]> Frank Brehm's Git Trees - pixelpark/hiera.git/commitdiff
initial commit, after eyaml
authorPhilipp Dallig <philipp.dallig@pixelpark.com>
Fri, 15 Jan 2016 15:46:12 +0000 (16:46 +0100)
committerPhilipp Dallig <philipp.dallig@pixelpark.com>
Fri, 15 Jan 2016 15:46:12 +0000 (16:46 +0100)
400 files changed:
.gitattributes [new file with mode: 0644]
.project [new file with mode: 0644]
README.markdown [new file with mode: 0644]
classes/site::profile::drupal.yaml [new file with mode: 0644]
classes/site::profile::logstash::apache.yaml [new file with mode: 0644]
classes/site::profile::logstash::php_fpm.yaml [new file with mode: 0644]
classes/site::profile::mcollective::common.yaml [new file with mode: 0644]
classes/site::profile::monitoring::mysql.yaml [new file with mode: 0644]
classes/site::profile::symfony.yaml [new file with mode: 0644]
classes/site::profile::typo3.yaml [new file with mode: 0644]
common.yaml [new file with mode: 0644]
customer/1und1/git-1und1.novalocal.yaml [new file with mode: 0644]
customer/1und1/production.yaml [new file with mode: 0644]
customer/basf/development.yaml [new file with mode: 0644]
customer/bbm_aem/dev-author-dispatcher01-bbm.pixelpark.net.yaml [new file with mode: 0644]
customer/bbm_aem/dev-author01-bbm.pixelpark.net.yaml [new file with mode: 0644]
customer/bbm_aem/dev-dispatcher01-bbm.pixelpark.net.yaml [new file with mode: 0644]
customer/bbm_aem/dev-publish01-bbm.pixelpark.net.yaml [new file with mode: 0644]
customer/bbm_aem/development.yaml [new file with mode: 0644]
customer/bibliomed/dev-bibliomed-de.pixelpark.com.yaml [new file with mode: 0644]
customer/bibliomed/development.yaml [new file with mode: 0644]
customer/bibliomed/production.yaml [new file with mode: 0644]
customer/bibliomed/test-www01-bibliomed-de.pixelpark.net.yaml [new file with mode: 0644]
customer/bibliomed/test-www02-bibliomed-de.pixelpark.net.yaml [new file with mode: 0644]
customer/bibliomed/test.yaml [new file with mode: 0644]
customer/bibliomed/www01-bibliomed-de.pixelpark.net.yaml [new file with mode: 0644]
customer/bibliomed/www02-bibliomed-de.pixelpark.net.yaml [new file with mode: 0644]
customer/bmas-sgb2/production.yaml [new file with mode: 0644]
customer/bmas-sgb2/test-web01-sgb2-info.pixelpark.net.yaml [new file with mode: 0644]
customer/bmas-sgb2/test-web02-sgb2-info.pixelpark.net.yaml [new file with mode: 0644]
customer/bmas-sgb2/test.yaml [new file with mode: 0644]
customer/bmas-sgb2/web01-sgb2-info.pixelpark.net.yaml [new file with mode: 0644]
customer/bmas-sgb2/web02-sgb2-info.pixelpark.net.yaml [new file with mode: 0644]
customer/bmas-typo3/common.yaml [new file with mode: 0644]
customer/bmas-typo3/development.yaml [new file with mode: 0644]
customer/bmas-typo3/production.yaml [new file with mode: 0644]
customer/bmas-typo3/test.yaml [new file with mode: 0644]
customer/bmas/lb-bmas-de.pixelpark.net.yaml [new file with mode: 0644]
customer/bmas/master01-bmas-gsb6-de.pixelpark.net.yaml [new file with mode: 0644]
customer/bmas/production.yaml [new file with mode: 0644]
customer/bmas/red-bmas-gsb6-de.pixelpark.net.yaml [new file with mode: 0644]
customer/bmas/slave01-bmas-gsb6-de.pixelpark.net.yaml [new file with mode: 0644]
customer/bmas/test-lb-bmas-de.pixelpark.net.yaml [new file with mode: 0644]
customer/bmas/test-master01-bmas-gsb6-de.pixelpark.net.yaml [new file with mode: 0644]
customer/bmas/test-red-bmas-gsb6-de.pixelpark.net.yaml [new file with mode: 0644]
customer/bmas/test-slave01-bmas-gsb6-de.pixelpark.net.yaml [new file with mode: 0644]
customer/bmas/test-www-anmeldung-bmas-de.pixelpark.net.yaml [new file with mode: 0644]
customer/bmas/test-www01-bmas-gsb6-de.pixelpark.net.yaml [new file with mode: 0644]
customer/bmas/test-www02-bmas-gsb6-de.pixelpark.net.yaml [new file with mode: 0644]
customer/bmas/test.yaml [new file with mode: 0644]
customer/bmas/www-anmeldung-bmas-de.pixelpark.net.yaml [new file with mode: 0644]
customer/bmas/www01-bmas-gsb6-de.pixelpark.net.yaml [new file with mode: 0644]
customer/bmbf/common.yaml [new file with mode: 0644]
customer/bmbf/production.yaml [new file with mode: 0644]
customer/bmbf/test.yaml [new file with mode: 0644]
customer/bmf-datacenter/common.yaml [new file with mode: 0644]
customer/bmf-datacenter/production.yaml [new file with mode: 0644]
customer/bmf-datacenter/test.yaml [new file with mode: 0644]
customer/bmf/blog-bmf-de.pixelpark.net.yaml [new file with mode: 0644]
customer/bmf/db01-bmf-de.pixelpark.net.yaml [new file with mode: 0644]
customer/bmf/db02-bmf-de.pixelpark.net.yaml [new file with mode: 0644]
customer/bmf/db03-bmf-de.pixelpark.net.yaml [new file with mode: 0644]
customer/bmf/dev-blog-bmf-de.pixelpark.net.yaml [new file with mode: 0644]
customer/bmf/dev-bmf-de.pixelpark.net.yaml [new file with mode: 0644]
customer/bmf/dev-db-bmf-de.pixelpark.net.yaml [new file with mode: 0644]
customer/bmf/development.yaml [new file with mode: 0644]
customer/bmf/master01-bmf-de.pixelpark.net.yaml [new file with mode: 0644]
customer/bmf/news01-bmf-de.pixelpark.net.yaml [new file with mode: 0644]
customer/bmf/red-bmf-de.pixelpark.net.yaml [new file with mode: 0644]
customer/bmf/slave01-bmf-de.pixelpark.net.yaml [new file with mode: 0644]
customer/bmf/test-blog-bmf-de.pixelpark.net.yaml [new file with mode: 0644]
customer/bmf/test-master01-bmf-de.pixelpark.net.yaml [new file with mode: 0644]
customer/bmf/test-news01-bmf-de.pixelpark.net.yaml [new file with mode: 0644]
customer/bmf/test-red-bmf-de.pixelpark.net.yaml [new file with mode: 0644]
customer/bmf/test-slave01-bmf-de.pixelpark.net.yaml [new file with mode: 0644]
customer/bmf/test-www01-bmf-de.pixelpark.net.yaml [new file with mode: 0644]
customer/bmf/test-www02-bmf-de.pixelpark.net.yaml [new file with mode: 0644]
customer/bmf/test.yaml [new file with mode: 0644]
customer/bmf/www01-bmf-de.pixelpark.net.yaml [new file with mode: 0644]
customer/bmf/www02-bmf-de.pixelpark.net.yaml [new file with mode: 0644]
customer/bmf/www03-bmf-de.pixelpark.net.yaml [new file with mode: 0644]
customer/bmf/www04-bmf-de.pixelpark.net.yaml [new file with mode: 0644]
customer/bmwi-gruenderwoche/common.yaml [new file with mode: 0644]
customer/bmwi-gruenderwoche/development.yaml [new file with mode: 0644]
customer/bmwi-gruenderwoche/production.yaml [new file with mode: 0644]
customer/bmwi-gruenderwoche/test.yaml [new file with mode: 0644]
customer/bmwi/bmwi-outbound-proxy.pixelpark.net.yaml [new file with mode: 0644]
customer/bmwi/listserv-bmwi-de.pixelpark.net.yaml [new file with mode: 0644]
customer/bmwi/master01-bmwi-de.pixelpark.net.yaml [new file with mode: 0644]
customer/bmwi/poros.pixelpark.net.yaml [new file with mode: 0644]
customer/bmwi/test-listserv-bmwi-de.pixelpark.net.yaml [new file with mode: 0644]
customer/bmwi/test-www02-bmwi-de.pixelpark.net.yaml [new file with mode: 0644]
customer/buschjaeger/common.yaml [new file with mode: 0644]
customer/buschjaeger/test.yaml [new file with mode: 0644]
customer/buschjaeger/www01-busch-jaeger-de.pixelpark.net.yaml [new file with mode: 0644]
customer/buschjaeger/www02-busch-jaeger-de.pixelpark.net.yaml [new file with mode: 0644]
customer/datev/development.yaml [new file with mode: 0644]
customer/dba/orarepo.pixelpark.net.yaml [new file with mode: 0644]
customer/dbad/arachne.pixelpark.net.yaml [new file with mode: 0644]
customer/dbad/common.yaml [new file with mode: 0644]
customer/dbad/dbad-web25.pixelpark.net.yaml [new file with mode: 0644]
customer/dbad/dbad-web26.pixelpark.net.yaml [new file with mode: 0644]
customer/dbad/dbad-web27.pixelpark.net.yaml [new file with mode: 0644]
customer/dbad/dbad-web28.pixelpark.net.yaml [new file with mode: 0644]
customer/dbad/dbad-web29.pixelpark.net.yaml [new file with mode: 0644]
customer/dbad/dbad-web30.pixelpark.net.yaml [new file with mode: 0644]
customer/dbad/dbad-web36.pixelpark.net.yaml [new file with mode: 0644]
customer/dbad/dbad-web37.pixelpark.net.yaml [new file with mode: 0644]
customer/dbad/dbad-web38.pixelpark.net.yaml [new file with mode: 0644]
customer/dbad/dbad-web39.pixelpark.net.yaml [new file with mode: 0644]
customer/dbad/nemesis.pixelpark.net.yaml [new file with mode: 0644]
customer/dbad/production.yaml [new file with mode: 0644]
customer/docmorris/prd-app01-fact-01-dm.pixelpark.net.yaml [new file with mode: 0644]
customer/dpag/standorte-zonehost01.pixelpark.net.yaml [new file with mode: 0644]
customer/dpag/standorte-zonehost02.pixelpark.net.yaml [new file with mode: 0644]
customer/dpdhl/dev-delivering-tomorrow-com.pixelpark.net.yaml [new file with mode: 0644]
customer/dpdhl/development.yaml [new file with mode: 0644]
customer/emperra/db2-portal-esysta-com.pixelpark.net.yaml [new file with mode: 0644]
customer/emperra/portal-esysta-com.pixelpark.net.yaml [new file with mode: 0644]
customer/emperra/test-portal-esysta-com.pixelpark.net.yaml [new file with mode: 0644]
customer/emperra/www-tmp-emperra-com.pixelpark.net.yaml [new file with mode: 0644]
customer/fbb-web/dev-web01-berlin-airport-de.pixelpark.net.yaml [new file with mode: 0644]
customer/fbb-web/development.yaml [new file with mode: 0644]
customer/fbb-web/production.yaml [new file with mode: 0644]
customer/fbb-web/test-web01-berlin-airport-de.pixelpark.net.yaml [new file with mode: 0644]
customer/fbb-web/test-web02-berlin-airport-de.pixelpark.net.yaml [new file with mode: 0644]
customer/fbb-web/test.yaml [new file with mode: 0644]
customer/fbb-web/web01-berlin-airport-de.pixelpark.net.yaml [new file with mode: 0644]
customer/fbb-web/web02-berlin-airport-de.pixelpark.net.yaml [new file with mode: 0644]
customer/fbb/dev-www-berlin-airport-de.pixelpark.net.yaml [new file with mode: 0644]
customer/fbb/dev-www-berlin-airport-de.yaml [new file with mode: 0644]
customer/fbb/development.yaml [new file with mode: 0644]
customer/fbb/fish.pixelpark.net.yaml [new file with mode: 0644]
customer/fbb/gaia.pixelpark.net.yaml [new file with mode: 0644]
customer/fbb/moneta.pixelpark.net.yaml [new file with mode: 0644]
customer/fbb/production.yaml [new file with mode: 0644]
customer/fbb/test-www01-berlin-airport-de.pixelpark.net.yaml [new file with mode: 0644]
customer/fbb/test-www02-berlin-airport-de.pixelpark.net.yaml [new file with mode: 0644]
customer/fbb/test.yaml [new file with mode: 0644]
customer/gebrauchtwagen/dev.gebrauchtwagen.de.yaml [new file with mode: 0644]
customer/gebrauchtwagen/job-host01.gebrauchtwagen.de.yaml [new file with mode: 0644]
customer/gebrauchtwagen/job-host02.gebrauchtwagen.de.yaml [new file with mode: 0644]
customer/gebrauchtwagen/job-host03.gebrauchtwagen.de.yaml [new file with mode: 0644]
customer/gebrauchtwagen/job01.gebrauchtwagen.de.yaml [new file with mode: 0644]
customer/gebrauchtwagen/test-gw-admin01.gebrauchtwagen.de.yaml [new file with mode: 0644]
customer/gebrauchtwagen/test.gebrauchtwagen.de.yaml [new file with mode: 0644]
customer/gebrauchtwagen/test.yaml [new file with mode: 0644]
customer/gebrauchtwagen/www01.gebrauchtwagen.de.yaml [new file with mode: 0644]
customer/gebrauchtwagen/www02.gebrauchtwagen.de.yaml [new file with mode: 0644]
customer/gebrauchtwagen/www03.gebrauchtwagen.de.yaml [new file with mode: 0644]
customer/gebrauchtwagen/www07.gebrauchtwagen.de.yaml [new file with mode: 0644]
customer/gebrauchtwagen/zonehost01.gebrauchtwagen.de.yaml [new file with mode: 0644]
customer/gebrauchtwagen/zonehost02.gebrauchtwagen.de.yaml [new file with mode: 0644]
customer/gebrauchtwagen/zonehost03.gebrauchtwagen.de.yaml [new file with mode: 0644]
customer/georgfischer/common.yaml [new file with mode: 0644]
customer/gf/gf-zonehost01.pixelpark.net.yaml [new file with mode: 0644]
customer/gf/gf-zonehost02.pixelpark.net.yaml [new file with mode: 0644]
customer/joml/common.yaml [new file with mode: 0644]
customer/joml/production.yaml [new file with mode: 0644]
customer/joml/test.yaml [new file with mode: 0644]
customer/lbs/dev-red02-lbs-de.pixelpark.net.yaml [new file with mode: 0644]
customer/lbs/dev-www02-lbs-de.pixelpark.net.yaml [new file with mode: 0644]
customer/linde/author01-linde-com.pixelpark.net.yaml [new file with mode: 0644]
customer/linde/production.yaml [new file with mode: 0644]
customer/linde/test-author01-linde-com.pixelpark.net.yaml [new file with mode: 0644]
customer/linde/test.yaml [new file with mode: 0644]
customer/live-cloud/alekto.cloud.pixelpark.internal.yaml [new file with mode: 0644]
customer/live-cloud/atropos.cloud.pixelpark.internal.yaml [new file with mode: 0644]
customer/live-cloud/badb.cloud.pixelpark.internal.yaml [new file with mode: 0644]
customer/live-cloud/beowulf.cloud.pixelpark.internal.yaml [new file with mode: 0644]
customer/live-cloud/cloud_icehouse.yaml [new file with mode: 0644]
customer/live-cloud/epana.cloud.pixelpark.internal.yaml [new file with mode: 0644]
customer/live-cloud/frigg.cloud.pixelpark.internal.yaml [new file with mode: 0644]
customer/live-cloud/furrina.cloud.pixelpark.internal.yaml [new file with mode: 0644]
customer/live-cloud/grazien.cloud.pixelpark.internal.yaml [new file with mode: 0644]
customer/live-cloud/heracles.cloud.pixelpark.internal.yaml [new file with mode: 0644]
customer/live-cloud/konsos.cloud.pixelpark.internal.yaml [new file with mode: 0644]
customer/live-cloud/midir.cloud.pixelpark.internal.yaml [new file with mode: 0644]
customer/live-cloud/moros.cloud.pixelpark.internal.yaml [new file with mode: 0644]
customer/live-cloud/mullo.cloud.pixelpark.internal.yaml [new file with mode: 0644]
customer/live-cloud/necat.cloud.pixelpark.internal.yaml [new file with mode: 0644]
customer/live-cloud/not.cloud.pixelpark.internal.yaml [new file with mode: 0644]
customer/live-cloud/oger.cloud.pixelpark.internal.yaml [new file with mode: 0644]
customer/live-cloud/pothos.cloud.pixelpark.internal.yaml [new file with mode: 0644]
customer/mbvd-quiz/common.yaml [new file with mode: 0644]
customer/mbvd-quiz/stage-www-mbvd-quiz-onlinestore.pixelpark.net.yaml [new file with mode: 0644]
customer/mbvd-quiz/www-mbvd-quiz-onlinestore.pixelpark.net.yaml [new file with mode: 0644]
customer/mbvd-service-and-smile/common.yaml [new file with mode: 0644]
customer/mbvd-service-and-smile/dev-www-service-and-smile-de-mbvd.pixelpark.net.yaml [new file with mode: 0644]
customer/mbvd-service-and-smile/test-www-service-and-smile-de-mbvd.pixelpark.net.yaml [new file with mode: 0644]
customer/mbvd-service-and-smile/www-service-and-smile-de-mbvd.pixelpark.net.yaml [new file with mode: 0644]
customer/mbvd-static/www-mbvd-static.pixelpark.net.yaml [new file with mode: 0644]
customer/mbvd-sternenlicht/common.yaml [new file with mode: 0644]
customer/mbvd-sternenlicht/test-web-sternenlichtbotschaften-mercedes-benz-de.pixelpark.net.yaml [new file with mode: 0644]
customer/mbvd-sternenlicht/web-sternenlichtbotschaften-mercedes-benz-de.pixelpark.net.yaml [new file with mode: 0644]
customer/mbvd-transporter-topdeal/common.yaml [new file with mode: 0644]
customer/mbvd-transporter-topdeal/test-www-mbvd-transporter-topdeal-de.pixelpark.net.yaml [new file with mode: 0644]
customer/mbvd-transporter-topdeal/www-mbvd-transporter-topdeal-de.pixelpark.net.yaml [new file with mode: 0644]
customer/mbvd/aktion-mercedes-benz-de.pixelpark.net.yaml [new file with mode: 0644]
customer/mbvd/db-mb.pixelpark.net.yaml [new file with mode: 0644]
customer/mbvd/int-db-mb.pixelpark.net.yaml [new file with mode: 0644]
customer/mbvd/int-odt-daimler-com.pixelpark.net.yaml [new file with mode: 0644]
customer/mbvd/odt02-daimler-com.pixelpark.net.yaml [new file with mode: 0644]
customer/mbvd/servicevorteilskarte02-mercedes-benz-de.pixelpark.net.yaml [new file with mode: 0644]
customer/mbvd/stage-classicpartner-suche-mercedes-benz-de.pixelpark.net.yaml [new file with mode: 0644]
customer/mbvd/stage-servicevorteilskarte02-mercedes-benz-de.pixelpark.net.yaml [new file with mode: 0644]
customer/mbvd/web01-prototyp-mbvd-de.pixelpark.net.yaml [new file with mode: 0644]
customer/mbvd/www-mb-kampagnen-de.pixelpark.net.yaml [new file with mode: 0644]
