---
-infra::role: base_for_old_systems # because we don't need xymon
+infra::role: base_for_old_systems # because we don't need xymon
infra::additional_classes:
- accounts
# facter override
---
-infra::role: base_for_old_systems # because we don't need xymon
+infra::role: base_for_old_systems # because we don't need xymon
infra::additional_classes:
- accounts
# fact override
---
infra::additional_classes:
- repo
-
---
infra::additional_classes:
- repo
-
# Postfix configuration:
# Global configurations
-#postfix::alias_maps: "hash:/etc/aliases"
-#postfix::inet_interfaces: 'all'
-#postfix::manage_mailx: false
-#postfix::mastercf_source: 'puppet:///postfix_dir/master-nullclient.cf'
-#postfix::myorigin: "pixelpark.com"
+# postfix::alias_maps: "hash:/etc/aliases"
+# postfix::inet_interfaces: 'all'
+# postfix::manage_mailx: false
+# postfix::mastercf_source: 'puppet:///postfix_dir/master-nullclient.cf'
+# postfix::myorigin: "pixelpark.com"
xymon::load_warnlevel: '15.0'
xymon::load_paniclevel: '20.0'
- apache::mod::headers
- infra::profile::apache
- apache::mod::proxy_ajp
-
+
accounts::users:
katja.liell:
apply: true
ssl_cert: '/etc/pki/tls/certs/wildcard.pixelpark.net-cert.pem'
ssl_key: '/etc/pki/tls/private/wildcard.pixelpark.net-key.pem'
ssl_chain: '/etc/pki/tls/certs/wildcard.pixelpark.net-cert.pem'
- proxy_preserve_host: On
+ proxy_preserve_host: 'On'
proxy_pass:
- { path: /, url: 'http://bat.pixelpark.net:8080/' }
no_proxy_uris:
#
# Nexus
#
-nexus::nexus_work_dir_manage: false # Grund: Recursion ueber den kompletten Ordner mit Berechtigungsueberpruefung - dauert viel zu lange ist auch unnoetig das alle halbe Stunde zu machen
+nexus::nexus_work_dir_manage: false # Grund: Recursion ueber den kompletten Ordner mit Berechtigungsueberpruefung - dauert viel zu lange ist auch unnoetig das alle halbe Stunde zu machen
infra::profile::infrastructure::nexus::nginx_vhosts:
nexus:
server_name:
ssl_key: /etc/pki/tls/private/wildcard.pixelpark.com-key.pem
ssl_redirect: true
-#infra::profile::infrastructure::sonarqube::plugins:
-# sonar-php-plugin:
-# version: '2.8'
-# groupid: 'org.sonarsource.php'
+# infra::profile::infrastructure::sonarqube::plugins:
+# sonar-php-plugin:
+# version: '2.8'
+# groupid: 'org.sonarsource.php'
# Not found in any maven Repo
-# sonar-css-plugin:
-# version: 1.6
-# groupid: 'org.codehaus.sonar-plugins.css'
-# sonar-web-plugin:
-# version: '2.4'
-# groupid: 'org.sonarsource.sonar-web-plugin'
-# sonar-javascript-plugin:
-# version: '2.12'
-# groupid: 'org.sonarsource.javascript'
-# sonar-build-breaker-plugin:
-# version: '1.1'
-# groupid: 'org.codehaus.sonar-plugins'
+# sonar-css-plugin:
+# version: 1.6
+# groupid: 'org.codehaus.sonar-plugins.css'
+# sonar-web-plugin:
+# version: '2.4'
+# groupid: 'org.sonarsource.sonar-web-plugin'
+# sonar-javascript-plugin:
+# version: '2.12'
+# groupid: 'org.sonarsource.javascript'
+# sonar-build-breaker-plugin:
+# version: '1.1'
+# groupid: 'org.codehaus.sonar-plugins'
#
# Jenkins
ssl_redirect: true
proxy_connect_timeout: "600"
proxy_read_timeout: "600"
- proxy_connect_timeout: "600"
infra::profile::infrastructure::jenkins::jobs: {}
# master-Watcher:
---
infra::additional_classes:
- accounts
-
infra::additional_classes:
- repo
- accounts
-
infra::additional_classes:
- infra::profile::mongodb_server
-infra::profile::mongodb_server::backup::replicaonslave: 'no' # Wir sind eine Standalone Instance
