1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
|
# File 'modules/dynamicproxy/manifests/api.pp', line 1
class dynamicproxy::api(
$port = 5668,
) {
file { '/usr/local/bin/invisible-unicorn.py':
source => 'puppet:///modules/dynamicproxy/invisible-unicorn.py',
owner => 'root',
group => 'root',
mode => '0555',
}
require_package('python3-flask', 'python3-redis', 'python3-flask-sqlalchemy', 'sqlite3')
uwsgi::app { 'invisible-unicorn':
settings => {
uwsgi => {
plugins => 'python3',
master => true,
http-socket => '0.0.0.0:5668',
mount => '/dynamicproxy-api=/usr/local/bin/invisible-unicorn.py',
callable => 'app',
manage-script-name => true,
workers => 4,
},
},
subscribe => File['/usr/local/bin/invisible-unicorn.py'],
}
file { '/etc/dynamicproxy-api':
ensure => directory,
owner => 'www-data',
group => 'www-data',
}
file { '/data/project/backup':
ensure => directory,
owner => 'root',
group => 'root',
mode => '0755',
}
file { '/data/project/backup/README':
source => 'puppet:///modules/dynamicproxy/BackupReadme',
owner => 'root',
group => 'root',
mode => '0644',
require => File['/data/project/backup'],
}
file { '/usr/local/sbin/proxydb-bak.sh':
mode => '0555',
owner => 'root',
group => 'root',
source => 'puppet:///modules/dynamicproxy/proxydb-bak.sh',
}
cron { 'proxydb-bak':
ensure => present,
user => 'root',
hour => '1',
minute => '0',
command => '/usr/local/sbin/proxydb-bak.sh > /dev/null 2>&1',
require => File['/data/project/backup'],
}
# Create initial db file if it doesn't exist, but don't clobber if it does.
file { '/etc/dynamicproxy-api/data.db':
ensure => file,
source => 'puppet:///modules/dynamicproxy/initial-data.db',
replace => false,
require => File['/etc/dynamicproxy-api'],
owner => 'www-data',
group => 'www-data',
}
# This is a GET-only front end that sits on port 5669. We can
# open this up to the public even though the actual API has no
# auth protections.
nginx::site { 'proxygetter':
source => 'puppet:///modules/dynamicproxy/proxygetter.conf',
}
}
|