Puppet Class: profile::maps::tlsproxy

Defined in:
modules/profile/manifests/maps/tlsproxy.pp

Overview

SPDX-License-Identifier: Apache-2.0

Parameters:

  • servicename (String) (defaults to: lookup('profile::maps::tlsproxy::servicename'))
  • ocsp_proxy (String) (defaults to: lookup('http_proxy', {'default_value' => ''}))


2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
# File 'modules/profile/manifests/maps/tlsproxy.pp', line 2

class profile::maps::tlsproxy(
    String $servicename      = lookup('profile::maps::tlsproxy::servicename'),
    String $ocsp_proxy       = lookup('http_proxy', {'default_value' => ''}),
){

    tlsproxy::localssl { $servicename:
        server_name     => $servicename,
        certs           => [$servicename],
        upstream_ports  => [6533],
        default_server  => true,
        do_ocsp         => false,
        ocsp_proxy      => $ocsp_proxy,
        ssl_ecdhe_curve => false,
        enable_http2    => false,
    }

    monitoring::service { 'maps-https':
        description   => 'Maps HTTPS',
        check_command => "check_https_url!${servicename}!/osm-intl/6/23/24.png",
        notes_url     => 'https://wikitech.wikimedia.org/wiki/Maps/RunBook',
    }

    ferm::service { 'maps-proxy-https':
        proto   => 'tcp',
        notrack => true,
        port    => '443',
    }
}