aboutsummaryrefslogtreecommitdiff
path: root/manifests/proxy/nginx.pp
blob: 3e2d18087a80112c67815b674f94914fe950d1bb (plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
# @summary Revproxy for concourse
#
# Rev-proxy, which also gathers all web nodes in a cluster, into a 
# single web endpoint
#
# @param server_name
#   Name of the nginx server, will also be used for rev-proxy routing.
# @param cluster
#   Name of the concourse cluster.
# @param ensure
define concourse::proxy::nginx (
  String $server_name = $name,
  String $cluster = $concourse::default_cluster,
  Enum['absent', 'present'] $ensure = 'present',
) {
  include concourse

  nginx::resource::upstream { "concourse - ${cluster}":
    ensure => $ensure,
  }

  nginx::resource::server { $server_name:
    # TODO everything here
  }

  nginx::resource::streamhost { "${server_name}-stream":
    listen_port         => 2222,
    ipv6_enable         => true,
    ipv6_listen_options => '',
    proxy               => $server_name,
  }

  nginx::resource::location { "${server_name} - /":
    location   => '/',
    proxy_pass => "http://${cluster}",
  }

  nginx::resource::location { "${server_name} - ~ /hijack$":
    location         => '~ /hijack$',
    proxy_pass       => "http://${cluster}",
    proxy_set_header => [
      'Host $host',
      'X-Real-IP $remote_addr',
      'X-Forwarded-For $proxy_add_x_forwarded_for',
      'X-Forwarded-Host $host',
      'X-Forwarded-Proto $scheme',
      'Proxy ""',
      'Upgrade $http_upgrade',
      'Connection "upgrade"',
    ],
  }
}