stuff

9 files changed, 182 insertions, 147 deletions

diff --git a/modules/blog/files/special-files.ini b/modules/blog/files/special-files.ini
new file mode 100644
index 0000000..e69de29
--- /dev/null
+++ b/modules/blog/files/special-files.ini
diff --git a/modules/blog/manifests/blog.pp b/modules/blog/manifests/blog.pp
new file mode 100644
index 0000000..9b5f050
--- /dev/null
+++ b/modules/blog/manifests/blog.pp
@@ -0,0 +1,6 @@
+class blog (
+  String $blog_root,
+  Hash[String,Hash] $blogs = {}
+) {
+  create_resources(blog::instance, $blogs)
+}
diff --git a/modules/blog/manifests/init.pp b/modules/blog/manifests/init.pp
deleted file mode 100644
index a639311..0000000
--- a/modules/blog/manifests/init.pp
+++ /dev/null
@@ -1,78 +0,0 @@
-define blog (
-	String $root,
-) {
-	vcsrepo { $root:
-		ensure => latest,
-		provider => git,
-		source => 'https://github.com/HugoNikanor/website-blog-2.git',
-		revision => 'master',
-		# keep_local_changes => true,
-		owner => 'hugo',
-		group => 'www-data',
-	}
-
-	vcsrepo { "${root}/entries":
-		ensure => latest,
-		provider => git,
-		source => '/home/git/git/blog-entries.git',
-		revision => 'master',
-		owner => 'hugo',
-		group => 'www-data',
-	}
-
-	file { "${root}/settings.php":
-		ensure => file,
-		content => @(EOF)
-			<?php
-			# FILE MANAGED BY PUPPET
-			$author = "Hugo Hornquist";
-			$blog_title = "HugoNikanors blogg‽";
-			$blog_subtitle = "A blog about nothing, but mostly itself.";
-			$http_host = $_SERVER["HTTP_HOST"];
-			$urlbase = "http://$http_host/hugo";
-			$has_comments = false;
-			| EOF
-	}
-
-	file { "${root}/footnote":
-		ensure => directory,
-		recurse => true,
-	}
-
-	$foot_files = [
-		['about.md',   'About'],
-		['contact.md', 'Contact'],
-		['legal.md',   'Legal'],
-		['qna.md',     '"Q&amp;A"'],
-	]
-
-	$foot_files.each |$item| {
-		file { "${root}/footnote/${item[0]}":
-			source => "puppet:///modules/blog/footers/${item[0]}",
-		}
-	}
-
-
-	$files_ini = join($foot_files.map |$item| {
-		@("EOF")
-		files[] = ${item[0]}
-		title[] = ${item[1]}
-		| EOF
-	})
-
-	file { "${root}/special-files.ini":
-		ensure => file,
-		content => @("EOF")
-			; FILE MANAGED BY PUPPET
-			;
-			; Which files on the website that are "special"
-			; This basicly means that they shouldn't have comments
-			[footnote]
-			${files_ini}
-
-			[other]
-			files[] = list
-			files[] = entry-not-found.md
-			| EOF
-	}
-}
diff --git a/modules/blog/manifests/instance.pp b/modules/blog/manifests/instance.pp
new file mode 100644
index 0000000..dfe95be
--- /dev/null
+++ b/modules/blog/manifests/instance.pp
@@ -0,0 +1,129 @@
+define blog::instance (
+  String $blog_title = $name,
+  String $author,
+  Boolean $has_comments = false,
+  String $subtitle = '',
+  Optional[String] $vcs_repo = undef,
+  Optional[String] $domain = undef,
+  Optional[String] $domain_aliases = undef,
+) {
+
+  $root = "${blog::blog_root}/${title}"
+
+  vcsrepo { $root:
+    ensure => latest,
+    provider => git,
+    source => 'https://github.com/HugoNikanor/website-blog-2.git',
+    revision => 'master',
+    # keep_local_changes => true,
+    owner => 'hugo',
+    group => 'www-data',
+  }
+
+  if $vcs_repo {
+    vcsrepo { "${root}/entries":
+      ensure => latest,
+      provider => git,
+      source => $vcs_repo,
+      revision => 'master',
+      owner => 'hugo',
+      group => 'www-data',
+    }
+    } else {
+      file { "${root}/entries":
+        ensure => directory,
+      }
+    }
+
+    file { "${root}/settings.php":
+      ensure  => file,
+      content => epp('blog/settings.php.epp', {
+        author       => $author,
+        title        => $title,
+        subtitle     => $subtitle,
+        has_comments => $has_comments,
+        }),
+    }
+
+    file { "${root}/footnote":
+      ensure => directory,
+      recurse => true,
+    }
+
+    $foot_files = [
+      ['about.md',   'About'],
