulls in concat module) IBBoard <dev@ibboard.co.uk> parents: 0 diff changeset	462 $modsec_crs_path = '/usr/share/modsecurity-crs'
37675581a273 Update Puppet module for Apache (pulls in concat module) IBBoard <dev@ibboard.co.uk> parents: 0 diff changeset	463 $modsec_dir = '/etc/modsecurity'
257 675c1cc61eaf Update Apache module to get CentOS 8 support IBBoard <dev@ibboard.co.uk> parents: 36 diff changeset	464 $secpcrematchlimit = 1500
675c1cc61eaf Update Apache module to get CentOS 8 support IBBoard <dev@ibboard.co.uk> parents: 36 diff changeset	465 $secpcrematchlimitrecursion = 1500
675c1cc61eaf Update Apache module to get CentOS 8 support IBBoard <dev@ibboard.co.uk> parents: 36 diff changeset	466 $modsec_secruleengine = 'On'
275 d9352a684e62 Mass update of modules to remove deprecation warnings IBBoard <dev@ibboard.co.uk> parents: 257 diff changeset	467 if ($::operatingsystem == 'Debian' and versioncmp($::operatingsystemrelease, '9') >= 0) or ($::operatingsystem == 'Ubuntu' and versioncmp($::operatingsystemrelease, '18.04') >= 0) {
d9352a684e62 Mass update of modules to remove deprecation warnings IBBoard <dev@ibboard.co.uk> parents: 257 diff changeset	468 $modsec_default_rules = [
d9352a684e62 Mass update of modules to remove deprecation warnings IBBoard <dev@ibboard.co.uk> parents: 257 diff changeset	469 'crawlers-user-agents.data',
d9352a684e62 Mass update of modules to remove deprecation warnings IBBoard <dev@ibboard.co.uk> parents: 257 diff changeset	470 'iis-errors.data',
d9352a684e62 Mass update of modules to remove deprecation warnings IBBoard <dev@ibboard.co.uk> parents: 257 diff changeset	471 'java-code-leakages.data',
d9352a684e62 Mass update of modules to remove deprecation warnings IBBoard <dev@ibboard.co.uk> parents: 257 diff changeset	472 'java-errors.data',
d9352a684e62 Mass update of modules to remove deprecation warnings IBBoard <dev@ibboard.co.uk> parents: 257 diff changeset	473 'lfi-os-files.data',
d9352a684e62 Mass update of modules to remove deprecation warnings IBBoard <dev@ibboard.co.uk> parents: 257 diff changeset	474 'php-config-directives.data',
d9352a684e62 Mass update of modules to remove deprecation warnings IBBoard <dev@ibboard.co.uk> parents: 257 diff changeset	475 'php-errors.data',
d9352a684e62 Mass update of modules to remove deprecation warnings IBBoard <dev@ibboard.co.uk> parents: 257 diff changeset	476 'php-function-names-933150.data',
d9352a684e62 Mass update of modules to remove deprecation warnings IBBoard <dev@ibboard.co.uk> parents: 257 diff changeset	477 'php-function-names-933151.data',
d9352a684e62 Mass update of modules to remove deprecation warnings IBBoard <dev@ibboard.co.uk> parents: 257 diff changeset	478 'php-variables.data',
d9352a684e62 Mass update of modules to remove deprecation warnings IBBoard <dev@ibboard.co.uk> parents: 257 diff changeset	479 'restricted-files.data',
d9352a684e62 Mass update of modules to remove deprecation warnings IBBoard <dev@ibboard.co.uk> parents: 257 diff changeset	480 'scanners-headers.data',
d9352a684e62 Mass update of modules to remove deprecation warnings IBBoard <dev@ibboard.co.uk> parents: 257 diff changeset	481 'scanners-urls.data',
d9352a684e62 Mass update of modules to remove deprecation warnings IBBoard <dev@ibboard.co.uk> parents: 257 diff changeset	482 'scanners-user-agents.data',
d9352a684e62 Mass update of modules to remove deprecation warnings IBBoard <dev@ibboard.co.uk> parents: 257 diff changeset	483 'scripting-user-agents.data',
d9352a684e62 Mass update of modules to remove deprecation warnings IBBoard <dev@ibboard.co.uk> parents: 257 diff changeset	484 'sql-errors.data',
d9352a684e62 Mass update of modules to remove deprecation warnings IBBoard <dev@ibboard.co.uk> parents: 257 diff changeset	485 'sql-function-names.data',
d9352a684e62 Mass update of modules to remove deprecation warnings IBBoard <dev@ibboard.co.uk> parents: 257 diff changeset	486 'unix-shell.data',
d9352a684e62 Mass update of modules to remove deprecation warnings IBBoard <dev@ibboard.co.uk> parents: 257 diff changeset	487 'windows-powershell-commands.data',
d9352a684e62 Mass update of modules to remove deprecation warnings IBBoard <dev@ibboard.co.uk> parents: 257 diff changeset	488 ]
d9352a684e62 Mass update of modules to remove deprecation warnings IBBoard <dev@ibboard.co.uk> parents: 257 diff changeset	489 } else {
d9352a684e62 Mass update of modules to remove deprecation warnings IBBoard <dev@ibboard.co.uk> parents: 257 diff changeset	490 $modsec_default_rules = [
d9352a684e62 Mass update of modules to remove deprecation warnings IBBoard <dev@ibboard.co.uk> parents: 257 diff changeset	491 'base_rules/modsecurity_35_bad_robots.data',
d9352a684e62 Mass update of modules to remove deprecation warnings IBBoard <dev@ibboard.co.uk> parents: 257 diff changeset	492 'base_rules/modsecurity_35_scanners.data',
d9352a684e62 Mass update of modules to remove deprecation warnings IBBoard <dev@ibboard.co.uk> parents: 257 diff changeset	493 'base_rules/modsecurity_40_generic_attacks.data',
d9352a684e62 Mass update of modules to remove deprecation warnings IBBoard <dev@ibboard.co.uk> parents: 257 diff changeset	494 'base_rules/modsecurity_50_outbound.data',
d9352a684e62 Mass update of modules to remove deprecation warnings IBBoard <dev@ibboard.co.uk> parents: 257 diff changeset	495 'base_rules/modsecurity_50_outbound_malware.data',
d9352a684e62 Mass update of modules to remove deprecation warnings IBBoard <dev@ibboard.co.uk> parents: 257 diff changeset	496 'base_rules/modsecurity_crs_20_protocol_violations.conf',
d9352a684e62 Mass update of modules to remove deprecation warnings IBBoard <dev@ibboard.co.uk> parents: 257 diff changeset	497 'base_rules/modsecurity_crs_21_protocol_anomalies.conf',
d9352a684e62 Mass update of modules to remove deprecation warnings IBBoard <dev@ibboard.co.uk> parents: 257 diff changeset	498 'base_rules/modsecurity_crs_23_request_limits.conf',
d9352a684e62 Mass update of modules to remove deprecation warnings IBBoard <dev@ibboard.co.uk> parents: 257 diff changeset	499 'base_rules/modsecurity_crs_30_http_policy.conf',
d9352a684e62 Mass update of modules to remove deprecation warnings IBBoard <dev@ibboard.co.uk> parents: 257 diff changeset	500 'base_rules/modsecurity_crs_35_bad_robots.conf',
d9352a684e62 Mass update of modules to remove deprecation warnings IBBoard <dev@ibboard.co.uk> parents: 257 diff changeset	501 'base_rules/modsecurity_crs_40_generic_attacks.conf',
d9352a684e62 Mass update of modules to remove deprecation warnings IBBoard <dev@ibboard.co.uk> parents: 257 diff changeset	502 'base_rules/modsecurity_crs_41_sql_injection_attacks.conf',
