safeguard-devise 0.0.2

data/puppet/modules/redis/manifests/init.pp

@@ -0,0 +1,153 @@
+# == Class: redis
+#
+# Install and configure a Redis server
+#
+# === Parameters
+#
+# All the redis.conf parameters can be passed to the class.
+# Check the README.md file
+#
+# === Variables
+#
+# Here you should define a list of variables that this module would require.
+#
+# === Examples
+#
+#  class { redis:
+#    $conf_port => '6380',
+#    $conf_bind => '0.0.0.0',
+#  }
+#
+# === Authors
+#
+# Felipe Salum <fsalum@gmail.com>
+#
+# === Copyright
+#
+# Copyright 2013 Felipe Salum, unless otherwise noted.
+#
+class redis (
+  $package_ensure                   = 'present',
+  $service_ensure                   = 'running',
+  $service_enable                   = true,
+  $conf_daemonize                   = 'yes',
+  $conf_pidfile                     = UNSET,
+  $conf_port                        = '6379',
+  $conf_bind                        = '127.0.0.1',
+  $conf_timeout                     = '0',
+  $conf_loglevel                    = 'notice',
+  $conf_logfile                     = UNSET,
+  $conf_syslog_enabled              = UNSET,
+  $conf_syslog_ident                = UNSET,
+  $conf_syslog_facility             = UNSET,
+  $conf_databases                   = '16',
+  $conf_save                        = UNSET,
+  $conf_nosave                      = UNSET,
+  $conf_rdbcompression              = 'yes',
+  $conf_dbfilename                  = 'dump.rdb',
+  $conf_dir                         = '/var/lib/redis/',
+  $conf_slaveof                     = UNSET,
+  $conf_masterauth                  = UNSET,
+  $conf_slave_server_stale_data     = 'yes',
+  $conf_repl_ping_slave_period      = '10',
+  $conf_repl_timeout                = '60',
+  $conf_requirepass                 = UNSET,
+  $conf_maxclients                  = UNSET,
+  $conf_maxmemory                   = UNSET,
+  $conf_maxmemory_policy            = UNSET,
+  $conf_maxmemory_samples           = UNSET,
+  $conf_appendonly                  = 'no',
+  $conf_appendfilename              = UNSET,
+  $conf_appendfsync                 = 'everysec',
+  $conf_no_appendfsync_on_rewrite   = 'no',
+  $conf_auto_aof_rewrite_percentage = '100',
+  $conf_auto_aof_rewrite_min_size   = '64mb',
+  $conf_slowlog_log_slower_than     = '10000',
+  $conf_slowlog_max_len             = '1024',
+  $conf_vm_enabled                  = 'no',
+  $conf_vm_swap_file                = '/tmp/redis.swap',
+  $conf_vm_max_memory               = '0',
+  $conf_vm_page_size                = '32',
+  $conf_vm_pages                    = '134217728',
+  $conf_vm_max_threads              = '4',
+  $conf_hash_max_zipmap_entries     = '512',
+  $conf_hash_max_zipmap_value       = '64',
+  $conf_list_max_ziplist_entries    = '512',
+  $conf_list_max_ziplist_value      = '64',
+  $conf_set_max_intset_entries      = '512',
+  $conf_zset_max_ziplist_entries    = '128',
+  $conf_zset_max_ziplist_value      = '64',
+  $conf_activerehashing             = 'yes',
+  $conf_include                     = UNSET,
+) {
+
+  include redis::params
+
+  $conf_template  = $redis::params::conf_template
+  $conf_redis     = $redis::params::conf
+  $conf_logrotate = $redis::params::conf_logrotate
+  $package        = $redis::params::package
+  $service        = $redis::params::service
+
+  $conf_pidfile_real = $conf_pidfile ? {
+    'UNSET' => $::redis::params::pidfile,
+    default => $conf_pidfile,
+  }
+
+  $conf_logfile_real = $conf_logfile ? {
+    'UNSET' => $::redis::params::logfile,
+    default => $conf_logfile,
+  }
+
+  package { 'redis':
+    ensure => $package_ensure,
+    name   => $package,
+  }
+
+  service { 'redis':
+    ensure     => $service_ensure,
+    name       => $service,
+    enable     => $service_enable,
+    hasrestart => true,
+    hasstatus  => true,
+    require    => Package['redis'],
+  }
+
+  file { $conf_redis:
+    path    => $conf_redis,
+    content => template("redis/${conf_template}"),
+    owner   => root,
+    group   => root,
+    mode    => '0644',
+    require => Package['redis'],
+    notify  => Service['redis'],
+  }
+
+  file { $conf_logrotate:
+    path    => $conf_logrotate,
+    content => template('redis/redis.logrotate.erb'),
+    owner   => root,
+    group   => root,
+    mode    => '0644',
+  }
+
+  exec { $conf_dir:
+    path    => '/bin:/usr/bin:/sbin:/usr/sbin',
+    command => "mkdir -p ${conf_dir}",
+    user    => root,
+    group   => root,
+    creates => $conf_dir,
+    before  => Service['redis'],
+    require => Package['redis'],
+    notify  => Service['redis'],
+  }
+
+  file { $conf_dir:
+    ensure  => directory,
+    owner   => redis,
+    group   => redis,
+    before  => Service['redis'],
+    require => Exec[$conf_dir],
+  }
+
+}

