1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
|
class profiles::shiori (
String $server_name,
Array[String] $group_members = [],
$port = 8080,
) {
class { 'shiori':
port => $port,
}
group { 'shiori':
ensure => present,
members => $group_members,
}
include ::profiles::group_profile
file { '/etc/profile.d/group.d/shiori':
ensure => file,
content => "export SHIORI_DIR=${shiori::dir}\n",
}
include ::nginx
$certname = lookup('certname')
# TODO merge these options with lookup('nginx::nginx_servers_defaults') ?
nginx::resource::server { $server_name:
ipv6_enable => true,
ipv6_listen_options => '',
ssl => true,
ssl_redirect => true,
ssl_cert => "/etc/letsencrypt/live/${certname}/fullchain.pem",
ssl_key => "/etc/letsencrypt/live/${certname}/privkey.pem",
www_root => $shiori::dir,
use_default_location => false,
access_log => absent,
error_log => absent,
}
nginx::resource::location { 'shiori /':
location => '/',
proxy => "http://[::]:$port",
index_files => [],
ssl => true,
ssl_only => true,
server => $server_name,
add_header => {
'Access-Control-Allow-Origin' => 'https://lysator.liu.se',
}
}
}
|