d9352a684e62 Mass update of modules to remove deprecation warnings IBBoard <dev@ibboard.co.uk> parents: 257 diff changeset	503 'base_rules/modsecurity_crs_41_xss_attacks.conf',
d9352a684e62 Mass update of modules to remove deprecation warnings IBBoard <dev@ibboard.co.uk> parents: 257 diff changeset	504 'base_rules/modsecurity_crs_42_tight_security.conf',
d9352a684e62 Mass update of modules to remove deprecation warnings IBBoard <dev@ibboard.co.uk> parents: 257 diff changeset	505 'base_rules/modsecurity_crs_45_trojans.conf',
d9352a684e62 Mass update of modules to remove deprecation warnings IBBoard <dev@ibboard.co.uk> parents: 257 diff changeset	506 'base_rules/modsecurity_crs_47_common_exceptions.conf',
d9352a684e62 Mass update of modules to remove deprecation warnings IBBoard <dev@ibboard.co.uk> parents: 257 diff changeset	507 'base_rules/modsecurity_crs_49_inbound_blocking.conf',
d9352a684e62 Mass update of modules to remove deprecation warnings IBBoard <dev@ibboard.co.uk> parents: 257 diff changeset	508 'base_rules/modsecurity_crs_50_outbound.conf',
d9352a684e62 Mass update of modules to remove deprecation warnings IBBoard <dev@ibboard.co.uk> parents: 257 diff changeset	509 'base_rules/modsecurity_crs_59_outbound_blocking.conf',
d9352a684e62 Mass update of modules to remove deprecation warnings IBBoard <dev@ibboard.co.uk> parents: 257 diff changeset	510 'base_rules/modsecurity_crs_60_correlation.conf',
d9352a684e62 Mass update of modules to remove deprecation warnings IBBoard <dev@ibboard.co.uk> parents: 257 diff changeset	511 ]
d9352a684e62 Mass update of modules to remove deprecation warnings IBBoard <dev@ibboard.co.uk> parents: 257 diff changeset	512 }
257 675c1cc61eaf Update Apache module to get CentOS 8 support IBBoard <dev@ibboard.co.uk> parents: 36 diff changeset	513 $alias_icons_path = '/usr/share/apache2/icons'
36 37675581a273 Update Puppet module for Apache (pulls in concat module) IBBoard <dev@ibboard.co.uk> parents: 0 diff changeset	514 $error_documents_path = '/usr/share/apache2/error'
257 675c1cc61eaf Update Apache module to get CentOS 8 support IBBoard <dev@ibboard.co.uk> parents: 36 diff changeset	515 if ($::operatingsystem == 'Ubuntu' and versioncmp($::operatingsystemrelease, '13.10') >= 0) or ($::operatingsystem == 'Debian' and versioncmp($::operatingsystemrelease, '8') >= 0) {
675c1cc61eaf Update Apache module to get CentOS 8 support IBBoard <dev@ibboard.co.uk> parents: 36 diff changeset	516 $dev_packages = ['libaprutil1-dev', 'libapr1-dev', 'apache2-dev']
675c1cc61eaf Update Apache module to get CentOS 8 support IBBoard <dev@ibboard.co.uk> parents: 36 diff changeset	517 } else {
675c1cc61eaf Update Apache module to get CentOS 8 support IBBoard <dev@ibboard.co.uk> parents: 36 diff changeset	518 $dev_packages = ['libaprutil1-dev', 'libapr1-dev', 'apache2-prefork-dev']
675c1cc61eaf Update Apache module to get CentOS 8 support IBBoard <dev@ibboard.co.uk> parents: 36 diff changeset	519 }
36 37675581a273 Update Puppet module for Apache (pulls in concat module) IBBoard <dev@ibboard.co.uk> parents: 0 diff changeset	520
37675581a273 Update Puppet module for Apache (pulls in concat module) IBBoard <dev@ibboard.co.uk> parents: 0 diff changeset	521 #
37675581a273 Update Puppet module for Apache (pulls in concat module) IBBoard <dev@ibboard.co.uk> parents: 0 diff changeset	522 # Passenger-specific settings
37675581a273 Update Puppet module for Apache (pulls in concat module) IBBoard <dev@ibboard.co.uk> parents: 0 diff changeset	523 #
37675581a273 Update Puppet module for Apache (pulls in concat module) IBBoard <dev@ibboard.co.uk> parents: 0 diff changeset	524
37675581a273 Update Puppet module for Apache (pulls in concat module) IBBoard <dev@ibboard.co.uk> parents: 0 diff changeset	525 $passenger_conf_file = 'passenger.conf'
37675581a273 Update Puppet module for Apache (pulls in concat module) IBBoard <dev@ibboard.co.uk> parents: 0 diff changeset	526 $passenger_conf_package_file = undef
37675581a273 Update Puppet module for Apache (pulls in concat module) IBBoard <dev@ibboard.co.uk> parents: 0 diff changeset	527
257 675c1cc61eaf Update Apache module to get CentOS 8 support IBBoard <dev@ibboard.co.uk> parents: 36 diff changeset	528 if ($::operatingsystem == 'Ubuntu' and versioncmp($::operatingsystemrelease, '14.04') < 0) or ($::operatingsystem == 'Debian' and versioncmp($::operatingsystemrelease, '8') < 0) {
675c1cc61eaf Update Apache module to get CentOS 8 support IBBoard <dev@ibboard.co.uk> parents: 36 diff changeset	529 $passenger_root = '/usr'
675c1cc61eaf Update Apache module to get CentOS 8 support IBBoard <dev@ibboard.co.uk> parents: 36 diff changeset	530 $passenger_ruby = '/usr/bin/ruby'
675c1cc61eaf Update Apache module to get CentOS 8 support IBBoard <dev@ibboard.co.uk> parents: 36 diff changeset	531 $passenger_default_ruby = undef
675c1cc61eaf Update Apache module to get CentOS 8 support IBBoard <dev@ibboard.co.uk> parents: 36 diff changeset	532 } else {
675c1cc61eaf Update Apache module to get CentOS 8 support IBBoard <dev@ibboard.co.uk> parents: 36 diff changeset	533 $passenger_root = '/usr/lib/ruby/vendor_ruby/phusion_passenger/locations.ini'
675c1cc61eaf Update Apache module to get CentOS 8 support IBBoard <dev@ibboard.co.uk> parents: 36 diff changeset	534 $passenger_ruby = undef
675c1cc61eaf Update Apache module to get CentOS 8 support IBBoard <dev@ibboard.co.uk> parents: 36 diff changeset	535 $passenger_default_ruby = '/usr/bin/ruby'
36 37675581a273 Update Puppet module for Apache (pulls in concat module) IBBoard <dev@ibboard.co.uk> parents: 0 diff changeset	536 }
37675581a273 Update Puppet module for Apache (pulls in concat module) IBBoard <dev@ibboard.co.uk> parents: 0 diff changeset	537 $wsgi_socket_prefix = undef
0 956e484adc12 Initial public release of Puppet configs IBBoard <dev@ibboard.co.uk> parents: diff changeset	538 } elsif $::osfamily == 'FreeBSD' {
956e484adc12 Initial public release of Puppet configs IBBoard <dev@ibboard.co.uk> parents: diff changeset	539 $user = 'www'
956e484adc12 Initial public release of Puppet configs IBBoard <dev@ibboard.co.uk> parents: diff changeset	540 $group = 'www'
956e484adc12 Initial public release of Puppet configs IBBoard <dev@ibboard.co.uk> parents: diff changeset	541 $root_group = 'wheel'
36 37675581a273 Update Puppet module for Apache (pulls in concat module) IBBoard <dev@ibboard.co.uk> parents: 0 diff changeset	542 $apache_name = 'apache24'
37675581a273 Update Puppet module for Apache (pulls in concat module) IBBoard <dev@ibboard.co.uk> parents: 0 diff changeset	543 $service_name = 'apache24'