-infra::profile::mongodb_server::backup::oplog: 'no' # we don't use an oplog
-mongodb::server::master: true # Wir sind eine Standalone Instance
+infra::profile::mongodb_server::backup::replicaonslave: 'no' # Wir sind eine Standalone Instance
+infra::profile::mongodb_server::backup::oplog: 'no' # we don't use an oplog
+mongodb::server::master: true # Wir sind eine Standalone Instance
mongodb::server::bind_ip: '0.0.0.0'
mongodb::server::ssl: true
mongodb::server::ssl_key: '/etc/ssl/wildcard.pixelpark.com-key.pem'
java::package: 'java-1.8.0-openjdk-devel'
logstash::verbose_run: true
-
accounts::users:
ivan.prikhodko:
apply: true
- sudo: true
\ No newline at end of file
+ sudo: true
logstash::generic_resource:
ansible:
resource: file
- order: 10 # Input
+ order: 10 # Input
parameters:
path: '/var/log/ansible/*.log'
type: ansible-log
---
infra::additional_classes:
- repo
-
---
infra::additional_classes:
- repo
-
#####################################################
# Nexus Geraffel
-# Grund: Recursion ueber den kompletten Ordner mit Berechtigungsueberpruefung -
+# Grund: Recursion ueber den kompletten Ordner mit Berechtigungsueberpruefung -
# dauert viel zu lange ist auch unnoetig das alle halbe Stunde zu machen
nexus::nexus_work_dir_manage: false
# fact override
nginx::config::http2: 'on'
-
members:
- 127.0.0.1:3000
-infra::profile::mongodb_server::backup::replicaonslave: 'no' # Wir sind eine Standalone Instance
-infra::profile::mongodb_server::backup::oplog: 'no' # we don't use an oplog
-mongodb::server::master: true # Wir sind eine Standalone Instance
+infra::profile::mongodb_server::backup::replicaonslave: 'no' # Wir sind eine Standalone Instance
+infra::profile::mongodb_server::backup::oplog: 'no' # we don't use an oplog
+mongodb::server::master: true # Wir sind eine Standalone Instance
mongodb::server::bind_ip:
- '0.0.0.0'
mongodb::server::ssl: true
infra::profile::mongodb_server::backup::db_password: ENC[PKCS7,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]
rocket_password: ENC[PKCS7,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]
-
---
-infra::role: base
\ No newline at end of file
+infra::role: base
# custom checkcommands muessen spaeter nach common.yaml
infra::profile::icinga2::object::checkcommand:
- 'check_service_crond':
- import:
- - 'ipv4-or-ipv6'
- command: '/opt/pixelpark-monitoring-checks/check_service crond'
- target: '/etc/icinga2/conf.d/pixelpark-monitoring-checkcommands.conf'
+ 'check_service_crond':
+ import:
+ - 'ipv4-or-ipv6'
+ command: '/opt/pixelpark-monitoring-checks/check_service crond'
+ target: '/etc/icinga2/conf.d/pixelpark-monitoring-checkcommands.conf'
# custom checkcommands muessen spaeter nach common.yaml
icinga2::feature::idomysql::database: 'icinga_ido'
icinga2::feature::idomysql::import_schema: true
-
-
infra::profile::icinga2::object::user:
'icingaadmin':
target: '/etc/icinga2/conf.d/users.conf'
import:
- 'generic-service'
check_command: 'check_systemd'
-#_ppplugindir_
+# _ppplugindir_
command_endpoint: 'host.name'
apply: true
assign:
import:
- 'generic-service'
check_command: 'check_service_crond'
-#_ppplugindir_
+# _ppplugindir_
command_endpoint: 'host.name'
apply: true
assign:
import:
- 'generic-service'
check_command: 'check_service_rsyslog'
-#_ppplugindir_
+# _ppplugindir_
command_endpoint: 'host.name'
apply: true
assign:
import:
- 'generic-service'
check_command: 'check_service_postfix'
