verglasz/soc-ops
0
0
Fork 0
forked from SUNET/soc-ops
Code Pull requests Activity

More to install.

Browse source
This commit is contained in:
Johan Björklund 2024-11-14 12:16:26 +01:00
parent cbd1955596
commit a65c07778a
Signed by untrusted user: bjorklund
GPG key ID: 5E8401339C7F5037
1 changed files with 20 additions and 6 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

22
global/overlay/etc/puppet/modules/soc/manifests/intelmq.pp
View file

@ -25,11 +25,12 @@ class soc::intelmq(
# content => template('soc/sso/apache-groups.txt.erb') # content => template('soc/sso/apache-groups.txt.erb')
# } # }
package { ['apache2', 'libapache2-mod-wsgi-py3', 'postgresql', 'python3-venv', 'python3-pip', 'python3-gpg', 'python3-psycopg2']: package { ['apache2', 'libapache2-mod-wsgi-py3', 'postgresql', 'python3-venv', 'python3-pip', 'python3-gpg', 'python3-psycopg2', 'redict', ]:
ensure => 'latest', ensure => 'latest',
} }
exec { 'sudo -u intelmq /usr/bin/python3 -m venv --system-site-packages /opt/intelmq/venv': exec { 'Install IntelMQ venv':
command => 'sudo -u intelmq /usr/bin/python3 -m venv --system-site-packages /opt/intelmq/venv',
creates => '/opt/intelmq/venv', creates => '/opt/intelmq/venv',
} }
@ -39,11 +40,13 @@ class soc::intelmq(
mode => '0555', mode => '0555',
} }
exec { 'sudo -u intelmq /opt/intelmq/install-intelmq.sh': exec { 'Install IntelMQ':
command => 'sudo -u intelmq /opt/intelmq/install-intelmq.sh',
creates => '/opt/intelmq/.installed' creates => '/opt/intelmq/.installed'
} }
exec { '/opt/intelmq/venv/bin/intelmqsetup --state-file /opt/intelmq/.setup_state': exec { 'Run IntelMQ setup script':
command => '/opt/intelmq/venv/bin/intelmqsetup --state-file /opt/intelmq/.setup_state',
creates => '/opt/intelmq/.setup_state', creates => '/opt/intelmq/.setup_state',
returns => ['0', '1',], returns => ['0', '1',],
} }
@ -54,4 +57,15 @@ class soc::intelmq(
mode => '0440', mode => '0440',
} }
service { 'apache2':
ensure => 'running',
enable => true,
require => Package['apache2'],
}
exec { 'Enable Apache2 modules':
command => 'a2enmod ssl wsgi proxy proxy_http header rewrite'
creates => ['/etc/apache2/mods-enabled/ssl.load', '/etc/apache2/mods-enabled/wsgi.load', '/etc/apache2/mods-enabled/proxy.load', '/etc/apache2/mods-enabled/proxy_http.load', '/etc/apache2/mods-enabled/header.load', '/etc/apache2/mods-enabled/rewrite.load']
notify => Service['apache2'],
}
} }