37675581a273 Update Puppet module for Apache (pulls in concat module) IBBoard <dev@ibboard.co.uk> parents: 0 diff changeset	544 $httpd_dir = '/usr/local/etc/apache24'
0 956e484adc12 Initial public release of Puppet configs IBBoard <dev@ibboard.co.uk> parents: diff changeset	545 $server_root = '/usr/local'
956e484adc12 Initial public release of Puppet configs IBBoard <dev@ibboard.co.uk> parents: diff changeset	546 $conf_dir = $httpd_dir
956e484adc12 Initial public release of Puppet configs IBBoard <dev@ibboard.co.uk> parents: diff changeset	547 $confd_dir = "${httpd_dir}/Includes"
275 d9352a684e62 Mass update of modules to remove deprecation warnings IBBoard <dev@ibboard.co.uk> parents: 257 diff changeset	548 $conf_enabled = undef
0 956e484adc12 Initial public release of Puppet configs IBBoard <dev@ibboard.co.uk> parents: diff changeset	549 $mod_dir = "${httpd_dir}/Modules"
956e484adc12 Initial public release of Puppet configs IBBoard <dev@ibboard.co.uk> parents: diff changeset	550 $mod_enable_dir = undef
956e484adc12 Initial public release of Puppet configs IBBoard <dev@ibboard.co.uk> parents: diff changeset	551 $vhost_dir = "${httpd_dir}/Vhosts"
956e484adc12 Initial public release of Puppet configs IBBoard <dev@ibboard.co.uk> parents: diff changeset	552 $vhost_enable_dir = undef
956e484adc12 Initial public release of Puppet configs IBBoard <dev@ibboard.co.uk> parents: diff changeset	553 $conf_file = 'httpd.conf'
956e484adc12 Initial public release of Puppet configs IBBoard <dev@ibboard.co.uk> parents: diff changeset	554 $ports_file = "${conf_dir}/ports.conf"
257 675c1cc61eaf Update Apache module to get CentOS 8 support IBBoard <dev@ibboard.co.uk> parents: 36 diff changeset	555 $pidfile = '/var/run/httpd.pid'
36 37675581a273 Update Puppet module for Apache (pulls in concat module) IBBoard <dev@ibboard.co.uk> parents: 0 diff changeset	556 $logroot = '/var/log/apache24'
37675581a273 Update Puppet module for Apache (pulls in concat module) IBBoard <dev@ibboard.co.uk> parents: 0 diff changeset	557 $logroot_mode = undef
37675581a273 Update Puppet module for Apache (pulls in concat module) IBBoard <dev@ibboard.co.uk> parents: 0 diff changeset	558 $lib_path = '/usr/local/libexec/apache24'
0 956e484adc12 Initial public release of Puppet configs IBBoard <dev@ibboard.co.uk> parents: diff changeset	559 $mpm_module = 'prefork'
956e484adc12 Initial public release of Puppet configs IBBoard <dev@ibboard.co.uk> parents: diff changeset	560 $dev_packages = undef
36 37675581a273 Update Puppet module for Apache (pulls in concat module) IBBoard <dev@ibboard.co.uk> parents: 0 diff changeset	561 $default_ssl_cert = '/usr/local/etc/apache24/server.crt'
37675581a273 Update Puppet module for Apache (pulls in concat module) IBBoard <dev@ibboard.co.uk> parents: 0 diff changeset	562 $default_ssl_key = '/usr/local/etc/apache24/server.key'
275 d9352a684e62 Mass update of modules to remove deprecation warnings IBBoard <dev@ibboard.co.uk> parents: 257 diff changeset	563 $ssl_sessioncache = '/var/run/ssl_scache(512000)'
0 956e484adc12 Initial public release of Puppet configs IBBoard <dev@ibboard.co.uk> parents: diff changeset	564 $passenger_conf_file = 'passenger.conf'
956e484adc12 Initial public release of Puppet configs IBBoard <dev@ibboard.co.uk> parents: diff changeset	565 $passenger_conf_package_file = undef
257 675c1cc61eaf Update Apache module to get CentOS 8 support IBBoard <dev@ibboard.co.uk> parents: 36 diff changeset	566 $passenger_root = '/usr/local/lib/ruby/gems/2.0/gems/passenger-4.0.58'
675c1cc61eaf Update Apache module to get CentOS 8 support IBBoard <dev@ibboard.co.uk> parents: 36 diff changeset	567 $passenger_ruby = '/usr/local/bin/ruby'
36 37675581a273 Update Puppet module for Apache (pulls in concat module) IBBoard <dev@ibboard.co.uk> parents: 0 diff changeset	568 $passenger_default_ruby = undef
0 956e484adc12 Initial public release of Puppet configs IBBoard <dev@ibboard.co.uk> parents: diff changeset	569 $suphp_addhandler = 'php5-script'
956e484adc12 Initial public release of Puppet configs IBBoard <dev@ibboard.co.uk> parents: diff changeset	570 $suphp_engine = 'off'
956e484adc12 Initial public release of Puppet configs IBBoard <dev@ibboard.co.uk> parents: diff changeset	571 $suphp_configpath = undef
257 675c1cc61eaf Update Apache module to get CentOS 8 support IBBoard <dev@ibboard.co.uk> parents: 36 diff changeset	572 $php_version = '5'
0 956e484adc12 Initial public release of Puppet configs IBBoard <dev@ibboard.co.uk> parents: diff changeset	573 $mod_packages = {
36 37675581a273 Update Puppet module for Apache (pulls in concat module) IBBoard <dev@ibboard.co.uk> parents: 0 diff changeset	574 # NOTE: I list here only modules that are not included in www/apache24
0 956e484adc12 Initial public release of Puppet configs IBBoard <dev@ibboard.co.uk> parents: diff changeset	575 # NOTE: 'passenger' needs to enable APACHE_SUPPORT in make config
956e484adc12 Initial public release of Puppet configs IBBoard <dev@ibboard.co.uk> parents: diff changeset	576 # NOTE: 'php' needs to enable APACHE option in make config
956e484adc12 Initial public release of Puppet configs IBBoard <dev@ibboard.co.uk> parents: diff changeset	577 # NOTE: 'dav_svn' needs to enable MOD_DAV_SVN make config
956e484adc12 Initial public release of Puppet configs IBBoard <dev@ibboard.co.uk> parents: diff changeset	578 # NOTE: not sure where the shibboleth should come from
275 d9352a684e62 Mass update of modules to remove deprecation warnings IBBoard <dev@ibboard.co.uk> parents: 257 diff changeset	579 'auth_kerb' => 'www/mod_auth_kerb2',
d9352a684e62 Mass update of modules to remove deprecation warnings IBBoard <dev@ibboard.co.uk> parents: 257 diff changeset	580 'auth_gssapi' => 'www/mod_auth_gssapi',
d9352a684e62 Mass update of modules to remove deprecation warnings IBBoard <dev@ibboard.co.uk> parents: 257 diff changeset	581 'fcgid' => 'www/mod_fcgid',
d9352a684e62 Mass update of modules to remove deprecation warnings IBBoard <dev@ibboard.co.uk> parents: 257 diff changeset	582 'passenger' => 'www/rubygem-passenger',
d9352a684e62 Mass update of modules to remove deprecation warnings IBBoard <dev@ibboard.co.uk> parents: 257 diff changeset	583 'perl' => 'www/mod_perl2',
d9352a684e62 Mass update of modules to remove deprecation warnings IBBoard <dev@ibboard.co.uk> parents: 257 diff changeset	584 'phpXXX' => 'www/mod_phpXXX',
d9352a684e62 Mass update of modules to remove deprecation warnings IBBoard <dev@ibboard.co.uk> parents: 257 diff changeset	585 'proxy_html' => 'www/mod_proxy_html',