-#_ppplugindir_
+# _ppplugindir_
command_endpoint: 'host.name'
apply: true
assign:
'mailq_warning': 1
'mailq_critical': 5
'mailq_servertype': 'postfix'
-#_ppplugindir_
+# _ppplugindir_
command_endpoint: 'host.name'
apply: true
assign:
'warning': 1
'critical': 5
'address': 'time.pixelpark.com'
-#_ppplugindir_
+# _ppplugindir_
command_endpoint: 'host.name'
apply: true
assign:
vars:
'swap_wfree': '25%'
'swap_cfree': '10%'
-#_ppplugindir_
+# _ppplugindir_
command_endpoint: 'host.name'
apply: true
assign:
- 'ipv4-or-ipv6'
command: '/opt/pixelpark-monitoring-checks/check_publicis_ad'
target: '/etc/icinga2/conf.d/pixelpark-monitoring-checks.conf'
- 'check_service_crond':
- import:
- - 'ipv4-or-ipv6'
- command: '/opt/pixelpark-monitoring-checks/check_service crond'
- target: '/etc/icinga2/conf.d/pixelpark-monitoring-checkcommands.conf'
- 'check_service_rsyslog':
- import:
- - 'ipv4-or-ipv6'
- command: '/opt/pixelpark-monitoring-checks/check_service rsyslog'
- target: '/etc/icinga2/conf.d/pixelpark-monitoring-checkcommands.conf'
- 'check_service_postfix':
- import:
- - 'ipv4-or-ipv6'
- command: '/opt/pixelpark-monitoring-checks/check_service postfix'
- target: '/etc/icinga2/conf.d/pixelpark-monitoring-checkcommands.conf'
- 'check_systemd':
- import:
- - 'ipv4-or-ipv6'
- command: '/opt/pixelpark-monitoring-checks/check_systemd'
- target: '/etc/icinga2/conf.d/pixelpark-monitoring-checkcommands.conf'
+ 'check_service_crond':
+ import:
+ - 'ipv4-or-ipv6'
+ command: '/opt/pixelpark-monitoring-checks/check_service crond'
+ target: '/etc/icinga2/conf.d/pixelpark-monitoring-checkcommands.conf'
+ 'check_service_rsyslog':
+ import:
+ - 'ipv4-or-ipv6'
+ command: '/opt/pixelpark-monitoring-checks/check_service rsyslog'
+ target: '/etc/icinga2/conf.d/pixelpark-monitoring-checkcommands.conf'
+ 'check_service_postfix':
+ import:
+ - 'ipv4-or-ipv6'
+ command: '/opt/pixelpark-monitoring-checks/check_service postfix'
+ target: '/etc/icinga2/conf.d/pixelpark-monitoring-checkcommands.conf'
+ 'check_systemd':
+ import:
+ - 'ipv4-or-ipv6'
+ command: '/opt/pixelpark-monitoring-checks/check_systemd'
+ target: '/etc/icinga2/conf.d/pixelpark-monitoring-checkcommands.conf'
infra::profile::icinga2::object::hostgroup:
'linux-servers':
apply: true
sudo: true
stephan.vits:
- apply: true
- sudo: true
+ apply: true
+ sudo: true
christian.schoenherr:
apply: true
sudo: true
---
infra::additional_classes:
- repo
-
infra::profile::apache::pp_vhosts:
extranet:
docroot: /var/www/extranet
- servername: extranet.pixelpark.com # wenn fertig umgezogen
+ servername: extranet.pixelpark.com # wenn fertig umgezogen
serveraliases:
- - extranet01.pixelpark.net # DNS Eintrag
- - extranet01.pixelpark.com # CNAME von extranet01.pixelpark.net
+ - extranet01.pixelpark.net # DNS Eintrag
+ - extranet01.pixelpark.com # CNAME von extranet01.pixelpark.net
cert_servername: 'wildcard.pixelpark.com'
cert_customer: 'pixelpark'
ssl_cert: '/etc/pki/tls/certs/wildcard.pixelpark.com-cert.pem'
ssl_cert: /etc/pki/tls/certs/wildcard.pixelpark.com-cert.pem
ssl_key: /etc/pki/tls/private/wildcard.pixelpark.com-key.pem
rewrite_to_https: true
- client_max_body_size: '250m'#
+ client_max_body_size: '250m'
use_default_location: false
error_pages:
'404': '/404.html'
- 'X-Forwarded-Proto $scheme'
- 'X-Forwarded-For $proxy_add_x_forwarded_for'
- 'X-Real-IP $remote_addr'
- - 'Host $http_host'
\ No newline at end of file
