X-Git-Url: https://git.immae.eu/?a=blobdiff_plain;f=modules%2Frole%2Fmanifests%2Fcryptoportfolio.pp;h=966f549fa81e3a73b8334bd8662ebd3cb3ee448e;hb=bdcfd78f03d54b20c25805b24b0443f2a107e72b;hp=4b03e1682031ae5b41c6bc30f3b29dafa4606175;hpb=6a9197764f7d6f5bc7f321d45caaf66fd2dd6dd2;p=perso%2FImmae%2FProjets%2FPuppet.git diff --git a/modules/role/manifests/cryptoportfolio.pp b/modules/role/manifests/cryptoportfolio.pp index 4b03e16..966f549 100644 --- a/modules/role/manifests/cryptoportfolio.pp +++ b/modules/role/manifests/cryptoportfolio.pp @@ -1,30 +1,45 @@ -class role::cryptoportfolio { +class role::cryptoportfolio ( + String $user, + String $group, + String $home, + Optional[String] $env = "prod", + Optional[String] $webhook_url = undef, + String $pg_user, + String $pg_user_replication, + String $pg_db, + Optional[String] $pg_hostname = "localhost", + Optional[String] $pg_port = "5432", + Optional[String] $redis_host = "/run/redis/redis.sock", + Optional[String] $web_host = undef, + Optional[String] $web_port = "", + Optional[Boolean] $web_ssl = true, + Optional[String] $front_version = undef, + Optional[String] $front_sha256 = undef, + Optional[String] $trader_version = undef, + Optional[String] $trader_sha256 = undef, +) { include "base_installation" + include "profile::tools" include "profile::postgresql" + include "profile::apache" + include "profile::xmr_stak" + include "profile::boinc" - $password_seed = lookup("base_installation::puppet_pass_seed") |$key| { {} } + contain "role::cryptoportfolio::postgresql" + contain "role::cryptoportfolio::apache" - postgresql::server::db { 'cryptoportfolio': - user => 'cryptoportfolio', - password => postgresql_password('cryptoportfolio', generate_password(24, $password_seed, "postgres_cryptoportfolio")), - } + contain "role::cryptoportfolio::notify" - postgresql::server::pg_hba_rule { 'allow localhost TCP access to cryptoportfolio user': - type => 'host', - database => 'cryptoportfolio', - user => 'cryptoportfolio', - address => '127.0.0.1/32', - auth_method => 'md5', - order => "b0", + unless empty($trader_version) { + if versioncmp($trader_version, "v1.3") >= 0 { + include "profile::redis" + } + contain "role::cryptoportfolio::bot" } - postgresql::server::pg_hba_rule { 'allow localhost ip6 TCP access to cryptoportfolio user': - type => 'host', - database => 'cryptoportfolio', - user => 'cryptoportfolio', - address => '::1/128', - auth_method => 'md5', - order => "b0", + + # FIXME: restore backup + unless empty($front_version) { + contain "role::cryptoportfolio::front" } - ensure_packages("go") }