d9352a684e62 Mass update of modules to remove deprecation warnings IBBoard <dev@ibboard.co.uk> parents: 257 diff changeset	586 'python' => 'www/mod_python3',
d9352a684e62 Mass update of modules to remove deprecation warnings IBBoard <dev@ibboard.co.uk> parents: 257 diff changeset	587 'wsgi' => 'www/mod_wsgi',
d9352a684e62 Mass update of modules to remove deprecation warnings IBBoard <dev@ibboard.co.uk> parents: 257 diff changeset	588 'dav_svn' => 'devel/subversion',
d9352a684e62 Mass update of modules to remove deprecation warnings IBBoard <dev@ibboard.co.uk> parents: 257 diff changeset	589 'xsendfile' => 'www/mod_xsendfile',
d9352a684e62 Mass update of modules to remove deprecation warnings IBBoard <dev@ibboard.co.uk> parents: 257 diff changeset	590 'rpaf' => 'www/mod_rpaf2',
d9352a684e62 Mass update of modules to remove deprecation warnings IBBoard <dev@ibboard.co.uk> parents: 257 diff changeset	591 'shib2' => 'security/shibboleth2-sp',
0 956e484adc12 Initial public release of Puppet configs IBBoard <dev@ibboard.co.uk> parents: diff changeset	592 }
956e484adc12 Initial public release of Puppet configs IBBoard <dev@ibboard.co.uk> parents: diff changeset	593 $mod_libs = {
956e484adc12 Initial public release of Puppet configs IBBoard <dev@ibboard.co.uk> parents: diff changeset	594 }
956e484adc12 Initial public release of Puppet configs IBBoard <dev@ibboard.co.uk> parents: diff changeset	595 $conf_template = 'apache/httpd.conf.erb'
275 d9352a684e62 Mass update of modules to remove deprecation warnings IBBoard <dev@ibboard.co.uk> parents: 257 diff changeset	596 $http_protocol_options = undef
d9352a684e62 Mass update of modules to remove deprecation warnings IBBoard <dev@ibboard.co.uk> parents: 257 diff changeset	597 $keepalive = 'On'
0 956e484adc12 Initial public release of Puppet configs IBBoard <dev@ibboard.co.uk> parents: diff changeset	598 $keepalive_timeout = 15
956e484adc12 Initial public release of Puppet configs IBBoard <dev@ibboard.co.uk> parents: diff changeset	599 $max_keepalive_requests = 100
956e484adc12 Initial public release of Puppet configs IBBoard <dev@ibboard.co.uk> parents: diff changeset	600 $fastcgi_lib_path = undef # TODO: revisit
956e484adc12 Initial public release of Puppet configs IBBoard <dev@ibboard.co.uk> parents: diff changeset	601 $mime_support_package = 'misc/mime-support'
956e484adc12 Initial public release of Puppet configs IBBoard <dev@ibboard.co.uk> parents: diff changeset	602 $mime_types_config = '/usr/local/etc/mime.types'
36 37675581a273 Update Puppet module for Apache (pulls in concat module) IBBoard <dev@ibboard.co.uk> parents: 0 diff changeset	603 $wsgi_socket_prefix = undef
37675581a273 Update Puppet module for Apache (pulls in concat module) IBBoard <dev@ibboard.co.uk> parents: 0 diff changeset	604 $docroot = '/usr/local/www/apache24/data'
257 675c1cc61eaf Update Apache module to get CentOS 8 support IBBoard <dev@ibboard.co.uk> parents: 36 diff changeset	605 $alias_icons_path = '/usr/local/www/apache24/icons'
36 37675581a273 Update Puppet module for Apache (pulls in concat module) IBBoard <dev@ibboard.co.uk> parents: 0 diff changeset	606 $error_documents_path = '/usr/local/www/apache24/error'
257 675c1cc61eaf Update Apache module to get CentOS 8 support IBBoard <dev@ibboard.co.uk> parents: 36 diff changeset	607 $error_log = 'httpd-error.log'
675c1cc61eaf Update Apache module to get CentOS 8 support IBBoard <dev@ibboard.co.uk> parents: 36 diff changeset	608 $scriptalias = '/usr/local/www/apache24/cgi-bin'
675c1cc61eaf Update Apache module to get CentOS 8 support IBBoard <dev@ibboard.co.uk> parents: 36 diff changeset	609 $access_log_file = 'httpd-access.log'
675c1cc61eaf Update Apache module to get CentOS 8 support IBBoard <dev@ibboard.co.uk> parents: 36 diff changeset	610 } elsif $::osfamily == 'Gentoo' {
675c1cc61eaf Update Apache module to get CentOS 8 support IBBoard <dev@ibboard.co.uk> parents: 36 diff changeset	611 $user = 'apache'
675c1cc61eaf Update Apache module to get CentOS 8 support IBBoard <dev@ibboard.co.uk> parents: 36 diff changeset	612 $group = 'apache'
675c1cc61eaf Update Apache module to get CentOS 8 support IBBoard <dev@ibboard.co.uk> parents: 36 diff changeset	613 $root_group = 'wheel'
675c1cc61eaf Update Apache module to get CentOS 8 support IBBoard <dev@ibboard.co.uk> parents: 36 diff changeset	614 $apache_name = 'www-servers/apache'
675c1cc61eaf Update Apache module to get CentOS 8 support IBBoard <dev@ibboard.co.uk> parents: 36 diff changeset	615 $service_name = 'apache2'
675c1cc61eaf Update Apache module to get CentOS 8 support IBBoard <dev@ibboard.co.uk> parents: 36 diff changeset	616 $httpd_dir = '/etc/apache2'
675c1cc61eaf Update Apache module to get CentOS 8 support IBBoard <dev@ibboard.co.uk> parents: 36 diff changeset	617 $server_root = '/var/www'
675c1cc61eaf Update Apache module to get CentOS 8 support IBBoard <dev@ibboard.co.uk> parents: 36 diff changeset	618 $conf_dir = $httpd_dir
675c1cc61eaf Update Apache module to get CentOS 8 support IBBoard <dev@ibboard.co.uk> parents: 36 diff changeset	619 $confd_dir = "${httpd_dir}/conf.d"
275 d9352a684e62 Mass update of modules to remove deprecation warnings IBBoard <dev@ibboard.co.uk> parents: 257 diff changeset	620 $conf_enabled = undef
257 675c1cc61eaf Update Apache module to get CentOS 8 support IBBoard <dev@ibboard.co.uk> parents: 36 diff changeset	621 $mod_dir = "${httpd_dir}/modules.d"
675c1cc61eaf Update Apache module to get CentOS 8 support IBBoard <dev@ibboard.co.uk> parents: 36 diff changeset	622 $mod_enable_dir = undef
675c1cc61eaf Update Apache module to get CentOS 8 support IBBoard <dev@ibboard.co.uk> parents: 36 diff changeset	623 $vhost_dir = "${httpd_dir}/vhosts.d"
675c1cc61eaf Update Apache module to get CentOS 8 support IBBoard <dev@ibboard.co.uk> parents: 36 diff changeset	624 $vhost_enable_dir = undef
675c1cc61eaf Update Apache module to get CentOS 8 support IBBoard <dev@ibboard.co.uk> parents: 36 diff changeset	625 $conf_file = 'httpd.conf'
675c1cc61eaf Update Apache module to get CentOS 8 support IBBoard <dev@ibboard.co.uk> parents: 36 diff changeset	626 $ports_file = "${conf_dir}/ports.conf"
675c1cc61eaf Update Apache module to get CentOS 8 support IBBoard <dev@ibboard.co.uk> parents: 36 diff changeset	627 $logroot = '/var/log/apache2'
675c1cc61eaf Update Apache module to get CentOS 8 support IBBoard <dev@ibboard.co.uk> parents: 36 diff changeset	628 $logroot_mode = undef
675c1cc61eaf Update Apache module to get CentOS 8 support IBBoard <dev@ibboard.co.uk> parents: 36 diff changeset	629 $lib_path = '/usr/lib/apache2/modules'
