]> WPIA git - infra.git/commitdiff
chg: use explicit resources for nginx-binds
authorFelix Dörre <felix@dogcraft.de>
Sat, 22 Dec 2018 12:19:14 +0000 (13:19 +0100)
committerFelix Dörre <felix@dogcraft.de>
Sun, 23 Dec 2018 15:49:53 +0000 (16:49 +0100)
Change-Id: I668a5e8d5882b53a1db39afd33c2e66416690d71

environments/production/manifests/root.pp

index e6937fb503a73fe8b3e804760a5f2e663fee97a1..8b8053749908a2cc2e546743222347dcd97e6554 100644 (file)
@@ -127,17 +127,36 @@ if $signerLocation == 'self' {
     lxc::container { 'front-nginx':
         contname => 'front-nginx',
         ip => $ips[front-nginx],
-        dir => ["/data", "/data-crl", '/data-crl-gigi', '/gitweb-socket', '/git-smart-http-socket', '/srv/git'],
-        bind => {
-          "/data/nginx" => {target => "data", option => ",ro"},
-          "/data/crl" => {target => "data-crl", option => ",ro"},
-          "/data/gigi-crl" => {target => "data-crl-gigi", option => ",ro"},
-          "/run/gitweb-socket" => {target => 'gitweb-socket'},
-          "/run/git-smart-http-socket" => {target => 'git-smart-http-socket'},
-          "/data/git" => { 'target' => "srv/git", option => ",ro"}
-        },
         require => File['/data/crl/htdocs']
     }
+    lxc::container_bind{ '/data/nginx':
+      container => 'front-nginx',
+      target => 'data',
+      option => ',ro'
+    }
+    lxc::container_bind{ '/data/crl':
+      container => 'front-nginx',
+      target => 'data-crl',
+      option => ',ro'
+    }
+    lxc::container_bind{ '/data/gigi-crl':
+      container => 'front-nginx',
+      target => 'data-crl-gigi',
+      option => ',ro'
+    }
+    lxc::container_bind{ '/run/gitweb-socket':
+      container => 'front-nginx',
+      target => 'gitweb-socket',
+    }
+    lxc::container_bind{ '/run/git-smart-http-socket':
+      container => 'front-nginx',
+      target => 'git-smart-http-socket',
+    }
+    lxc::container_bind{ '/data/git':
+      container => 'front-nginx',
+      target => 'srv/git',
+      option => ',ro'
+    }
     file { '/data':
        ensure => 'directory',
     }