SUNET/net-ops
9
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

second draft of cisoassistant manifest

Browse source
This commit is contained in:
Rasmus Thorslund 2025-01-31 13:22:32 +01:00
parent 6b03e058d3
commit 328f8d558d
No known key found for this signature in database
GPG key ID: 502D33332E9E305D
1 changed files with 6 additions and 6 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

12
global/overlay/etc/puppet/modules/net/manifests/cisoassistant.pp
View file

@ -33,19 +33,19 @@ class net::cisoassistant {
mode => '0744',
owner => 'root',
group => 'root',
content => file('cisoassistant/daemon.json'),
content => file('net/cisoassistant/daemon.json'),
}
file { '/opt/cisoas/ciso-assistant-community/enterprise/docker-compose.yml':
mode => '0744',
owner => 'root',
group => 'root',
content => file('cisoassistant/docker-compose.yml'),
content => file('net/cisoassistant/docker-compose.yml'),
}
file { '/opt/cisoas/ciso-assistant-community/enterprise/update-cisoas-enterprise.sh':
mode => '0744',
owner => 'root',
group => 'root',
content => file('cisoassistant/update-cisoas-enterprise.sh'),
content => file('net/cisoassistant/update-cisoas-enterprise.sh'),
}
sunet::scriptherder::cronjob { 'Upgrade cisoassistant images':
cmd => '/opt/cisoas/ciso-assistant-community/enterprise/update-cisoas-enterprise.sh',
@ -56,7 +56,7 @@ class net::cisoassistant {
mode => '0744',
owner => 'root',
group => 'root',
content => file('cisoassistant/rotate-certs.sh'),
content => file('net/cisoassistant/rotate-certs.sh'),
}
sunet::scriptherder::cronjob { 'Rotate le certificates':
cmd => '/opt/cisoas/ciso-assistant-community/enterprise/rotate-certs.sh',
@ -67,13 +67,13 @@ class net::cisoassistant {
mode => '0744',
owner => 'root',
group => 'root',
content => file('cisoassistant/Caddyfile'),
content => file('net/cisoassistant/Caddyfile'),
}
file { "/etc/systemd/system/sunet-cisoas.service":
mode => '0644',
owner => 'root',
group => 'root',
content => file('cisoassistant/sunet-cisoas.service'),
content => file('net/cisoassistant/sunet-cisoas.service'),
notify => [Class['sunet::systemd_reload']],
}
service { 'sunet-cisoas' :