voxpupuli/puppet-nginx

Upstream members must be defined as a Hash where the key is the address and the value is a Hash of configuration options (like server, port, and weight). Note that the previous Array-based syntax is no longer supported.

nginx::resource::upstream { 'openvox_rack_app':
  members => {
    'localhost:3000' => {
      server => 'localhost',
      port   => 3000,
      weight => 1,
    },
    'localhost:3001' => {
      server => 'localhost',
      port   => 3001,
      weight => 1,
    },
    'localhost:3002' => {
      server => 'localhost',
      port   => 3002,
      weight => 2,
      },
  },
}

nginx::resource::server { 'rack.voxpupuli.org':
  proxy => 'http://openvox_rack_app',
}

When using ssl => true on a server, you must specify how locations attach to the HTTP or HTTPS listener:

• HTTP only server (ssl => false): Do not set ssl => true on locations.
• HTTP and HTTPS server:
  • HTTP only: Set ssl => false (default) on the location.
  • Both HTTP and HTTPS: Set ssl => true and ssl_only => false (default) on the location.
  • HTTPS only: Set ssl => true and ssl_only => true on the location.
• HTTPS only server (Single listener): Set ssl => true and ssl_only => true on the location.

By default, nginx::resource::server creates an HTTP server. To enable HTTPS:

1. HTTP and HTTPS (Dual Stack): Set ssl => true. This creates an HTTP server on listen_port (default 80) and an HTTPS server on ssl_port (default 443).
2. HTTPS Only: Set ssl => true and set listen_port to the same value as ssl_port. This disables the HTTP server.

To dynamically build an upstream group across multiple servers, use the nginx::resource::upstream::member defined type. This requires storeconfigs to be enabled on your Puppetserver.

1. On the member server: Export the resource using the @@ prefix, typically using the node's certname or IP.
2. On the NGINX server: Declare the nginx::resource::upstream resource without specifying members; it will automatically collect the exported members.

# On the upstream member server:
@@nginx::resource::upstream::member { $trusted['certname']:
  ensure   => present,
  upstream => 'proxypass',
  server   => $facts['networking']['ip'],
  port     => 3000,
}

# On the NGINX server:
nginx::resource::upstream { 'proxypass':
  ensure => present,
}

To use precompiled Phusion Passenger, set package_source => 'passenger' in the nginx class. This adds the Phusion Passenger repository to your package manager. You should also use http_cfg_append to set the passenger_root.

class { 'nginx':
  package_source  => 'passenger',
  http_cfg_append => {
    'passenger_root' => '/usr/lib/ruby/vendor_ruby/phusion_passenger/locations.ini',
  }
}

To install the NGINX package and bootstrap a basic instance using the module, include the nginx class in your Puppet manifest.

include nginx

Use the nginx::resource::location class to configure locations for serving static files.

Key parameters:

• www_root: The disk location for files. Cannot be used with proxy.
• index_files: An array of index files to look for (defaults to ['index.html', 'index.htm', 'index.php']).
• autoindex: Set to 'on' to enable directory listing.
• autoindex_exact_size: Set to 'on' or 'off' to control whether file sizes are exact or rounded.
• autoindex_format: Set the listing format to 'html', 'xml', 'json', or 'jsonp'.
• autoindex_localtime: Set to 'on' or 'off' to use local time instead of UTC.
• try_files: An array of file locations to try in order.

nginx::resource::location {
  'location_path': {
    www_root => '/var/www/html',
    autoindex => 'on',
    index_files => ['index.html'],
  }
}

Manage how the server identifies itself and handles domain redirects:

• server_name: List of servernames for which this server will respond (default: [$name]).
• rewrite_www_to_non_www: Adds rules to rewrite www.domain.com to domain.com for SEO (default: false).
• rewrite_non_www_to_www: Adds rules to rewrite domain.com to www.domain.com for SEO (default: false).