675c1cc61eaf Update Apache module to get CentOS 8 support IBBoard <dev@ibboard.co.uk> parents: 36 diff changeset	630 $mpm_module = 'prefork'
675c1cc61eaf Update Apache module to get CentOS 8 support IBBoard <dev@ibboard.co.uk> parents: 36 diff changeset	631 $dev_packages = undef
675c1cc61eaf Update Apache module to get CentOS 8 support IBBoard <dev@ibboard.co.uk> parents: 36 diff changeset	632 $default_ssl_cert = '/etc/ssl/apache2/server.crt'
675c1cc61eaf Update Apache module to get CentOS 8 support IBBoard <dev@ibboard.co.uk> parents: 36 diff changeset	633 $default_ssl_key = '/etc/ssl/apache2/server.key'
275 d9352a684e62 Mass update of modules to remove deprecation warnings IBBoard <dev@ibboard.co.uk> parents: 257 diff changeset	634 $ssl_sessioncache = '/var/run/ssl_scache(512000)'
257 675c1cc61eaf Update Apache module to get CentOS 8 support IBBoard <dev@ibboard.co.uk> parents: 36 diff changeset	635 $passenger_root = '/usr'
675c1cc61eaf Update Apache module to get CentOS 8 support IBBoard <dev@ibboard.co.uk> parents: 36 diff changeset	636 $passenger_ruby = '/usr/bin/ruby'
675c1cc61eaf Update Apache module to get CentOS 8 support IBBoard <dev@ibboard.co.uk> parents: 36 diff changeset	637 $passenger_conf_file = 'passenger.conf'
675c1cc61eaf Update Apache module to get CentOS 8 support IBBoard <dev@ibboard.co.uk> parents: 36 diff changeset	638 $passenger_conf_package_file = undef
675c1cc61eaf Update Apache module to get CentOS 8 support IBBoard <dev@ibboard.co.uk> parents: 36 diff changeset	639 $passenger_default_ruby = undef
675c1cc61eaf Update Apache module to get CentOS 8 support IBBoard <dev@ibboard.co.uk> parents: 36 diff changeset	640 $suphp_addhandler = 'x-httpd-php'
675c1cc61eaf Update Apache module to get CentOS 8 support IBBoard <dev@ibboard.co.uk> parents: 36 diff changeset	641 $suphp_engine = 'off'
675c1cc61eaf Update Apache module to get CentOS 8 support IBBoard <dev@ibboard.co.uk> parents: 36 diff changeset	642 $suphp_configpath = '/etc/php5/apache2'
675c1cc61eaf Update Apache module to get CentOS 8 support IBBoard <dev@ibboard.co.uk> parents: 36 diff changeset	643 $php_version = '5'
675c1cc61eaf Update Apache module to get CentOS 8 support IBBoard <dev@ibboard.co.uk> parents: 36 diff changeset	644 $mod_packages = {
675c1cc61eaf Update Apache module to get CentOS 8 support IBBoard <dev@ibboard.co.uk> parents: 36 diff changeset	645 # NOTE: I list here only modules that are not included in www-servers/apache
675c1cc61eaf Update Apache module to get CentOS 8 support IBBoard <dev@ibboard.co.uk> parents: 36 diff changeset	646 'auth_kerb' => 'www-apache/mod_auth_kerb',
275 d9352a684e62 Mass update of modules to remove deprecation warnings IBBoard <dev@ibboard.co.uk> parents: 257 diff changeset	647 'auth_gssapi' => 'www-apache/mod_auth_gssapi',
257 675c1cc61eaf Update Apache module to get CentOS 8 support IBBoard <dev@ibboard.co.uk> parents: 36 diff changeset	648 'authnz_external' => 'www-apache/mod_authnz_external',
675c1cc61eaf Update Apache module to get CentOS 8 support IBBoard <dev@ibboard.co.uk> parents: 36 diff changeset	649 'fcgid' => 'www-apache/mod_fcgid',
675c1cc61eaf Update Apache module to get CentOS 8 support IBBoard <dev@ibboard.co.uk> parents: 36 diff changeset	650 'passenger' => 'www-apache/passenger',
675c1cc61eaf Update Apache module to get CentOS 8 support IBBoard <dev@ibboard.co.uk> parents: 36 diff changeset	651 'perl' => 'www-apache/mod_perl',
675c1cc61eaf Update Apache module to get CentOS 8 support IBBoard <dev@ibboard.co.uk> parents: 36 diff changeset	652 'phpXXX' => 'dev-lang/php',
675c1cc61eaf Update Apache module to get CentOS 8 support IBBoard <dev@ibboard.co.uk> parents: 36 diff changeset	653 'proxy_html' => 'www-apache/mod_proxy_html',
675c1cc61eaf Update Apache module to get CentOS 8 support IBBoard <dev@ibboard.co.uk> parents: 36 diff changeset	654 'proxy_fcgi' => 'www-apache/mod_proxy_fcgi',
675c1cc61eaf Update Apache module to get CentOS 8 support IBBoard <dev@ibboard.co.uk> parents: 36 diff changeset	655 'python' => 'www-apache/mod_python',
675c1cc61eaf Update Apache module to get CentOS 8 support IBBoard <dev@ibboard.co.uk> parents: 36 diff changeset	656 'wsgi' => 'www-apache/mod_wsgi',
675c1cc61eaf Update Apache module to get CentOS 8 support IBBoard <dev@ibboard.co.uk> parents: 36 diff changeset	657 'dav_svn' => 'dev-vcs/subversion',
675c1cc61eaf Update Apache module to get CentOS 8 support IBBoard <dev@ibboard.co.uk> parents: 36 diff changeset	658 'xsendfile' => 'www-apache/mod_xsendfile',
675c1cc61eaf Update Apache module to get CentOS 8 support IBBoard <dev@ibboard.co.uk> parents: 36 diff changeset	659 'rpaf' => 'www-apache/mod_rpaf',
675c1cc61eaf Update Apache module to get CentOS 8 support IBBoard <dev@ibboard.co.uk> parents: 36 diff changeset	660 'xml2enc' => 'www-apache/mod_xml2enc',
675c1cc61eaf Update Apache module to get CentOS 8 support IBBoard <dev@ibboard.co.uk> parents: 36 diff changeset	661 }
675c1cc61eaf Update Apache module to get CentOS 8 support IBBoard <dev@ibboard.co.uk> parents: 36 diff changeset	662 $mod_libs = {
675c1cc61eaf Update Apache module to get CentOS 8 support IBBoard <dev@ibboard.co.uk> parents: 36 diff changeset	663 }
675c1cc61eaf Update Apache module to get CentOS 8 support IBBoard <dev@ibboard.co.uk> parents: 36 diff changeset	664 $conf_template = 'apache/httpd.conf.erb'
275 d9352a684e62 Mass update of modules to remove deprecation warnings IBBoard <dev@ibboard.co.uk> parents: 257 diff changeset	665 $http_protocol_options = undef
d9352a684e62 Mass update of modules to remove deprecation warnings IBBoard <dev@ibboard.co.uk> parents: 257 diff changeset	666 $keepalive = 'On'
257 675c1cc61eaf Update Apache module to get CentOS 8 support IBBoard <dev@ibboard.co.uk> parents: 36 diff changeset	667 $keepalive_timeout = 15
675c1cc61eaf Update Apache module to get CentOS 8 support IBBoard <dev@ibboard.co.uk> parents: 36 diff changeset	668 $max_keepalive_requests = 100
675c1cc61eaf Update Apache module to get CentOS 8 support IBBoard <dev@ibboard.co.uk> parents: 36 diff changeset	669 $fastcgi_lib_path = undef # TODO: revisit
675c1cc61eaf Update Apache module to get CentOS 8 support IBBoard <dev@ibboard.co.uk> parents: 36 diff changeset	670 $mime_support_package = 'app-misc/mime-types'
675c1cc61eaf Update Apache module to get CentOS 8 support IBBoard <dev@ibboard.co.uk> parents: 36 diff changeset	671 $mime_types_config = '/etc/mime.types'
675c1cc61eaf Update Apache module to get CentOS 8 support IBBoard <dev@ibboard.co.uk> parents: 36 diff changeset	672 $wsgi_socket_prefix = undef
