# web apps
node alamut {
# Location: IELO datacenter (marseille)
#
# TODO:
# - Review board
# - api
# - pastebin
# - LDAP slave
#
    include common::default_mageia_server_no_smtp
    include postgresql::server
    postgresql::tagged { 'default': }

    timezone::timezone { 'Europe/Paris': }

    include catdap
    include mga-mirrors

    class {'epoll::var':
        db_password => extlookup('epoll_pgsql','x'),
    }
    include epoll
    include epoll::create_db

    include bugzilla
    include sympa::server
    include postfix::server::primary

    # temporary, just the time the vm is running there
    host { 'friteuse':
        ensure       => 'present',
        ip           => '192.168.122.131',
        host_aliases => [ "friteuse.$domain", "forums.$domain" ],
    }

    # to create all phpbb database on alamut
    phpbb::databases { $fqdn: }

    apache::vhost::redirect_ssl { "forums.$domain": }
    apache::vhost_redirect { "forum.$domain":
        url => "https://forums.$domain/",
    }
    apache::vhost_redirect { "ssl_forum.$domain":
        url     => "https://forums.$domain/",
        vhost   => "forum.$domain",
        use_ssl => true,
    }

    # connect to ssl so the proxy do not shoke if trying to
    # enforce ssl ( note that this has not been tested, maybe this
    # is uneeded )
    apache::vhost::reverse_proxy { "ssl_forums.$domain":
        url     => "https://forums.$domain/",
        vhost   => "forums.$domain",
        use_ssl => true,
        content => '
        RewriteEngine On
        RewriteCond %{QUERY_STRING} mode=register
        RewriteRule .*ucp.php - [forbidden]
        ',
    }

    include tld_redirections

    include libvirtd::kvm
    include lists
    include dns::server
    include repositories::svn_mirror
    include viewvc

    # disabled until fixed
    #Enable back to test.
    include repositories::git_mirror
    include cgit

    include xymon::server
    apache::vhost_simple { "xymon.$domain":
        location => '/var/lib/xymon/www',
    }

    youri-check::report_www { 'check': }

    youri-check::config {'config_cauldron':
        version => 'cauldron',
    }
    youri-check::report { 'report_cauldron':
        version => 'cauldron',
        hour    => '*',
        minute  => '24'
    }

    youri-check::config {'config_1':
        version => '1',
    }
    youri-check::report {'report_1':
        version => '1',
        hour    => '*',
        minute  => '54'
    }

    youri-check::config {'config_2':
        version => '2',
    }
    youri-check::report {'report_2':
        version => '2',
        hour    => '*',
        minute  => '9'
    }

    include wikis
    include websites::perl
    include websites::www

    class { 'mgapeople':
        ldap_server => 'ldap.mageia.org',
        binddn      => 'cn=mgapeople-alamut,ou=System Accounts,dc=mageia,dc=org',
        bindpw      => extlookup('mgapeople_ldap','x'),
        vhost       => 'people.mageia.org',
        vhostdir    => '/var/www/vhosts/people.mageia.org',
        maintdburl  => 'http://pkgsubmit.mageia.org/data/maintdb.txt',
    }

    class { 'mga-treasurer':
        vhost    => 'treasurer.mageia.org',
        vhostdir => '/var/www/vhosts/treasurer.mageia.org',
    }

    # Forward ports to arm1 and arm2 ssh, to access them from outside
    xinetd::port_forward {"forward_arm1":
	target_ip => 'arm1.mageia.org',
	target_port => '22',
	port => '4251',
	proto => 'tcp',
    }
    xinetd::port_forward {"forward_arm2":
	target_ip => 'arm2.mageia.org',
	target_port => '22',
	port => '4252',
	proto => 'tcp',
    }

    # temporary rsync of git repos
    cron { sync_git:
        command => '/usr/bin/rsync -aH --delete rsync://valstar.mageia.org/git/ /git/',
        user    => 'git',
        minute  => '*/5',
    }
}