diff options
Diffstat (limited to 'cfengine/cf.services.web')
| -rw-r--r-- | cfengine/cf.services.web | 285 |
1 files changed, 285 insertions, 0 deletions
diff --git a/cfengine/cf.services.web b/cfengine/cf.services.web new file mode 100644 index 0000000..d27c561 --- /dev/null +++ b/cfengine/cf.services.web @@ -0,0 +1,285 @@ +control: + AddInstallable = ( apache_reload ) +editfiles: + { /etc/apache/httpd.conf + DefineClasses "apache_reload" + # + # ServerAdmin webmaster@$(domain) + # + # (Try to add it _before_ virtual hosts) + # + WarnIfNoLineMatching "^[[:blank:]]*ServerAdmin[[:blank:]].*" + BeginGroupIfNoLineMatching "^[[:blank:]]*ServerAdmin[[:blank:]].*" + BeginGroupIfNoLineMatching "^(### Section 3: Virtual Hosts|#?NameVirtualHost.*|#?VirtualHost.*)$" + Append "ServerAdmin webmaster@$(domain)" + EndGroup + BeginGroupIfNoLineMatching "^[[:blank:]]*ServerAdmin[[:blank:]].*" + LocateLineMatching "^(### Section 3: Virtual Hosts|#?NameVirtualHost.*|#?VirtualHost.*)$" + InsertLine "ServerAdmin webmaster@$(domain)" + EndGroup + EndGroup + LocateLineMatching "^[[:blank:]]*ServerAdmin[[:blank:]].*" + BeginGroupIfNoLineMatching "^[[:blank:]]*ServerAdmin[[:blank:]]*webmaster@$(domain)[[:blank:]]*$" + ReplaceLineWith "ServerAdmin webmaster@$(domain)" + EndGroup + # + # Make space for cfengine hacks + # + # (Try to add it _before_ virtual hosts) + # + ResetSearch "1" + BeginGroupIfNoSuchLine "# BEGIN CFENGINE" + BeginGroupIfNoLineMatching "^(### Section 3: Virtual Hosts|#?NameVirtualHost.*|#?VirtualHost.*)$" + Append "" + Append "# BEGIN CFENGINE" + Append "# END CFENGINE" + EndGroup + BeginGroupIfNoLineMatching "^# BEGIN CFENGINE$" + LocateLineMatching "^(### Section 3: Virtual Hosts|#?NameVirtualHost.*|#?VirtualHost.*)$" + IncrementPointer "-1" + InsertLine "" + InsertLine "# BEGIN CFENGINE" + InsertLine "# END CFENGINE" + InsertLine "" + EndGroup + EndGroup + # + # LoadModule php3_module /usr/lib/apache/1.3/libphp3.so + # + # <IfModule libphp3.c> + # php3_display_errors off + # php3_log_errors on + # AddType application/x-httpd-php3 .php3 + # AddType application/x-httpd-php3-source .phps + # </IfModule> + # + BeginGroupIfFileExists "/usr/lib/apache/1.3/libphp3.so" + ResetSearch "1" +# bug! UnCommentLinesMatching "^#[[:blank:]]*LoadModule[[:blank:]]+php3_module[[:blank:]].*" + LocateLineMatching "^#[[:blank:]]*LoadModule[[:blank:]]+php3_module[[:blank:]]+/usr/lib/apache/1.3/libphp3.so$" + ReplaceLineWith "LoadModule php3_module /usr/lib/apache/1.3/libphp3.so" + CatchAbort + AbortAtLineMatching "^# END CFENGINE$" + LocateLineMatching "^# BEGIN CFENGINE$" + BeginGroupIfNoSuchLine "<IfModule libphp3.c>" + InsertLine "<IfModule libphp3.c>" + InsertLine "</IfModule>" + EndGroup + ResetSearch "1" + LocateLineMatching "^# BEGIN CFENGINE$" + LocateLineMatching "^<IfModule libphp3.c>$" + BeginGroupIfNoLineMatching "[[:blank:]]*php3_display_errors off" + InsertLine " php3_display_errors off" + EndGroup + BeginGroupIfNoLineMatching "[[:blank:]]*php3_log_errors on" + InsertLine " php3_log_errors on" + EndGroup + BeginGroupIfNoLineMatching "[[:blank:]]*AddType application/x-httpd-php3 .php3" + InsertLine " AddType application/x-httpd-php3 .php3" + EndGroup + BeginGroupIfNoLineMatching "[[:blank:]]*AddType application/x-httpd-source .phps" + InsertLine " AddType application/x-httpd-source .phps" + EndGroup + UnsetAbort "^# END CFENGINE$" + EndGroup + # + # LoadModule php4_module /usr/lib/apache/1.3/libphp4.so + # + # <IfModule libphp4.c> + # php_flag display_errors off + # php_flag log_errors on + # AddType application/x-httpd-php .php + # AddType application/x-httpd-php-source .phps + # </IfModule> + # + BeginGroupIfFileExists "/usr/lib/apache/1.3/libphp4.so" + ResetSearch "1" +# UnCommentLinesMatching "^\#[[:blank:]]*LoadModule[[:blank:]]+php4\_module[[:blank:]].*" + LocateLineMatching "^#[[:blank:]]*LoadModule[[:blank:]]+php4\_module[[:blank:]]+/usr/lib/apache/1.3/libphp4.so$" + ReplaceLineWith "LoadModule php4_module /usr/lib/apache/1.3/libphp4.so" + CatchAbort + AbortAtLineMatching "^# END CFENGINE$" + LocateLineMatching "^# BEGIN CFENGINE$" + BeginGroupIfNoSuchLine "<IfModule libphp4.c>" + InsertLine "<IfModule libphp4.c>" + InsertLine "</IfModule>" + EndGroup + ResetSearch "1" + LocateLineMatching "^# BEGIN CFENGINE$" + LocateLineMatching "^<IfModule libphp4.c>$" + BeginGroupIfNoLineMatching "^.*php_flag[[:blank:]]*display_errors[[:blank:]]*off$" + InsertLine " php_flag display_errors off" + EndGroup + BeginGroupIfNoLineMatching ".*php_flag log_errors on" + InsertLine " php_flag log_errors on" + EndGroup + BeginGroupIfNoLineMatching "[[:blank:]]*AddType application/x-httpd-php .php" + InsertLine " AddType application/x-httpd-php .php" + EndGroup + BeginGroupIfNoLineMatching "[[:blank:]]*AddType application/x-httpd-source .phps" + InsertLine " AddType application/x-httpd-source .phps" + EndGroup + UnsetAbort "^# END CFENGINE$" + EndGroup + # + # LoadModule gzip_module /usr/lib/apache/1.3/mod_gzip.so + # + # <IfModule mod_gzip.c> + # mod_gzip_dechunk yes + # mod_gzip_keep_workfiles No + # mod_gzip_temp_dir /tmp + # mod_gzip_minimum_file_size 1002 + # mod_gzip_maximum_file_size 0 + # mod_gzip_maximum_inmem_size 1000000 + # mod_gzip_item_include file "\.htm$" + # mod_gzip_item_include file "\.html$" + # mod_gzip_item_include mime "text/.*" + # mod_gzip_item_include file "\.php$" + # mod_gzip_item_include mime "jserv-servlet" + # mod_gzip_item_include handler "jserv-servlet" + # mod_gzip_item_include mime "application/x-httpd-php.