itamae/cookbooks/consul/setup.rb

56 lines
1.0 KiB
Ruby

if node['consul']['manager']
SRC = 'consul-server.hcl.erb'
else
SRC = 'consul-agent.hcl.erb'
end
template '/etc/consul.d/consul.hcl' do
owner 'consul'
group 'consul'
mode '644'
variables(manager: node['consul']['manager'],
manager_hosts: node['consul']['manager_hosts'],
ipaddr: node['consul']['ipaddr'],
)
source "templates/etc/consul.d/#{SRC}"
notifies :restart, 'service[consul]'
end
directory '/var/log/consul/' do
owner 'consul'
group 'consul'
mode '0755'
end
remote_file '/etc/systemd/system/consul.service' do
owner 'root'
group 'root'
mode '0644'
notifies :restart, 'service[consul]'
end
remote_file '/etc/consul.d/service-consul.json' do
owner 'consul'
group 'consul'
mode '644'
end
service 'consul' do
action [:enable, :start]
end
# iptables settings here:
%w( 8300/tcp 8301/tcp 8301/udp 8500/tcp 8502/tcp ).each do |port|
execute "ufw allow #{port}" do
user 'root'
not_if "LANG=c ufw status | grep #{port}"
notifies :run, 'execute[ufw reload-or-enable]'
end
end