Puppet Class: profile::maps::tlsproxy

Defined in:
modules/profile/manifests/maps/tlsproxy.pp

Overview

Parameters:

  • servicename (Any) (defaults to: hiera('profile::maps::tlsproxy::servicename'))
  • ocsp_proxy (Any) (defaults to: hiera('http_proxy', ''))


1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
# File 'modules/profile/manifests/maps/tlsproxy.pp', line 1

class profile::maps::tlsproxy(
    $servicename = hiera('profile::maps::tlsproxy::servicename'),
    $ocsp_proxy = hiera('http_proxy', ''),
) {
    tlsproxy::localssl { $servicename:
        server_name    => $servicename,
        certs          => [$servicename],
        upstream_ports => [6533],
        default_server => true,
        do_ocsp        => false,
        ocsp_proxy     => $ocsp_proxy,
    }

    monitoring::service { 'maps-https':
        description   => 'Maps HTTPS',
        check_command => "check_https_url!${servicename}!/osm-intl/6/23/24.png",
        notes_url     => 'https://wikitech.wikimedia.org/wiki/Maps/RunBook',
    }

    ferm::service { 'maps-proxy-https':
        proto   => 'tcp',
        notrack => true,
        port    => '443',
    }
}