675c1cc61eaf Update Apache module to get CentOS 8 support IBBoard <dev@ibboard.co.uk> parents: 36 diff changeset	673 $docroot = '/var/www/localhost/htdocs'
675c1cc61eaf Update Apache module to get CentOS 8 support IBBoard <dev@ibboard.co.uk> parents: 36 diff changeset	674 $alias_icons_path = '/usr/share/apache2/icons'
675c1cc61eaf Update Apache module to get CentOS 8 support IBBoard <dev@ibboard.co.uk> parents: 36 diff changeset	675 $error_documents_path = '/usr/share/apache2/error'
675c1cc61eaf Update Apache module to get CentOS 8 support IBBoard <dev@ibboard.co.uk> parents: 36 diff changeset	676 $pidfile = '/var/run/apache2.pid'
675c1cc61eaf Update Apache module to get CentOS 8 support IBBoard <dev@ibboard.co.uk> parents: 36 diff changeset	677 $error_log = 'error.log'
675c1cc61eaf Update Apache module to get CentOS 8 support IBBoard <dev@ibboard.co.uk> parents: 36 diff changeset	678 $scriptalias = '/var/www/localhost/cgi-bin'
675c1cc61eaf Update Apache module to get CentOS 8 support IBBoard <dev@ibboard.co.uk> parents: 36 diff changeset	679 $access_log_file = 'access.log'
675c1cc61eaf Update Apache module to get CentOS 8 support IBBoard <dev@ibboard.co.uk> parents: 36 diff changeset	680 } elsif $::osfamily == 'Suse' {
675c1cc61eaf Update Apache module to get CentOS 8 support IBBoard <dev@ibboard.co.uk> parents: 36 diff changeset	681 $user = 'wwwrun'
275 d9352a684e62 Mass update of modules to remove deprecation warnings IBBoard <dev@ibboard.co.uk> parents: 257 diff changeset	682 $group = 'www'
257 675c1cc61eaf Update Apache module to get CentOS 8 support IBBoard <dev@ibboard.co.uk> parents: 36 diff changeset	683 $root_group = 'root'
675c1cc61eaf Update Apache module to get CentOS 8 support IBBoard <dev@ibboard.co.uk> parents: 36 diff changeset	684 $apache_name = 'apache2'
675c1cc61eaf Update Apache module to get CentOS 8 support IBBoard <dev@ibboard.co.uk> parents: 36 diff changeset	685 $service_name = 'apache2'
675c1cc61eaf Update Apache module to get CentOS 8 support IBBoard <dev@ibboard.co.uk> parents: 36 diff changeset	686 $httpd_dir = '/etc/apache2'
675c1cc61eaf Update Apache module to get CentOS 8 support IBBoard <dev@ibboard.co.uk> parents: 36 diff changeset	687 $server_root = '/etc/apache2'
675c1cc61eaf Update Apache module to get CentOS 8 support IBBoard <dev@ibboard.co.uk> parents: 36 diff changeset	688 $conf_dir = $httpd_dir
675c1cc61eaf Update Apache module to get CentOS 8 support IBBoard <dev@ibboard.co.uk> parents: 36 diff changeset	689 $confd_dir = "${httpd_dir}/conf.d"
275 d9352a684e62 Mass update of modules to remove deprecation warnings IBBoard <dev@ibboard.co.uk> parents: 257 diff changeset	690 $conf_enabled = undef
257 675c1cc61eaf Update Apache module to get CentOS 8 support IBBoard <dev@ibboard.co.uk> parents: 36 diff changeset	691 $mod_dir = "${httpd_dir}/mods-available"
675c1cc61eaf Update Apache module to get CentOS 8 support IBBoard <dev@ibboard.co.uk> parents: 36 diff changeset	692 $mod_enable_dir = "${httpd_dir}/mods-enabled"
675c1cc61eaf Update Apache module to get CentOS 8 support IBBoard <dev@ibboard.co.uk> parents: 36 diff changeset	693 $vhost_dir = "${httpd_dir}/sites-available"
675c1cc61eaf Update Apache module to get CentOS 8 support IBBoard <dev@ibboard.co.uk> parents: 36 diff changeset	694 $vhost_enable_dir = "${httpd_dir}/sites-enabled"
675c1cc61eaf Update Apache module to get CentOS 8 support IBBoard <dev@ibboard.co.uk> parents: 36 diff changeset	695 $conf_file = 'httpd.conf'
675c1cc61eaf Update Apache module to get CentOS 8 support IBBoard <dev@ibboard.co.uk> parents: 36 diff changeset	696 $ports_file = "${conf_dir}/ports.conf"
675c1cc61eaf Update Apache module to get CentOS 8 support IBBoard <dev@ibboard.co.uk> parents: 36 diff changeset	697 $pidfile = '/var/run/httpd2.pid'
675c1cc61eaf Update Apache module to get CentOS 8 support IBBoard <dev@ibboard.co.uk> parents: 36 diff changeset	698 $logroot = '/var/log/apache2'
675c1cc61eaf Update Apache module to get CentOS 8 support IBBoard <dev@ibboard.co.uk> parents: 36 diff changeset	699 $logroot_mode = undef
675c1cc61eaf Update Apache module to get CentOS 8 support IBBoard <dev@ibboard.co.uk> parents: 36 diff changeset	700 $lib_path = '/usr/lib64/apache2' #changes for some modules based on mpm
675c1cc61eaf Update Apache module to get CentOS 8 support IBBoard <dev@ibboard.co.uk> parents: 36 diff changeset	701 $mpm_module = 'prefork'
275 d9352a684e62 Mass update of modules to remove deprecation warnings IBBoard <dev@ibboard.co.uk> parents: 257 diff changeset	702
d9352a684e62 Mass update of modules to remove deprecation warnings IBBoard <dev@ibboard.co.uk> parents: 257 diff changeset	703 if $::operatingsystemrelease < '15' {
d9352a684e62 Mass update of modules to remove deprecation warnings IBBoard <dev@ibboard.co.uk> parents: 257 diff changeset	704 $default_ssl_cert = '/etc/apache2/ssl.crt/server.crt'
d9352a684e62 Mass update of modules to remove deprecation warnings IBBoard <dev@ibboard.co.uk> parents: 257 diff changeset	705 $default_ssl_key = '/etc/apache2/ssl.key/server.key'
d9352a684e62 Mass update of modules to remove deprecation warnings IBBoard <dev@ibboard.co.uk> parents: 257 diff changeset	706 } else {
d9352a684e62 Mass update of modules to remove deprecation warnings IBBoard <dev@ibboard.co.uk> parents: 257 diff changeset	707 $default_ssl_cert = '/etc/apache2/ssl.crt/default-server.crt'
d9352a684e62 Mass update of modules to remove deprecation warnings IBBoard <dev@ibboard.co.uk> parents: 257 diff changeset	708 $default_ssl_key = '/etc/apache2/ssl.key/default-server.key'
d9352a684e62 Mass update of modules to remove deprecation warnings IBBoard <dev@ibboard.co.uk> parents: 257 diff changeset	709 }
d9352a684e62 Mass update of modules to remove deprecation warnings IBBoard <dev@ibboard.co.uk> parents: 257 diff changeset	710 $ssl_sessioncache = '/var/lib/apache2/ssl_scache(512000)'
257 675c1cc61eaf Update Apache module to get CentOS 8 support IBBoard <dev@ibboard.co.uk> parents: 36 diff changeset	711 $suphp_addhandler = 'x-httpd-php'
675c1cc61eaf Update Apache module to get CentOS 8 support IBBoard <dev@ibboard.co.uk> parents: 36 diff changeset	712 $suphp_engine = 'off'
675c1cc61eaf Update Apache module to get CentOS 8 support IBBoard <dev@ibboard.co.uk> parents: 36 diff changeset	713 $suphp_configpath = '/etc/php5/apache2'
675c1cc61eaf Update Apache module to get CentOS 8 support IBBoard <dev@ibboard.co.uk> parents: 36 diff changeset	714 $php_version = '5'
675c1cc61eaf Update Apache module to get CentOS 8 support IBBoard <dev@ibboard.co.uk> parents: 36 diff changeset	715 if $::operatingsystemrelease < '11' or $::operatingsystemrelease >= '12' {
