## puppet_cd::params.pp
# Module name: puppet_cd
# Author: Arne Teuke (arne_teuke@confdroid)
# @summary  Class manages parameters for the puppet_cd module.
# @param [Boolean] pt_manage_fw whether to manage firewall settings
# @param [String] pt_pm_fqdn the fqdn for the puppetmaster and master
# settings are applied. any other fqdn # will be considered a puppet agent.
# @param [String] pt_db_fqdn  the fqdn for the puppetdb host.
# @param [String] pt_pkg_ensure valid: "present", "latest", "v1.2.3"
# @param [String] pt_agent_pkg the packages for agents to install
# @param [String] pt_server_pkg the server packages to install
# @param [Array] pt_db_pkg the packages for puppetdb
# @param [Array] pt_r10k_pkg the packages for r10k to install
# @param [String] pt_no_ssl_port non-ssl port number for puppetdb
# @param [String] pt_ssl_port ssl port for puppetdb
# @param [Boolean] pt_use_ssl_only whether to use ssl only.
# @param [String] pt_user the puppet user
# @param [String] pt_user_comment the user comment
# @param [String] pt_user_home the user home
# @param [String] pt_user_shell the user shell
# @param [Boolean] pt_manage_db_user whether to manage the user for puppetdb
# @param [String] pt_db_user the puppetdb user
# @param [String] pt_db_user_comment the user comment for puppetdb user
# @param [String] pt_db_user_home the user home for the puppetdb user
# @param [String] pt_db_user_shell the shell for the puppetdb user
# @param [Boolean] pt_use_puppetdb whether to use puppetdb on host
# @param [String] pt_environment the environment
# @param [Boolean] pt_basemodulepath the base module path
# @param [String] pt_logdir the log directory
# @param [Boolean] pt_allow_duplicate_certs whether to allow duplicated certs
# @param [String] pt_pluginfactsource the plugin fact source
# @param [String] pt_pluginsource the plugin source
# @param [String] pt_runinterval the runinterval
# @param [String] pt_reports where to send the run reports
# @param [Boolean] pt_show_diff whether to show the diff
# @param [Boolean] pt_default_schedules the default run schedules
# @param [String] pt_masterport the master port to listen on
# @param [Boolean] pt_noop whether noop should be executed
# @param [Boolean] pt_pluginsync whether pluginsync should be allowed
# @param [Boolean] pt_report whether reports should be created
# @param [Boolean] pt_splay whether to enable a sleeping period before runs
# @param [String] pt_splaylimit the splay limit
# @param [Boolean] pt_usecacheonfailure whether to use the cache on failure
# @param [String] pt_autosign  where to check the autosign settings
# @param [Boolean] pt_ca whether to be a ca
# @param [String] pt_external_nodes the external node settings (ENC)
# @param [String] pt_logdir_master the log directory on the master
# @param [String] pt_node_terminus Which node data plugin to use when compiling
#   node catalogs.
# @param [Boolean] pt_strict_variables Causes an evaluation error when
#   referencing unknown variables
# @param [Boolean] pt_storeconfigs whether store client configs.
# @param [String] pt_storeconfigs_backend where to store client configs
# @param [String] pt_parser which parser version to use
# @param [Boolean] pt_cert_revocation whether to check for cert revocations
# @param [String] pt_logging_max_file_size max file size for puppetdb logging
# @param [String] pt_logging_max_history max logging history
# @param [String] pt_logging_total_size  total size of logging file
# @param [String] pt_com_proc_threads number of processing threads
# @param [String] pt_concurrent_writes  max concurrent writes
# @param [String] pt_db_subname the db name
# @param [String] pt_db_username the db username
# @param [String] pt_db_password the db password
# @param [String] pt_gc_interval garbage collection interval (Java)
# @param [String] pt_log_slow_statements number of seconds before an SQL query
#   is considered "slow."
# @param [String] pt_puppetdb_source_lan the source lan for puppetdb clients
# @param [Boolean] pt_soft_write_failure allows the PuppetDB-termini to fail
#   softly if PuppetDB is not accessible for command submission.
# @param [String] pt_no_ssl_host ip range for non-ssl hosts
# @param [String] pt_ssl_host ip range for SSL hosts
# @param [String] pt_ssl_key location of the private key
# @param [String] pt_ssl_cert location of the ssl cert
# @param [String] pt_ssl_ca_cert location of the ssl ca cert
# @param [Boolean] pt_log_access whether to configure log access
# @param [String] pt_access_log_config the location of the access log config
# @param [Boolean] pt_enable_repl whether to allow puppetdb replication
# @param [String] pt_repl_port the replication port
# @param [String] pt_repl_host the replication host
# @param [Boolean] pt_use_r10k whether to use r10k service
# @param [Boolean] pt_use_r10k_webhook whether to use r10k webhook service
# @param [String] pt_r10k_remote the remote url for the r10k control repo
# @param [Boolean] pt_r10k_prefix the r10k prefix. defaults to false
# @param [String] pt_r10k_basedir the base directory for r10k.yaml
# @param [Array] pt_r10k_webhook_pkg the packages for the r10k webhook
# @param [Boolean] pt_manage_user whether to manage the puppet user
# @param [String] pt_r10k_webhook_port the port for the webhook listener
###############################################################################
class puppet_cd::params (

