X-Git-Url: https://code.wpia.club/?a=blobdiff_plain;f=environments%2Fproduction%2Fmanifests%2Froot.pp;h=9adaee13767d6152e3f55e235247cfb506bb779d;hb=95266f6237df2334741f3ce60050618259452ed4;hp=e6937fb503a73fe8b3e804760a5f2e663fee97a1;hpb=416822c6c0d0568cefce6d9f47e159e121e87ed9;p=infra.git diff --git a/environments/production/manifests/root.pp b/environments/production/manifests/root.pp index e6937fb..9adaee1 100644 --- a/environments/production/manifests/root.pp +++ b/environments/production/manifests/root.pp @@ -127,17 +127,36 @@ if $signerLocation == 'self' { lxc::container { 'front-nginx': contname => 'front-nginx', ip => $ips[front-nginx], - dir => ["/data", "/data-crl", '/data-crl-gigi', '/gitweb-socket', '/git-smart-http-socket', '/srv/git'], - bind => { - "/data/nginx" => {target => "data", option => ",ro"}, - "/data/crl" => {target => "data-crl", option => ",ro"}, - "/data/gigi-crl" => {target => "data-crl-gigi", option => ",ro"}, - "/run/gitweb-socket" => {target => 'gitweb-socket'}, - "/run/git-smart-http-socket" => {target => 'git-smart-http-socket'}, - "/data/git" => { 'target' => "srv/git", option => ",ro"} - }, require => File['/data/crl/htdocs'] } + lxc::container_bind{ '/data/nginx': + container => 'front-nginx', + target => 'data', + option => ',ro' + } + lxc::container_bind{ '/data/crl': + container => 'front-nginx', + target => 'data-crl', + option => ',ro' + } + lxc::container_bind{ '/data/gigi-crl': + container => 'front-nginx', + target => 'data-crl-gigi', + option => ',ro' + } + lxc::container_bind{ '/run/gitweb-socket': + container => 'front-nginx', + target => 'gitweb-socket', + } + lxc::container_bind{ '/run/git-smart-http-socket': + container => 'front-nginx', + target => 'git-smart-http-socket', + } + lxc::container_bind{ '/data/git': + container => 'front-nginx', + target => 'srv/git', + option => ',ro' + } file { '/data': ensure => 'directory', } @@ -214,6 +233,9 @@ if $signerLocation == 'self' { contname => 'quiz', ip => $ips[quiz] } + File <| tag == root |> + Lxc::Container <| tag == root |> + Lxc::Container_bind <| tag == root |> file{'/run/gitweb-socket': ensure => 'directory' }