- java
- accounts
- infra::profile::cron
+
accounts::users:
jenkins:
apply: true
+ sirona:
+ apply: false
sudo::configs:
+ aem:
+ priority: "05"
+ content: |
+ Cmnd_Alias START_PUBLISH = /usr/bin/systemctl start publish
+ Cmnd_Alias START_AUTHOR = /usr/bin/systemctl start author
+ Cmnd_Alias START_PUPPET = /usr/bin/systemctl start puppet
+ Cmnd_Alias STOP_PUBLISH = /usr/bin/systemctl stop publish
+ Cmnd_Alias STOP_AUTHOR = /usr/bin/systemctl stop author
+ Cmnd_Alias STOP_PUPPET = /usr/bin/systemctl stop puppet
+ Cmnd_Alias BACKUP = /usr/local/sbin/zfs_rotation.sh*
+ aem ALL=(ALL) NOPASSWD:START_PUBLISH, START_AUTHOR, START_PUPPET, STOP_PUBLISH, STOP_AUTHOR, STOP_PUPPET, BACKUP
becomeAEM:
priority: "06"
content: |
jenkins ALL=(aem) NOPASSWD: ALL
+ xymon:
+ priority: "05"
+ content: |
+ Cmnd_Alias ZPOOL = /sbin/zpool list *
+ Cmnd_Alias ZFS = /sbin/zfs list
+ xymon ALL=(ALL) NOPASSWD:ZPOOL, ZFS
# Use official Repo
repo::redhat::centos::base_baseurl: absent
infra::profile::cron::cronjobs:
zfs_rotation:
user: root
- command: '/usr/local/sbin/zfs_rotation.sh datapool 2592000' # 30 days
+ command: '/usr/local/sbin/zfs_rotation.sh datapool 2592000' # 30 days
minute: 0
hour: 2
description: ZFS Snapshot
- '1.centos.pool.ntp.org'
- '2.centos.pool.ntp.org'
-accounts::users:
- sirona:
- apply: false
-
aem::maven::mirrors:
- {id: pixelpark-nexus, url: 'https://nexus.pixelpark.com/content/groups/public/', mirrorof: '*,!pixelpark-nexus,!sirona-releases,!sirona-snapshots'}
aem::maven::repos:
username: sirona
password: ENC[PKCS7,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]
-sudo::configs:
- aem:
- priority: "05"
- content: |
- Cmnd_Alias START_PUBLISH = /usr/bin/systemctl start publish
- Cmnd_Alias START_AUTHOR = /usr/bin/systemctl start author
- Cmnd_Alias START_PUPPET = /usr/bin/systemctl start puppet
- Cmnd_Alias STOP_PUBLISH = /usr/bin/systemctl stop publish
- Cmnd_Alias STOP_AUTHOR = /usr/bin/systemctl stop author
- Cmnd_Alias STOP_PUPPET = /usr/bin/systemctl stop puppet
- Cmnd_Alias BACKUP = /usr/local/sbin/zfs_rotation.sh*
- aem ALL=(ALL) NOPASSWD:START_PUBLISH, START_AUTHOR, START_PUPPET, STOP_PUBLISH, STOP_AUTHOR, STOP_PUPPET, BACKUP
- becomeAEM:
- priority: "06"
- content: |
- jenkins ALL=(aem) NOPASSWD: ALL
- xymon:
- priority: "05"
- content: |
- Cmnd_Alias ZPOOL = /sbin/zpool list *
- Cmnd_Alias ZFS = /sbin/zfs list
- xymon ALL=(ALL) NOPASSWD:ZPOOL, ZFS
-
#
# Author
#
infra::profile::aem::author::jvm_opts: '-d64 -Dcom.sun.management.jmxremote -Dcom.sun.management.jmxremote.port=9010 -Dcom.sun.management.jmxremote.ssl=false -Dcom.sun.management.jmxremote.authenticate=false'
-#aem::author::install_packages:
+# aem::author::install_packages:
infra::profile::aem::author::instance_name: author
infra::profile::aem::author::install_mode: 'quickstart'
infra::profile::aem::author::install_options:
# Compaction & Backup for Author
infra::profile::aem::author::backup_command: '/usr/bin/sudo -n /usr/local/sbin/zfs_rotation.sh datapool 2592000'
-infra::profile::aem::author::compaction_timeout: 21600 # 6h Timeout
+infra::profile::aem::author::compaction_timeout: 21600 # 6h Timeout
infra::profile::aem::author::mail_to:
- philipp.dallig@pixelpark.com
#
-# Publisher
