support for nginx passenger debian repositories

[deric]

Phusion company now provides nginx packages with precompiled passenger support

usage:

   class { 'nginx': 
      package_source => 'passenger',
      package_name   => 'nginx-full', # you can choose nginx-light etc.
   }

By default nginx.org repository would be used, if package_source => '' no apt repository would be added, so default distribution ngxinx package would be used.

[deric]

A configuration for serving puppet master with Nginx and Passenger would look like this:

  class { 'nginx':
    package_source => 'passenger',
    http_cfg_append => {
      'passenger_root' => '/usr/lib/ruby/vendor_ruby/phusion_passenger/locations.ini',
    }
  }

  nginx::resource::vhost { 'puppet':
    ensure      => present,
    server_name => ['puppet'],
    listen_port => 8140,
    ssl         => true,
    ssl_cert    => '/var/lib/puppet/ssl/certs/example.com.pem',
    ssl_key     => '/var/lib/puppet/ssl/private_keys/example.com.pem',
    ssl_port    => 8140,
    ssl_cache   => 'shared:SSL:128m',
    ssl_ciphers => 'SSLv2:-LOW:-EXPORT:RC4+RSA',
    vhost_cfg_append => {
      'passenger_enabled'         => 'on',
      'passenger_ruby'            => '/usr/bin/ruby',
      'ssl_crl'                   => '/var/lib/puppet/ssl/ca/ca_crl.pem',
      'ssl_client_certificate'    => '/var/lib/puppet/ssl/certs/ca.pem',
      'ssl_verify_client'         => 'optional',
      'ssl_verify_depth'          => 1,
    },
    www_root    => '/etc/puppet/rack/public',
    use_default_location => false,
    access_log  => '/var/log/nginx/puppet_access.log',
    error_log   => '/var/log/nginx/puppet_error.log',
    passenger_cgi_param => {
      'SSL_CLIENT_S_DN'   => '$ssl_client_s_dn',
      'SSL_CLIENT_VERIFY' => '$ssl_client_verify',
    },
  }

[jfryman]

I am not a fan of this pattern. What about ensure_resource?

[deric]

Sure, I found this approach when I was trying to avoid duplicate resource declaration. ensure_resource is definitely more elegant.

[deric]

Should be fixed, thanks for comments. Any other suggestions?

[jfryman]

Nope, looks good. Thanks!