+      ['contact.md', 'Contact'],
+      ['legal.md',   'Legal'],
+      ['qna.md',     '"Q&amp;A"'],
+    ]
+
+    $foot_files.each |$item| {
+      file { "${root}/footnote/${item[0]}":
+        source => "puppet:///modules/blog/footers/${item[0]}",
+      }
+    }
+
+    file { "${root}/special-files.ini":
+      ensure => file,
+      content => $foot_files,
+    }
+
+    if $domain {
+      $default = {
+        access_log           => 'absent',
+        error_log            => 'absent',
+        ssl                  => true,
+        ssl_cert             => "/etc/letsencrypt/live/${certname}/fullchain.pem",
+        ssl_key              => "/etc/letsencrypt/live/${certname}/privkey.pem",
+        use_default_location => false,
+      }
+      $domain_conf = {
+        server_name => [ $domain, ],
+        index_files => [ 'index.php', 'index.html', 'index.htm', ],
+        www_root    => $blog::blog_root,
+      }
+
+      $main_conf = {
+        "${blog_title} - server" => $default + $domain_conf,
+      }
+
+      create_resources(nginx::resource::server, $main_conf)
+
+      if $domain_aliases {
+        $alias_conf = {
+          "${blog_title} - aliases" => $default + {
+            server_name => [ $domain_aliases ],
+            server_cfg_append => {
+              'return' => '301 $scheme://blog.hornquist.se$request_uri',
+            },
+          },
+        }
+        create_resources(nginx::resource::server, $alias_conf)
+      }
+
+      nginx::resource::location { "${blog_title} - server - /":
+        location    => '/',
+        try_files   => ['$uri', '$uri/', '=404'],
+        index_files => [],
+        ssl         => true,
+        autoindex   => on,
+        server      => [ "${blog_title} - server", ]
+      }
+
+      nginx::resource::location { "${blog_title} - server - php":
+        location       => '~ \.php$',
+        fastcgi_params => 'snippets/fastcgi-php.conf',
+        fastcgi        => 'unix:/run/php/php-fpm.sock',
+        ssl            => true,
+        server         => [ "${blog_title} - server", ],
+      }
+
+      nginx::resource::location { "${blog_title} - server - ht":
+        location            => '~ /\.ht',
+        location_cfg_append => { deny => 'all' },
+        index_files         => [],
+        ssl                 => true,
+        server              => [ "${blog_title} - server", ],
+      }
+    }
+}
diff --git a/modules/blog/templates/settings.php.epp b/modules/blog/templates/settings.php.epp
new file mode 100644
index 0000000..8f2e62d
--- /dev/null
+++ b/modules/blog/templates/settings.php.epp
@@ -0,0 +1,13 @@
+<%- | String $author,
+      String $title,
+      String $subtitle,
+      Boolean $has_comments = false,
+-%>
+<?php
+# FILE MANAGED BY PUPPET
+$author = "<%= $author %>";
+$blog_title = "<%= $title %>";
+$blog_subtitle = "<%= $subtitle %>";
+$http_host = $_SERVER["HTTP_HOST"];
+$urlbase = "http://$http_host/hugo";
+$has_comments = <%= if $has_comments { 'true' } else { 'false' } %>;
diff --git a/modules/blog/templates/special-files.ini.epp b/modules/blog/templates/special-files.ini.epp
new file mode 100644
index 0000000..66b779a
--- /dev/null
+++ b/modules/blog/templates/special-files.ini.epp
@@ -0,0 +1,16 @@
+<%- | Array[Tuple[String,String]] $foot_files,
+| -%>
+; FILE MANAGED BY PUPPET
+;
+; Which files on the website that are "special"
+; This basicly means that they shouldnt have comments
+[footnote]
+<%- for $foot_files.each |$item| { -%>
+files[] = <%= $item[0] %>
+title[] = <%= $item[1] %>
+<%- } -%>
+
+[other]
+files[] = list
+files[] = entry-not-found.md
+
diff --git a/modules/profiles/manifests/gandalf_web.pp b/modules/profiles/manifests/gandalf_web.pp
index 1295d83..98b539f 100644
--- a/modules/profiles/manifests/gandalf_web.pp
+++ b/modules/profiles/manifests/gandalf_web.pp
@@ -2,21 +2,7 @@ class profiles::gandalf_web (
   String $certname,
 ) {
 