customer/medperts-com/db01-medperts-com.pixelpark.net.yaml [new file with mode: 0644]
customer/medperts-com/db02-medperts-com.pixelpark.net.yaml [new file with mode: 0644]
customer/medperts-com/dev-medperts-com.pixelpark.com.yaml [new file with mode: 0644]
customer/medperts-com/development.yaml [new file with mode: 0644]
customer/medperts-com/production.yaml [new file with mode: 0644]
customer/medperts-com/search03-medperts-com.pixelpark.net.yaml [new file with mode: 0644]
customer/medperts-com/test-db01-medperts-com.pixelpark.net.yaml [new file with mode: 0644]
customer/medperts-com/test-db02-medperts-com.pixelpark.net.yaml [new file with mode: 0644]
customer/medperts-com/test-www01-medperts-com.pixelpark.net.yaml [new file with mode: 0644]
customer/medperts-com/test-www02-medperts-com.pixelpark.net.yaml [new file with mode: 0644]
customer/medperts-com/test.yaml [new file with mode: 0644]
customer/medperts-com/www01-medperts-com.pixelpark.net.yaml [new file with mode: 0644]
customer/medperts-com/www02-medperts-com.pixelpark.net.yaml [new file with mode: 0644]
customer/mtb/author01-mtb.pixelpark.com.yaml [new file with mode: 0644]
customer/mtb/author02-mtb.pixelpark.com.yaml [new file with mode: 0644]
customer/mtb/dev-author01-mtb.pixelpark.com.yaml [new file with mode: 0644]
customer/mtb/dev-author02-mtb.pixelpark.com.yaml [new file with mode: 0644]
customer/mtb/development.yaml [new file with mode: 0644]
customer/mtb/int-author01-mtb.pixelpark.com.yaml [new file with mode: 0644]
customer/mtb/int-author02-mtb.pixelpark.com.yaml [new file with mode: 0644]
customer/mtb/production.yaml [new file with mode: 0644]
customer/mtb/test.yaml [new file with mode: 0644]
customer/pfizer-schlaganfall/development.yaml [new file with mode: 0644]
customer/pfizer-schlaganfall/production.yaml [new file with mode: 0644]
customer/pfizer-schlaganfall/www-schlaganfall-verhindern-de.pixelpark.net.yaml [new file with mode: 0644]
customer/pfizer/dev-web01-pfizer-de.pixelpark.net.yaml [new file with mode: 0644]
customer/pfizer/dev-web02-pfizer-de.pixelpark.net.yaml [new file with mode: 0644]
customer/pfizer/dev-www02-pfizer-de.pixelpark.net.yaml [new file with mode: 0644]
customer/pfizer/development.yaml [new file with mode: 0644]
customer/pfizer/production.yaml [new file with mode: 0644]
customer/pfizer/test-web01-pfizer-de.pixelpark.net.yaml [new file with mode: 0644]
customer/pfizer/test.yaml [new file with mode: 0644]
customer/pfizer/web01-pfizer-de.pixelpark.net.yaml [new file with mode: 0644]
customer/pfizer/web02-pfizer-de.pixelpark.net.yaml [new file with mode: 0644]
customer/pixelpark/achilles.pixelpark.com.yaml [new file with mode: 0644]
customer/pixelpark/app01.sparkasse.local.yaml [new file with mode: 0644]
customer/pixelpark/app02.sparkasse.local.yaml [new file with mode: 0644]
customer/pixelpark/aurora.pixelpark.net.yaml [new file with mode: 0644]
customer/pixelpark/bat.pixelpark.net.yaml [new file with mode: 0644]
customer/pixelpark/bauhaus.pixelpark.com.yaml [new file with mode: 0644]
customer/pixelpark/bb-mercedes-benz-de.pixelpark.net.yaml [new file with mode: 0644]
customer/pixelpark/bfs-gadget-mercedes-benz-de.pixelpark.net.yaml [new file with mode: 0644]
customer/pixelpark/bilder-emmt-daimler-com.pixelpark.net.yaml [new file with mode: 0644]
customer/pixelpark/classicpartner-suche-mercedes-benz-de.pixelpark.net.yaml [new file with mode: 0644]
customer/pixelpark/confluence01.pixelpark.net.yaml [new file with mode: 0644]
customer/pixelpark/cow.pixelpark.net.yaml [new file with mode: 0644]
customer/pixelpark/deploy.pixelpark.com.yaml [new file with mode: 0644]
customer/pixelpark/design-berlin.pixelpark.net.yaml [new file with mode: 0644]
customer/pixelpark/dev-app01.sparkasse.local.yaml [new file with mode: 0644]
customer/pixelpark/dev-app02.sparkasse.local.yaml [new file with mode: 0644]
customer/pixelpark/dev-bmwi.pixelpark.net.yaml [new file with mode: 0644]
customer/pixelpark/dev-hy01-demo.pixelpark.net.yaml [new file with mode: 0644]
customer/pixelpark/dev-monitoring.pixelpark.com.yaml [new file with mode: 0644]
customer/pixelpark/dev-web01-mbvd.pixelpark.net.yaml [new file with mode: 0644]
customer/pixelpark/dev-web02.sparkasse.local.yaml [new file with mode: 0644]
customer/pixelpark/development.yaml [new file with mode: 0644]
customer/pixelpark/dnsmaster01.pixelpark.com.yaml [new file with mode: 0644]
customer/pixelpark/dnsmaster02.pixelpark.com.yaml [new file with mode: 0644]
customer/pixelpark/dnsmaster03.pixelpark.com.yaml [new file with mode: 0644]
customer/pixelpark/ekhi.pixelpark.net.yaml [new file with mode: 0644]
customer/pixelpark/extranet01.pixelpark.net.yaml [new file with mode: 0644]
customer/pixelpark/foreman01.pixelpark.com.yaml [new file with mode: 0644]
customer/pixelpark/foreman02.pixelpark.com.yaml [new file with mode: 0644]
customer/pixelpark/fotoficient-dm03-de.pixelpark.net.yaml [new file with mode: 0644]
customer/pixelpark/git.pixelpark.com.yaml [new file with mode: 0644]
customer/pixelpark/int-db-odt-daimler-com.pixelpark.internal.yaml [new file with mode: 0644]
customer/pixelpark/intra-collective01.pixelpark.com.yaml [new file with mode: 0644]
customer/pixelpark/isis.pixelpark.net.yaml [new file with mode: 0644]
customer/pixelpark/ivan-wheezy64.pixelpark.com.yaml [new file with mode: 0644]
customer/pixelpark/ivandeb.pixelpark.com.yaml [new file with mode: 0644]
customer/pixelpark/jira01.pixelpark.net.yaml [new file with mode: 0644]
customer/pixelpark/koji.cloud.pixelpark.internal.yaml [new file with mode: 0644]
customer/pixelpark/lug.pixelpark.com.yaml [new file with mode: 0644]
customer/pixelpark/mail01.pixelpark.com.yaml [new file with mode: 0644]
customer/pixelpark/mailex.pixelpark.com.yaml [new file with mode: 0644]
customer/pixelpark/messageq01.pixelpark.com.yaml [new file with mode: 0644]
customer/pixelpark/minerva.pixelpark.com.yaml [new file with mode: 0644]
customer/pixelpark/mockbuild.cloud.pixelpark.internal.yaml [new file with mode: 0644]
customer/pixelpark/monkey.pixelpark.com.yaml [new file with mode: 0644]
customer/pixelpark/mysql-pp07.pixelpark.com.yaml [new file with mode: 0644]
customer/pixelpark/najaden.pixelpark.com.yaml [new file with mode: 0644]
customer/pixelpark/nechtan.pixelpark.com.yaml [new file with mode: 0644]
customer/pixelpark/nike.pixelpark.net.yaml [new file with mode: 0644]
customer/pixelpark/nl-fischerwerke.pixelpark.net.yaml [new file with mode: 0644]
customer/pixelpark/nl-medperts.pixelpark.net.yaml [new file with mode: 0644]
customer/pixelpark/nuadu.pixelpark.com.yaml [new file with mode: 0644]
customer/pixelpark/ppnet.novalocal.yaml [new file with mode: 0644]
customer/pixelpark/production.yaml [new file with mode: 0644]
customer/pixelpark/psql-pp01.pixelpark.net.yaml [new file with mode: 0644]
customer/pixelpark/puppet-schulung-1.cloud.pixelpark.internal.yaml [new file with mode: 0644]
customer/pixelpark/puppet-schulung-1.novalocal.yaml [new file with mode: 0644]
customer/pixelpark/puppet-schulung-2.novalocal.yaml [new file with mode: 0644]
customer/pixelpark/puppetmaster.cloud.pixelpark.internal.yaml [new file with mode: 0644]
customer/pixelpark/puppetmaster.pixelpark.com.yaml [new file with mode: 0644]
customer/pixelpark/puppetmaster01.pixelpark.com.yaml [new file with mode: 0644]
customer/pixelpark/red-bmwi-de.pixelpark.net.yaml [new file with mode: 0644]
customer/pixelpark/repo-sol.pixelpark.com.yaml [new file with mode: 0644]
customer/pixelpark/repo.pixelpark.com.yaml [new file with mode: 0644]
customer/pixelpark/review.pixelpark.com.yaml [new file with mode: 0644]
customer/pixelpark/rpm-repo.pixelpark.com.yaml [new file with mode: 0644]
customer/pixelpark/sancus.pixelpark.com.yaml [new file with mode: 0644]
customer/pixelpark/selenium.pixelpark.com.yaml [new file with mode: 0644]
customer/pixelpark/sol11.pixelpark.com.yaml [new file with mode: 0644]
customer/pixelpark/solaris10-afs.pixelpark.com.yaml [new file with mode: 0644]
customer/pixelpark/solaris11-afs.pixelpark.com.yaml [new file with mode: 0644]
customer/pixelpark/streamingmedia01.pixelpark.net.yaml [new file with mode: 0644]
customer/pixelpark/streamingmedia02.pixelpark.net.yaml [new file with mode: 0644]
customer/pixelpark/tellus.pixelpark.net.yaml [new file with mode: 0644]
customer/pixelpark/test-confluence01.pixelpark.net.yaml [new file with mode: 0644]
customer/pixelpark/test-extranet01.pixelpark.com.yaml [new file with mode: 0644]
customer/pixelpark/test-jira01.pixelpark.net.yaml [new file with mode: 0644]
customer/pixelpark/test-master01-bmwi-de.pixelpark.net.yaml [new file with mode: 0644]
customer/pixelpark/test-master01.prometheus.pixelpark.net.yaml [new file with mode: 0644]
customer/pixelpark/test-monitoring01.pixelpark.net.yaml [new file with mode: 0644]
customer/pixelpark/test-psql-pp01.pixelpark.net.yaml [new file with mode: 0644]
customer/pixelpark/test-red-bmwi-de.pixelpark.net.yaml [new file with mode: 0644]
customer/pixelpark/test-slave01.prometheus.pixelpark.net.yaml [new file with mode: 0644]
customer/pixelpark/test-www01-bmwi-de.pixelpark.net.yaml [new file with mode: 0644]
customer/pixelpark/test.yaml [new file with mode: 0644]
customer/pixelpark/vm-elk-01.pixelpark.net.yaml [new file with mode: 0644]
customer/pixelpark/vm-elk-02.pixelpark.net.yaml [new file with mode: 0644]
customer/pixelpark/vm-puppetclient.cloud.pixelpark.internal.yaml [new file with mode: 0644]
customer/pixelpark/vm04-olli.pixelpark.com.yaml [new file with mode: 0644]
customer/pixelpark/web-client-survey.pixelpark.com.yaml [new file with mode: 0644]
customer/pixelpark/web-inhalte.pixelpark.net.yaml [new file with mode: 0644]
customer/pixelpark/web01-ar.pixelpark.com.yaml [new file with mode: 0644]
customer/pixelpark/web01-mbvd.pixelpark.net.yaml [new file with mode: 0644]
customer/pixelpark/web01.sparkasse.de.yaml [new file with mode: 0644]
customer/pixelpark/web02-ar.pixelpark.com.yaml [new file with mode: 0644]
customer/pixelpark/web02.sparkasse.local.yaml [new file with mode: 0644]
customer/pixelpark/web03-ar.pixelpark.com.yaml [new file with mode: 0644]
customer/pixelpark/web04-ar.pixelpark.com.yaml [new file with mode: 0644]
customer/pixelpark/web05-ar.pixelpark.com.yaml [new file with mode: 0644]
customer/pixelpark/www01-bmwi-de.pixelpark.net.yaml [new file with mode: 0644]
customer/pixelpark/www02-bmwi-de.pixelpark.net.yaml [new file with mode: 0644]
customer/pixelpark/xymon.pixelpark.com.yaml [new file with mode: 0644]
customer/pixelpark/zabbixTesting.yaml [new file with mode: 0644]
customer/pixeltest/sol4711.pixelpark.com.yaml [new file with mode: 0644]
customer/ppCloud/atropos.cloud.pixelpark.internal.yaml [new file with mode: 0644]
customer/ppCloud/badb.cloud.pixelpark.internal.yaml [new file with mode: 0644]
customer/ppCloud/beowulf.cloud.pixelpark.internal.yaml [new file with mode: 0644]
customer/ppCloud/development.yaml [new file with mode: 0644]
customer/ppCloud/fortuna.pixelpark.net.yaml [new file with mode: 0644]
customer/ppCloud/frigg.cloud.pixelpark.internal.yaml [new file with mode: 0644]
customer/ppCloud/furrina.cloud.pixelpark.internal.yaml [new file with mode: 0644]
customer/ppCloud/grazien.cloud.pixelpark.internal.yaml [new file with mode: 0644]
customer/ppCloud/moros.cloud.pixelpark.internal.yaml [new file with mode: 0644]
customer/ppCloud/necat.cloud.pixelpark.internal.yaml [new file with mode: 0644]
customer/ppCloud/not.cloud.pixelpark.internal.yaml [new file with mode: 0644]
customer/ppCloud/orlam.cloud.pixelpark.internal.yaml [new file with mode: 0644]
customer/ppCloud/pothos.cloud.pixelpark.internal.yaml [new file with mode: 0644]
customer/ppCloud/production.yaml [new file with mode: 0644]
customer/q_perior/test-www-q-perior.pixelpark.net.yaml [new file with mode: 0644]
customer/sparkasse-microsites/dev-microsites01-sparkasse-de.pixelpark.net.yaml [new file with mode: 0644]
customer/sparkasse-microsites/development.yaml [new file with mode: 0644]
customer/sparkasse-microsites/microsites01-sparkasse-de.pixelpark.net.yaml [new file with mode: 0644]
customer/spd/common.yaml [new file with mode: 0644]
customer/spd/development.yaml [new file with mode: 0644]
customer/spd/production.yaml [new file with mode: 0644]
customer/spk-fits/dev-web01.sparkasse.local.yaml [new file with mode: 0644]
customer/spk-pp/dev-innovationen-sparkasse-de.pixelpark.net.yaml [new file with mode: 0644]
customer/spk-pp/innovationen-sparkasse-de.pixelpark.net.yaml [new file with mode: 0644]
customer/spk-spenden/common.yaml [new file with mode: 0644]
customer/spk-spenden/dev-einfach-gut-machen-de-spk.pixelpark.net.yaml [new file with mode: 0644]
customer/spk-spenden/einfach-gut-machen-de-spk.pixelpark.net.yaml [new file with mode: 0644]
customer/stadt-koeln/common.yaml [new file with mode: 0644]
customer/stadt-koeln/www-haushaltsplan-koeln.pixelpark.net.yaml [new file with mode: 0644]
customer/test-cloud/barri.test-cloud.pixelpark.internal.yaml [new file with mode: 0644]
customer/test-cloud/beli.test-cloud.pixelpark.internal.yaml [new file with mode: 0644]
customer/test-cloud/bor.test-cloud.pixelpark.internal.yaml [new file with mode: 0644]
customer/test-cloud/ceph-test.test-cloud.pixelpark.internal.yaml [new file with mode: 0644]
customer/test-cloud/cloud_icehouse.yaml [new file with mode: 0644]
customer/test-cloud/control03.test-cloud.pixelpark.internal.yaml [new file with mode: 0644]
customer/test-cloud/klio.test-cloud.pixelpark.internal.yaml [new file with mode: 0644]
customer/test-cloud/nestor.test-cloud.pixelpark.internal.yaml [new file with mode: 0644]
customer/vrr/common.yaml [new file with mode: 0644]
customer/vrr/dev-web01-vrr-de.pixelpark.net.yaml [new file with mode: 0644]
customer/webstats/webstats01.pixelpark.net.yaml [new file with mode: 0644]
customer/webstats/webstats02.pixelpark.net.yaml [new file with mode: 0644]
modules/apache.yaml [new file with mode: 0644]
modules/epel.yaml [new file with mode: 0644]
modules/galera.yaml [new file with mode: 0644]
modules/mcollective.yaml [new file with mode: 0644]
modules/mysql.yaml [new file with mode: 0644]
modules/nginx.yaml [new file with mode: 0644]
modules/ntp.yaml [new file with mode: 0644]
modules/php.yaml [new file with mode: 0644]
modules/repo.yaml [new file with mode: 0644]
modules/ruby.yaml [new file with mode: 0644]
modules/rvm.yaml [new file with mode: 0644]
modules/zabbix.yaml [new file with mode: 0644]
tier/production.yaml [new file with mode: 0644]

diff --git a/.gitattributes b/.gitattributes
new file mode 100644 (file)
index 0000000..427a360
--- /dev/null
@@ -0,0 +1,2 @@
+* text=auto
+*.yaml text eol=lf
diff --git a/.project b/.project
new file mode 100644 (file)
index 0000000..72c5d56
--- /dev/null
+++ b/.project
@@ -0,0 +1,23 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<projectDescription>
+       <name>hieradata</name>
+       <comment></comment>
+       <projects>
+       </projects>
+       <buildSpec>
+               <buildCommand>
+                       <name>com.puppetlabs.geppetto.pp.dsl.ui.modulefileBuilder</name>
+                       <arguments>
+                       </arguments>
+               </buildCommand>
+               <buildCommand>
+                       <name>org.eclipse.xtext.ui.shared.xtextBuilder</name>
+                       <arguments>
+                       </arguments>
+               </buildCommand>
+       </buildSpec>
+       <natures>
+               <nature>com.puppetlabs.geppetto.pp.dsl.ui.puppetNature</nature>
+               <nature>org.eclipse.xtext.ui.shared.xtextNature</nature>
+       </natures>
+</projectDescription>
diff --git a/README.markdown b/README.markdown
new file mode 100644 (file)
index 0000000..da89011
--- /dev/null
@@ -0,0 +1,39 @@
+# Hiera #
+
+Hiera speichert in einer Hierarchie Informationen um den Katalog zu modifizieren. Sämtliche dynamischen Informationen werden in Hiera gespeichert. Durch eine Git-Versionierung kann die Geschichte einer Puppet Umgebung einfach zurückverfolgt werden.