+# Publisher
#
infra::profile::aem::publish::license_download_id: ENC[PKCS7,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]
infra::profile::aem::publish::license_product_version: '6.2.0'
# Compaction & Backup for Publisher
infra::profile::aem::publish::backup_command: '/usr/bin/sudo -n /usr/local/sbin/zfs_rotation.sh datapool 2592000'
-infra::profile::aem::publish::compaction_timeout: 21600 # 6h Timeout
+infra::profile::aem::publish::compaction_timeout: 21600 # 6h Timeout
infra::profile::aem::publish::mail_to:
- philipp.dallig@pixelpark.com
#
version: 4.2.0
packaging: so
repos: https://nexus.pixelpark.com/content/groups/public/
-
-
---
infra::additional_classes:
- - infra::profile::aem::author
\ No newline at end of file
+ - infra::profile::aem::author
---
infra::additional_classes:
- - infra::profile::aem::author
\ No newline at end of file
+ - infra::profile::aem::author
---
infra::additional_classes:
- - infra::profile::aem::publish
\ No newline at end of file
+ - infra::profile::aem::publish
---
infra::additional_classes:
- infra::profile::aem::publish
-infra::profile::aem::publish::port: 4504
\ No newline at end of file
+infra::profile::aem::publish::port: 4504
---
infra::additional_classes:
- - infra::profile::aem::publish
\ No newline at end of file
+ - infra::profile::aem::publish
---
# Author
-#infra::profile::aem::author::admin_pass: ENC[PKCS7,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]
+# infra::profile::aem::author::admin_pass: ENC[PKCS7,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]
infra::profile::aem::author::oak_version: 1.4.8
# Publisher
-#infra::profile::aem::publish::admin_pass: ENC[PKCS7,MIIBiQYJKoZIhvcNAQcDoIIBejCCAXYCAQAxggEhMIIBHQIBADAFMAACAQEwDQYJKoZIhvcNAQEBBQAEggEAYPmonogCYqFe79tYHhPbs2k2UWBS2fqxBJ70cnBfZdPQa935JMViAEEBu03YFDI4P4PYAFer9+HND7HuomkusDfN5AD2PFdZsPBwwMPnEJcnBblmlSSJQMKkQAtFddJGGE3LuEqCZMv6ZADE/pNQwZLcWGbb2lMaM/siMhFhBAepYwuJyfo65CXrHQ623DG0nqb6i3an7gt/cjuGzjhpI4W3jpkLyW6Ce86iQhb5h//OsItvFpTp2+kIhdFyzunbKVbgORxfgjauUvYs8ur0dybrF5qb7W45RyyLzgNhVsoYdpE003P/9b9nrAWXODkiM08a9YyiyoXfCjv26l8ouDBMBgkqhkiG9w0BBwEwHQYJYIZIAWUDBAEqBBDCWhsAJu1BB5NJmTGuDNuYgCCnR1CzR+4WLUhPDcX+594XfTat/nbtnecpl+SacAD6Kw==]
+# infra::profile::aem::publish::admin_pass: ENC[PKCS7,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]
infra::profile::aem::publish::oak_version: 1.4.8
-#aem::author::install_packages:
+# aem::author::install_packages:
infra::profile::aem::author::instance_name: author
infra::profile::aem::author::install_mode: 'quickstart'
infra::profile::aem::author::install_options:
---
# Author
-#infra::profile::aem::author::admin_pass: ENC[PKCS7,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]
+# infra::profile::aem::author::admin_pass: ENC[PKCS7,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]
infra::profile::aem::author::oak_version: 1.4.8
# Publisher
-#infra::profile::aem::publish::admin_pass: ENC[PKCS7,MIIBiQYJKoZIhvcNAQcDoIIBejCCAXYCAQAxggEhMIIBHQIBADAFMAACAQEwDQYJKoZIhvcNAQEBBQAEggEAZCjhM/H/XoqufG54YM5hZ1DnFPI/WZdHkQqlRPnyHC0NG+uvloR13ew6ht+IHfAaXQW0oiWEyn6G3TtBQMonknWJBfi2+czQoBlM3/UeiSpICRUjxxbSs5y+THHzrVR6J8AqdY86Wr0vAdGXlx/dTg6RkPRiAUwfrVxxgqTSV5DReUrIi5FQcBlJzyL+33B8KcRjPk2smvkV24y+/mL5qXm2Sck0Ek3V9AfYnTpWZ261PWqgYmC4aI4vx5maprNiQBxlt8PLT9TROvZh9tWp6jmCYkxQZkk8FpqrkjawwgNqMyqPSFo5aKg/pRSMJcNT7ss5eu3W8MtbfKcWPanamzBMBgkqhkiG9w0BBwEwHQYJYIZIAWUDBAEqBBCJbdvpcLuOqzKOyYyQ0ZPWgCDNlMrXU0uaDq9b5+W5XmMDynR/0mmx1X3KVdksri71DQ==]