*" + # mod_gzip_item_include mime "httpd/unix-directory" + # mod_gzip_item_exclude file "\.css$" + # mod_gzip_item_exclude file "\.js$" + # mod_gzip_item_exclude file "\.wml$" + # </IfModule> + # + BeginGroupIfFileExists "/usr/lib/apache/1.3/mod_gzip.so" + ResetSearch "1" +# SetCommentStart "#" +# SetCommentEnd "" +# UnCommentLinesMatching "^\#[[:blank:]]*LoadModule[[:blank:]]+gzip_module[[:blank:]].*" + LocateLineMatching "#[[:blank:]]*LoadModule[[:blank:]]+gzip_module[[:blank:]]+/usr/lib/apache/1.3/mod_gzip.so" +# UnCommentNLines "1" + ReplaceLineWith "LoadModule gzip_module /usr/lib/apache/1.3/mod_gzip.so" + CatchAbort + AbortAtLineMatching "^# END CFENGINE$" + LocateLineMatching "^# BEGIN CFENGINE$" + BeginGroupIfNoSuchLine "<IfModule mod_gzip.c>" + InsertLine "<IfModule mod_gzip.c>" + InsertLine "</IfModule>" + EndGroup + ResetSearch "1" + LocateLineMatching "^# BEGIN CFENGINE$" + LocateLineMatching "^<IfModule mod_gzip.c>$" + BeginGroupIfNoLineMatching ' mod_gzip_on yes' + InsertLine ' mod_gzip_on yes' + EndGroup + BeginGroupIfNoLineMatching '[[:blank:]]*mod_gzip_dechunk yes' + InsertLine ' mod_gzip_dechunk yes' + EndGroup + BeginGroupIfNoLineMatching '[[:blank:]]*mod_gzip_keep_workfiles No' + InsertLine ' mod_gzip_keep_workfiles No' + EndGroup + BeginGroupIfNoLineMatching '[[:blank:]]*mod_gzip_temp_dir /tmp' + InsertLine ' mod_gzip_temp_dir /tmp' + EndGroup + BeginGroupIfNoLineMatching '[[:blank:]]*mod_gzip_minimum_file_size 1002' + InsertLine ' mod_gzip_minimum_file_size 1002' + EndGroup + BeginGroupIfNoLineMatching '[[:blank:]]*mod_gzip_maximum_file_size 0' + InsertLine ' mod_gzip_maximum_file_size 0' + EndGroup + BeginGroupIfNoLineMatching '[[:blank:]]*mod_gzip_maximum_inmem_size 1000000' + InsertLine ' mod_gzip_maximum_inmem_size 1000000' + EndGroup + BeginGroupIfNoLineMatching '[[:blank:]]*mod_gzip_item_include file "\\\.htm\$"' + InsertLine ' mod_gzip_item_include file "\.htm$"' + EndGroup + BeginGroupIfNoLineMatching '[[:blank:]]*mod_gzip_item_include file "\\\.html\$"' + InsertLine ' mod_gzip_item_include file "\.html$"' + EndGroup + BeginGroupIfNoLineMatching '[[:blank:]]*mod_gzip_item_include mime "text/\.\*"' + InsertLine ' mod_gzip_item_include mime "text/.*"' + EndGroup + BeginGroupIfNoLineMatching '[[:blank:]]*mod_gzip_item_include file "\\\.php\$"' + InsertLine ' mod_gzip_item_include file "\.php$"' + EndGroup + BeginGroupIfNoLineMatching '[[:blank:]]*mod_gzip_item_include mime "jserv-servlet"' + InsertLine ' mod_gzip_item_include mime "jserv-servlet"' + EndGroup + BeginGroupIfNoLineMatching '[[:blank:]]*mod_gzip_item_include handler "jserv-servlet"' + InsertLine ' mod_gzip_item_include handler "jserv-servlet"' + EndGroup + BeginGroupIfNoLineMatching '[[:blank:]]*mod_gzip_item_include mime "application/x-httpd-php\.\*"' + InsertLine ' mod_gzip_item_include mime "application/x-httpd-php.