summaryrefslogtreecommitdiff
path: root/hieradata
diff options
context:
space:
mode:
authorJan Dittberner <jandd@cacert.org>2018-04-15 12:29:28 +0200
committerJan Dittberner <jandd@cacert.org>2018-04-15 12:29:28 +0200
commit1486b793d25f8ff536b04541226c2c1afbef143c (patch)
tree9929253ec270fabb2c2ff4a555a73cfc2d7e0829 /hieradata
parent0895ed3353006b5909e6ec78079b6d1ac0dd59b3 (diff)
downloadcacert-puppet-1486b793d25f8ff536b04541226c2c1afbef143c.tar.gz
cacert-puppet-1486b793d25f8ff536b04541226c2c1afbef143c.tar.xz
cacert-puppet-1486b793d25f8ff536b04541226c2c1afbef143c.zip
Only setup CRL cron job if needed
The CRL job is only needed if client certificates have to be verified. This commit adds parameters to the base profile to take care of conditional installation of the update-crls job and customizes the job based on a configurable list of services that need to be reloaded after CRL updates.
Diffstat (limited to 'hieradata')
-rw-r--r--hieradata/nodes/monitor.yaml3
-rw-r--r--hieradata/nodes/svn.yaml3
2 files changed, 6 insertions, 0 deletions
diff --git a/hieradata/nodes/monitor.yaml b/hieradata/nodes/monitor.yaml
index 068a343..db2a326 100644
--- a/hieradata/nodes/monitor.yaml
+++ b/hieradata/nodes/monitor.yaml
@@ -4,3 +4,6 @@ classes:
profiles::base::admins:
- jandd
- law
+profiles::base::crl_job_enable: true
+profiles::base::crl_job_services:
+ - apache2
diff --git a/hieradata/nodes/svn.yaml b/hieradata/nodes/svn.yaml
index 7a66efe..6d6e107 100644
--- a/hieradata/nodes/svn.yaml
+++ b/hieradata/nodes/svn.yaml
@@ -4,3 +4,6 @@ classes:
profiles::base::admins:
- jandd
- law
+profiles::base::crl_job_enable: true
+profiles::base::crl_job_services:
+ - apache2