+ - 'Host $http_host'
# Postfix configuration:
# Global configurations
-#postfix::alias_maps: "hash:/etc/aliases"
-#postfix::inet_interfaces: 'all'
-#postfix::manage_mailx: false
-#postfix::mastercf_source: 'puppet:///postfix_dir/master-nullclient.cf'
-#postfix::myorigin: "pixelpark.com"
+# postfix::alias_maps: "hash:/etc/aliases"
+# postfix::inet_interfaces: 'all'
+# postfix::manage_mailx: false
+# postfix::mastercf_source: 'puppet:///postfix_dir/master-nullclient.cf'
+# postfix::myorigin: "pixelpark.com"
xymon::load_warnlevel: '15.0'
xymon::load_paniclevel: '20.0'
---
infra::additional_classes:
- accounts
-
---
infra::additional_classes:
- xymon
-
ssl_cert: '/etc/pki/tls/certs/wildcard.pixelpark.com-cert.pem'
ssl_key: '/etc/pki/tls/private/wildcard.pixelpark.com-key.pem'
ssl_chain: '/etc/pki/tls/certs/wildcard.pixelpark.com-cert.pem'
-
+
rewrites_non_ssl:
- https:
comment: 'all to https'
- rabbitmq02.test-cloud.pixelpark.internal:5672
xymon::check::rabbitmq::password: 'sUTrsaeSKduY33io'
xymon::check::rabbitmq::user: 'guest'
-
infra::additional_classes:
- motd
- tcsh
-
infra::role: base
accounts::users:
jenkins:
- managed: false
\ No newline at end of file
+ managed: false
---
-infra::role: base_for_old_systems # because we don't need xymon
+infra::role: base_for_old_systems # because we don't need xymon
infra::additional_classes:
- accounts
# fact override
infra::role: base
infra::additional_classes:
- zabbix::agent
-
+
zabbix::agent::server: '217.66.51.48,217.66.51.91'
zabbix::agent::manage_repo: false
logstash::generic_resource:
ansible:
resource: file
- order: 10 # Input
+ order: 10 # Input
parameters:
path: '/var/log/maillog'
type: mailex
infra::profile::apache::pp_vhosts:
marketing:
docroot: /var/www/marketing
- servername: marketing-publicis-ai.pixelpark.net # Realserver Name
+ servername: marketing-publicis-ai.pixelpark.net # Realserver Name
serveraliases:
- - campaign.pixelpark.com # LB VIP
+ - campaign.pixelpark.com # LB VIP
cert_servername: 'wildcard.pixelpark.com'
cert_customer: 'pixelpark'
ssl_cert: '/etc/pki/tls/certs/wildcard.pixelpark.com-cert.pem'
---
# time03.pixelpark.com
-infra::profile::ntp::disable_ntp: true
\ No newline at end of file
+infra::profile::ntp::disable_ntp: true
---
-infra::role: base_for_old_systems # because we don't need xymon
+infra::role: base_for_old_systems # because we don't need xymon
infra::additional_classes:
- accounts
mysql::server::override_options:
mysqld:
bind-address: '0.0.0.0'
- innodb_file_per_table: ON
+ innodb_file_per_table: true
max_allowed_packet: 512M
innodb_log_file_size: 768M
innodb_log_buffer_size: 32M
infra::additional_classes:
- infra::profile::mcollective::common
- zabbix::agent
-
+
zabbix::agent::server: '217.66.51.48,217.66.51.91'
zabbix::agent::manage_repo: false
-
+
accounts::users:
ivan.prikhodko:
apply: true
sudo: true
-
infra::additional_classes:
- infra::profile::apache
accounts::users:
- stephan.vits: # Rollout Stephan as Tester
+ stephan.vits: # Rollout Stephan as Tester
apply: true
sudo: true
infra::profile::apache::pp_vhosts:
- https:
comment: 'all to https'
rewrite_rule:
- - '^(.*)$ https://owasp-zap.pixelpark.com$1 [L,R=301]'
\ No newline at end of file
+ - '^(.*)$ https://owasp-zap.pixelpark.com$1 [L,R=301]'
---
-infra::role: base_for_old_systems # because we don't need xymon
+infra::role: base_for_old_systems # because we don't need xymon
infra::additional_classes:
- accounts
# facter override
---
-infra::role: base_for_old_systems # because we don't need xymon
+infra::role: base_for_old_systems # because we don't need xymon
infra::additional_classes:
- accounts
# facter override
# custom-admins
infra::role: base
-#infra::additional_classes:
-# - infra::profile::postgresql_server
-# - www_tree
-# - pp_postgresql::backup
+# infra::additional_classes:
+# - infra::profile::postgresql_server
+# - www_tree
+# - pp_postgresql::backup
postgresql::globals::validcon_script_path: "/www/tmp/valid_postgres_connection.sh"
postgresql::globals::version: "9.3"
value: "4096MB"
postgresql::server::ipv4acls:
- - "host confluence confluence 217.66.53.114/32 md5" # Confluence
- - "host confluence confluence 217.66.51.0/24 md5" # Confluence Admin Netz
- - "host jira jira 217.66.53.113/32 md5" # Jira
- - "host jira jira 217.66.51.0/24 md5" # Jira Admin Netz
+ - "host confluence confluence 217.66.53.114/32 md5" # Confluence
+ - "host confluence confluence 217.66.51.0/24 md5" # Confluence Admin Netz
+ - "host jira jira 217.66.53.113/32 md5" # Jira
+ - "host jira jira 217.66.51.0/24 md5" # Jira Admin Netz
- "host confluence_ext confluence_ext 217.66.52.72/32 md5"
- "host confluence_ext confluence_ext 217.66.51.0/24 md5"
- - "host postgres xymon 217.66.53.169/32 trust" # Xymon monitoring User
+ - "host postgres xymon 217.66.53.169/32 trust" # Xymon monitoring User
- "host puppetdb_live puppetdb 93.188.104.37/32 md5"
- "host foreman_live foreman 93.188.104.39/32 md5"
- - "host gerrit gerrit 217.66.53.243/32 md5" # Gerrit
- - "host gitlab gitlab 217.66.53.247/32 md5" # Gitlab
+ - "host gerrit gerrit 217.66.53.243/32 md5" # Gerrit
+ - "host gitlab gitlab 217.66.53.247/32 md5" # Gitlab
- "host all ppadmin 217.66.51.0/24 md5"
- "host all ppadmin 217.66.53.169/32 md5"
user: gitlab
tablespace: ts_gitlab
password: ENC[PKCS7,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]
-
apply: true
sudo: true
bash::package_ensure: latest
-
accounts::users:
ivan.prikhodko:
apply: true
- sudo: true
\ No newline at end of file
+ sudo: true
accounts::users:
thomas.bussmeyer:
apply: true
- sudo: true
\ No newline at end of file
+ sudo: true
postfix::mastercf_source: 'puppet:///postfix_dir/master-client.cf'
pp_postfix::virtual_aliases_source: 'maps/virtual-nullclient-webmaster'
pp_postfix::client_all_interfaces: true
-#pp_postfix::local_relay_interfaces:
-# - ether0
-#pp_postfix::add_my_networks: '10.12.11.0/24'
-
+# pp_postfix::local_relay_interfaces:
+# - ether0
+# pp_postfix::add_my_networks: '10.12.11.0/24'
infra::additional_classes:
- infra::profile::apache_php
-
apache::default_vhost: false
repo::remi_php70: true
php::composer: true
rewrite_cond:
- '%%{ich-trickse}{HTTPS} !=on'
rewrite_rule:
- - '(.*) https://%%{ich-trickse}{HTTP_HOST}%%{ich-trickse}{REQUEST_URI} [R=301,L]'
\ No newline at end of file
+ - '(.*) https://%%{ich-trickse}{HTTP_HOST}%%{ich-trickse}{REQUEST_URI} [R=301,L]'
allow_encoded_slashes: 'on'
scriptaliases:
- { alias: /gitweb, path: /var/www/git/gitweb.cgi }
- directories:
+ directories:
- directory1:
provider: directory
path: '/var/www/git/'
addhandlers:
handler: 'cgi-script'
extensions: '.cgi'
- proxy_preserve_host: On
+ proxy_preserve_host: 'On'
proxy_pass:
- { path: /server-status, url: '!' }
- { path: /server-info, url: '!' }
infra::role: base
infra::additional_classes:
- zabbix::agent
-
+
zabbix::agent::server: '217.66.51.48,217.66.51.91'