data/puppet/modules/redis/manifests/params.pp

@@ -0,0 +1,39 @@
+# Class: redis::params
+#
+# This class configures parameters for the puppet-redis module.
+#
+# Parameters:
+#
+# Actions:
+#
+# Requires:
+#
+# Sample Usage:
+#
+class redis::params {
+
+  case $::operatingsystem {
+    'centos', 'redhat', 'fedora': {
+      $package        = 'redis'
+      $service        = 'redis'
+      $conf           = '/etc/redis.conf'
+      $conf_template  = 'redis.rhel.conf.erb'
+      $conf_logrotate = '/etc/logrotate.d/redis'
+      $pidfile        = '/var/run/redis/redis.pid'
+      $logfile        = '/var/log/redis/redis.log'
+    }
+    'ubuntu', 'debian': {
+      $package        = 'redis-server'
+      $service        = 'redis-server'
+      $conf           = '/etc/redis/redis.conf'
+      $conf_template  = 'redis.debian.conf.erb'
+      $conf_logrotate = '/etc/logrotate.d/redis-server'
+      $pidfile        = '/var/run/redis/redis-server.pid'
+      $logfile        = '/var/log/redis/redis-server.log'
+    }
+    default: {
+      fail("Unsupported osfamily: ${::osfamily} operatingsystem: ${::operatingsystem}, module ${module_name} only support osfamily RedHat and Debian")
+    }
+  }
+
+}

data/puppet/modules/redis/metadata.json

@@ -0,0 +1,31 @@
+{
+  "name": "fsalum-redis",
+  "version": "0.0.6",
+  "source": "git://github.com/fsalum/puppet-redis.git",
+  "author": "Felipe Salum",
+  "license": "Apache License, Version 2.0",
+  "summary": "Puppet module for Redis Server",
+  "description": "Module to install and configure a Redis server",
+  "project_page": "https://github.com/fsalum/puppet-redis",
+  "dependencies": [
+
+  ],
+  "types": [
+
+  ],
+  "checksums": {
+    "CHANGELOG": "32b928a1e47198dc2083680b01d123da",
+    "Gemfile": "7c7684e8c8d675f1061e40a3e1d9236d",
+    "Gemfile.lock": "183961a8885783a5f617da58b8d3b8d1",
+    "Modulefile": "27a715c1b6653599c64895e7841fce60",
+    "README.md": "8834c60017afceea8138775f4e991133",
+    "Rakefile": "25325f7a133aff637f3bea5e272bce74",
+    "manifests/init.pp": "5d1cca21dfc1aac28ac563d6b9053be9",
+    "manifests/params.pp": "6adbdff17035fd34e7ac59b1d1569afb",
+    "spec/spec_helper.rb": "a55d1e6483344f8ec6963fcb2c220372",
+    "templates/redis.debian.conf.erb": "17ecff45fa42a2397ac061532b764092",
+    "templates/redis.logrotate.erb": "c1d0b11eeb8252e6be3f3e0cfe269414",
+    "templates/redis.rhel.conf.erb": "b5088bee6393dd7b1073de6755d6d02c",
+    "tests/init.pp": "2193e95ff8e32896eeb020edb87671d4"
+  }
+}

data/puppet/modules/redis/spec/spec_helper.rb

@@ -0,0 +1,17 @@
+dir = File.expand_path(File.dirname(__FILE__))
+$LOAD_PATH.unshift File.join(dir, 'lib')
+
+require 'mocha'
+require 'puppet'
+require 'rspec'
+require 'spec/autorun'
+
+Spec::Runner.configure do |config|
+    config.mock_with :mocha
+end
+
+# We need this because the RAL uses 'should' as a method.  This
+# allows us the same behaviour but with a different method name.
+class Object
+    alias :must :should
+end

