Skip to content
This repository has been archived by the owner on Jul 21, 2021. It is now read-only.
/ puppet-pound Public archive

A puppet module to manage the pound ssl/tls proxy daemon.

Notifications You must be signed in to change notification settings

adamcrews/puppet-pound

Repository files navigation

#pound

Build Status Puppet Forge

####Table of Contents

  1. Overview
  2. Usage - Configuration options and examples
  3. Reference - Class, parameter, and fact documentation
  4. Limitations
  5. ToDo
  6. Contributors

##Overview

This module installs and configures the Pound ssl/tls daemon.

Note: As of the 2.0.0 release only puppet 4.7 and above are supported.

##Usage

include ::pound is sufficient to get the server installed.

Now you need to configure a https vip.

pound::https { 'my-virtualnost-name':
  cert    => '/etc/pound/my_ssl_cert.pem',
  ciphers => 'HIGH:!SSLv2:!ADH:!aNULL:!eNULL:!NULL',
}

You will need to supply your own ssl cert in pem format.

##Reference

###Classes

####Public Classes

  • pound: Main class, includes all other classes

####Private Classes

  • pound::install: Handles installing the package. The package must be in a repo already configured on your system.
  • pound::config: Handles the creation of the config file and concatenates the templates together.
  • pound::service: Manages the pound service.

####Defined Types

  • pound::https: Configure a virtual host to accept ssl/tls connections on.

###Parameters

The following parameters are available in the pound module:

####package_ensure

Ensure a package is either present or absent. Default: present

####package_name

The name of the package to install. Default: Pound

####service_ensure

The state of the service. Default: running

####service_manage

Enable or disable management of the service. Default: true

####config_name

The path to the config file. Default: /etc/pound.cfg

####user

The user to drop privileges to. Default: nobody

####group

The group to drop privileges to. Default: nobody

##Limitations

The cipher selection is limited to what is supported by your underlying openssl implementation.

##ToDo

  • Add additional platform support.
  • Create some more tests.

###Contributors

Individual contributors can be found at: https://github.com/adamcrews/puppet-pound/graphs/contributors

About

A puppet module to manage the pound ssl/tls proxy daemon.

Resources

Stars

Watchers

Forks

Packages

No packages published