+
+## Debug Befehle ##
+
+### Check customer ###
+
+Schaue in die Datei /etc/facter/facts.d/customer.yaml bzw. eine andere Datei im selben Ordner.
+
+### Check clientcert ###
+
+Schaue in der Puppet.conf (/etc/puppet/puppet.conf) nach certname.
+
+Falls der Wert nicht existiert, entspricht dieser den FQDN
+```
+facter -p fqdn
+```
+
+### Check tier
+
+Schaue in die Datei /etc/facter/facts.d/tier.yaml bzw. eine andere Datei im selben Ordner.
+
+### Check calling_class und calling_module
+
+Link in die Puppetlabs Dokumentation:
+https://docs.puppetlabs.com/hiera/1/puppet.html#special-pseudo-variables 
+
+## derzeitige Hierarchie ##
+
+```
+  - "customer/%{::customer}/%{::clientcert}"
+  - "customer/%{::customer}/%{::tier}"
+  - "customer/%{::customer}/common"
+  - "tier/%{::tier}"
+  - "classes/%{calling_class}"
+  - "modules/%{calling_module}"
+  - "common"
+```
diff --git a/classes/site::profile::drupal.yaml b/classes/site::profile::drupal.yaml
new file mode 100644 (file)
index 0000000..9ede99c
--- /dev/null
@@ -0,0 +1,21 @@
+---
+php::extensions:
+  gd: {}
+  mysqlnd: {}
+  mbstring: {}
+  pecl-uploadprogress: {}
+
+php::settings:
+  Date/date.timezone: Europe/Berlin
+  PHP/memory_limit: 128M
+  PHP/upload_max_filesize: 10M
+  PHP/post_max_size: 10M
+  PHP/max_execution_time: '240'
+  PHP/expose_php: 'Off'
+
+# Do not use this key in an other location (customer)
+php_admin_value:
+  PHP/memory_limit: 128M
+  PHP/upload_max_filesize: 10M
+  PHP/post_max_size: 10M
+  PHP/max_execution_time: '240'
\ No newline at end of file
diff --git a/classes/site::profile::logstash::apache.yaml b/classes/site::profile::logstash::apache.yaml
new file mode 100644 (file)
index 0000000..acdc202
--- /dev/null
@@ -0,0 +1,28 @@
+---
+site::profile::logstash::apache::resources:
+  apache_access:
+    resource: file
+    order: 10 # Input
+    parameters:
+      path: '/var/log/httpd/*access*log'
+      type: apache-access
+      tags: 
+        - "%{customer}"
+        - "%{tier}"
+  apache_error:
+    resource: file
+    order: 10 # Input
+    parameters:
+      path: '/var/log/httpd/*error*log'
+      type: apache-error
+      tags: 
+        - "%{customer}"
+        - "%{tier}"
+  apache_access_filter:
+    condition: 'if [type] == "apache-access"'
+    resource: grok
+    order: 40 # Filter
+    parameters:
+      match: 
+        - message
+        - '%%{ich-trickse}{COMBINEDAPACHELOG}'
\ No newline at end of file
diff --git a/classes/site::profile::logstash::php_fpm.yaml b/classes/site::profile::logstash::php_fpm.yaml
new file mode 100644 (file)
index 0000000..752ef8d
--- /dev/null
@@ -0,0 +1,41 @@
+---
+site::profile::logstash::php_fpm::resources:
+  php_fpm_error:
+    resource: file
+    order: 10 # Input
+    parameters:
+      path: '/var/log/php-fpm/*error*log'
+      type: php-fpm-error
+      tags: 
+        - "%{customer}"
+        - "%{tier}"
+  php_fpm_slow:
+    resource: file
+    order: 11 # Input
+    parameters:
+      path: '/var/log/php-fpm/*slow*log'
+      type: php-fpm-slow
+      tags: 
+        - "%{customer}"
+        - "%{tier}"
+      codec:
+        type: multiline
+        what: previous
+        negate: true
+        pattern: '\[%%{ich-trickse}{MONTHDAY}-%%{ich-trickse}{MONTH}-%%{ich-trickse}{YEAR} %%{ich-trickse}{TIME}\]%%{ich-trickse}{SPACE}\[pool %%{ich-trickse}{WORD:pool}] %%{ich-trickse}{GREEDYDATA:restmessage}'
+  php_fpm_error_filter:
+    condition: 'if [type] == "php-fpm-error"'
+    resource: grok
+    order: 40 # Filter
+    parameters:
+      match: 
+        - message
+        - '\[%%{ich-trickse}{MONTHDAY}-%%{ich-trickse}{MONTH}-%%{ich-trickse}{YEAR} %%{ich-trickse}{TIME}\] %%{ich-trickse}{LOGLEVEL:loglevel}\: %%{ich-trickse}{GREEDYDATA:restmessage}'
+  php_fpm_slow_filter:
+    condition: 'if [type] == "php-fpm-slow"'
+    resource: grok
+    order: 41 # Filter
+    parameters:
+      match: 
+        - message
+        - \[%%{ich-trickse}{MONTHDAY}-%%{ich-trickse}{MONTH}-%%{ich-trickse}{YEAR} %%{ich-trickse}{TIME}\]%%{ich-trickse}{SPACE}\[pool %%{ich-trickse}{WORD:pool}] %%{ich-trickse}{GREEDYDATA:restmessage}
\ No newline at end of file
diff --git a/classes/site::profile::mcollective::common.yaml b/classes/site::profile::mcollective::common.yaml
new file mode 100644 (file)
index 0000000..280d312
--- /dev/null
@@ -0,0 +1,25 @@
+---
+site::profile::mcollective::common::server_settings:
+  identity:
+    value: "%{fqdn}"
+# extra config fro rabbitmq connector
+  plugin.rabbitmq.heartbeat_interval:
+    value: 30
+  plugin.rabbitmq.stomp_1_0_fallback:
+    value: 0
+  plugin.rabbitmq.max_hbread_fails:
+    value: 2
+  plugin.rabbitmq.max_hbrlck_fails:
+    value: 2
+# extra config for puppet plugin
+  plugin.puppet.signal_daemon:
+    value: false
+
+
+site::profile::mcollective::common::plugins:
+  puppet:
+    package: true
+  service:
+    package: true
+  package:
+    package: true
\ No newline at end of file
diff --git a/classes/site::profile::monitoring::mysql.yaml b/classes/site::profile::monitoring::mysql.yaml
new file mode 100644 (file)
index 0000000..68b3c06
--- /dev/null
@@ -0,0 +1,3 @@
+---
+# default monitoring Passwort
+site::profile::monitoring::mysql::monitorpassword: ENC[PKCS7,MIIBiQYJKoZIhvcNAQcDoIIBejCCAXYCAQAxggEhMIIBHQIBADAFMAACAQEwDQYJKoZIhvcNAQEBBQAEggEAIGr1ESvzfZx4F3HW99qZFf/MkLh1pywxTBCxk5PxFxPCbLY7OT8wNIcxvS6NOvMhr2qkAvmec0qB/1pJf1ZiM99VRoTSF8jByxMFeopYdFhyk3nHtGIyqgykm6xp4hg+hJH2tsg7SYhPN8cV3wDeZgAsvWUhp4TUid6Y/3w7jLzQF+odiUPFCyZ0IbSiQJOe4/E1N5ldx29pfOdjxxRv6Kkf7jNg9CChNYNpLkM8SI5JC41O5avNcrvfaiekiWEJV0mZ59dE1yPqzMF8TstEuq6BJd7KeNj0HN9yGc2cZxTqXhDr1o/HfUsH7Z+beZVHN/qBlqKBbx9fCUbGX8ekQTBMBgkqhkiG9w0BBwEwHQYJYIZIAWUDBAEqBBA5BffAEhe8IJ8QeKaed4zYgCCGKLxaE3iurFnp+6acicSVCgZMLNoRQqJDZ6CeSY8uGw==]
\ No newline at end of file
diff --git a/classes/site::profile::symfony.yaml b/classes/site::profile::symfony.yaml
new file mode 100644 (file)
index 0000000..fe0948f
--- /dev/null
@@ -0,0 +1,22 @@
+---
+# Do not use this key in an other location (customer)
+php_admin_value:
+  error_log: /var/log/php-fpm/%{php_fpm_pool_name}-error.log
+  memory_limit: 32M
+  upload_max_filesize: 4M
+  post_max_size: 4M
+  max_execution_time: '60'
+
+# Do not use this key in an other location (customer)
+directories:
+  - directory_docroot:
+    provider: 'directory'
+    path: "%{docroot}"
+    addhandlers:
+      - { handler: "proxy:%{unix_socket_path}|fcgi://./" , extensions: '.php' }
+    options:
+      - FollowSymLinks
+      - MultiViews
+    allow_override:
+      - All
+    directoryindex: 'index.php'
\ No newline at end of file
diff --git a/classes/site::profile::typo3.yaml b/classes/site::profile::typo3.yaml
new file mode 100644 (file)
index 0000000..3180627
--- /dev/null
@@ -0,0 +1,57 @@
+---
+php::extensions:
+  gd: {}
+  opcache: {}
+  mysqlnd: {}
+  soap: {}
+  suhosin:
+    settings:
+      suhosin.request.max_varname_length: 200
+      suhosin.post.max_name_length: 200
+      suhosin.get.max_name_length: 200
+      suhosin.get.max_value_length: 2000
+      suhosin.executor.include.whitelist: 'phar,vfs'
+  mbstring: {}
+
+php::settings:
+  Date/date.timezone: Europe/Berlin
+  PHP/upload_max_filesize: 10M
+  PHP/post_max_size: 10M
+  PHP/max_execution_time: '240'
+  PHP/expose_php: 'Off'
+
+# Do not use this key in an other location (customer)
+typo3_project:
+  typo3:
+    version: '6.2.15'
+    typo3_src_path: '/opt'
+    site_path: '/var/www/typo3'
+    site_user: apache
+    site_group: apache
+    db_pass: qeSNVEu19PFxRu1g
+    db_user: typo3
+    db_host: localhost
+    db_name: typo3
+    enable_install_tool: true
+
+# Do not use this key in an other location (customer)
+php_admin_value:
+  error_log: /var/log/php-fpm/%{php_fpm_pool_name}-error.log
+  memory_limit: 128M
+  upload_max_filesize: 20M
+  post_max_size: 20M
+  max_execution_time: '240'
+
+# Do not use this key in an other location (customer)
+directories:
+  - directory_docroot:
+    provider: 'directory'
+    path: "%{docroot}"
+    addhandlers:
+      - { handler: "proxy:%{unix_socket_path}|fcgi://./" , extensions: '.php' }
+    options:
+      - FollowSymLinks
+      - MultiViews
+    allow_override:
+      - All
+    directoryindex: 'index.php'
diff --git a/common.yaml b/common.yaml
new file mode 100644 (file)
index 0000000..0f97dfe
--- /dev/null
@@ -0,0 +1,570 @@
+---
+site::role: base_for_old_systems
+
+sudo::purge: false
+mysql::server::remove_default_accounts: true
+
+apache::mod::ssl::ssl_cipher: 'AES256+EECDH:AES256+EDH:AES128+EECDH:AES128+EDH'
+
+nginx::config::server_tokens: 'off'
