verglasz/soc-ops
0
0
Fork 0
forked from SUNET/soc-ops
Code Pull requests Activity

More to install.

Browse source
This commit is contained in:
Johan Björklund 2024-11-14 12:16:26 +01:00
parent cbd1955596
commit a65c07778a
Signed by untrusted user: bjorklund
GPG key ID: 5E8401339C7F5037
1 changed files with 20 additions and 6 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

26
global/overlay/etc/puppet/modules/soc/manifests/intelmq.pp
View file

@ -25,12 +25,13 @@ class soc::intelmq(
# content => template('soc/sso/apache-groups.txt.erb')
# }
package { ['apache2', 'libapache2-mod-wsgi-py3', 'postgresql', 'python3-venv', 'python3-pip', 'python3-gpg', 'python3-psycopg2']:
package { ['apache2', 'libapache2-mod-wsgi-py3', 'postgresql', 'python3-venv', 'python3-pip', 'python3-gpg', 'python3-psycopg2', 'redict', ]:
ensure => 'latest',
}
exec { 'sudo -u intelmq /usr/bin/python3 -m venv --system-site-packages /opt/intelmq/venv':
creates => '/opt/intelmq/venv',
exec { 'Install IntelMQ venv':
command => 'sudo -u intelmq /usr/bin/python3 -m venv --system-site-packages /opt/intelmq/venv',
creates => '/opt/intelmq/venv',
}
file { '/opt/intelmq/install-intelmq.sh':
@ -39,11 +40,13 @@ class soc::intelmq(
mode => '0555',
}
exec { 'sudo -u intelmq /opt/intelmq/install-intelmq.sh':
creates => '/opt/intelmq/.installed'
exec { 'Install IntelMQ':
command => 'sudo -u intelmq /opt/intelmq/install-intelmq.sh',
creates => '/opt/intelmq/.installed'
}
exec { '/opt/intelmq/venv/bin/intelmqsetup --state-file /opt/intelmq/.setup_state':
exec { 'Run IntelMQ setup script':
command => '/opt/intelmq/venv/bin/intelmqsetup --state-file /opt/intelmq/.setup_state',
creates => '/opt/intelmq/.setup_state',
returns => ['0', '1',],
}
@ -54,4 +57,15 @@ class soc::intelmq(
mode => '0440',
}
service { 'apache2':
ensure => 'running',
enable => true,
require => Package['apache2'],
}
exec { 'Enable Apache2 modules':
command => 'a2enmod ssl wsgi proxy proxy_http header rewrite'
creates => ['/etc/apache2/mods-enabled/ssl.load', '/etc/apache2/mods-enabled/wsgi.load', '/etc/apache2/mods-enabled/proxy.load', '/etc/apache2/mods-enabled/proxy_http.load', '/etc/apache2/mods-enabled/header.load', '/etc/apache2/mods-enabled/rewrite.load']
notify => Service['apache2'],
}
}