Mercurial > repos > other > Puppet

comparison modules/website/manifests/https/multitld.pp @ 284:9431aec4d998

Find changesets by keywords (author, files, the commit message), revision number or hash, or revset expression.
Switch to using IPv6 prefix and IP per site This is because the proxy seems to break SNI, so we need an IP per SSL cert. We're not short of IPv6 addresses, though! Also corrected to "4to6" naming, because we're letting IPv4 access an IPv6 site
author IBBoard <dev@ibboard.co.uk>
date Sun, 16 Feb 2020 12:07:35 +0000
parents af7df930a670
children 386881985a35
comparison
equal deleted inserted replaced
283:d29f477c51d4 284:9431aec4d998
1 define website::https::multitld ( 1 define website::https::multitld (
2 Optional[String] $docroot = undef, 2 Optional[String] $docroot = undef,
3 String $ip = $website::primary_ip, 3 Stdlib::IP::Address $ip = $website::primary_ip,
4 Stdlib::IP::Address::V6 $proxy_4to6_ip = undef,
4 Optional[Integer] $priority = undef, 5 Optional[Integer] $priority = undef,
5 String $base = $name, 6 String $base = $name,
6 Pattern[/^[a-z]+(\.[a-z]+)?$/] $main_tld = $website::tld, 7 Pattern[/^[a-z]+(\.[a-z]+)?$/] $main_tld = $website::tld,
7 Array $extra_tlds = $website::extra_tlds, 8 Array $extra_tlds = $website::extra_tlds,
8 Optional[String] $ssl_ca_chain = undef, 9 Optional[String] $ssl_ca_chain = undef,
35 36
36 $main_domain = "${base}.${main_tld}" 37 $main_domain = "${base}.${main_tld}"
37 website::https { $main_domain: 38 website::https { $main_domain:
38 priority => $priority, 39 priority => $priority,
39 ip => $ip, 40 ip => $ip,
41 proxy_4to6_ip => $proxy_4to6_ip,
40 serveraliases => $aliases, 42 serveraliases => $aliases,
41 docroot => $docroot, 43 docroot => $docroot,
42 docroot_owner => $docroot_owner, 44 docroot_owner => $docroot_owner,
43 docroot_group => $docroot_group, 45 docroot_group => $docroot_group,
44 ssl_ca_chain => $ssl_ca_chain, 46 ssl_ca_chain => $ssl_ca_chain,