+
+php::manage_repos: false
+php::dev: false
+php::composer: false
+php::pear: false
+
+ntp::servers:
+  - time01.pixelpark.com
+  - time02.pixelpark.com
+  - time03.pixelpark.com
+
+accounts::users:
+  philipp.dallig:
+    apply: true
+    uid: 25036
+    key: "AAAAB3NzaC1yc2EAAAADAQABAAABAQCqhn1RXk6oL7T3agM6MAf8b3KVP85IdrAmcj4UhApcb7RinextoujbcdndTiifen4HJFZDZyJPENOHbxXtBp40LUCaMZglmY8QwOA+gh/DKjrYwfeFmKL9lJmZ5cJNd5r8Ms3el0eaILWOLhcivy2qXlT4uXnnhHLNLFQIc8zGoEARuoF9ueGk4waa6MF/YZAz8MaOoPderOyGoKD0dX6LYAX/fsXH+1h/0S/S0mRPWSRJP9y7yBU+Q3s/c0E0ElXcy96ZtYdHSguB9Jf4DGlr7CnMd4NKlzz2L1h8ngRqBhafJp1k8C15M7Yr7s6lop8pWsRz3H9THyC4bXu8wXCJ"
+    comment: "Philipp-Dallig"
+    sudo: true
+    shell: "bash"
+    overwrite_config: true
+  oliver.boettcher:
+    apply: true
+    uid: 24555
+    key: "AAAAB3NzaC1yc2EAAAADAQABAAABAQCkFtAEjXLw+ciUU2POb0rVRUyKu5hyyCauYDIYOJjMg5xX1iCb+bOEUY4CxbCptZ+RNk7lDa2vsmGVZfiJhg7dQRB0s4oxX0aZveTRIFxnz3P5MAUxx2rjRfRMg3MrHMUYhX4KDSygqZlAPO+oeV8pmpUyZk5UYl5A9n+IY+dWRyHZrU9wd9+ah8gAkaOAsho+GQD5iwy04RyE6roQEoOnSsNqRHKs94e0A9TQJcrnVDKHYruN8gDiUNgkYCIcRnqBXzs6i6qsUAC8tWE2XGXx1A5kB/3333u2p3BLX5nMPPFkOTxaIHvpK8xcKEBsTuMsxPu9JaqfIQmxNRMWv0VN"
+    comment: "Oliver-Boettcher"
+    sudo: true
+    shell: "bash"
+  torsten.ogrissek:
+    apply: true
+    uid: 24012
+    key: "AAAAB3NzaC1yc2EAAAABIwAAAQEA9BoLg78XbVOsathgXmep/1etKNXWnhRm7pLGADlctg3/GpPOyrnk4pSb8ols3X5MCTPxC0BcwvnVFluWvHpin/rE4zU8x9jFTsZnhci73GyieTUczgnP/z7HHTlwASL/AN1Llc/y0rY4xw3TfIEaRrVHIt1exhqc15y2XTWp96KOdKvUUKi5UTwo/wfE5ygBgn2eRJjMAFFLButrwetkWUgMvuhM6nMkuhDMJsbNPKql9fqCC++0NtMtvGLcLSlFfCBTA64pwbcELGe6yVFYtDUH4UTNekgVe7Vs5wiTdZrpAmhe6ODmbS1qEDXMMpmo6OfNC17BIwLKArC5kg21EQ=="
+    comment: "Torsten-Ogrissek"
+    sudo: true
+  thomas.kotschok:
+    apply: true
+    uid: 10531
+    key: "AAAAB3NzaC1yc2EAAAABIwAAAQEA4IuVte4kiJOcpX+6t87OZhkcjh5hdO6i+chiiRKHAcsKNdzsEjjnl1ULUTbGbPmwKk9LIfJp7G3Eh86Oy1VHKUFaiadzuUaxMylnf9BOCBuloSURhUzXXI8E4AV7YTB5RLwS4HUvKKGKuNXg1nld73XJoN/U7Rphpic/WZvoOsIW0u7FLEZMDYmGfsE5iVXQSOYsI7TlcpXcYiMu1BnJJxb+j2KZph63t5E5hsJB4giUqsxO7PKMyroloATlFio6AsSDi1xcWro0wVGPnl8tZAWrqRoMUrPxNtKMCkI/1fJOLx1nZDVIdeZbDyU+QlrRWOobXYhYQ/QNe9kDdIazBQ=="
+    comment: "Thomas-Kotschok"
+    sudo: true
+  sven.buchholz:
+    apply: true
+    uid: 24991
+    key: "AAAAB3NzaC1yc2EAAAABIwAAAQEA0aO3o9faiC6hOv8ovmMK4NccHS78R24LD6maAyCayAbYq2dhXW/DsTRiv2bx3YiI5tg36Kp/7iOj87u9X+ghlPuvLhuphf7Dk6Wg6YEGIPHgpUsDZFDYGHEm7nlWz1vNx7ocyBTAgckAWuHvFGg2TJ4fmDBGpykt1osfVymT/Gsbs8GS7qVa6toRWcVuiVndo+sARuGTDCZVvUwsEb7Th14qW3A6g0cjxFf2PyBnSQNylDa3cRGrkrs/fFxchPZ1nhmiNgTQkNwPhf44827nR67A+gBoH3uq/jQXFyIVtSoPAxogOprYrKm73CyE0f5MmyRnC7xMYwp3Pl+Vu8PuJw=="
+    comment: "Sven-Buchholz"
+    sudo: true
+  kuntz:
+    apply: true
+    uid: 9089
+    key: "AAAAB3NzaC1yc2EAAAABIwAAAQEA0zfxutuq8TstY45mRODwCqip+JmFRbhZAvIrKs+e5HxCIh1CRPPKByjlqXCnTyPVVDBBh7WJF0tDn5yJoOaiYiRW5IG2O87KIYemQAx4elAsRKmGvsIERdttLVeZ86vgdJ5Vd7GBif4+bMiDDR1vTTcMlN7vne2IS+DwtQVV77Y/sx/nBSWAe+6bkXnu7G2IE7/dYQ78+wix7mLG1d8Naqhq+f6fZwIKIX0jesoiq3mpFu+ZeoWZUXlpy3uv9QGMXHgIwkMGmqdCYT6TJ70WJqqLLECmSdNc+2oZrz+ilk8/FGXFNS9ZRs5/TYpFy78tIwx4ETfv2xjBlbdZSZ4oCw=="
+    comment: "Klaus-Kuntz"
+    sudo: true
+  kotschok:
+    apply: true
+    uid: 9823
+    key: "AAAAB3NzaC1yc2EAAAABIwAAAQEA48qdir9YWOZrmiFbBbACAm6sA8OEjYFfwuQXb1lLH3oQGV9gpmzfLF6FAINnhyRXkEkIjqzycD4jIsVh1CUCCwXcgYaHjnpY4QkAadtIjQtoxnbUu7Mra35hqINJTS2ooAa7ETtI+HITkKsCgn0KLOnkaNcxNyKrC2iZeyrMCPv1hQ1RPR1qd8W2cQSSO4xb7+OJQMA4vAX1/FuUkPFNb08DWxKq3EdddyFfkRULPGz2BG3mvVyg2Owc/VgUVxsYdXP2tRROi1ceZiJliQXBrkUknCa3U52uUI0BF5JTT4hBv1kFRPppigGKMJ0+JIocpTSMkyWshuAwSBnFycQgHQ=="
+    comment: "Andreas-Glaw"
+    sudo: true
+  gerstenberg:
+    apply: true
+    uid: 9003
+    key: "AAAAB3NzaC1yc2EAAAABIwAAAQEAuLCItOHyWDHZYM/eDG/Mkadt7/cJMCoQuoonWDUjgYpK9TNN34cCCDFLftMAMi34P8rjodWEL5rpXiQjgtUQxssEolJiBFzU+tleZlgk1dKTn6tu6rkmhb1sh3xyHI/Ezqp2RDKJ2raPQIkRbsnwCd6GIyI8V99CXl34MfmQ2JBRRcekxX3w7KeMLOodxxHlJWGySdZqUcvv+AjOIF4uQtL8RrnMRIaeP+M5rqn71BKKQkvfDzeICsv5ju+D7eAoLsSyiVaFp3jJKJwMAe8nfzMtRG5+AkOdnoxdtbhN/sa8Bbfdv8cSs3rXa0EkbDFQ8hjs860kZnXDsjbjvBKv+Q=="
+    comment: "Andreas-Gerstenberg"
+    sudo: true
+  steve.rosiak:
+    apply: true
+    uid: 25266
+    key: "AAAAB3NzaC1yc2EAAAADAQABAAABAQDWfHY/MF3B6hXwr+owUKYLM32K2Nf45kPJcdxk81gjvnEoY2wpAx3hvGVeGmj6fTr+Igjsno/eVO8fMzlYnCOnmu9RjkQUQgJ42rsMOdUIQq79GHmgEmz3/+2x8/5JGJo8+shaJxH+9nTAhVKhMOviT63SylfQ5lSpHTVg6hm/2EzAIaIpIwF7S6AW2yEWIrLCtZHAqNWslCOx2IYHLsqGXYFyD51QeDtQDFPXhlOLgAmQWmkSxYhnrqKXe13dl22Cu274Hf91wFcOqXjeBpv694m+9zownRQEUBeQ+I7W27JeGX9MsJXP2fZeiHWqfjDwklecwTe2HOulR/WW7ENr"
+    comment: "Steve-Rosiak"
+    sudo: true
+  thomas.heller:
+    apply: true
+    uid: 25350
+    key: "AAAAB3NzaC1yc2EAAAABJQAAAQEA0C6dfAgNmDmYjPld8jp4PHTVb8ucCUCXWeQkxnKrUSREadN8FA6VhSXEN3cduQL5NS45Dqt3lHUQy2OSsa9kZ/EENtEmBwj6fFQoFQmoZLO9HgdcdgmHAFEciwdyW71Gin+bhc4ButnODlKpI66NbTNU9OPSFlbNYUX695AdwM3ZdMGMY/bAbETQST0cC3eOA0Hm8a5oAKl3HYZZ+OuIIGKl9jRWNTGR8Q2JbmtHemo9zM2lvBZm3yH6o8uLSQVPyrAziRK4FmujnjHocAmxS9qsRv3AH4dUSudRKZZkjk/Amff7vk4/O/E/vp/bnKzb9uOusZBmF0cIAVtbMtiaJQ=="
+    comment: "Thomas-Heller"
+    sudo: true
+  ivan.prikhodko:
+    uid: 25383
+    key: "AAAAB3NzaC1yc2EAAAABJQAAAQEArQquso6fcNDLyfK8Cm/kgf/drgKBe5YFq0mZ0nSre0sFO1erKeisdOo061HIqCYaDo9CvKqJi0R2qBhFlJwhOEaVwlT2HPUpbwOi3jEUAchBUx8xckcy8wjJiN7J89XUg4RkBOe75BhxhAwSLLGge1AlFV8vv2TyEvGkzKj7xrcnhhD9gPomzqeOxIu+WGgNQsKe03S73SoheKqJjRXyDyDN4AikRZf9Kec/ayNMwx8Gg+LQrZzA60gQzVD74FTD1Yw+9DCU9Mh/F0o6DnuY2E/2qPATXDjZHOoHBJjByA/r6tUg2hnNdG++SoSBsYf8eeQwH24EadQipfnDwENCJw=="
+    comment: "Ivan-Prikhodko"
+  thomas.dalichow:
+    uid: 25400
+    key: "AAAAB3NzaC1yc2EAAAADAQABAAACAQDZ8176UkMHSoDMEP9ZAZ4oTORWk2PcrJ78f0MsOKEEFiq225aRVXWT67Zb9ggCxlknCk+aOyzIDiVGpPgUT8pAMSMykBEjeO3nJ0sPwlQBRFUYHMA0RclEZEHRPkEybQ6LH5d+9Brr0vtPogKdomzyWVhrk9laNF8MawlQJl7hK6ucgOSCAI5U0PmQrwHYyTPfpqpyeu8jCI64P5L3kkzKGaAo/NMIHir9Cp5RkPnPCI6DCclunQZCN0J3cU7bd/decoIt/YtNEqUvdnmEoqlpiu6Q5uAlink/HdO5eZ7gOcbQPQ5qDJz8hPEQyBfCs6y+DfxlplP/u/+LKXo2B6gZHNzpj8tHXkPK5OyHwVWgqW2pDFMvrf5n0D/uhGIswdElWX9kLQ4NkI30KU8AEyvHQkb0euSgoyQYE1Q6/Rk1e2ddzuRV1kHIrelPVNVavPDJMBqG/5P1PZsjgHT7V/InURqz42u+m5dMayM/ELirJOgyS4sq3a06hRjoByFWSikkQ0KiFs9YqMyrqbmGLfLR3sPMMEU4UZ+VGft0e5gQJOSdWk3yYdfOEErsQt9b1vf3E8k5LT01MrVZP9tyqgMmv9YWhfJg7vktY2r4J45+CwyOwjKtIwXVS6traqWVLbjphRmPlcxeKB4EfLVVbWAmuZ5+8JrcnmCkRGCUGCSQNw=="
+    comment: "Thomas-Dalichow"
+    apply: true
+    sudo: true
+  michael.krause:
+    uid: 24829
+    key: "AAAAB3NzaC1yc2EAAAADAQABAAABAQDC8meJ4YO8y+4MnowxAXHDoFIctArorJvp3bzgDJ4yrI3rWXpNpr2Kyu5n+u/wwrW2UM6+7FUeAGNpbU+sGBmcKE4DmT/Q2iOKrJfrdKC9NsZJyEWG2qyONRqZ7apznVR7GRWt3cvtSHDk6SQdAs0v97Rnl+j+EL6WT53xgMQHc7YNaMS0FGDFBNzaTYeLNvVqS8lbVqhn+r0W6g10onM2W+kb3Ft63cYOCQR7eg54wLwFZaZtS9Inc8hAxIaOKBg2i4S6jCivZ9Gx2GGNgDLJWlIciMh/qtu0T3qhQf2cLYoTsKCe1WHL/UEtXJcyHJ6HxS/kfN4I89fjTd6Nw3Ab"
+    comment: "Michael-Krause"
+    apply: true
+  hannes.eichblatt:
+    uid: 25447
+    key: "AAAAB3NzaC1yc2EAAAABJQAAAQEAnnFq9AXEJ5cwDNnp/qCV4sVTweqaGXyJC37gGu6pdATxx8gZ9HLKpKrkibcwUusRIE85kSPqW/8RTWruQquwn4nfphYl2N8lW+Y9ptxAC1c/EvkE4YbQvEOaJBNd9Y5tOqsYk1/k0Qh1CPUhnXfIW7gpywyuKSYAM3aV0t5+XTUWXo5WK+8CIg0OqChC0BH5Gim7sEZqjrm4OB8atSwO20vzMw96GlBb1640EBSQO0jmMmAuWJb5dp2sy5JDNc4WahAX/yyYkCHqS4xWQUdW9SR6/4ZbCFVA0fp3P5CDUbdvpkP0aWOaD5nnXtXL6w8Hdhj5UphANbbWJOC4pQaWHQ=="
+    comment: "Hannes-Eichblatt"
+    apply: true
+    sudo: true
+  nils.wagner:
+    apply: true
+    uid: 25576
+    key: "AAAAB3NzaC1yc2EAAAADAQABAAABAQDCo50LCLl82Qi/69JnQTEwDcZTpten+5Eq8OMNLnVJL7q6xJunpAA/7KJlloLBUQihKjpM3MwbfFCwUF2kMRswGZOktBzG/15ooQayISJSqYJ8y1vTOmC/a2Bz+xp6EW5BK76BX21ymMEvP8lMGJNjJnsgP3AqTrle5ha0VIvKO1mrf0IGv4iVpr4EBegETp/H803QnQedbss3A5EWC9fC/X1zt30pcwDHSdhkZUi52okm0uid+dVEwjJOf8NIQt8pePzmRNaFAtsVlAy4M4uK0ZF7VtwRoTN1Yb8LBs0f5sHEPXzhxEGH8Hj3C/afWasitLgMjEJWexj38iQ/5ZE1"
+    comment: "Nils-Wagner"
+    sudo: true
+    shell: "bash"
+  samuel.bufe:
+    uid: 25505
+    key: "AAAAB3NzaC1yc2EAAAADAQABAAABAQDFQIumZcHskLRSsF/J+pGrzXgDLfPj9La/sNAUIoN5Yhd5wAqkxpYqM+Hi+IBv3ywTFPnw+gJg1SAhYsMSnOTG6VqwbGTkoEXRzd2AAPlwURv85J1WdMSARBxbVAVhwAcTL/VqhWENsSr6+Jly44WHnDCRwYM/kK1wA5tOUM77j+F+ghQ1EwVRXB8hsw/mmcBnvfxmTYNAPyKPsFBE1DmdHupEbSD9imI/vKfVbFBUNw7/0x8TYMWDXBftHUfG+t4imCiKEG54m1B5HyAVvW2tva7OnUKKsvdTfqiLdBouv5gSK4tq/YUxOhGMR37PdjL9DNU2SUdibQQc60nwJ2Q1"
+    comment: "Samuel-Bufe"
+# Entwickler Berlin
+  m_scholze:
+    uid: 9531
+    key: "AAAAB3NzaC1yc2EAAAABIwAAAQEAzF71kcxQxWygLqP/0m1F1JDoW9VAGeWVI4i3tBTya4/cMsgnyi6BBhznssV97cQoVF/HErjky2NxiSKiy4ACMpy4LbgO/vJyyYac0pmnYXbAF89/yrpwXzCOBJQOO5aVfy7wJtDLaGosszxjUEbuSGHFORScLiKOx9S7yZ8dEvPJyLeY2omr61Cf5j5KOr0p/jj7EJveKzuoHH7QUdsax8fs+erz+efF2S3aC9knLoxKEc6NanYajr8hMhVeXkeqkqO1JrrxVA2tLPwqXzsG6ku+hiO8FpHR4ZBL1VRwdwC9UHHM18WzwnPB+vqk6drZ5ts+s7A95pJH/TataAPFZQ=="