+# infra::profile::aem::publish::admin_pass: ENC[PKCS7,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]
infra::profile::aem::publish::oak_version: 1.4.8
-#aem::author::install_packages:
+# aem::author::install_packages:
infra::profile::aem::author::instance_name: author
infra::profile::aem::author::install_mode: 'quickstart'
infra::profile::aem::author::install_options:
- { type: 'deny', glob: '*' }
- { type: 'allow', url: '/' }
- { type: 'allow', url: '*.html' }
- - { type: 'allow', url: '*.css' } # enable css
- - { type: 'allow', url: '*.gif' } # enable gifs
- - { type: 'allow', url: '*.ico' } # enable icos
- - { type: 'allow', url: '*.js' } # enable javascript
- - { type: 'allow', url: '*.png' } # enable png
- - { type: 'allow', url: '*.swf' } # enable flash
- - { type: 'allow', url: '*.jpg' } # enable jpg
- - { type: 'allow', url: '*.jpeg' } # enable jpeg
- - { type: 'allow', url: '*.svg' } # enable svg
- - { type: 'allow', url: '*.ttf' } # enable ttf
- - { type: 'allow', url: '*.woff' } # enable woff
- - { type: 'allow', url: '*.woff2' } # enable woff2
- - { type: 'allow', url: '*.eot' } # enable eot
- - { type: 'allow', url: '*.pdf' } # enable pdf
+ - { type: 'allow', url: '*.css' } # enable css
+ - { type: 'allow', url: '*.gif' } # enable gifs
+ - { type: 'allow', url: '*.ico' } # enable icos
+ - { type: 'allow', url: '*.js' } # enable javascript
+ - { type: 'allow', url: '*.png' } # enable png
+ - { type: 'allow', url: '*.swf' } # enable flash
+ - { type: 'allow', url: '*.jpg' } # enable jpg
+ - { type: 'allow', url: '*.jpeg' } # enable jpeg
+ - { type: 'allow', url: '*.svg' } # enable svg
+ - { type: 'allow', url: '*.ttf' } # enable ttf
+ - { type: 'allow', url: '*.woff' } # enable woff
+ - { type: 'allow', url: '*.woff2' } # enable woff2
+ - { type: 'allow', url: '*.eot' } # enable eot
+ - { type: 'allow', url: '*.pdf' } # enable pdf
# Enable features
- - { type: 'allow', url: '/libs/cq/personalization/*' } # enable personalization
- - { type: 'allow', url: '/content/dam/api.json' } # enable generic asset JSON API
- - { type: 'allow', url: '*.assetlibrary.json' } # enable asset library JSON API
+ - { type: 'allow', url: '/libs/cq/personalization/*' } # enable personalization
+ - { type: 'allow', url: '/content/dam/api.json' } # enable generic asset JSON API
+ - { type: 'allow', url: '*.assetlibrary.json' } # enable asset library JSON API
# Deny content grabbing
- { type: 'deny', url: '*.infinity.json' }
- - { type: 'deny', url: '*.tidy.json' }
- - { type: 'deny', url: '*.sysview.xml' }
- - { type: 'deny', url: '*.docview.json' }
- - { type: 'deny', url: '*.docview.xml' }
- - { type: 'deny', url: '*.*[0-9].json' }
+ - { type: 'deny', url: '*.tidy.json' }
+ - { type: 'deny', url: '*.sysview.xml' }
+ - { type: 'deny', url: '*.docview.json' }
+ - { type: 'deny', url: '*.docview.xml' }
+ - { type: 'deny', url: '*.*[0-9].json' }
# Deny query
- { type: 'deny', url: '*.query.json' }
cache_docroot: '/var/www/html/cache'