  Boolean $pt_manage_fw             = true,
  String $pt_pm_fqdn                = 'puppetmaster.example.net',
  String $pt_db_fqdn                = 'puppetdb.example.net',

  # installation
  String $pt_pkg_ensure             = 'present',
  String $pt_agent_pkg              = 'puppet-agent',
  String $pt_server_pkg             = 'puppetserver',
  Array $pt_db_pkg                  = ['puppetdb','puppetdb-termini'],
  Array $pt_r10k_pkg                = ['ruby','ruby-devel','rubygems','gcc','make'],
  Array $pt_r10k_webhook_pkg        = ['webrick', 'r10k_gitlab_webhook'],

  # user settings
  ## puppet user
  Boolean $pt_manage_user           = true,
  String $pt_user                   = 'puppet',
  String $pt_user_comment           = 'puppetserver daemon',
  String $pt_user_home              = '/opt/puppetlabs/server/data/puppetserver',
  String $pt_user_shell             = '/sbin/nologin',
  ## puppetdb user
  Boolean $pt_manage_db_user        = true,
  String $pt_db_user                = 'puppetdb',
  String $pt_db_user_comment        = 'PuppetDB daemon',
  String $pt_db_user_home           = '/opt/puppetlabs/server/data/puppetdb',
  String $pt_db_user_shell          = '/sbin/nologin',
  # templates
  ## puppet
  String $pt_environment            = 'production',
  Boolean $pt_allow_duplicate_certs = false,
  String $pt_basemodulepath         = '/etc/puppetlabs/code/environments/common:/etc/puppetlabs/code/modules:/opt/puppetlabs/puppet/modules:/usr/share/puppet/modules',
  String $pt_logdir                 = '/var/log/puppetlabs/puppet',
  String $pt_pluginfactsource       = 'pluginfacts',
  String $pt_pluginsource           = 'plugins',
  String $pt_reports                = 'foreman',
  Boolean $pt_show_diff             = false,
  Boolean $pt_default_schedules     = false,
  String $pt_masterport             = '8140',
  Boolean $pt_noop                  = false,
  Boolean $pt_pluginsync            = true,
  Boolean $pt_report                = true,
  String $pt_runinterval            = '1800',
  Boolean $pt_splay                 = false,
  String $pt_splaylimit             = '1800',
  Boolean $pt_usecacheonfailure     = true,
  String $pt_autosign               = '/etc/puppetlabs/puppet/autosign.conf',
  Boolean $pt_ca                    = true,
  String $pt_external_nodes         = '/etc/puppetlabs/puppet/node.rb',
  String $pt_logdir_master          = '/var/log/puppetlabs/puppetserver',
  String $pt_node_terminus          = 'exec',
  Boolean $pt_strict_variables      = false,
  Boolean $pt_storeconfigs          = true,
  String $pt_storeconfigs_backend   = 'puppetdb',
  String $pt_parser                 = 'current',
  Boolean $pt_cert_revocation       = true,
  ## puppetdb
  Boolean $pt_use_puppetdb          = false,
  String $pt_logging_max_file_size  = '200MB',
  String $pt_logging_max_history     = '90',
  String $pt_logging_total_size     = '1GB',
  String $pt_com_proc_threads       = '4',
  String $pt_concurrent_writes      = '4',
  String $pt_db_subname             = '//localhost:5432/puppetdb',
  String $pt_db_username            = 'foobar',
  String $pt_db_password            = 'foobar',
  String $pt_gc_interval            = '60',
  String $pt_log_slow_statements    = '10',
  String $pt_no_ssl_port            = '8080',
  String $pt_ssl_port               = '8081',
  Boolean $pt_use_ssl_only          = true,
  String $pt_puppetdb_source_lan    = '0.0.0.0/0',
  Boolean $pt_soft_write_failure    = false,
  String $pt_no_ssl_host            = '0.0.0.0',
  String $pt_ssl_host               = '0.0.0.0',
  String $pt_ssl_key                = '/etc/puppetlabs/puppetdb/ssl/private.pem',
  String $pt_ssl_cert               = '/etc/puppetlabs/puppetdb/ssl/public.pem',
  String $pt_ssl_ca_cert            = '/etc/puppetlabs/puppetdb/ssl/ca.pem',
  Boolean $pt_log_access            = false,
  String $pt_access_log_config      = '/etc/puppetlabs/puppetdb/request-logging.xml',
  Boolean $pt_enable_repl           = false,
  String $pt_repl_port              = '8082',
  String $pt_repl_host              = '127.0.0.1',