*"' + EndGroup + BeginGroupIfNoLineMatching '[[:blank:]]*mod_gzip_item_include mime "httpd/unix-directory"' + InsertLine ' mod_gzip_item_include mime "httpd/unix-directory"' + EndGroup + BeginGroupIfNoLineMatching '[[:blank:]]*mod_gzip_item_exclude file "\\\.css\$"' + InsertLine ' mod_gzip_item_exclude file "\.css$"' + EndGroup + BeginGroupIfNoLineMatching '[[:blank:]]*mod_gzip_item_exclude file "\\\.js\$"' + InsertLine ' mod_gzip_item_exclude file "\.js$"' + EndGroup + BeginGroupIfNoLineMatching '[[:blank:]]*mod_gzip_item_exclude file "\\\.wml\$"' + InsertLine ' mod_gzip_item_exclude file "\.wml$"' + EndGroup + UnsetAbort "^# END CFENGINE$" + EndGroup + # + # LoadModule index_rss_module /usr/lib/apache/1.3/mod_index_rss.so + # + # <IfModule mod_index_rss.c> + # IndexRSSEngine On + # </IfModule> + # + BeginGroupIfFileExists "/usr/lib/apache/1.3/mod_index_rss.so" + ResetSearch "1" +# bug! UnCommentLinesMatching "^#[[:blank:]]*LoadModule[[:blank:]]+index_rss_module[[:blank:]].*" + LocateLineMatching "^#[[:blank:]]*LoadModule[[:blank:]]+index_rss_module[[:blank:]]+/usr/lib/apache/1.3/mod_index_rss.so$" + ReplaceLineWith "LoadModule index_rss_module /usr/lib/apache/1.3/mod_index_rss.so" + CatchAbort + AbortAtLineMatching "^# END CFENGINE$" + LocateLineMatching "^# BEGIN CFENGINE$" + BeginGroupIfNoSuchLine "<IfModule mod_index_rss.c>" + InsertLine "<IfModule mod_index_rss.c>" + InsertLine "</IfModule>" + EndGroup + ResetSearch "1" + LocateLineMatching "^# BEGIN CFENGINE$" + LocateLineMatching "^<IfModule mod_index_rss.c>$" + BeginGroupIfNoLineMatching "[[:blank:]]+IndexRSSEngine On" + InsertLine " IndexRSSEngine On" + EndGroup + UnsetAbort "^# END CFENGINE$" + EndGroup + # + # LoadModule pam_auth_module /usr/lib/apache/1.3/mod_auth_pam.so + # + # <IfModule mod_auth_pam.c> + # <Location /> + # AuthPAM_Enabled Off + # </Location> + # </IfModule> + # + BeginGroupIfFileExists "/usr/lib/apache/1.3/mod_auth_pam.so" + ResetSearch "1" +# bug! UnCommentLinesMatching "^#[[:blank:]]*LoadModule[[:blank:]]+pam_auth_module[[:blank:]].*" + LocateLineMatching "^#[[:blank:]]*LoadModule[[:blank:]]+pam_auth_module[[:blank:]]+/usr/lib/apache/1.3/mod_auth_pam.so$" + ReplaceLineWith "LoadModule pam_auth_module /usr/lib/apache/1.3/mod_auth_pam.so" + CatchAbort + AbortAtLineMatching "^# END CFENGINE$" + LocateLineMatching "^# BEGIN CFENGINE$" + BeginGroupIfNoSuchLine "<IfModule mod_auth_pam.c>" + InsertLine "<IfModule mod_auth_pam.c>" + InsertLine " <Location />" + InsertLine " </Location>" + InsertLine "</IfModule>" + EndGroup + ResetSearch "1" + LocateLineMatching "^# BEGIN CFENGINE$" + LocateLineMatching "^<IfModule mod_auth_pam.c>$" + LocateLineMatching "[[:blank:]]+<Location />" + BeginGroupIfNoLineMatching "[[:blank:]]+AuthPAM_Enabled Off" + InsertLine " AuthPAM_Enabled Off" + EndGroup + UnsetAbort "^# END CFENGINE$" + EndGroup + } +processes: + "apache" restart "/etc/init.d/apache restart" +shellcommands: + apache_reload:: + "/etc/init.d/apache force-reload" |