Added new host

global/overlay/etc/puppet/cosmos-rules.yaml

@@ -27,3 +27,5 @@ test-sso-proxy1.cert.sunet.se:
     ext_cert: '/etc/letsencrypt/live/test-sso-proxy1.cert.sunet.se/fullchain.pem'
     ext_cert_key: '/etc/letsencrypt/live/test-sso-proxy1.cert.sunet.se/privkey.pem'
     ext_cert_vol: '/etc/letsencrypt'
+
+intelmq-dev.cert.sunet.se:

global/overlay/etc/puppet/modules/soc/manifests/intelmq.pp

@@ -0,0 +1,44 @@
+class soc::intelmq(
+) {
+
+  group { 'intelmq':
+    ensure => present,
+  }
+
+  user { 'intelmq':
+    ensure => present,
+    gid    => 'intelmq',
+    groups => 'www-data'
+  }
+
+  file { '/etc/intelmq':
+    ensure => directory,
+    owner  => 'intelmq',
+    group  => 'intelmq',
+  }
+  file { '/opt/intelmq':
+    ensure => directory,
+    owner  => 'intelmq',
+    group  => 'intelmq',
+  }
+
+  #  file { '/opt/sso/apache/groups.txt':
+  #  ensure  => file,
+  #    content => template('soc/sso/apache-groups.txt.erb')
+  #  }
+
+  sunet::apache2 {}
+
+  package { ['libapache2-mod-wsgi-py3', 'postgresql', 'python3-pip', 'python3-gpg']:
+    ensure => 'latest',
+  }
+
+  exec { 'sudo -u intelmq /usr/bin/python3 -m venv --system-site-packages /opt/intelmq/venv':
+    creates =>  '/opt/intelmq/venv',
+  }
+
+  # Install intelmq and all most stuff around it.
+  exec { 'sudo -u intelmq /opt/intelmq/venv/bin/pip3 install intelmq intelmq-api intelmq-certbund-contact intelmq-certbund-contact-api intelmq-checkticket-api intelmq-events-api intelmq-fody-backend intelmq-manager intelmq-session intelmq-tickets-api intelmqmail':
+    creates =>  '/opt/intelmq/etc',
+  }
+}