3 $password_seed = lookup("base_installation::puppet_pass_seed")
4 $web_host = lookup("base_installation::real_hostname")
5 $web_listen = "0.0.0.0"
7 $pg_db = "etherpad-lite"
8 $pg_user = "etherpad-lite"
9 $pg_password = generate_password(24, $password_seed, "postgres_etherpad")
11 $ldap_server = lookup("base_installation::ldap_server")
12 $ldap_base = lookup("base_installation::ldap_base")
13 $ldap_dn = lookup("base_installation::ldap_dn")
14 $ldap_account_pattern = "(&(memberOf=cn=users,cn=etherpad,ou=services,dc=immae,dc=eu)(uid={{username}}))"
15 $ldap_group_pattern = "(memberOf=cn=groups,cn=etherpad,ou=services,dc=immae,dc=eu)"
16 $ldap_password = generate_password(24, $password_seed, "ldap")
19 include "base_installation"
21 include "profile::tools"
22 include "profile::postgresql"
23 include "profile::apache"
25 ensure_packages(["npm"])
26 ensure_packages(["abiword"])
27 ensure_packages(["libreoffice-fresh", "libreoffice-fresh-fr", "java-runtime-common", "jre8-openjdk"])
28 ensure_packages(["tidy"])
29 aur::package { "etherpad-lite": }
30 -> patch::file { "/usr/share/etherpad-lite/src/node/utils/LibreOffice.js":
31 diff_source => "puppet:///modules/role/etherpad/libreoffice_patch.diff",
33 -> file { "/etc/etherpad-lite/settings.json":
35 owner => "etherpad-lite",
36 group => "etherpad-lite",
37 notify => Service["etherpad-lite"],
38 content => template("role/etherpad/settings.json.erb"),
42 "ep_aa_file_menu_toolbar",
46 "ep_clear_formatting",
48 "ep_copy_paste_select_all",
60 "ep_set_title_on_pad",
61 "ep_subscript_and_superscript",
65 $modules.each |$module| {
66 exec { "npm_install_$module":
67 command => "/usr/bin/npm install $module",
68 unless => "/usr/bin/test -d /usr/share/etherpad-lite/node_modules/$module",
69 cwd => "/usr/share/etherpad-lite/",
70 environment => "HOME=/root",
71 require => Aur::Package["etherpad-lite"],
72 before => Service["etherpad-lite"],
73 notify => Service["etherpad-lite"],
76 file { "/usr/share/etherpad-lite/node_modules/$module/.ep_initialized":
79 before => Service["etherpad-lite"],
83 service { "etherpad-lite":
86 require => [Aur::Package["etherpad-lite"], Service["postgresql"]],
87 subscribe => Aur::Package["etherpad-lite"],
90 profile::postgresql::master { "postgresql master for etherpad":
91 letsencrypt_host => $web_host,
92 backup_hosts => ["backup-1"],
95 postgresql::server::db { $pg_db:
97 password => postgresql_password($pg_user, $pg_password),
100 postgresql::server::pg_hba_rule { "allow local access to $pg_user user":
104 auth_method => 'ident',