+    comment: "Michael-Scholze"
+    shell: "bash"
+  thomas.bussmeyer:
+    uid: 25074
+    key: "AAAAB3NzaC1yc2EAAAADAQABAAABAQDKop9BSOrrSQdkJiCkuVrW2pf1HYQvGen3kl0dr1DnScABf0cTUIMjPq0pKYiporyQr7wp8ycm+nCE0SuhMjN4rjJJqIDtuRy2PmobG5P9+be9sruxXbS3NvxzrHDJz/7djWcHmw3E1DQCqykgFBXOGLU0P59jquvCXxAvcN/fg6rqH7MW88fxYrawhDuvPiZ+HiCmjztbJJbP3e4EH4hwtls683piQmrzq2V1hcvKmwJ9wH1slv+tJtLAZej44dp1Yd5BrOj2pN90ZChQrZEYdrOq3wGkf+JsVw/YwVdu/i4vbLGWtStDDHciXkts29kByqGBL3sC2AL8wE6ytVwX"
+    comment: "Thomas-Bussmeyer"
+    shell: "bash"
+  stephan.vits:
+    uid: 24732
+    key: "AAAAB3NzaC1yc2EAAAABJQAAAQBMyQXr2Jo7aXVebw0oZ01bOkrD2Xr9l7Hmjq3BJfa4Fuci4NJZKwOcrAokwb3lF3oRcIVG8c/S/B3gJdCzsQGaZ2MBbdNQKAJKPj+BFJGnbJZXPHOe2zSEnnlgIfecu1qbOKrwBz+8BkHDDzpzb7g9a5Pr6X54bkcSa1B/9oFtHEKxziptlnF68MqDYeODDz5cBIg1u5qDY9fuluJZGJzE9WG+uH+P5Av+64W3Gytnd6wZb88y2VOzuAWX3/fyz8X+KbXCxotPVvUxLn2Vn1+BvDdrfGI8tfFUCDjGJVR1A72YCQy84fRQMntwvlNhdQfFbweIwxexZZr6M3QgKbu/"
+    comment: "Stephan-Vits"
+  romy.pohl:
+    uid: 25107
+    key: "AAAAB3NzaC1yc2EAAAADAQABAAABAQDbIwT9SUdEoKJLPjpdIYWmeId0pG3t1NKkIdFI28ATNfCkTWuM/IB48cZbirgmVYguo8LRX7copA7MIYePwXhFVcJVUcUhsjfk6SwVVJtbfH3obGgplZBOwOmIa08IGt851+1WddCrwuZj3VoErinQ2vjs4n/LoIaoEwoBOS6KxgmZDvVH3g/gvBVuF5b0ZId564KcJyDK39O/8bA7iUPx07gVnojCH9b/j3pmCSfq44drGHVWiBhtu9WQs7xXyJgp2fN+l3ZIpiDPFqijs5394dAyovRfDjPKd3S3sqENjuTvnVnKyIPeGbYYLDu5WXPKQFP2zb+4NC3pACO8NZoN"
+    comment: "Romy-Pohl"
+  harry.teuber:
+    uid: 24210
+    key: "AAAAB3NzaC1yc2EAAAABIwAAAQEAvM1IwEz8DH5Doi67hro3wcqIW0/iXj+zQ3Td4Hx5GH4RSWa+6H/76hltbG47wFhNJ/8PkuPoJZ9wU37KkWYMvNtyJALva6N8VtHbxGPa5htODzdq0JTC1dV30YOcKXQ6P6erKAtT8vszH8KY56yhKdzCPuQNujZl9WQVUpgQG80spL51X2K4E2y6cClGKfXMG4Nry0A0GcfY97+9dRierOfvgB1plTSdxO0BK9X9vRdrxPCyy5V2i1RUWepqdh2fZAOZoDXyeKD2i0Lvj5bKDZZ7Si17ClTlNVyZv4wvIHx3SzaNECLwYDjk6+xbbX7RiIG/cMCh4DVmgO25CW1GyQ=="
+    comment: "Harry-Teuber"
+  patricia.bartel:
+    uid: 24776
+    key: "AAAAB3NzaC1yc2EAAAADAQABAAABAQC3D7ZaaG5kGxOSDrcJZMUNA2wD1hEkUXdJ4JazuqLji67sPpJzjV/E/gJEI8Gq4pmKv16e2YBhuv1y4UNedqZDhLq9Lt7N3oEQ9MLLvFkG9IlHj/C/WTQayH9FMmIU6PD96s9JtxZg4McsTPhw74FZzVNiHu/nEK+dkKDDMLhBaw/c989BkeTEh3UocNzK5wPfgbgxgnGqSCAJj/Ktc8yEmiyLWZGjpnOpE8XFCzCUVoIuTSryvkJbK9muDVbZn626d9BqToGzn5lhoRjBBwZ5o/qsZDG0lJBmInSfh35m4i1HpVz4eI61KuGyJslR/2OR6E+m4Ke0+zOU+O0PCoxd"
+    comment: "Patricia-Bartel"
+  florian.schade:
+    uid: 10725
+    key: "AAAAB3NzaC1yc2EAAAABIwAAAQEAyn2jY/9utV0M834s2OA5w63IfvE/0J5+/3k0BA1loo658Adywxq3Uldsbz+JWfz1mpbU4Vme6/s7Uxgy5sYhT15WZpYgY8abOnOuzYV6adjOKw9smxbU9icFjxOy/KTvS52WkJMDxkoaw6KtZDDvNM/f2LAjr79ypOxgeHzwrCGphk8xYkQS1MZCiCoNPhxCvgD1JOU8bHQt2M5xQOtonAGc6YSRRhtcMBvtqoHZiSTcUm8Ii6L3sPxdWGziklaH5Pl3OrJ3Iv/FSmnvKczlxvVCjDFJxXnWjnTxIvx0A8x3A98aI1oBqS4AQ1vovdlmYIkQNu4+E+q8VPzec9+S2w=="
+    comment: "Florian-Schade"
+  ines.jaehnichen:
+    uid: 25140
+    key: "AAAAB3NzaC1yc2EAAAADAQABAAABAQDIP9HjNFF+yBAIGE/PaVHMuPYKLMhzhjTh6HHnzheWXwnZokuOdEb91/Nf+5qiOo/+fTBMzPSMJc2XFfx9HzanINO81dAUAP9YnYpRzmJ29m4SrRbUXylQvRubf29GRMF7urX9NuT690vh0Si9OoJls6Nk2a0xFItaertgC9MAs0FamcI1Bve+XMtzczN+hB5NsqLkcPujRuBeXw5MSQ+3VFQlu3MZJZTDYz9eKcwFfWjGPLZWQ+iIe7cqxSQihY0Kpc/zlRBqsf6VMhZHgh4ZgjpZdLlzBV2UjUo1wpeua4vSPg2Vpj03zP1u/PNQRSP09kzrDHFhgLmwdUXKHCwN"
+    comment: "Ines-Jaehnichen"
+  fabian.wiedenstridt:
+    uid: 24538
+    key: "AAAAB3NzaC1yc2EAAAABJQAAAQEAhiyHvzYfzpL9DjlXopKXeSmb6nXV51lLUOR1+oxRH0BiGET+BXN47e+NPi57vVbha9Zv+KFkb/AKu6jt5Dou9ZTY0Z8K6lfqM4Y8FpJCNL9kc2KuyBEai+Ogxq7L0+Q3HPn/9xWPRre0eL1GISjLM+zUa5Ju56AXY6Owo4HuIitby+1OkwRIn3MgyoHSJGzW1ceeTrglft3hxOtja+S/mLcQN92Eg8zBQasqQGBhycm9Y56lKxqZnYhft2BsPTRlRQYTlDELIb+WuyTcgek8ry2HbXfJHHJ5S1TxSq8t8zghI2HR4jGR7F5DMuUfhDOrrWOi2qx1p8Hypoz8WJgTBQ=="
+    comment: "Fabian-Wiedenstridt"
+  dominic.radtke:
+    uid: 25365
+    key: "AAAAB3NzaC1yc2EAAAABJQAAAQEAkjK/fUWx61DHQC6cKrVtqSXpxVMOA29LauCTRT3E1EQioI5T6E4jeIhLQ0NPMRDawFgI1NYTS4m13SR5fcQddiSDTdFtnduYoMgfPy4CdU5I8lqGslfZeF3FLpcMdNe0rj8NTHxD4RQYbnRcts7G4SKe8nD9o6d63OGEM0zbqGhgF9199vb8pHSXx/GRPoKWlbhhi1997LY+T2uUKotCt+uM2eczol5O8sMTI0RW3CQ0Xjoy9vVtQDLLSDWHJ2W1q9aU4PRqbYhiQTIh+x3HoPPUPHeUm6o8o6qH3UwGb+plNEvYNnuZ0Mh12zT/VY/pDInk76T5jsrHhpC+TQqHXQ=="
+    comment: "Dominik-Radtke"
+  stephan.kopf:
+    uid: 24571
+    key: "AAAAB3NzaC1yc2EAAAABIwAAAQEAyFzX6Tiw5nqRH3KKVzRDVIEvGIxoQSp8/fhECc/coHZ1LPkYs6ZqABLcTLmYntu/OB22otZV5g36l7+LiVOxUMgw2ErwZ3pYU55KlzOidw++k2SsZU9FChsOD6AbBIY/uhCil7b3vUUELM7AJFtJ0IPu6v5noN9dmp1MWOHDy9Xs3rsYO0nM+35QUsMjL7zhBqgNuCOUKC1kicw1tDX3cjmMzkQAl7rFdHFbHumNsKRR9eBv+roTArcNCDfz1UN7XTyoGBgZ6tubOdsGiydeQmmvwBPTfdw9PitY/nkKAt5Nc5nqLWaWb3WecHaBvWco4Z6jdeM7P9W0Cye4HrDs1Q=="
+    comment: "Stephan-Kopf"
+  martin.pfeiffer:
+    uid: 25184
+    key: "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"
+    comment: "Martin-Pfeiffer"
+    shell: "bash"
+  annika.wenzel:
+    uid: 24921
+    key: "AAAAB3NzaC1yc2EAAAABIwAAAQEAvnJtsSJtXeeYYhqC9+JVEahi94+/wgCZV1fhoroPyIXiR0Db1LjZ1CGWEPk3kkxVm/syBn4T4EKjXvsH01Dq5EbElOWnLLfGaIHVyHA1lQkRNoYHKsX3ZMyqxZD4kVJKeYShEiGQuCd/2cXLxuyXAMXGsASE/XHDmtkBT72nSINQLXEVKS2CnNr9skz11g8wrm3M2iMTQ5BXBetJe4It2t2HHuihHfjqf1b9mJQ+jdaAfGizpeXEiH5rIuwCFU2frP5eW+2fc8JevQ7ubnhfPP+6abhChMZDdANS6RJi7Ov/JIn5eU/8L7tVE3xLu07sS2Hho9HPur4Z/YF/3Jcjlw=="
+    comment: "Annika-Wenzel"
+  dennis.klein:
+    uid: 24096
+    key: "AAAAB3NzaC1yc2EAAAADAQABAAABAQCkQI3J7yoBLxG+SCajzY8+6uq8AK+0e/0SAI7vJxyLzUYeQkitasMoWg4RL0zOXC4MT1VJUgc2Pd7Zy8LDowghn69cBEQ3SELied7GLdfBH1mDn6N8oH9aN7dx2wgad9dNAMUBzxzoUU5fk8fiuhoEbYnkSbPvV+VN0atKlKef7LS5yR7NwAxaomX0Eauqy8kW4szI50py+HIQvaVg9jYO0MXgT2KYM4VjvcNXCRZ5PrPPrNslO4gyW197aP/3K97iCYzqWQ5ua9ZIxY/keK4EdGHQtORlFchrRR5kkdbF6cNvGgKratFWPeoJ1FFhJRgyt65RcPTDdJRTfaGLIbt"
+    comment: "Dennis-Klein"
+  ivo.hanke:
+    uid: 24828
+    key: "AAAAB3NzaC1yc2EAAAADAQABAAABAQDccePnclDF1XOQ93gs9cSdl4R0LwpvcFSJ+Lcs2/7PbcEi5FMpcSEJ9N+2lmEkZ0dImjZXP/fB1KMeCPvIX8Z7Fbnk1Bwsz55JIG5QRbL8QL6Gdt06Bt1Z+5AotEDuLL4O0X6toeYvQFIZkADgHB2sqPLzX9RD+XODyIgv+j3exDIMusMzctPziOG5Cf4uFsLGWYVF7kLW1sjK1v87tPYhjNdNj3e/J5L9IyQKp3O9KPu7wD1oinR085PUaJ/ZXiSISu7woy06e1gXz0+zxtoM998O6L0eJy48HPp8BA9Xage4+8HgyCzOCFpeIPeYiPshXVzwGYXSWg0ade1chPuv"
+    comment: "Ivo-Hanke"
+  konrad.tadesse:
+    uid: 24356
+    key: "AAAAB3NzaC1yc2EAAAADAQABAAABAQCjwoCjVQJKm5P1YxajbrFXcraf+GFrO72vgrMWPMnhVnTAbIS7lSVFf9hJ1LhjYizjpv00D9P4yS1xcWfK0sD9sK4UcZD4D8QRuPKgJobLvTXmrETLJAbqfz4X1TTxJPv6/gOzBB8861RXWv3MXeYLggla9EplIvuVWzjLRBETMUVkhuqPnodxL1jIphjwG8AEH7hMvsG0P3Vm7XZ4R8yq1vzdxdG7yxQYTDxwp/YnGDAcpRrNBPyxXoGgB+kLNOKCZjWVi/uOxQKKh6vvN0NAbW1+CNyfQNL77wKdrytDccmhnPQ5ujgHj48ZYaICIpo1SCdlPVINJibWe4L5t3WV"
+    comment: "Konrad-Tadesse"
+  andreas.pinto-koehler:
+    uid: 25491
+    key: "AAAAB3NzaC1yc2EAAAADAQABAAABAQCwIzwYIuIC5KVjYnwEkpyG03Dgy0jcFCLUA8z3yq+HGaihgABqCFYcpZXYC8Tp2xZ1pJm+hUvdWicFiWnn1ixWJ86v8oztLPFI8z/wTSX0Q7ksb297BiPhTNFmrPWODfCJzC9sp7Dpk+hDjkoRZjWO1CMC5uXfwT9nQ1D7aAN4WbWyD6nGo+IcUPUCX1gUL+wAodmljsZO5mck8HZiuVeQe5g20y+Qe5jgUPOaGYpOF4UXRSzq0E5NUBOC/3aXC5vZzF6WLv4LQqiJG2KdSUvCI5d2q/bStbsCO6Kdqxl3J9aAIgmKB9IlJWJWQXUvmO9oWgEZBBAzP+lgh1MGDTJ1"
+    comment: "Andreas-Pinto-Koehler"
+  christian.heggemann:
+    uid: 24614
+    key: "AAAAB3NzaC1yc2EAAAABIwAAAQEAqfrWkbX7vcH61W7wl94jFYIhQQ8MKsp1XsuK6oGqL+30wdQSm/I/UMtXcRQmmTjlaVtY6qqGZQTn4ApXfvzQ+/oPcOyYQhjeUUd0oNCGsrBmh+v2T4/6zB3AbYA2fSDrxv4UlTG2eZ5x7TG37sSHth0Jqm8fVKDOt4NAKVhnbcQu8xDrOl8i0sTQJt9nbtdsZSdaodITJR99HbNEpwSA1DZsEvr0CZp+KcOpndjMjDCDr+VxM5vBbrfkuth6t8ZCU7NvKnE7ihAYgxgbRlLh8mmPmomu6EOjs+6eOpXwGWt9o3Bn2I3itPnxrLWDBTzAhAM9hTOjdGXVEmpXnCqnFQ=="
+    comment: "Christian-Heggemann"
+  nikolai.potapov:
+    uid: 25309
+    key: "AAAAB3NzaC1yc2EAAAADAQABAAABAQDAzM4FytgKneBCQuG3vDPLWaBGL2+PugTvf1hxA+uCitXlmu/HOilFeEsSk8teE3Aq7Oj8Q7yCtV4hi1rH2n61if9qSmOY9g9heV/rWd1ReHOWMgZtHhYG4kQ9oRlarSFozTQXy92rdyjZCRYwpMgu9cTLal4/0O7giTQ2jvms8abSTc7NNj+2iig6zse7Lp5R3/1gjZujSs0Zm5q4piEUE4SbS9X4yfKxlU9qJiiRrt41g5NbEMOkNFArNX+VmoImc4AWjQvdlQ/atRoTwTJfHD+0SpitNXQ8qJADVUn+eUbbsjA9FU52wt+RJdttIvwFo1rRBe9bUKoxjmIuaExT"
+    comment: "Nikolai-Potapov"
+  oliver.broad:
+    uid: 25530
+    key: "AAAAB3NzaC1yc2EAAAADAQABAAABAQC+vLPZHUqGsFp4H4JeVrJnf3JkbPbsJeYdPJTgBIyAoqrh8niAKgkYIRZQhcT+jBRnV3JiFziYNwNAjXD5lGmOgmq/Pvw4HWGcPtYBQN+471inJ84mgoZkONRqHihIGVOnharwj07LHuQOGnGkT74g8IKa4DN3xf3VT9YoaCgDqNT5Wlawfu27Mhh/+/HIaeNq29OIUBCMD+ICWTCDZbwpE0WkRd0awT3skmDQ04fCMkPtjK5zGv6G0dQcUiyJnTDn7UfUsV8glgcO++bbxQ4cJd/2E5NvA/xu5wa5tV4CpW0k6NJIWFyOBPmScb5TJ60CcEwrNdvOJy//HaIETCPL"
+    comment: "Oliver-Broad"
+  erik.wendt:
+    uid: 25345
