Use foreman-answer.yaml to install pupet classes

DorkFoxCGN · July 1, 2023, 6:54am

Hello,

is it possible to install additional puppet classes, e.g. apache::mod::geoip, using foreman-answer.yaml?

ekohl · July 3, 2023, 9:58am

Not using the answers file, but since Foreman 3.3 you can use custom-hiera.yaml to add additional Apache modules. This is somewhat unsupported in the sense that if it breaks, you get to keep the pieces.

---
apache::default_mods:
  - geoip

I’d recommend taking a look at the module file and config template:

github.com

puppetlabs/puppetlabs-apache/blob/main/manifests/mod/geoip.pp

# @summary
#   Installs and configures `mod_geoip`.
# 
# @param enable
#   Toggles whether to enable geoip.
#
# @param db_file
#   Path to database for GeoIP to use.
# 
# @param flag
#   Caching directive to use. Values: 'CheckCache', 'IndexCache', 'MemoryCache', 'Standard'.
# 
# @param output
#   Output variable locations. Values: 'All', 'Env', 'Request', 'Notes'.
# 
# @param enable_utf8
#   Changes the output from ISO88591 (Latin1) to UTF8.
# 
# @param scan_proxy_headers
#   Enables the GeoIPScanProxyHeaders option.

This file has been truncated. show original

github.com

puppetlabs/puppetlabs-apache/blob/main/templates/mod/geoip.conf.erb

GeoIPEnable <%= scope.call_function('apache::bool2httpd', [@enable]) %>

<%- if @db_file and ! [ false, 'false', '' ].include?(@db_file) -%>
    <%- if @db_file.kind_of?(Array) -%>
      <%- Array(@db_file).each do |file| -%>
GeoIPDBFile <%= file %> <%= @flag %>
      <%- end -%>
    <%- else -%>
GeoIPDBFile <%= @db_file %> <%= @flag %>
    <%- end -%>
<%- end -%>
GeoIPOutput <%= @output %>
<% if ! @enable_utf8.nil? -%>
GeoIPEnableUTF8 <%= scope.call_function('apache::bool2httpd', [@enable_utf8]) %>
<% end -%>
<% if ! @scan_proxy_headers.nil? -%>
GeoIPScanProxyHeaders <%= scope.call_function('apache::bool2httpd', [@scan_proxy_headers]) %>
<% end -%>
<% if ! @scan_proxy_header_field.nil? -%>
GeoIPScanProxyHeaderField <%= @scan_proxy_header_field %>

This file has been truncated. show original

It would be interesting to know what you’re trying to achieve here. Mostly because Foreman is often used in a very controlled environment where GeoIP isn’t really relevant (given you can’t do that for RFC1918 IPs).