Configure gandalf root webserver.

2 files changed, 40 insertions, 0 deletions

diff --git a/manifests/site.pp b/manifests/site.pp
index d4dcce9..19a431d 100644
--- a/manifests/site.pp
+++ b/manifests/site.pp
@@ -4,6 +4,8 @@ node 'gandalf.adrift.space' {
   }
 
   include ::profiles::workstation
+
+  include ::profiles::gandalf_web
 }
 
 node 'hornquist.se' {
diff --git a/modules/profiles/manifests/gandalf_web.pp b/modules/profiles/manifests/gandalf_web.pp
new file mode 100644
index 0000000..7aabf2c
--- /dev/null
+++ b/modules/profiles/manifests/gandalf_web.pp
@@ -0,0 +1,38 @@
+class profiles::gandalf_web {
+
+  class { '::nginx':
+    manage_repo          => false,
+    # server_purge       => true,
+    package_name         => 'nginx',
+    service_config_check => true,
+  }
+
+  $certname = 'bookmark.gandalf.adrift.space'
+
+
+  nginx::resource::server { 'gandalf':
+    ipv6_enable          => true,
+    listen_options       => 'default_server',
+    ipv6_listen_options  => 'default_server',
+    server_name          => [ '_' ],
+    access_log           => absent,
+    error_log            => absent,
+    ssl                  => true,
+    ssl_cert             => "/etc/letsencrypt/live/${certname}/fullchain.pem",
+    ssl_key              => "/etc/letsencrypt/live/${certname}/privkey.pem",
+    ssl_redirect         => true,
+    index_files          => [ 'index.html', ],
+    www_root             => '/var/www/adrift.space',
+    use_default_location => false,
+  }
+
+  nginx::resource::location { '/':
+    try_files   => ['$uri', '$uri/', '=404'],
+    index_files => [],
+    ssl         => true,
+    ssl_only    => true,
+    autoindex   => on,
+    server      => 'gandalf',
+  }
+
+}