+    key: "AAAAB3NzaC1yc2EAAAADAQABAAABAQD5UFs2pRh1H3zym8opK3eNTaSgjH3iA/s0EgBFMiaRR0H4mlh5bN0lcKPwrVWRQGXuctNLUHbF2WB2azo9SYXupjVoSCYz2VbROss6RUTtTXcE2pXBQ03ToRWWLkAQu1FaSGzwNTI3yVX5kyStgKVuqiYAO0qh6jGYYp0LXzFxMfQAGqNWaZgsKm+27zyAU/A1WFoieRkCcntJT/xKPoUw4qAcPAQEIr1a/lQE8rhvCQ0x/itgHw7veJV/XZMSNUJqODlM0s6T/cg2ZWYeTezxr0Wd+HOlNNlXy6n79SWcr8VTM+b7ix0luKNQT/rhtXzFeKE6pELrJTQrj8w8TlK7"
+    comment: "Erik-Wendt"
+  dirk-peter.krause:
+    uid: 24029
+    key: "AAAAB3NzaC1yc2EAAAABJQAAAQEA465HzsSMtgK39LFt80NfDfbCZ8YDgufsm6iHrBJBYB1Fqep8TDsMEozbpbbS1s/QGjeiENMqL85jpokxRnts8WQoyFHWo7L1TgstO6xCBrIRAmyj8x/3JbbBsEmi2G9h+hKNILnBDvLVV5WgO0YeH9fSD6qJExzHYESE/OYu7q9w0jhMsFaPadShL4t021ktOehkvAS42uoOxagLEFpZUfbPeYoFrBPr7Q1bIJCtFVTVq1PMCQmSfTxdP1i47Uo3TDDBdttHWblIyroexb5DPohepJ5vRH/VxbD0Q6UwDf+5RM4brW+lNLrs2eU7FZYokyrXwIhgcKfV9GtcqRmCRQ=="
+    comment: "Dirk-Peter-Krause"
+  bastian.gutschke:
+    uid: 25401
+    key: "AAAAB3NzaC1yc2EAAAADAQABAAABAQCzAI8dXmh0UijVhDoOWECJXkgX+FDNqeyU7Elow0k8eQGjD22y3I2fX4K/0vH2q0oabpA143uzdkg+UfTZJdmmrCrBvzJwqKil13matV/q4y2VvMHKtB8LC1M4f7pdr7At1LCCyhvbGhad/9sixrWj5pn2ztTKA8E7k9lGEdLmBDGs2yY8cLKr/7STrNfRnjIUhHB/8BKzcIrV26PAOk9c/fxYviBvJkeh5Ltyo/w0z2Fws/g70q9PxwRIPKb+B8oCcPmdNQm986JC585qzgBzXrN4HaTymcyb+NNhX0k25dSA8kEHE5B2Z6hFHpmVWqFkm2op7cKEYvhNIL0i5Qnl"
+    comment: "Bastian-Gutschke"
+  matthias.otto:
+    uid: 66693
+    key: "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"
+    comment: "Matthias-Otto"
+
+# MBVD Team
+  marcel.gast:
+    uid: 24032
+    key: "AAAAB3NzaC1yc2EAAAADAQABAAABAQDl5gBafvBTXL/KPNjWRhNvrUyrsHvS5oEwqN4FgwIOLYUunnxYhLSaV/ivMTQRqHqqRB+NUsxC8AneZVP0UAoCwHehlnD/d1tTHKGRhR3StJgydWPsCBOZ31AmaSqWS15sEzXmgo755zAiNGT0a4xe8cTzRmkvoWPWCfWL89Aj4FfF4VBfo/7H1niYQ0X1UJ7Uhg9NAOvNIk8FFAd71OmPXH5bRKD2Cqw5ER7IH9vVhEt4q4O8LNbxQv7CQdi4E538DENgar/NzW1owem57WWKaQ+tQ83S3vxtGnzi2XMEGvfUMY4Fwx8l/ujmVkAo8vCoKZFq1bu4mcSxFu7SbfpR"
+    comment: "Marcel-Gast"
+  leo.noack:
+    uid: 25403
+    key: "AAAAB3NzaC1yc2EAAAADAQABAAABAQDtU2BjAqXLhmeD0DyVFw24/kxRj/XA/wg12WA2SD1mNDXfHXAX8e4nsOqI6R37kEqToUXdq25YSUgAcd7M+SmFX20TPfg5pNOmE99If5fZc45jPmxk3hSbnetPXkoy4ju2r/yuOaXXrIGZUwC1j3jsYx36Zj33oJlXyXOpmasiQzzNmQp52OG4cZ328DPC4xUsqa26pBFkRUcAyiw+1f94ivzxfarJCAAoWi0Ytbdb2kezM/pWpVW0gGpmDh18fGY82jpPhMDR/BsrNfEk9owqPGgmgR9oqBP5YO0NqJc3IESTE5RP5Ne+Pz8Ry5p0j2Q3iMJhRfXN4VBbp4CReqh5"
+    comment: "Leo-Noack"
+  rene.berger:
+    uid: 24966
+    key: "AAAAB3NzaC1yc2EAAAABJQAAAQEAjPPSqAbNYEYkTe5X9XLten/Eo6MMSYo3uep572rQG/xZnPCo3iTIOtja9CK6y3tJg+z7ehNP7vK02jWgQ/34PYlQGhxps5EKfKFuWfBvnGvYGTFXMU6s/mI7X3UuR1u5JnXfQYWLYZPx8BIpiAKMmAUq6BSvtqEgTrlJepR6dFecISsugBwcMZXxLGzV4yK6xR0GEnbTE7sU0c184zeS1ICbc2r/Gmr0zxSrv4pGZ/97yTl1fqstCfiupjApwfaLIbCfw9gEbgPAKT54LhBVxU7HQhPzi/Jp3AJ21VVDjd3z9CUGr0//NYfzEpm4Rq0U5mVJAPh5ipfoFYTx52QrDw=="
+    comment: "Rene-Berger"
+  claudia.schlichting:
+    uid: 25569
+    key: "AAAAB3NzaC1yc2EAAAADAQABAAABAQDl03gbuMJaro1OcYROFhjJn8nGf0ZnUxUX8Hiv9CrDobZetS1cDjn0zHJZ6i8bZFsXkVC644q7S+rHH5ZNu0ItJaXffUAqg6X35sFKI4ZdO7ggReZuyBptqNt4EK529Xy0t1pecq6WJGIQmuKc1yW8JQwElpzhlQBYTrAbz3/1Yz+JJk1Her4koapwhVVK+46gvzn8o1QDaP3AQVIxK/+LeRc9OT09vj88veZIt4VEsBsK56JifSFyHY5caHFrbcnzZHvbwZTLynTtjz9OLqaUJ0WX16LXcJ1Hv1j5v3iFmcDT1XOs1Jp19q7RZ0Y+ztwx18QE382ifALrN0UGH58L"
+    comment: "Claudia-Schlichting"
+  franzisca.beier:
+    uid: 24792
+    key: "AAAAB3NzaC1yc2EAAAABJQAAAQEAqdVxlogYdmgGUOOd8YnCvs2xzJ/pJa0TjoLp8owilrJzv06QPKdzOTKkZzQLONlYegVrnWQMWQ9rNlMexiDkghryK+eJ1azWk3oL/cuTY7sdM3oBdhK9KfaP83TdWOh3eQJ+5civfymO+6K3+4cExexR/r9zByR/G7fK/Ms5deKPPiVJzUAiiElz69lvZsm35C6XqbPCBDznF99jFQRG7a6yUjPCL/CEMsqc6RW32bcp693vWZ1fS8fTeFTaUqUfXMmvM/nfAFJkHgApEu0fsPVTtxGgnCwoa28sJSRdw36a6g9OE9Fl/7pYc4zV8eNHnAp6QOpHRGIR17f/gDODPQ=="
+    comment: "Franzisca-Beier"
+  franziska.jahnke:
+    uid: 24967
+    key: "AAAAB3NzaC1yc2EAAAADAQABAAABAQCs72j7ncLXhTvQCappKrdIVs4qNhLQ0U6157UGLcNFfPOkLaf12QT/eHuM9VSSr7IolSZ3UGBxyHTamd5d9RPSuFWJurD9DxZBzLM6evUsrQAQmHMSX7F2FSlMHn3wOFxlUJZBAPnln/fSrzw1J4aPHZZ1PCm9ihOJROSydw1JllRMFe8XBSpj/smACKitzTtOQHUdJv9vZRkV3D2kpTQvlhCdM5DifwzUiFUrB2lT6it8EcRmuUI7rrxLHrqCnG00jKHJL6lcXpN4D7sFdL49tq6YfPL4qCnYFbHgmiLxV2nYv+kzJsxtk19KE/2qiQ2s+WCsdKrdtKSt7DasYdc9"
+    comment: "Franziska-Jahnke"
+  katrin.otto:
+    uid: 24809
+    key: "AAAAB3NzaC1yc2EAAAABJQAAAgEAv2JjxvGlPrTLwx+O/Xls+semRTcQ4/hY0pvXjuKmLPr0U/FDixQoYQtaSYUWoVgWzh+QlutybUsRrvm1kcWGpYk4BbjiWzXO71gGNYwGAxFXsemRmbXTsdatnB/scI7j82p1MfZTgf8oRLv0hIPouXAhRmcR+XLWmKUhbdKAbHf5fMKAgufc0ULsNOmptW+vl0PxciLTEvLWnqVm14ML2p5OqrIWUQXluzwqxPM9iD9iej1o6x5nR9g4gvfGzavZJhgKg+6bZavehdN7431ojcuIQkyjxTfsaQsjHDcrD4UrYQJvvydhYZHbNTSQsCVbqGquli6+0pNuIO+X5J1VDQkom4beNZWkkNEq+CtqiYayKFjWX/KcX3xRjunV6IvUqyn87CYBiIEyXvQ/P3CuaMK9B+CcYEAz3EeqJt4olOrMFo4zDjM5or7VU1Tvlni8voYtv+xWUHV0E6+c/odcuzTU/l2qzyLsv8VTP9R3wzI/wufxbEIIlvqTsjN5vQ9Cdnl6izlJZ7S4P/Z7JLTDzkwcJcXbA33OVZ0HF7V9Gi0XXTY4257UGAzbBUvf91UHDBQSUAY7kuBuBmM2LGxkbjJkj8F2xKJaDIYkJ9SXs5ikvuJuzy8cP2VsA4hpyNBESLAdRAHFf1DBcLMLXnIgASfcb/9b1xBKpLraFxEFG/U="
+    comment: "Katrin-Otto"
+  anne.gudurat:
+    uid: 25149
+    key: "AAAAB3NzaC1yc2EAAAABJQAAAQEAhsAyvcG1amG5judI9xQWkTshlYPeRSV6mfb15fvVEsslnQYlBf4LSjf2sVlmrF0rHRA2Y9pgxHS02fmZkZaODaopSZa6WFBd0WziJdONzy+tjY2z3bXR2r1PXgqSo4JvvVdrdiXps0fIpjUet/hoUbtPIQjj0IM7LhZ0cvkXut9p3+h5sPfl5mbFLWuYQRG5SnmMsEfvzHvWW5gdhy9AIZh9e0ffwtxVMf9C23gRzYKG72hUcg3rolmJzhtgOqJ1+NXp5olof520j4liAM7QTySzZnHxmo0VoIzh2HENlF8Gd0mNYNPWrT9fo0a+iCOfqfy0pQhS3eoc/L8psyhMVw=="
+    comment: "Anne-Gudurat"
+  marcel.rettkowski:
+    uid: 24951
+    key: "AAAAB3NzaC1yc2EAAAABJQAAAQByXdr456V4V4fnZ3ef6MH2jXsIOJ0jQkRsleVt7trSD8GYP2CXtU0j8HATMzLdP/wIL19dy32MAtlE9LVuvoB+IAgBJy6iFg4zT7qqwVdas2f2a2uB+OzzvErCisMOgGk7696lHpkAmHnQc2ZyfTsgoX69CrmzXCtmLhox4zA+ick3UydidBznxwmTewtci0czoksuI8LRxH24U4hZ0JPBFYlgMY0RmmFEp6h8m9sMm/lYXd4ySEQfwV7PfkaUuO1Kfmmnuoqe4GlWgvfHBG9fod3NikZMmobNud6d5pUAasRpo65rlofWjd10vOMk189ozkpjOuDp3zaibUdNYqsh"
+    comment: "Marcel-Rettkowski"
+  marie.kopplin:
+    uid: 66673
+    key: "AAAAB3NzaC1yc2EAAAABJQAAAQEAlNC6aNhyf13vDld/zZ7VOINqW7322RdkF4f6loaay1SKjx9DzeI1hsI8MVAbh5VNCau+1KxasKiIRaVdyY5XMhjSQaGeLW1u/BX88soAvdZ829Hv0ys9NtlzGTQ2UrZ9RHbQ4Rh18ZskFmLbM4rGveQ0sACO9WvKONBfuvnOsVZ25gQ8qxRLjnIt6LohIjYw8RBrtyba80HwLiKSi74un9fg+A+Qm6if6eEURpSuTnIT8Ju04I90gYcAXFevQgha31bfki5d4M/KtEIYM3ca2tQv3F5b8VrusHN9ZJMPva/NXpdv6SEFe5+khkTfICXVEg5YFzOcKP/y8LrwNzh9ZQ=="
+    comment: "Marie.Kopplin"
+  stefan.goerlitz:
+    uid: 25560
+    key: "AAAAB3NzaC1yc2EAAAABJQAAAQEAheyet2WTr1C1VAC6kgVq2jebd9v7Jjphl4eyfdUtZtnenuqIswRy/2ZxjG2wMMPPdF78bx5MqelsqjR7G+Gm6fpx5SUwsvkt+oK/Wcr1CEECDEieZA9qiKZHGwtRuhL5jYVTBkV3dEVnkhf2KEBTON8JYEE6Dvon3dGbzI4yF7jxz2+cSSDQ7YyqVhznx/DaF6RBVxeIX0iobszWTpFU5YP6JvSIokQSg1GKVDdTEjvWozmCzU8braWK5D3v5IBfd6NI9TT8Nggk+MeNF1bf/AL1rPzSo5GMCV3Bhe/kdJC0QxM0JT9wT+gbG8B+kw+Ooibp5BhRNP6V/lWu0MRN9w=="
+    comment: "Stefan-Goerlitz"
+# Sonstige Berlin
+  sebastian.kuepers:
+    uid: 24074
+    keys:
+      sebastian.kuepers@gmail.com:
+        key: "AAAAB3NzaC1yc2EAAAADAQABAAACAQCbHQQ1GxJ/Z9lRxGianljD64FHBKj449FrOlXbxOeizM2iJZs8SpNeRv7+XlefMTAzJaXkhiXm//f2/NtYcVK7UGCFhuHdcWiHpzS6zxqKIynOCnIo+Vms4UTiBCqUhSoZ/HW5HjheExhzIPn67n3qGh/dU1ArpvCZ56kvt/J1fNvcirfMyUnYjXo6j11VIeQQ4UoooiGh1l41ozBQRgRn/B0n85LaHUhLudFzFlP8fMFvmGawRp+7W9Vjb/3zScNrilntTKXvc9mhnIFYxrN3C/vhMr7JuAyzjr3KqYe9aclcw9X+XY9GYmdwYdtbLoMeCZn84xGIRjLYWvzf6SF/RalaAKME0aOP1yrJMGvYLaUgbYQMjIhoFNZUQxkI7xqEWq4B/z9dMy48sMX7JcJ6xL+vigzF9Jn72pZSaTPWPzW4vMoIhXKM7HpJSliJHPHYEB2yvMrC8/gFPGz0Qu1N+Tkir+BrrB/R6lHS9wPnGm3Yeur+gterN9tspM9PnWyseRzPwAaP/v0i9LSIxywwM8vjupGQakyHjUFjSruW7k4fstUMFTEpeUbisCcKiGYMZPi2zg23obqrRImcIDUvtZLzWz9dqfQkxD3CQlHRFvJBvhtQxQEvSSzShBb5W3+8HSv/3ZKf6xP1OV+Gs6ZmmLvdQMcr+GPdzjFR0Cfo7w=="
+      sebastiankuepers@gmail.com:
+        key: "AAAAB3NzaC1yc2EAAAADAQABAAABAQDEMviCUJoFf36NTYrLeEsa9lAQXMKCa3l21aP3nCwjK25F8eMjAmD5viu8VxEa7rfz1ZMGiSsPQUrcevOGJoVEbR4Mu3IBbfNVMBqXuiXaU0aAdLsmBy+qZLtp4RUnKO6FxPwDuNAzt8CvyRJAQJMDAYlAQjGTaSvOo9hA8Byd78PrkKLiB9cxiHO7RIz9E9nSTo77o6U6iG5DK2TE3HzNMoOuzZyixj1Y1HjrH/I6lT5wkDg1Qe1TDCoSRUMHM+fs4sJzhS/1fHmWyyHRK9jKfy+1YhBTyR13gbldSS5sU7LibGxIfzq2UxhZTvY7Pj0gJrDuwu36daTHnG6dPtEP"
+    comment: "Sebastian Küpers"
+    shell: "bash"
+# Entwickler Koeln
+  heiko.hardt:
+    uid: 24627
+    key: "AAAAB3NzaC1yc2EAAAADAQABAAABAQDL7FvLrQnaTBJPuVd8YU/jW8cHZPHvTpzvrheBVBAcAR1xEuv0ZFSR02/bDKcdsSYnCfgHSJr8bJaqKpkknwPcifHoJVSXxfqIFIGPIylKBTHT+777f7izERiGE8Zwrt8K02eQqvkajksWw1LIcUIFZcGza75seJREem4avnlJybYLeKmys/4h4PhcDWWCu3XxMN2DmNREC/MSukj8iYOklmI/znzsxJ7f7sigwcUkOtIM3nxRXLwCUMNSeqMipgX9yI6IL1fpBh+Q46JDbSJZkbIez/B0/HWpYmiOiS0mlLpj3ZaU/HBAEupIr6jj6MUIhwDRW7/uYEbayAnKkljn"
+    comment: "Heiko-Hardt"
+  tim.jungebluth:
