Added ipam.adyxax.org policies

4 files changed, 49 insertions, 0 deletions

diff --git a/services/applications.cf b/services/applications.cf
index c380374..b33b344 100644
--- a/services/applications.cf
+++ b/services/applications.cf
@@ -4,6 +4,7 @@ body file control
         "services/applications/bareos_fd.cf",
         "services/applications/check_mk.cf",
         "services/applications/fcgiwrap.cf",
+        "services/applications/ipam.cf",
         "services/applications/nagios.cf",
         "services/applications/nginx.cf",
         "services/applications/php56.cf",
diff --git a/services/applications/ipam.cf b/services/applications/ipam.cf
new file mode 100644
index 0000000..067cb29
--- /dev/null
+++ b/services/applications/ipam.cf
@@ -0,0 +1,41 @@
+bundle agent ipam
+{
+    vars:
+        ipam::
+            "config[host]" string => "mysql01";
+            "config[user]" string => "phpipam";
+            "config[pass]" string => "Hee0Hai8lie2gaaBia8xaisieSiengie";
+            "config[name]" string => "phpipam";
+            "config[port]" string => "3306";
+            "index" slist => getindices("ipam.config");
+            "packages" slist => {
+                "pear",
+                "php56-filter",
+                "php56-gettext",
+                "php56-gd",
+                "php56-gmp",
+                "php56-json",
+                "php56-mbstring",
+                "php56-openssl",
+                "php56-pdo_mysql",
+                "php56-session",
+                "php56-simplexml",
+                "php56-sockets",
+            };
+    methods:
+        ipam::
+            "ipam"  usebundle => install_package("$(this.bundle)", "$(ipam.packages)");
+            "ipam"  usebundle => fcgiwrap("nobody", "www", "770");
+            "ipam"  usebundle => php56();
+            "ipam"  usebundle => nginx("$(sys.inputdir)/templates/nginx/ipam_nginx.conf", "nginx.conf");
+    files:
+        ipam::
+            "/var/www/phpipam/config.php"
+                create => "true",
+                perms => system_owned("444"),
+                edit_line => regex_replace("\$db\['$(index)'\]\s+=\s+\"(?!$(config[$(index)]))[^\"]+\";", "$db['$(index)'] = \"$(config[$(index)])\";"),
+                classes => if_repaired("ipam_ipam_config_php_repaired");
+    reports:
+        any::
+            "$(this.bundle): /var/www/phpipam/config.php repaired" ifvarclass => "ipam_ipam_config_php_repaired";
+}
diff --git a/services/applications/php56.cf b/services/applications/php56.cf
index 5f96d25..e62a389 100644
--- a/services/applications/php56.cf
+++ b/services/applications/php56.cf
@@ -16,6 +16,10 @@ bundle agent php56
                 perms => system_owned("444"),
                 edit_template => "$(sys.inputdir)/templates/php/freebsd-php56-php-fpm.conf",
                 classes => if_repaired("php56_php_fpm_conf_file_repaired");
+            "/var/run/php-fpm/."
+                create => "true",
+                perms => system_owned("444"),
+                classes => if_repaired("php56_php_run_dir_repaired");
     classes:
         freebsd::
             "php_fpm_service_running" expression => returnszero("/usr/sbin/service php-fpm status", "noshell");
@@ -28,6 +32,7 @@ bundle agent php56
         any::
             "$(this.bundle): /usr/local/etc/php.ini repaired" ifvarclass => "php56_php_ini_file_repaired";
             "$(this.bundle): /usr/local/etc/php-fpm.conf repaired" ifvarclass => "php56_php_fpm_conf_file_repaired";
+            "$(this.bundle): /var/run/php-fpm/ directory repaired" ifvarclass => "php56_php_run_dir_repaired";
             "$(this.bundle): sshd service repaired" ifvarclass => "php_fpm_service_repaired";
             "$(this.bundle): sshd service restarted" ifvarclass => "php_fpm_service_restarted";
 }
diff --git a/services/main.cf b/services/main.cf
index d5e52bb..c948457 100644
--- a/services/main.cf
+++ b/services/main.cf
@@ -34,6 +34,8 @@ bundle agent classify
             };
             "mail_servers" or => { "legend" };
     methods:
+        ipam::
+            "ipam"  usebundle => ipam;
         nagios::
             "nagios"  usebundle => nagios;
 }