confdroid/confdroid_postgresql
3
0
Fork 0
Code Wiki Activity

adds service control

Browse Source
This commit is contained in:
Arne Teuke
2025-04-18 22:28:58 +02:00
parent 2cdfd93708
commit c43ed4db0f
5 changed files with 69 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

17
manifests/firewall/iptables.pp Normal file
View File

@@ -0,0 +1,17 @@
## postgresql_cd::firewall::iptables.pp
# Module name: postgresql_cd
# Author: Arne Teuke (arne_teuke@confdroid.com)
# @summary Class manages the alloy iptables
###############################################################################
class postgresql_cd::firewall::iptables (
) inherits postgresql_cd::params {
if ($fqdn == $ma_server_fqdn) and ($pl_enable_fw == true) {
firewall { "${pl_fw_rule_order}${pl_fw_port} tcp port ${pl_fw_port}":
source => $pl_source_range,
proto => 'tcp',
dport => $pl_fw_port,
jump => 'accept',
}
}
}

10
manifests/main/dirs.pp Normal file
View File

@@ -0,0 +1,10 @@
## postgresql_cd::main::dirs.pp
# Module name: postgresql_cd
# Author: Arne Teuke (arne_teuke@confdroid.com)
# @summary Class manages logic for the postgresql_cd module.
##############################################################################
class postgresql_cd::main::dirs (
) inherits postgresql_cd::params {
require postgresql_cd::main::install
}

10
manifests/main/files.pp Normal file
View File

@@ -0,0 +1,10 @@
## postgresql_cd::main::files.pp
# Module name: postgresql_cd
# Author: Arne Teuke (arne_teuke@confdroid.com)
# @summary Class manages logic for the postgresql_cd module.
##############################################################################
class postgresql_cd::main::files (
) inherits postgresql_cd::params {
require postgresql_cd::main::dirs
}

12
manifests/params.pp
View File

@@ -7,6 +7,10 @@
# @param [string] reqpackages_client the packages for the client # @param [string] reqpackages_client the packages for the client
# @param [string] pkg_ensure which version of the packages to install, i.e. # @param [string] pkg_ensure which version of the packages to install, i.e.
# 'latest', 'present' '13.20', # 'latest', 'present' '13.20',
# @param [string] pl_fw_rule_order the prefix for the firewall rule
# @param [string] pl_fw_port the port to use for service and firewall
# @param [string] pl_source_range the source range for allowed clients
# @param [boolean] pl_enable_fw whether to enable the firewall
# @summary Class contains all parameters for the postgresql_cd module. # @summary Class contains all parameters for the postgresql_cd module.
############################################################################## ##############################################################################
class postgresql_cd::params ( class postgresql_cd::params (
@@ -18,6 +22,11 @@ class postgresql_cd::params (
String $reqpackages_client = 'postgresql', String $reqpackages_client = 'postgresql',
String $pkg_ensure = 'latest', String $pkg_ensure = 'latest',
# firewall
String $pl_fw_rule_order = '50',
String $pl_fw_port = '5432',
String $pl_source_range = '0.0.0.0/0',
Boolean $pl_enable_fw = true,
) { ) {
$fqdn = $facts['networking']['fqdn'] $fqdn = $facts['networking']['fqdn']
@@ -25,6 +34,9 @@ class postgresql_cd::params (
$os_name = $facts['os']['name'] $os_name = $facts['os']['name']
$os_release = $facts['os']['release']['major'] $os_release = $facts['os']['release']['major']
# Service
$pl_service = 'postgresql'
# includes must be last # includes must be last
include postgresql_cd::main::config include postgresql_cd::main::config
} }

20
manifests/server/service.pp Normal file
View File

@@ -0,0 +1,20 @@
## postgresql_cd::server::service.pp
# Module name: postgresql_cd
# Author: Arne Teuke (arne_teuke@confdroid.com)
# @summary Class manages the alloy service
###############################################################################
class postgresql_cd::server::service (
) inherits postgresql_cd::params {
if $fqdn == $ma_server_fqdn {
require postgresql_cd::main::files
require postgresql_cd::firewall::iptables
service { $pl_service:
ensure => running,
hasstatus => true,
hasrestart => true,
enable => true,
}
}
}