zabbix::agent::manage_repo: false
accounts::users:
florian.schade:
apply: true
- sudo: true
\ No newline at end of file
+ sudo: true
ivan.prikhodko:
apply: true
sudo: true
-
infra::additional_packages:
ImageMagick: {}
-#redis
-#redis::bind: 127.0.0.1
-#redis::manage_repo: true
-#redis::timeout: 30
-#redis::maxmemory: 1gb
+# redis
+# redis::bind: 127.0.0.1
+# redis::manage_repo: true
+# redis::timeout: 30
+# redis::maxmemory: 1gb
# php packages
repo::remi_php71: true
mysql::server::backup::backupuser: backup
mysql::server::backup::backuppassword: ENC[PKCS7,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]
-mysql::server::backup::backupdir: /var/lib/backup/mysql
-
# typo3 scheduler cron
infra::profile::cron::cronjobs:
typo3_scheduler:
infra::additional_classes:
- infra::profile::postfix
- infra::profile::cron
-
infra::additional_classes:
- infra::profile::postfix
- infra::profile::cron
-
infra::additional_classes:
- infra::profile::postfix
- infra::profile::cron
-
infra::additional_classes:
- infra::profile::postfix
- infra::profile::cron
-
infra::profile::apache::pp_vhosts:
test-confluence:
docroot: /var/www/test-confluence
- servername: test-confluence01.pixelpark.net # wenn fertig umgezogen
+ servername: test-confluence01.pixelpark.net # wenn fertig umgezogen
cert_servername: 'wildcard.pixelpark.net'
cert_customer: 'pixelpark'
ssl_cert: '/etc/pki/tls/certs/wildcard.pixelpark.net-cert.pem'
- 'valid-user'
- 'ip 217.66.51'
enforce: all
-
+
- provider: location
path: '/confluence'
- provider: location
path: '/synchrony'
rewrites:
- - comment: 'synchrony'
- rewrite_cond:
- - '%{literal("%")}{HTTP:UPGRADE} ^WebSocket$ [NC]'
- - '%{literal("%")}{HTTP:CONNECTION} Upgrade$ [NC]'
- rewrite_rule:
- - .* ws://test-confluence01.pixelpark.net:8091%{REQUEST_URI} [P]
+ - comment: 'synchrony'
+ rewrite_cond:
+ - '%{literal("%")}{HTTP:UPGRADE} ^WebSocket$ [NC]'
+ - '%{literal("%")}{HTTP:CONNECTION} Upgrade$ [NC]'
+ rewrite_rule:
+ - .* ws://test-confluence01.pixelpark.net:8091%{REQUEST_URI} [P]
proxy_pass:
- { path: /server-status, url: '!' }
sudo: true
# custom-admins
-infra::role: base
\ No newline at end of file
+infra::role: base
infra::role: base
accounts::users:
+ gregor.naeckel:
+ apply: true
+ sudo: true
katleen.thiele:
apply: true
sudo: true
infra::profile::apache::pp_vhosts:
marketing:
docroot: /var/www/marketing
- servername: test-marketing-publicis-ai.pixelpark.net # Realserver Name
+ servername: test-marketing-publicis-ai.pixelpark.net # Realserver Name
serveraliases:
- - test-marketing.publicis.ai # LB VIP
+ - test-marketing.publicis.ai # LB VIP
cert_servername: 'wildcard.pixelpark.net'
cert_customer: 'pixelpark'
ssl_cert: '/etc/pki/tls/certs/wildcard.pixelpark.net-cert.pem'
---
-infra::role: base_for_old_systems # because we don't need xymon
+infra::role: base_for_old_systems # because we don't need xymon
infra::additional_classes:
- accounts
ivan.prikhodko:
apply: true
sudo: true
-
# custom-admins
infra::role: base
-#infra::additional_classes:
-# - infra::profile::postgresql_server
+# infra::additional_classes:
+# - infra::profile::postgresql_server
postgresql::globals::validcon_script_path: "/www/tmp/valid_postgres_connection.sh"
postgresql::globals::version: "9.3"
postgresql::server::ipv4acls:
- - "host confluence confluence 217.66.53.112/32 md5" # Test Confluence
- - "host confluence confluence 217.66.51.0/24 md5" # Test Confluence Admin Netz