+    uid: 25180
+    key: "AAAAB3NzaC1yc2EAAAADAQABAAABAQC6w0CldpsVkXip3KsbO2juQF0wQd42wcKuouIPbRHyNd+CY30LeDDuMhHuskaz8aptEfOSu5Ow3PgV/+lApQnsjo9Put09rRzHh3Me7aYB7AU7BwJyGSOtlt7seN7+sE54Y+eVi7YWyGf8WqncVlg9w/ttLaFDYf/5VorYW4js0vCgOaVklyg6L2lRdSd5kCHZxV7aojymy0dEL+2/FG4SrqKi+hQv2EYUBMOIDNbr/T17ZahYHQiYShTBaFCf43bK/WNsoSHG+WWEp7lt9irltzCOj4To0SNeOvnYccXEIjr3rX2zOTRY3UPvzqht8aRxEhIDoXAdxPRdo7AyvmLz"
+    comment: "Tim-Jungebluth"
+  markus.hettlich:
+    uid: 23718
+    key: "AAAAB3NzaC1yc2EAAAADAQABAAABAQCsJSZ4IQpGhgf4NH94fU+sKJ4uF3E5BpJbLkX9Ywie8iiEuhWVHA3Y6E9+CIcgPQ9r1S8dNOcgtJNHGooGKnGOIwPRFbnE0QlQt9B5f7p++u6ms7Ch9gYNMuW33l1m2MTSICZnABuTIZMuy683iZRlP43pbE933zck0/aVWZ5KFWDmShfg6Jjq0xjG1l/w2AEYmYSbo5MRDW1ZUH3m16tLG3d5n1zH54t0cT56n1QPqbASvJDiceiszaTCYQySqiRaYXaBkPO2M36tPrFZRdWK1RJ/TXSLacYSsTPv7/Xpz3ZVuKMrPCRlQ0kDMVOcP2A7mG+FF1TkslcLR5K83wqV"
+    comment: "Markus-Hettlich-HH"
+  tamas.roszler:
+    uid: 24601
+    key: "AAAAB3NzaC1yc2EAAAADAQABAAABAQDlB6xk5MYPNBvZ2OZuFs1z88mQS70W5jN4mTV2Bz61wURUQrsvZ3zbNmhBaxUGd6dyqZVu4KPmk2BH8zC4UGD0/+YSfcVrAl5qHI/7G9bDgWQyTrn0LWKR6GXELPjO7ctFKTvsj2QKqaIYHOQAmN93XzPJ+EYFYGY/Dl9Jf479P8KkPeJZ7J5AYLI7GPAVIBLPqDBecL5NA1I1G4he+kA4VjuNZ7kytM28/Xrj8JJ93h35z4qnVR0T+sgtiTjKEYvWVklq9eD78oKm1nAj2EESbFK4vGOdF0q4F3t9OmvkKQ1mfd8P1TvNxC6zTyu94DYE7NWt6++ZRbu7kMQjuIhb"
+    comment: "tamas-roszler-HH"
+  sebastian.schwarz:
+    uid: 24766
+    key: "AAAAB3NzaC1yc2EAAAADAQABAAABAQDU3IV3s2sbClNg3SeaGLVhdxQVDuO022HzUZ9bChhYB0pi98cL+/fSkwWQ5vA7f6kQq+myxkm+/GGzbCKc5xWGgRLxtUuk0/lkoe0tzaQZvvkyFaQFISi0GWk1Sci7dXt8Pt+y2Hg08I7a82JbSfnVBlLEP/ZbHzoELfE142K+k4LGNpdjvVmIs1IK5QCS304oIpN8IE2yReG2x7XkKpShGR4//Id8tjzyOFJRbEGdJqT+mZjo1M/Q+79sCs/BLQn2mUDTZAS8H6kbW4fdFlVolBv/SVSn58PUahOHprPKY+TWy53TDG5LpFaDYYF8IoT8JRjvGyXRe+bHmHt+lcE3"
+    comment: "Sebastian-Felix-Schwarz"
+  lothar.schickhoff:
+    uid: 11028
+    key: "AAAAB3NzaC1yc2EAAAABIwAAAQEAu7m57fy1VKE7VS/vBezQ4m0/Nrk8px/yGFQ7MMyIilDMc9tTv/siZZFmtIH4Nh4ag225imCTWrIbx/l563WcAbKdyB5Lq6laOmo04pO6BsOf0ZXhvV1rgGj2fq0l9hPFA9yvHA0NHa5exylteNZeERtL0tkThRkrLlfDV0PnitFM+nDCw0SlQlbKcDp6msNoj58fcQey+nJx/3b7E9NdgnoYxQ30qMqjueEe78gXFDE2rDQAzWKkLGt4wAh23vlOByw7fh8D+cnPZY/gNis/c5PgRZQvs2PVRnE9S6xvpi+PNQd9/SK20lCSxGBXKxcwxImdFY5vKlA4agUwh/iF+Q=="
+    comment: "Lothar-Schickhoff-Koeln"
+  eduard.ritter:
+    uid: 23759
+    key: "AAAAB3NzaC1yc2EAAAABIwAAAQEA18XCeHwZry5lsBQvO+l7Yl59yAbaq77kbxQlzEVExakI8Dv7a1Tt+3bhwSXpzoctjH/4P6F+NfzpuxfmL+rqWLOyzt3EH12T0x/80JriwmROD58Jj+PJkE8zn5+yixpqLDbgZJWrpF5A9yPEwOvVP2ItiH3JLt6vl9mvwuVfoTw7ama4hgHy14gX4cedSq9dZUiqD4+kVxZpWHKNHwyM5c+H/gcztkZpCaYHZbvcJakvrWtqWcuuxetEzpNXNH+/EJ8CZoyQ7niewqb+8fUQfP1eWPN0CUmWgW1A4u4Qr/M5avsac8nNp6jJVo1vktA811kmC+2hkUHPydL7CJaFow=="
+    comment: "Eduard-Ritter"
+  daniel.kurre:
+    uid: 23659
+    key: "AAAAB3NzaC1yc2EAAAADAQABAAABAQCpDNMgWjx1GFh4CJFH48B27cgwV57Pc9sszJc58aOnO0MdWCJkG5eL9Eu+ScLw/074oWSM+RRBwZaGkFlykSswMm2inAT16Hr7EmYgsWw7YCcTywzCyQmcXuZbrmxdI4XDdoX6E6v224j3O9Xm46VP2IfMoKEyOKlYP9nM+qKS4xjZFJzqG5mWxZAOoLvxI6H7ewoHIRz//ST9M5f4ZkecRkINHhSXOQFb1KAWZ/nZMsovtmLLBaHuYczeTxDCQe1Wzr2I5/t99Eda1mas41a9A/vGVIjVfGb3Do1ufRA2+GVNuPFQstiR33B6ZODp6N8YgEg7rLKrO0GI1GPb35Ib"
+    comment: "Daniel-Kurre"
+  christoph.langnickel:
+    uid: 24125
+    key: "AAAAB3NzaC1yc2EAAAABIwAAAQEAzaea/6afGThvtE9mZTopXhRvssPiY+7TXpLDGiGX23mJDANHNAvLrvYVcGrjOTHZ0x5tpYTdlvTNgu6L4X0QyeG1A0/G6gfjL5dGMbNFNBXLmXdDP/lSxydIPFMlM4FlmHiaLgOuQuxf7BtSC5sWe69wTnUU7frYvRxFEEyMh4b0c1AIwqcRHU08phZw6RNj3lBfKb2/rACvumY/1giUkRUR02r9RjObbOvNmJbpud9xIQoYneWzow7vsBp9tAhUrWd2MDQ3UAVhoFeufnicCxwSHLXah+7asOUF1iP0tBKB1JbKM30gRyHf9ax8QH3P93z13cfrSua8V46DEGr1Uw=="
+    comment: "Christoph-Langnickel"
+  david.winter:
+    uid: 24620
+    key: "AAAAB3NzaC1yc2EAAAABIwAAAQEAwlEqnBE1xMb5SOA4JnDF7tbrgcKl4NGeBQ34Nc3VzfKfnHy+5qT27ieocjyMt5kNt6I+44e9BUFRbGex+hjMH/K0i0lYqjnhn/kHOm/EKVNBonCjDojlxriIaZQsJgMDaFN25m/7c0XmcofBxBUeIwThGFrXMOuW4hVNWOQVkszJ49Db7EzbbUUCeAYpTqcQF+S5m+DEAii8RnsoT7qERPt7BAht1MORaQyNEskyNIJpL0m0zm5A/SMlXkb1RSEMfam7T9lmuC6/goX+ojV2Dgm0rb+PQZpSGdaCePaJNN7OYLQ3frfpgfV86nGRqPW/FQnLxsK5NN8QrvUoTWEuUw=="
+    comment: "David-Winter"
+  michael.fricke:
+    uid: 23630
+    key: "AAAAB3NzaC1yc2EAAAABIwAAAQEA3BICQMaFDIS0LGZbIWHwggkUFHc3lzrImOll1aMdTihHb2DFiey8EmToI/OGz+1qotSrPW/Od9CI3WhTbnwejg6JS8Brg8VfumdSK6B9oRZIvV7WStzUw52bwiiFHKB/5zF8NBRwrJ/aYEW06r0NIL8lxLUkPJ/epbC4A68fJPDqRG3NO3M7n2DOvE5eK6+vxzLkJyx9hHb6tXbYX4QFB7qCl5ycuGm2n9xyoPRuqNWUCVQIzNSsErlok3EUjUYDqQ69ZzkIomeZUipwoNycvSr9KyNaoocQ5HAnyLUiNl1Jqm3EM21BOMOddaY+TKk4YpFjMDXe26/9FXIdNnaU1Q=="
+    comment: "Michael Fricke"
+  matthias.schmidt:
+    uid: 25570
+    key: "AAAAB3NzaC1yc2EAAAADAQABAAABAQDvubKbiX1gBa2bb6m1OLPQDgWh72KTyUAiEsjVDn1u+L6ohnzGQyNkjAfsJseoBju5vm3sR/1N37ru/bV7AhrQ32mqIXpiwz6LvPsW+SvqhnDCp/x0iE6I4UQMAteV+IMufZEsWL+gFYOK0uXsdISVsYcgc45tt6JO7l8iyPoTy8Y8EZf7gt2UCwd0nzvgq0VQYTENuDN6v/UBMCeF6z4114IqVF3PRetUxMab3jiig5OVxpw0M1dOdcptuGpWklGDdVa2JyBYOKFq7o25fONkWcLsWcx+QcQNQYw5srowr6WphJ07sMH5BxfSk9n10ZP+bIm7iq32H3s3IjC/5Fm5"
+    comment: "Matthias Schmidt"
+  uwe.zillessen:
+    uid: 10743
+    key: "AAAAB3NzaC1yc2EAAAABIwAAAQEArD+xcJdtnu8z80DYCSUOv9wH2bMx2l/J2tWdNjOniWFhy0qQlacQfXjzFsqFysQUGXlwH0cabjozAA8JSLCnQS+ZOEY7KnGscJ/wT7tK4RE8XuuCqHBqdEjxQBdb99pdui2YednnOUSXzXKU/Gz5VEoe53GnwblzRm59NZRbYkV7IJGi4toHKT5316yQekG5sxAudwvfm0FMPFizn73CRFFCIjqACt8R/1sbO7+RhjYfywqVoWEzLfkX7VFK1/eCuQyHZMVjX7usglS/oSd6P9iy1crimhPjdRlxoMZySw5N8a8WOj65cy7muZRMJg2fqcFcfBB5W1BtLGhpB1yiaQ=="
+    comment: "Uwe Zillessen"
+  daniel.pritzkau:
+    uid: 25364
+    key: "AAAAB3NzaC1yc2EAAAABJQAAAQEAiBFF0PGnQUHdHYji7/SKRT3xFksUuUPIa0wti/E9BkQO1tyuISOMuBfDHfga5tBXTqSvhyK7geEy691onJBisvhnZ2Nyft1sSWJjj//a3aYEQ1s1DlMcSVMLjG/Lo4rFVDxTTk6pnSJMqGkQNwjzdHQ8rxHaZ1ZMtrm2Yhc6c6XXrhoLoI0q3C99TV1aojmcAVmO2hQFm6RV5Pkl9oY3j+P7IMhB819XRnZtDftKC3jYnNTyCHV/joByNYxvj1qXWMEN+oL28ioJX1kZgXkM7thLra+odyL6dhNfEHAgaQMFbZHUN9xEeAlyIRI7Ol+FtD4wNjBMLK3KojFkdR1a8Q=="
+    comment: "Daniel Pritzkau"
+  hooman.paknahad:
+    uid: 25580
+    key: "AAAAB3NzaC1yc2EAAAABIwAAAQEA6YGpoxwTik/mjZkBHx8zcFk8mib5KkYHGssKKJCEtT+XgUOLNumC5mzEaX0VRVWTp1hiZq6BunpMu6BagLvBp0SLKj28b3HQrsN8l8TV9i3tzIwkDfJO3TREg4nQp7cysry3yZpVpJ6P1ZZ5jAfAdO1MHUku05yVV9WlKoU7rBhiyJq241No6rl5/d/Et7vrEmRHHHYujxovSr0BfJ42+8B2ZpGKG/w4MmyAQGyjas+cPXYgcerWxo2s/dP0sQTmhoNDJOR8kqfLGOC1O8HEhNrIVQCWjE6WoRUUx7n6Ymi0rfMAlBeZ41P7ystx7ctEyna+HHV9YThIHKIbDsuBYw=="
+    comment: "Hooman Paknahad"
+# Bielefeld
+  carsten.hensiek:
+    uid: 24825
+    key: "AAAAB3NzaC1yc2EAAAABJQAAAQEAp8imqDf8qYJcrsWYiwJgJiFEQIYGt84Gjxi0WW6TtR3oyMxty/WE5lIAG7FwZuXWH8cdFp/hQSHkBSSl69/GNESKQSNkdcZfEhqB5/OusPra8+n3fOMAnKtczuKf6xXgzIYtMGIRem/SBC9n8RN/9hgsPnOshdPO8ygKplqiNOQ0nExNvpXpDer+M6wTY+7NYW+2o4PX3ZlinSB0BcMDKpUBaQMjFtKD4o7yyx3Fngl3dWuftpDvuf5JGRQV4tGSl8/gUFGDiv7mEe62xgPIlM4akrMjb5JmwL5i3rhnZRUT5WxlJsmru8tts0o9bq8j+CTNDpJWaKSleivAWrkyKw=="
+    comment: "Carsten Hensiek"
+# Hamburg
+  sten.friedrich:
+    uid: 30008
+    key: "AAAAB3NzaC1yc2EAAAADAQABAAABAQDdaOjZvSaf/wtaS5F8bu4+gIUXha2DiRBZo2pLx79N5fUkBK1mha8IHfQ40iRJwQzr1cKRswEi3Qo8pGYOzNoPs9ugw+r07eMrwLGoNGIFTCv0SaukmtwM+9S1z7hxyy21TztQCAcmgKN4l8jvMKFKb/3Qm+UkroHAf5B+VhlGL/IZXnuSXlTHgKcnS2HtbXlzWRkWHgyjwxT6UmSO31Eyg1SRJ9mFdxwjZo5lyzbBP/gqAQqzxoZX7U4Ty2loO6hqNusf25Byn2qK3x+dQGZ9g/t1luW2oTFavWwY0PR/djyL1ndlgZ69jCAY3YYvHRvoD91gJjHA582hVg4IkCHx"
+    comment: "Sten-Friedrich-HH"
+  sandra.streimelweger:
+    uid: 30013
+    key: "AAAAB3NzaC1yc2EAAAADAQABAAABAQCx1a+GIaWp4/O1puvX9gYt5EMZcqNLyoxSU5sYNrIpuUYZ4mit2eVtsTbuE+gymXZ570v09sTI667p7I/cyoZ8HHsZ9x8yjDEDidKuRD7Sq+aqIdCcH3HLBZdEES8FvqyrcQNLbe4nPdqSrWievoR8VH6/wy7nhVb0A/UGID2XkZLVFJjlAfU22CxuererrCBASJo31ZkW/ScE1Lii2nBvs7PxL9+hyDnyP7fsVV/2fcy85c2reP3YO2jOTeVGnATPUNaL9KbonhxHr+SEWSvsE4tUlumxcqLa8wd/YQqrm0sO0GdqPEIfiUmhj24AltIxwmv/KnC8HODr7SQMyEsH"
+    comment: "Sandra-Streimelweger-HH"
+  christian.melsa:
+    uid: 30014
+    key: "AAAAB3NzaC1yc2EAAAADAQABAAABAQC75zCFdjIkjdRV+1FuD9nO9a9UNAl0mnsMXLdHjC4U56+FUMPEcCIfn9AuV392fP/o0XXW5kevz7eyjuUitGLRCSsArxJ6G2wacm5KGf37k3Qmigts3CKG7t7kk1496z0Fq6UNfHQaQGCdhtAyt/eT0kthcU+x0p+pXAN6A+jId6EcEjtkp+CwaiqwU6sEYazJqDNmSeo2eYxN+ZN0xtLnopFYV4LCn378v+btdBFj3KY+qhYyOVqady6ZuVHqnKya03Xug+K80uaBlehTHD0dGbjFVLEKGsJqOyJZSgkZATfgcfUCQkWy+hy4wfC165k2FQx0A1+7BrNiPt7fQ6cH"
+    comment: "Christian-Melsa-HH"
+  tim.schroeder:
+    uid: 25041
+    key: "AAAAB3NzaC1yc2EAAAADAQABAAABAQDIOt8MfbBxLSVZMrvWY3Yq24VMPbvx7I65Sdh8zqX2+QyJWv9vl9A6JMeXZbl20lXEmo0+q2HxxS/ZLq4v6ZyCdNCVIidTsYMo+w08+/QscWLwAv/rCMCdUOJnwpCAzr1DFMYJxRAEvy4AKppvsoYZ3KZkzKnmXbrN1267T+uKCyLhB/n+6rFVNc2Yso0OsUivg/Hcb2SWy9SUCpN85kubuQvLh4g8WmRGTB8CQtwYTA269KETZ86/gEErf8y2Sc9MwYEe91JW9hhnSVUKBDkEfxdU3Ctn3K5JHB49jq67spx1I0HDlB+M+u5TcIaU5gsPpgagY5NCIKGWgCmzANlZ"