675c1cc61eaf Update Apache module to get CentOS 8 support IBBoard <dev@ibboard.co.uk> parents: 36 diff changeset	716 $mod_packages = {
675c1cc61eaf Update Apache module to get CentOS 8 support IBBoard <dev@ibboard.co.uk> parents: 36 diff changeset	717 'auth_kerb' => 'apache2-mod_auth_kerb',
275 d9352a684e62 Mass update of modules to remove deprecation warnings IBBoard <dev@ibboard.co.uk> parents: 257 diff changeset	718 'auth_gssapi' => 'apache2-mod_auth_gssapi',
d9352a684e62 Mass update of modules to remove deprecation warnings IBBoard <dev@ibboard.co.uk> parents: 257 diff changeset	719 'dav_svn' => 'subversion-server',
257 675c1cc61eaf Update Apache module to get CentOS 8 support IBBoard <dev@ibboard.co.uk> parents: 36 diff changeset	720 'perl' => 'apache2-mod_perl',
675c1cc61eaf Update Apache module to get CentOS 8 support IBBoard <dev@ibboard.co.uk> parents: 36 diff changeset	721 'php5' => 'apache2-mod_php5',
675c1cc61eaf Update Apache module to get CentOS 8 support IBBoard <dev@ibboard.co.uk> parents: 36 diff changeset	722 'python' => 'apache2-mod_python',
675c1cc61eaf Update Apache module to get CentOS 8 support IBBoard <dev@ibboard.co.uk> parents: 36 diff changeset	723 'security' => 'apache2-mod_security2',
675c1cc61eaf Update Apache module to get CentOS 8 support IBBoard <dev@ibboard.co.uk> parents: 36 diff changeset	724 'worker' => 'apache2-worker',
675c1cc61eaf Update Apache module to get CentOS 8 support IBBoard <dev@ibboard.co.uk> parents: 36 diff changeset	725 }
675c1cc61eaf Update Apache module to get CentOS 8 support IBBoard <dev@ibboard.co.uk> parents: 36 diff changeset	726 } else {
675c1cc61eaf Update Apache module to get CentOS 8 support IBBoard <dev@ibboard.co.uk> parents: 36 diff changeset	727 $mod_packages = {
675c1cc61eaf Update Apache module to get CentOS 8 support IBBoard <dev@ibboard.co.uk> parents: 36 diff changeset	728 'auth_kerb' => 'apache2-mod_auth_kerb',
275 d9352a684e62 Mass update of modules to remove deprecation warnings IBBoard <dev@ibboard.co.uk> parents: 257 diff changeset	729 'auth_gssapi' => 'apache2-mod_auth_gssapi',
d9352a684e62 Mass update of modules to remove deprecation warnings IBBoard <dev@ibboard.co.uk> parents: 257 diff changeset	730 'dav_svn' => 'subversion-server',
257 675c1cc61eaf Update Apache module to get CentOS 8 support IBBoard <dev@ibboard.co.uk> parents: 36 diff changeset	731 'perl' => 'apache2-mod_perl',
675c1cc61eaf Update Apache module to get CentOS 8 support IBBoard <dev@ibboard.co.uk> parents: 36 diff changeset	732 'php5' => 'apache2-mod_php53',
675c1cc61eaf Update Apache module to get CentOS 8 support IBBoard <dev@ibboard.co.uk> parents: 36 diff changeset	733 'python' => 'apache2-mod_python',
675c1cc61eaf Update Apache module to get CentOS 8 support IBBoard <dev@ibboard.co.uk> parents: 36 diff changeset	734 'security' => 'apache2-mod_security2',
675c1cc61eaf Update Apache module to get CentOS 8 support IBBoard <dev@ibboard.co.uk> parents: 36 diff changeset	735 }
675c1cc61eaf Update Apache module to get CentOS 8 support IBBoard <dev@ibboard.co.uk> parents: 36 diff changeset	736 }
675c1cc61eaf Update Apache module to get CentOS 8 support IBBoard <dev@ibboard.co.uk> parents: 36 diff changeset	737 $mod_libs = {
675c1cc61eaf Update Apache module to get CentOS 8 support IBBoard <dev@ibboard.co.uk> parents: 36 diff changeset	738 'security' => '/usr/lib64/apache2/mod_security2.so',
675c1cc61eaf Update Apache module to get CentOS 8 support IBBoard <dev@ibboard.co.uk> parents: 36 diff changeset	739 'php53' => '/usr/lib64/apache2/mod_php5.so',
675c1cc61eaf Update Apache module to get CentOS 8 support IBBoard <dev@ibboard.co.uk> parents: 36 diff changeset	740 }
675c1cc61eaf Update Apache module to get CentOS 8 support IBBoard <dev@ibboard.co.uk> parents: 36 diff changeset	741 $conf_template = 'apache/httpd.conf.erb'
275 d9352a684e62 Mass update of modules to remove deprecation warnings IBBoard <dev@ibboard.co.uk> parents: 257 diff changeset	742 $http_protocol_options = undef
d9352a684e62 Mass update of modules to remove deprecation warnings IBBoard <dev@ibboard.co.uk> parents: 257 diff changeset	743 $keepalive = 'On'
257 675c1cc61eaf Update Apache module to get CentOS 8 support IBBoard <dev@ibboard.co.uk> parents: 36 diff changeset	744 $keepalive_timeout = 15
675c1cc61eaf Update Apache module to get CentOS 8 support IBBoard <dev@ibboard.co.uk> parents: 36 diff changeset	745 $max_keepalive_requests = 100
675c1cc61eaf Update Apache module to get CentOS 8 support IBBoard <dev@ibboard.co.uk> parents: 36 diff changeset	746 $fastcgi_lib_path = '/var/lib/apache2/fastcgi'
675c1cc61eaf Update Apache module to get CentOS 8 support IBBoard <dev@ibboard.co.uk> parents: 36 diff changeset	747 $mime_support_package = 'aaa_base'
675c1cc61eaf Update Apache module to get CentOS 8 support IBBoard <dev@ibboard.co.uk> parents: 36 diff changeset	748 $mime_types_config = '/etc/mime.types'
675c1cc61eaf Update Apache module to get CentOS 8 support IBBoard <dev@ibboard.co.uk> parents: 36 diff changeset	749 $docroot = '/srv/www'
675c1cc61eaf Update Apache module to get CentOS 8 support IBBoard <dev@ibboard.co.uk> parents: 36 diff changeset	750 $cas_cookie_path = '/var/cache/apache2/mod_auth_cas/'
675c1cc61eaf Update Apache module to get CentOS 8 support IBBoard <dev@ibboard.co.uk> parents: 36 diff changeset	751 $mellon_lock_file = undef
675c1cc61eaf Update Apache module to get CentOS 8 support IBBoard <dev@ibboard.co.uk> parents: 36 diff changeset	752 $mellon_cache_size = undef
675c1cc61eaf Update Apache module to get CentOS 8 support IBBoard <dev@ibboard.co.uk> parents: 36 diff changeset	753 $mellon_post_directory = undef
675c1cc61eaf Update Apache module to get CentOS 8 support IBBoard <dev@ibboard.co.uk> parents: 36 diff changeset	754 $alias_icons_path = '/usr/share/apache2/icons'
675c1cc61eaf Update Apache module to get CentOS 8 support IBBoard <dev@ibboard.co.uk> parents: 36 diff changeset	755 $error_documents_path = '/usr/share/apache2/error'
675c1cc61eaf Update Apache module to get CentOS 8 support IBBoard <dev@ibboard.co.uk> parents: 36 diff changeset	756 $dev_packages = ['libapr-util1-devel', 'libapr1-devel', 'libcurl-devel']
275 d9352a684e62 Mass update of modules to remove deprecation warnings IBBoard <dev@ibboard.co.uk> parents: 257 diff changeset	757 $modsec_version = 1
257 675c1cc61eaf Update Apache module to get CentOS 8 support IBBoard <dev@ibboard.co.uk> parents: 36 diff changeset	758 $modsec_crs_package = undef
675c1cc61eaf Update Apache module to get CentOS 8 support IBBoard <dev@ibboard.co.uk> parents: 36 diff changeset	759 $modsec_crs_path = undef