- - "host jira jira 217.66.53.111/32 md5" # Test Jira
- - "host jira jira 217.66.51.0/24 md5" # Test Jira Admin Netz
- - "host jira_test jira 217.66.51.0/24 md5" # Test JIRA Migration
- - "host confluence_ext confluence_ext 217.66.53.108/32 md5" # Test Confluence Extranet
- - "host confluence_ext confluence_ext 217.66.51.0/24 md5" # Test Confluence Extranet
- - "host confluence_test confluence_test 217.66.53.109/32 md5" # Test Confluence Migration
- - "host confluence_test confluence_test 217.66.53.112/32 md5" # Test Confluence Migration
- - "host confluence_test confluence_test 217.66.51.0/24 md5" # Test Confluence Migration
- - "host postgres xymon 217.66.53.170/32 trust" # self access Xymon
-
+ - "host confluence confluence 217.66.53.112/32 md5" # Test Confluence
+ - "host confluence confluence 217.66.51.0/24 md5" # Test Confluence Admin Netz
+ - "host jira jira 217.66.53.111/32 md5" # Test Jira
+ - "host jira jira 217.66.51.0/24 md5" # Test Jira Admin Netz
+ - "host jira_test jira 217.66.51.0/24 md5" # Test JIRA Migration
+ - "host confluence_ext confluence_ext 217.66.53.108/32 md5" # Test Confluence Extranet
+ - "host confluence_ext confluence_ext 217.66.51.0/24 md5" # Test Confluence Extranet
+ - "host confluence_test confluence_test 217.66.53.109/32 md5" # Test Confluence Migration
+ - "host confluence_test confluence_test 217.66.53.112/32 md5" # Test Confluence Migration
+ - "host confluence_test confluence_test 217.66.51.0/24 md5" # Test Confluence Migration
+ - "host postgres xymon 217.66.53.170/32 trust" # self access Xymon
+
postgresql::server::listen_addresses: 217.66.53.170
infra::profile::postgresql_server::tablespaces:
---
-infra::role: base
\ No newline at end of file
+infra::role: base
---
-infra::role: base
\ No newline at end of file
+infra::role: base
tim.schroeder:
apply: true
shell: bash
-
testuser1:
ensure: "present"
createdb: true
- createrole : false
+ createrole: false
login: true
password: "mypass"
superuser: true
---
infra::additional_classes:
- repo
-
---
infra::additional_classes:
- repo
-
ImageMagick: {}
# redis for typo3 cache
-#redis::bind: 127.0.0.1
-#redis::manage_repo: true
-#redis::timeout: 30
-#redis::maxmemory: 1gb
+# redis::bind: 127.0.0.1
+# redis::manage_repo: true
+# redis::timeout: 30
+# redis::maxmemory: 1gb
# php packages
repo::remi_php71: true
PROC "%baggage_trace.php" 0 2 "TEXT=Gepaeckermittlung Import"
HOST=prd-dyna-dm-01.pixelpark.net
DISK * 95 98
-# HOST=prd-ws01-fbb.pixelpark.net
-# PROC "%/bin/sh ./start-twitter-tracker.sh" "TEXT=Twitter Tracker Starter"
-# PROC "%php twitter-tracker.php" "TEXT=Twitter Tracker PROCESS"
HOST=atropos.pixelpark.com
LOAD 15.0 20.0
PROC "%/bin/java -Xms16g -Xmx16g -XX" 1 1 "TEXT=Elasticsearch"
PROC "%/usr/bin/redis-server" 1 2 "TEXT=Redis"
HOST=grazien.pixelpark.com
LOAD 15.0 20.0
+# HOST=prd-ws01-fbb.pixelpark.net
+# PROC "%/bin/sh ./start-twitter-tracker.sh" "TEXT=Twitter Tracker Starter"
+# PROC "%php twitter-tracker.php" "TEXT=Twitter Tracker PROCESS"
---
-#zabbix::agent::server: '217.66.51.48'
-#zabbix::agent::listenport: 10050
-#zabbix::agent::manage_repo: false
+# zabbix::agent::server: '217.66.51.48'
+# zabbix::agent::listenport: 10050
+# zabbix::agent::manage_repo: false
zabbix::agent::server: '217.66.51.48,217.66.51.91'
zabbix::agent::manage_repo: true
zabbix::repo::version: '2.4'
-
projects / pixelpark / hiera.git / commitdiff