-  class { '::nginx':
-    manage_repo          => false,
-    # server_purge       => true,
-    package_name         => 'nginx-mainline',
-    service_config_check => true,
-    http_cfg_append      => {
-      'charset'          => 'utf-8',
-    },
-    mime_types_preserve_defaults => true,
-    mime_types => {
-      'text/plain' => 'wiki txt',
-    },
-    include_modules_enabled => true,
-    server_purge            => true,
-  }
+  include ::nginx
 
   file { '/etc/nginx/modules-enabled':
     ensure  => directory,
@@ -60,43 +46,4 @@ class profiles::gandalf_web (
     post_hook_commands => [ 'systemctl restart nginx.service', ],
   }
 
-
-  nginx::resource::server { 'gandalf':
-    ipv6_enable          => true,
-    listen_options       => 'default_server',
-    ipv6_listen_options  => 'default_server',
-    server_name          => [ '_' ],
-    access_log           => absent,
-    error_log            => absent,
-    ssl                  => true,
-    ssl_cert             => "/etc/letsencrypt/live/${certname}/fullchain.pem",
-    ssl_key              => "/etc/letsencrypt/live/${certname}/privkey.pem",
-    ssl_redirect         => true,
-    index_files          => [ 'index.html', ],
-    www_root             => '/var/www/adrift.space',
-    use_default_location => false,
-  }
-
-  nginx::resource::location { '/':
-    try_files   => ['$uri', '$uri/', '=404'],
-    index_files => [],
-    ssl         => true,
-    ssl_only    => true,
-    autoindex   => on,
-    server      => 'gandalf',
-  }
-
-  nginx::resource::server { 'repo.gandalf.adrift.space':
-    ipv6_enable         => true,
-    ipv6_listen_options => '',
-    server_name         => [ 'repo.gandalf.adrift.space', ],
-    ssl                 => true,
-    ssl_cert             => "/etc/letsencrypt/live/${certname}/fullchain.pem",
-    ssl_key              => "/etc/letsencrypt/live/${certname}/privkey.pem",
-    ssl_redirect         => true,
-    index_files          => [ 'index.html', ],
-    www_root             => '/usr/net/repo/',
-    use_default_location => true,
-  }
-
 }
diff --git a/modules/profiles/manifests/puppetserver.pp b/modules/profiles/manifests/puppetserver.pp
index 77d0d47..0dd1146 100644
--- a/modules/profiles/manifests/puppetserver.pp
+++ b/modules/profiles/manifests/puppetserver.pp
@@ -49,7 +49,7 @@ class profiles::puppetserver {
       {
         'name' => 'local nodes',
         'path' => 'nodes/%{trusted.certname}.yaml'
-      }
+      },
     ]
   }
 
diff --git a/modules/syslinux/lib/facter/efibootmgr.rb b/modules/syslinux/lib/facter/efibootmgr.rb
index fdf95e0..f4a03f4 100644
--- a/modules/syslinux/lib/facter/efibootmgr.rb
+++ b/modules/syslinux/lib/facter/efibootmgr.rb
@@ -1,19 +1,21 @@
-Facter.add('efi') do
-  setcode do
-    out = {}
-    data = Facter::Core::Execution.execute('efibootmgr')
-    boots = {}
-    data.split("\n").each do |item|
-      if a = item.match(/BootOrder: (.*)/) then
-        out['BootOrder'] = a[1].split(',')
-      elsif a = item.match(/(\w*): (.*)/) then
+if Facter::Core::Execution.which('efibootmgr') do
+  Facter.add('efi') do
+    setcode do
+      out = {}
+      data = Facter::Core::Execution.execute('efibootmgr')
+      boots = {}
+      data.split("\n").each do |item|
+        if a = item.match(/BootOrder: (.*)/) then
+          out['BootOrder'] = a[1].split(',')
+        elsif a = item.match(/(\w*): (.*)/) then
           out[a[1]] = a[2]
-      elsif a = item.match(/Boot(\d*)(\*?) (.*)/)
-        # a[2] contains if it's active
-        boots[a[1]] = a[3]
+        elsif a = item.match(/Boot(\d*)(\*?) (.*)/)
+          # a[2] contains if it's active
+          boots[a[1]] = a[3]
+        end
       end
+      out['boots'] = boots
+      out
     end
-    out['boots'] = boots
-    out
   end
 end