data/puppet/modules/redis/templates/redis.debian.conf.erb

@@ -0,0 +1,217 @@
+# Redis configuration file example
+
+# By default Redis does not run as a daemon. Use 'yes' if you need it.
+# Note that Redis will write a pid file in /var/run/redis.pid when daemonized.
+daemonize <%= @conf_daemonize %>
+
+# When run as a daemon, Redis write a pid file in /var/run/redis.pid by default.
+# You can specify a custom pid file location here.
+pidfile <%= @conf_pidfile_real %>
+
+# Accept connections on the specified port, default is 6379
+port <%= @conf_port %>
+
+# If you want you can bind a single interface, if the bind option is not
+# specified all the interfaces will listen for connections.
+#
+bind <%= @conf_bind %>
+
+# Close the connection after a client is idle for N seconds (0 to disable)
+timeout <%= @conf_timeout %>
+
+# Set server verbosity to 'debug'
+# it can be one of:
+# debug (a lot of information, useful for development/testing)
+# notice (moderately verbose, what you want in production probably)
+# warning (only very important / critical messages are logged)
+loglevel <%= @conf_loglevel %>
+
+# Specify the log file name. Also 'stdout' can be used to force
+# the demon to log on the standard output. Note that if you use standard
+# output for logging but daemonize, logs will be sent to /dev/null
+logfile <%= @conf_logfile_real %>
+
+# Set the number of databases. The default database is DB 0, you can select
+# a different one on a per-connection basis using SELECT <dbid> where
+# dbid is a number between 0 and 'databases'-1
+databases <%= @conf_databases %>
+
+################################ SNAPSHOTTING  #################################
+#
+# Save the DB on disk:
+#
+#   save <seconds> <changes>
+#
+#   Will save the DB if both the given number of seconds and the given
+#   number of write operations against the DB occurred.
+#
+#   In the example below the behaviour will be to save:
+#   after 900 sec (15 min) if at least 1 key changed
+#   after 300 sec (5 min) if at least 10 keys changed
+#   after 60 sec if at least 10000 keys changed
+<% if @conf_nosave != 'UNSET' %>
+#do not persist to disk:
+#save 900 1
+#save 300 10
+#save 60 10000
+<% else %>
+  <% if @conf_save != 'UNSET' %>
+  save <%= @conf_save %>
+  <% else %>
+  save 900 1
+  save 300 10
+  save 60 10000
+  <% end %>
+<% end %>
+
+# Compress string objects using LZF when dump .rdb databases?
+# For default that's set to 'yes' as it's almost always a win.
+# If you want to save some CPU in the saving child set it to 'no' but
+# the dataset will likely be bigger if you have compressible values or keys.
+rdbcompression <%= @conf_rdbcompression %>
+
+# The filename where to dump the DB
+dbfilename <%= @conf_dbfilename %>
+
+# For default save/load DB in/from the working directory
+# Note that you must specify a directory not a file name.
+dir <%= @conf_dir %>
+
+################################# REPLICATION #################################
+
+# Master-Slave replication. Use slaveof to make a Redis instance a copy of
+# another Redis server. Note that the configuration is local to the slave
+# so for example it is possible to configure the slave to save the DB with a
+# different interval, or to listen to another port, and so on.
+#
+# slaveof <masterip> <masterport>
+<% if @conf_slaveof != 'UNSET' %>
+slaveof <%= @conf_slaveof %>
+<% end %>
+
+# If the master is password protected (using the "requirepass" configuration
+# directive below) it is possible to tell the slave to authenticate before
+# starting the replication synchronization process, otherwise the master will
+# refuse the slave request.
+#
+# masterauth <master-password>
+<% if @conf_masterauth != 'UNSET' %>
+masterauth <%= @conf_masterauth %>
+<% end %>
+
+
+################################## SECURITY ###################################
+
+# Require clients to issue AUTH <PASSWORD> before processing any other
+# commands.  This might be useful in environments in which you do not trust
+# others with access to the host running redis-server.
+#
+# This should stay commented out for backward compatibility and because most
+# people do not need auth (e.g. they run their own servers).
+#
+# requirepass foobared
+<% if @conf_requirepass != 'UNSET' %>
+requirepass <%= @conf_requirepass %>
+<% end %>
+
+
+################################### LIMITS ####################################
+
+# Set the max number of connected clients at the same time. By default there
+# is no limit, and it's up to the number of file descriptors the Redis process
+# is able to open. The special value '0' means no limts.
+# Once the limit is reached Redis will close all the new connections sending
+# an error 'max number of clients reached'.