# r10k
  Boolean $pt_use_r10k              = false,
  Boolean $pt_use_r10k_webhook      = false,
  String $pt_r10k_remote            = 'git@gitlab.example.net/repo.git',
  Boolean $pt_r10k_prefix           = false,
  String $pt_r10k_basedir           = '/etc/puppetlabs/code/environments',
  String $pt_r10k_webhook_port      = '8080',

) {
# facts
  $fqdn                   = $facts['networking']['fqdn']
  $domain                 = $facts['networking']['domain']
  $os_name                = $facts['os']['name']
  $os_release             = $facts['os']['release']['major']

# directories
## puppet
  $pt_main_dir                      = '/etc/puppetlabs'
  $pt_puppetdir                     = "${pt_main_dir}/puppet"
  $pt_code_dir                      = "${pt_main_dir}/code"
  $pt_environmentspath              = "${pt_code_dir}/environments"
  $pt_ssldir                        = "${pt_puppetdir}/ssl"
  $pt_privatekeydir                 = "${pt_ssldir}/private_keys"
  $pt_rundir                        = '/var/run/puppetlabs'
  $pt_rundir_master                 = '/var/run/puppetlabs/puppetserver'
  $pt_vardir                        = '/opt/puppetlabs/puppet/cache'
  $pt_vardir_master                 = '/opt/puppetlabs/server/data/puppetserver'
## puppetdb
  $pt_puppetdb_main                 = '/etc/puppetlabs/puppetdb'
  $pt_puppetdb_conf_d               = "${pt_puppetdb_main}/conf.d"
  $pt_puppetdb_ssl                  = "${pt_puppetdb_main}/ssl"
  $pt_puppetdb_log                  = '/var/log/puppetlabs/puppetdb'
  $pt_puppetdb_var_dir              = '/opt/puppetlabs/server/data/puppetdb'
## r10k
  $pt_r10k_dir                      = "${pt_main_dir}/r10k"
  $pt_r10k_webhook_dir              = '/etc/r10k-webhook'

# files
## puppet
  $pt_puppet_conf_file              = "${pt_puppetdir}/puppet.conf"
  $pt_puppet_conf_erb               = 'puppet_cd/puppet.conf.erb'
  $pt_agent_conf_erb                = 'puppet_cd/agent.conf.erb'
  $pt_hiera_config                  = "${pt_puppetdir}/hiera.yaml"
## puppetdb
  $pt_bootstrap_conf                = "${pt_puppetdb_main}/bootstrap.cfg"
  $pt_bootstrap_erb                 = 'puppet_cd/puppetdb/bootstrap.cfg.erb'
  $pt_puppetdb_access_log           = "${pt_puppetdb_log}/puppetdb-access"
  $pt_request_logging_conf          = "${pt_puppetdb_main}/request-logging.xml"
  $pt_request_logging_erb           = 'puppet_cd/puppetdb/request_logging.xml.erb'
  $pt_logback_conf                  = "${pt_puppetdb_main}/logback.xml"
  $pt_logback_erb                   = 'puppet_cd/puppetdb/logback.xml.erb'
  $pt_puppetdb_config_ini           = "${pt_puppetdb_conf_d}/config.ini"
  $pt_puppetdb_config_erb           = 'puppet_cd/puppetdb/config.ini.erb'
  $pt_puppetdb_database_ini         = "${pt_puppetdb_conf_d}/database.ini"
  $pt_puppetdb_database_erb         = 'puppet_cd/puppetdb/database.ini.erb'
  $pt_puppetdb_jetty_ini            = "${pt_puppetdb_conf_d}/jetty.ini"
  $pt_puppetdb_jetty_erb            = 'puppet_cd/puppetdb/jetty.ini.erb'
  $pt_puppetdb_conf_file            = "${pt_puppetdir}/puppetdb.conf"
  $pt_puppetdb_conf_erb             = 'puppet_cd/puppetdb/puppetdb.conf.erb'
  $pt_puppetdb_repl_ini             = "${pt_puppetdb_conf_d}/repl.ini"
  $pt_puppetdb_repl_erb             = 'puppet_cd/puppetdb/repl.ini.erb'
## r10k
  $pt_r10k_file                     = "${pt_r10k_dir}/r10k.yaml"
  $pt_r10k_erb                      = 'puppet_cd/r10k/r10k.yaml.erb'
  $pt_webhook_link                  = 'ln -sf  /usr/local/share/gems/gems/r10k_gitlab_webhook-0.1.3/bin/r10k_gitlab_webhook /usr/bin/'
  $pt_webhook_service_file          = '/etc/systemd/system/r10k_gitlab_webhook.service'
  $pt_webhook_service_erb           = 'puppet_cd/r10k/r10k_webhook_service.erb'

# service
  $pt_server_service                = 'puppetserver'
  $pt_agent_service                 = 'puppet'
  $pt_db_service                    = 'puppetdb'
  $pt_r10k_webhook_service          = 'r10k_gitlab_webhook'

#
  # includes must be last
  include puppet_cd::main::config
}