675c1cc61eaf Update Apache module to get CentOS 8 support IBBoard <dev@ibboard.co.uk> parents: 36 diff changeset	760 $modsec_default_rules = undef
675c1cc61eaf Update Apache module to get CentOS 8 support IBBoard <dev@ibboard.co.uk> parents: 36 diff changeset	761 $modsec_dir = '/etc/apache2/modsecurity'
675c1cc61eaf Update Apache module to get CentOS 8 support IBBoard <dev@ibboard.co.uk> parents: 36 diff changeset	762 $secpcrematchlimit = 1500
675c1cc61eaf Update Apache module to get CentOS 8 support IBBoard <dev@ibboard.co.uk> parents: 36 diff changeset	763 $secpcrematchlimitrecursion = 1500
675c1cc61eaf Update Apache module to get CentOS 8 support IBBoard <dev@ibboard.co.uk> parents: 36 diff changeset	764 $modsec_secruleengine = 'On'
675c1cc61eaf Update Apache module to get CentOS 8 support IBBoard <dev@ibboard.co.uk> parents: 36 diff changeset	765 $error_log = 'error.log'
675c1cc61eaf Update Apache module to get CentOS 8 support IBBoard <dev@ibboard.co.uk> parents: 36 diff changeset	766 $scriptalias = '/usr/lib/cgi-bin'
675c1cc61eaf Update Apache module to get CentOS 8 support IBBoard <dev@ibboard.co.uk> parents: 36 diff changeset	767 $access_log_file = 'access.log'
675c1cc61eaf Update Apache module to get CentOS 8 support IBBoard <dev@ibboard.co.uk> parents: 36 diff changeset	768
675c1cc61eaf Update Apache module to get CentOS 8 support IBBoard <dev@ibboard.co.uk> parents: 36 diff changeset	769 #
675c1cc61eaf Update Apache module to get CentOS 8 support IBBoard <dev@ibboard.co.uk> parents: 36 diff changeset	770 # Passenger-specific settings
675c1cc61eaf Update Apache module to get CentOS 8 support IBBoard <dev@ibboard.co.uk> parents: 36 diff changeset	771 #
675c1cc61eaf Update Apache module to get CentOS 8 support IBBoard <dev@ibboard.co.uk> parents: 36 diff changeset	772
675c1cc61eaf Update Apache module to get CentOS 8 support IBBoard <dev@ibboard.co.uk> parents: 36 diff changeset	773 $passenger_conf_file = 'passenger.conf'
675c1cc61eaf Update Apache module to get CentOS 8 support IBBoard <dev@ibboard.co.uk> parents: 36 diff changeset	774 $passenger_conf_package_file = undef
675c1cc61eaf Update Apache module to get CentOS 8 support IBBoard <dev@ibboard.co.uk> parents: 36 diff changeset	775
675c1cc61eaf Update Apache module to get CentOS 8 support IBBoard <dev@ibboard.co.uk> parents: 36 diff changeset	776 $passenger_root = '/usr/lib64/ruby/gems/1.8/gems/passenger-5.0.30'
675c1cc61eaf Update Apache module to get CentOS 8 support IBBoard <dev@ibboard.co.uk> parents: 36 diff changeset	777 $passenger_ruby = '/usr/bin/ruby'
675c1cc61eaf Update Apache module to get CentOS 8 support IBBoard <dev@ibboard.co.uk> parents: 36 diff changeset	778 $passenger_default_ruby = '/usr/bin/ruby'
675c1cc61eaf Update Apache module to get CentOS 8 support IBBoard <dev@ibboard.co.uk> parents: 36 diff changeset	779 $wsgi_socket_prefix = undef
675c1cc61eaf Update Apache module to get CentOS 8 support IBBoard <dev@ibboard.co.uk> parents: 36 diff changeset	780
0 956e484adc12 Initial public release of Puppet configs IBBoard <dev@ibboard.co.uk> parents: diff changeset	781 } else {
956e484adc12 Initial public release of Puppet configs IBBoard <dev@ibboard.co.uk> parents: diff changeset	782 fail("Class['apache::params']: Unsupported osfamily: ${::osfamily}")
956e484adc12 Initial public release of Puppet configs IBBoard <dev@ibboard.co.uk> parents: diff changeset	783 }
275 d9352a684e62 Mass update of modules to remove deprecation warnings IBBoard <dev@ibboard.co.uk> parents: 257 diff changeset	784
d9352a684e62 Mass update of modules to remove deprecation warnings IBBoard <dev@ibboard.co.uk> parents: 257 diff changeset	785 if ($::operatingsystem == 'Ubuntu' and $::lsbdistrelease == '10.04') or ($::operatingsystem == 'SLES') {
d9352a684e62 Mass update of modules to remove deprecation warnings IBBoard <dev@ibboard.co.uk> parents: 257 diff changeset	786 $verify_command = '/usr/sbin/apache2ctl -t'
d9352a684e62 Mass update of modules to remove deprecation warnings IBBoard <dev@ibboard.co.uk> parents: 257 diff changeset	787 } elsif $::operatingsystem == 'FreeBSD' {
d9352a684e62 Mass update of modules to remove deprecation warnings IBBoard <dev@ibboard.co.uk> parents: 257 diff changeset	788 $verify_command = '/usr/local/sbin/apachectl -t'
d9352a684e62 Mass update of modules to remove deprecation warnings IBBoard <dev@ibboard.co.uk> parents: 257 diff changeset	789 } elsif ($::apache::version::scl_httpd_version) {
d9352a684e62 Mass update of modules to remove deprecation warnings IBBoard <dev@ibboard.co.uk> parents: 257 diff changeset	790 $verify_command = "/opt/rh/${_scl_httpd_name}/root/usr/sbin/apachectl -t"
d9352a684e62 Mass update of modules to remove deprecation warnings IBBoard <dev@ibboard.co.uk> parents: 257 diff changeset	791 } else {
d9352a684e62 Mass update of modules to remove deprecation warnings IBBoard <dev@ibboard.co.uk> parents: 257 diff changeset	792 $verify_command = '/usr/sbin/apachectl -t'
d9352a684e62 Mass update of modules to remove deprecation warnings IBBoard <dev@ibboard.co.uk> parents: 257 diff changeset	793 }
d9352a684e62 Mass update of modules to remove deprecation warnings IBBoard <dev@ibboard.co.uk> parents: 257 diff changeset	794
d9352a684e62 Mass update of modules to remove deprecation warnings IBBoard <dev@ibboard.co.uk> parents: 257 diff changeset	795 if $::osfamily == 'RedHat' and versioncmp($::operatingsystemrelease, '8.0') >= 0 {
d9352a684e62 Mass update of modules to remove deprecation warnings IBBoard <dev@ibboard.co.uk> parents: 257 diff changeset	796 $ssl_protocol = ['all'] # Implementations of the SSLv2 and SSLv3 protocol versions have been removed from OpenSSL (and hence mod_ssl) because these are no longer considered secure. For additional documentation https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/8/html/deploying_different_types_of_servers/setting-apache-web-server_deploying-different-types-of-servers
d9352a684e62 Mass update of modules to remove deprecation warnings IBBoard <dev@ibboard.co.uk> parents: 257 diff changeset	797 } else {
d9352a684e62 Mass update of modules to remove deprecation warnings IBBoard <dev@ibboard.co.uk> parents: 257 diff changeset	798 $ssl_protocol = [ 'all', '-SSLv2', '-SSLv3' ]
d9352a684e62 Mass update of modules to remove deprecation warnings IBBoard <dev@ibboard.co.uk> parents: 257 diff changeset	799 }
0 956e484adc12 Initial public release of Puppet configs IBBoard <dev@ibboard.co.uk> parents: diff changeset	800 }

Mercurial > repos > other > Puppet

annotate modules/apache/manifests/params.pp @ 275:d9352a684e62