+#
+# maxclients 128
+<% if @conf_maxclients != 'UNSET' %>
+maxclients <%= @conf_maxclients %>
+<% end %>
+
+# Don't use more memory than the specified amount of bytes.
+# When the memory limit is reached Redis will try to remove keys with an
+# EXPIRE set. It will try to start freeing keys that are going to expire
+# in little time and preserve keys with a longer time to live.
+# Redis will also try to remove objects from free lists if possible.
+#
+# If all this fails, Redis will start to reply with errors to commands
+# that will use more memory, like SET, LPUSH, and so on, and will continue
+# to reply to most read-only commands like GET.
+#
+# WARNING: maxmemory can be a good idea mainly if you want to use Redis as a
+# 'state' server or cache, not as a real DB. When Redis is used as a real
+# database the memory usage will grow over the weeks, it will be obvious if
+# it is going to use too much memory in the long run, and you'll have the time
+# to upgrade. With maxmemory after the limit is reached you'll start to get
+# errors for write operations, and this may even lead to DB inconsistency.
+#
+# maxmemory <bytes>
+<% if @conf_maxmemory != 'UNSET' %>
+maxmemory <%= @conf_maxmemory %>
+<% end %>
+
+############################## APPEND ONLY MODE ###############################
+
+# By default Redis asynchronously dumps the dataset on disk. If you can live
+# with the idea that the latest records will be lost if something like a crash
+# happens this is the preferred way to run Redis. If instead you care a lot
+# about your data and don't want to that a single record can get lost you should
+# enable the append only mode: when this mode is enabled Redis will append
+# every write operation received in the file appendonly.log. This file will
+# be read on startup in order to rebuild the full dataset in memory.
+#
+# Note that you can have both the async dumps and the append only file if you
+# like (you have to comment the "save" statements above to disable the dumps).
+# Still if append only mode is enabled Redis will load the data from the
+# log file at startup ignoring the dump.rdb file.
+#
+# The name of the append only file is "appendonly.log"
+#
+# IMPORTANT: Check the BGREWRITEAOF to check how to rewrite the append
+# log file in background when it gets too big.
+
+appendonly <%= @conf_appendonly %>
+
+# The fsync() call tells the Operating System to actually write data on disk
+# instead to wait for more data in the output buffer. Some OS will really flush
+# data on disk, some other OS will just try to do it ASAP.
+#
+# Redis supports three different modes:
+#
+# no: don't fsync, just let the OS flush the data when it wants. Faster.
+# always: fsync after every write to the append only log . Slow, Safest.
+# everysec: fsync only if one second passed since the last fsync. Compromise.
+#
+# The default is "always" that's the safer of the options. It's up to you to
+# understand if you can relax this to "everysec" that will fsync every second
+# or to "no" that will let the operating system flush the output buffer when
+# it want, for better performances (but if you can live with the idea of
+# some data loss consider the default persistence mode that's snapshotting).
+
+appendfsync <%= @conf_appendfsync %>
+# appendfsync everysec
+# appendfsync no
+
+############################### ADVANCED CONFIG ###############################
+
+# Glue small output buffers together in order to send small replies in a
+# single TCP packet. Uses a bit more CPU but most of the times it is a win
+# in terms of number of queries per second. Use 'yes' if unsure.
+glueoutputbuf yes
+
+# Use object sharing. Can save a lot of memory if you have many common
+# string in your dataset, but performs lookups against the shared objects
+# pool so it uses more CPU and can be a bit slower. Usually it's a good
+# idea.
+#
+# When object sharing is enabled (shareobjects yes) you can use
+# shareobjectspoolsize to control the size of the pool used in order to try
+# object sharing. A bigger pool size will lead to better sharing capabilities.
+# In general you want this value to be at least the double of the number of
+# very common strings you have in your dataset.
+#
+# WARNING: object sharing is experimental, don't enable this feature
+# in production before of Redis 1.0-stable. Still please try this feature in
+# your development environment so that we can test it better.
+# shareobjects no
+# shareobjectspoolsize 1024

data/puppet/modules/redis/templates/redis.logrotate.erb

@@ -0,0 +1,9 @@
+<%= @conf_logfile_real %> {
+    weekly
+    rotate 10
+    copytruncate
+    delaycompress
+    compress
+    notifempty
+    missingok
+}