+    comment: "Tim-Schroeder-HH"
+  sebastian.bayer:
+    uid: 30016
+    key: "AAAAB3NzaC1yc2EAAAADAQABAAABAQDEI6hGxh730qbEHzjXtmBwARuWXsYUu5SjF6N/FrV1fwdAhOXVTTiMk0n0By/FkddiaxcYN0C21IiWWVxe/AB1XzUoIWXjMjmp/PW1S6s71VMJXLw0HlhswW/IrPBZQnN0DcaQICq6ZjkGY/M6Pa3JcsWs5EPxmLLnILKbKTjn7rCQmdGmhnEy2ETcB+X//DRMlVNfK4UsbfHVl1uFVpyOGSFTszgMjkJ/VbUYzZk7oWly0FnX1fkvszhsnFbShpLPg5jbINAt6lBisFTvBBdZP80j2uRP4g4UFZQRbWKRGwS9DSIkpJ5dHmiD+nAh2B1KeQaRflqgSoG1HBuUxgMX"
+    comment: "Sebastian-Bayer-HH"
+  christian.beyer:
+    uid: 30002
+    key: "AAAAB3NzaC1yc2EAAAADAQABAAABAQCyz8BvtEVgW0j0Aky3KfPgju/5O6yt3RoMF4smT5FAMX7sah5twFtbQo49AFmgBBlgAry6pHkz9MmdGhrKJQ5Bj70FscWW5pA3JNdMqFdkuxu0nvwikwWoVdmw9YPsrAecULL2OER/vvk8mHFnwCtxoSq4D6gLW92IleQU4llhTGUUbFN2DXzMX7eA8U8hIyRec+31HV9MWOUxHqgBrcRFpMoLI0pGNQYGUuewyeC5UabIwonaK78Nbl0bLbCs6CLdt4mw7UE6kIb73UWc6WKLQVhN4bWWSURU7AgeM6UCrWnpvpkNpaNaiKFTKw98xYc+6HkTRFYZGeH68G4X+qav"
+    comment: "Christian-Beyer-HH"
+# Muenchen
+  christian.mueller:
+    uid: 25000
+    key: "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"
+    comment: "Christian-Mueller-Muenchen"
+#Deployment-User
+  deploy.vogel:
+    uid: 63001
+    key: "AAAAB3NzaC1yc2EAAAADAQABAAABAQCcA9sDPUizm9LRPYsSQSkkXRlGfhkZcCeQ8XDTbvHLjLlQdJznx3ezpxtmIgKLzMb3Hd3YNB+CAjD//iIDgJkwxNU2qGjm4vJT0WjQ2dwbPyVgN+Ik1nBhqWC2gD5UnDIVULYP5WUkgPPP1if64Q5fnfD9aTkUNOYJ4u9Th7As97e48S+/Z8vqw9EDcr3ZC+OzU7ezU65SHH4mpC1MvLW4EG0DU+omYDuMBusRA9SPx9uAebmoVVqZ23YmK5h9gh8Nc/Av5r6yfYKtkFt6CliGc7qZj56ONfHnP79CgVIlJ5NIHU2s27tTJmoDOHOkJZ11TuQp4HbuMAUAWHi6Aie7"
+    comment: "Deploy Vogel"
+    shell: "bash"
+  service.typo3:
+    uid: 60109
+    key: "AAAAB3NzaC1yc2EAAAADAQABAAABAQC6INzc4rFP+OtC3dplqRyThD2Al7jOdNoaTztq1s5Hsf1KxcLu47zspgSNyZapCEdLzdTnsZAtmRckbJQlIB1oJjVQHTdV4tzbA6XhN67hII1ragYrSLd1xlrvOwVuPgdhLWWB1pfL+tO+kv9N0IDb4LiRAZdee0RfUUfTGOOZRhKR8kjtBNToFhgIjM3oPOKPOY/kjq4ewe4zR2xOciK8BWtGMlv8MJzi4z89tj7Nn9mNYtwdC2lJhBZg6KcuL/36eZJ23BJBoDTO+O4zCLb4WO+61Aqkv87AiX0h1azjc1IAA43wtMk+NMFz4lPV80bISxe0fGTDxA6sKeDKi5lj"
+    comment: "Typo3-Deploy-User"
+# Freelancer
+  kim.kunc:
+    uid: 25147
+    key: "AAAAB3NzaC1yc2EAAAADAQABAAABAQDbH5axmPQjI7iFxyh0dGtXE00UvzIujphV5G16aZ2O6Gaf+6h5B1ILJ4WMAXfniDGbxWudPDQSI+CZU5YOLRTckngdGMBy1M7n6alz5iYXtz8gVEuq57atGgIaLvDN2P80yYe/HPTBc0lRzUZdE4YtrYdtYEiUG+cyuzv8SagjjbnqArCjPZXgD3nxgfka0el/FZqrV+AFMmH1XziELoHakD62+TUlxcrlE8IoCwrngC9USzRy6VUGnFIXq/FLBsVUWfUvx3xKPKBTyMKOkgEcRHEobOtCiAbdFqq1U5Y1UjvlYKvYgdG24uMi71l/9oZjK/8P9S/+J3oZaSvSlxzF"
+    comment: "Kim-Kunc Freelancer"
+    shell: "bash"
+  boris.hamm:
+    uid: 25209
+    key: "AAAAB3NzaC1yc2EAAAABJQAAAIEAqbEqVpfJCZRKZZI405uvQHyLhWGOPqM00PQKd/WabFqNCHN73cCKv+NK4+cZZCvZhOPhKjfkz8YxU9gpebZm8+Vt3WyQ4ZWomW+qO/vhr0dOifQOZJQAvocH6evSsL0emsbcHNTBT17iIOaBbNXhjOSfyGJlrRU1HTmHdI554gk="
+    comment: "Boris-Hamm Freelancer"
+    shell: "bash"
+  christof.hoefler:
+    uid: 25186
+    key: "AAAAB3NzaC1yc2EAAAABJQAAAQEApufu6vLQxlv7/Zqrdf98wLMdoslirqpjV87kz+KS5GxEIiSVWNSpyWBwR6nSHQi0g5wiU482BHSCcyLzDGMASXIxCUP1b3kqWL/C8MNaucc4BDjm/YIywgYw4aTmcg6gRPOt0swf4Tf79nAQO6SC26N2Xbs/IHdLS01JNZsVAegzCaueF2jj+skFKeraSRRyBeOooQE5kMI9piT1iskeARWGnicmIu70qugFRFvWwgV6nXmpCH6XLGMDcdGiqGluCz9FvqfkgMriCWJGue1gz6byLnTV8va8OafjwYq5ml8diMq/QnMewgkDS6UVueesZ/xAx446rzYW/5g9bQK+Ew=="
+    comment: "Christof-Hoefler"
+    shell: "bash"
+  santiago.nuneznegrillo:
+    uid: 66674
+    key: "AAAAB3NzaC1yc2EAAAADAQABAAABAQC7W9vqMPZ1tRkVlzBDg7DfuC66DJJppv1m1Nzr/jUeXIprSt/8RN+D+lVqSVxl+vOxX00oQQxabmSP8RLl7HTrCx4obAVWlHCX3ChOS/PGK9YULfh1YzBtvVvneD8wyyY1gBVClJNto6++MDR+MhZZ0IGQDHtZlaAKWzJDlWqCU7sfch6agsxWCgSMlI8gA0JGiBemASo7cHFRNEo3sZNuko794zDnYiKp4tPJPrJqw6GAlBQnEim3D6n/YV5SR3JdRyGPj0TNBJjNYNQ8AjHaIo1Izzf5J6TnwFH75UCpILHiGP/AiRyjxOp7IWEt0igGHRj4b3xSQTd+Cpn/I9CJ"
+    comment: "Santiago-Nuneznegrillo"
+# Support und andere Externe
+  hastexo:
+    uid: 1000
+    keys:
+      martin.loschwitz@hastexo.com:
+        key: "AAAAB3NzaC1yc2EAAAADAQABAAABAQC2LDa78H5xpaDAxV0naVlNekrI21+LOBsBQ+//2COg5WdxONFhi9OxmhFLQVA3EsaMa1hbsm+CTm6nyfzTED5/W1VW43H9HtX4s2/sllC+zg3NoyQ0Vb457OoVyqxkLrhBovw8S9VgcLslpcXnjIYWARy/WkvqLUxxlTa+URjqkFH/KJRXD4j+v+SyqzxnUWEftJey+zjkZo4Q5hYsTeccQIRQouGCIRsTvKWcN3kHCkzRQkThMTe/aHVnPHcE9venomfAOt7KZpTNVfo5e76Qg09CaWBhxmzjGhU89g44kMNKnN6ADeg9z7dlfMpL2RYx1bfZSLW/HoQ6F0HC7zNd"
+      florian.haas@hastexo.com:
+        key: "AAAAB3NzaC1yc2EAAAADAQABAAABAQDQYrUj6j4+ph/ZezAjXM7UutHFKs3I9SPO6v0k571tuTeY6vVfSr4KoiKD7UiP+wuculkqn3q8y2yMP2CoOhrIQDennViEbIvFlb2p9w0ScDSJGuorB3vuXuKAfbIdGte3TlcL7i3D7mu+2NqhrvnQZblsZsnWy8JnKqqp79otRlrokTSU8XhGSfjCU1I0J6rtVnZJU3RqjfvAXfWF5iplKadHBNrLTPBveGTiyEoqUEdAvuE+biSkbnGQM0dMbWMWSthhEzt8DLKbzEKUeYUo0wqScjdhEi2ySOaYznql0CFw4mWA675xTdwGtd+7lH2mhyDX5c1D6s8VEm7IUeIj"
+      andreas.kurz@hastexo.com:
+        key: "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"
+        type: "ssh-dss"
+      syed.armani@hastexo.com:
+        key: "AAAAB3NzaC1yc2EAAAADAQABAAABAQDKAJMrBBq+fIBeOEpMTaPv/bxhgIT02mquCnDh7dieB8vYFqOIQ3gOBZnGHM0ImIZemh2MD/0yvftey7iWktosnxgyOcVwpiHQVyUsjlm3o7EK1j4O0rZboe3ILM2+YNidVDjp4LzzN6rGvRFmwzvk9pZ3wLrt/Zol8YWaiXeixUkNUxYo2P4t+BD58wo78mA7tQwC5Lyq04kMFVnWM6DHytwlrnU5WU9k+7HLaA+gt+pBQx8Dkx0lsZ2+bJTKckdoDchziFrjFfAfQ+FN9J4AVX5qyYc1gPyLzzah0EvQWKsDj994hBeQ+epiuy/n17HzGA5ZXDPud6UoKFPJ4hNL"
+    comment: "hastexo"
+    shell: "bash"
+  zeitwerk:
+    uid: 60170
+    keys:
+      jheinz@zeitwerk.de:
+        key: "AAAAB3NzaC1yc2EAAAABJQAAAIEAhYLh9ES8cPUq9bVQzJ8bnXRYqHMgliXMeu+THA/mJcUAtosvFpzE4p7XijXqILVZvU2NBTNx7aYbRaoC+WTPQ4d32EFGaTYtYJrAIwKBhuuLBViOBEzbmxIC1GtOSw9491jaqI8hCie3ZqO8FUTUFdCEJavIOLdT1DajwNjdXAM="
+      pzeiler@zeitwerk.de:
+        key: "AAAAB3NzaC1yc2EAAAABJQAAAIEAsIOf2bLKHiH2itpaoQQgDPIKKdKwepWNy1raPjBjoLzLLMHXpycf92ofl+R+INOB/ddrtK9bKPxhKdqe1E2fDvU27OuQdn1GwxZJn0Gl+RPvAlMmN/ApTOnRoyd4SjfpP0c0FmeH3vb8zQ8OK0ZXTpTAdJpvG6ZoHClPI/z5MeM="
+      floriangref@zeitwerk.de:
+        key: "AAAAB3NzaC1yc2EAAAADAQABAAAAgQDhZ80wo3qQzWUDoFuaKFbMndAAB2My8UnB4eGn/GxepryPTdy2yz7SvbtI0QLgoitzwAK204dJ9CmXZ6bXlPOhiQQdqA22xCwHwA5/Lad/6GVusKXQ/CQYnyxy2m9iErf1iV8r9DhN0d3+wHnB7dHpTC/erN8byPXVR8jw5bStFw=="
+  tov-user:
+    uid: 60171
+    keys:
+      key1:
+        key: "AAAB3NzaC1yc2EAAAABJQAAAQEAiB2hnQOfQvIGNoKHOTn1CYfvPQZbkHm9bDxxSkA5TSQeACbbsYoKEl8Rql9tmxsBYVjFq9iAYZ3Iwuugxp6bp6NF+/TzUjMHhAVz7KjxobbxTsc63EMxBG8O6jDCX/efwRi+nH1Ts0rH06vS53WtJ9OT5XF/1ErF1mChEkOFPA9MznYGaEdj2Ymo9WKXmk6wafmhIMbIgu04MzKlXtbpsVDVRvpXJHUUO1qHm+D850KdNy4IT3XtriDz9vfiu9CIauIKfibxwmm4KUvRwxSstDsPx5DwX3cBvUzdOYikWwJCdp557M4yS3Z8lBFXibfzvZ26ERd1659ALIuEBfVRgQ"
+      key2:
+        key: "AAAAB3NzaC1yc2EAAAABJQAAAQEAkR2NBLiGJG7A8miVecFpQv5/KP42i5LSrvu7QmgF0Umyrj4twaLyqKZ3zRsAzpzYn2XGahDyCxmZ21B4nBiQA7odEHQZUkvAV3TyGSr1Cur++W5OXCnE/inXUlHZ/p955H8ZGZVYNUR7/94zTWY0ohm2ifVev/j8761wfVL58yq6MpdHCc2FZaUsjdH9DuSNz2X6vciVj0VZ0JY7/yN2hDGCcH7TWx51Jxe/5d+CC1/kqvhUVoxjnGcoLM7DDP9JbnlgEdVZViqdOjv56XALvsIAHwl8dKGrdObrZB1OCoq+g9aece2vODXGmnV3KyXkTnBQbAUb1QymkBSWLlvPqQ"
+    comment: "Table-of-Visions-User"
+  snipclip:
+    uid: 60172
+    keys:
+      aw:
+        key: "AAAAB3NzaC1yc2EAAAABJQAAAQEAsupfequfk6KNjuctRHifdMXb6qtF1obcciRtb065qJ5j3LrCSwxETJUBrJ0xc+7ud6lZZajL3G01/Zggk6YW1xFB7WGhxxfRX0z2UOqlktqsK8s9qA71R18nhKhN05EzJ9myx7ak9XL4zw8cm95fPoulzCgX0E5nQQ6qw06yX7mV/R3MGheLCP+JE9Zcn6uWtR7d48XnDn/e2xV+mdT9LKM9RchdCd2EvEsdF74O6UBImcLxvk0VlLxgEME4Y2NhaBPp8fQFpNQhP/qyswF+oadYsij9Aqk4OWAIEUZxs8GHGIZkgegvL6zmhwqjZR2vnYXvt8ghB+8vwpMcQrpdsQ=="
+      sd:
+        key: "AAAAB3NzaC1yc2EAAAADAQABAAABAQC4E9Ac+zMgP7Tvj8e6iaYcaESZkhaVonvbJnkwb1u4d4rwn18XPB9XKw52Q35HNjFHfdJyWRSjqcPSYB4X76XSHPSo3aPPbe+Ao7STmsrLR2PIvj7wMMD1CFV7ZLIr3oUqUnPxXtJmKhgMWQAnkjGKHvokAlci4ra2iv9SacXXMSoXfFaEfxoisIxnIDl+pdHmUew+ZW6QsC87rmeX724Rrtu0ZnifUaR/y3WWIqeo1NFb5VdvCemtbXui2QunR9OioIksNAfmBrXX76M+yy2a2SoYkzbXd6rI09GZ1HJPeLlkxuZyoUaIY5hhIcIAGweQQybvn9BUgvKfevQ0QSGL"
+    comment: "SnipClipUser"
+  beate.hauss:
+    uid: 60180
+    key: "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"
+    ssh_type: 'dsa'
+    comment: "Beate Hauss Berlin Airport"
+  samir.djulancic:
+    uid: 60181
+    key: "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"
+    ssh_type: 'dsa'
+    comment: "Samir Djulancic"
+  steffen.wiegand:
+    uid: 60182
+    key: "AAAAB3NzaC1yc2EAAAABJQAAAIEAl1oQkDmXyDsYKCvZwcbFFdzNTrZ9YH8tn0UAonBWhfYVSJTp1lp7LAMIbLTL5ObNRKE5qXFJzqtl3RO2HM+rrIffLluL3E3izkXnChLz27jkJ0woIy7n0aeVAKmKZZjseUxbMMUQkRMflDM1GfonMfaMKaglrmC65Bsfb57lDQs="
+    comment: "Steffen Wiegand Berlin Airport"
+  jonas.willingstorfer:
+    uid: 60190
+    key: "AAAAB3NzaC1yc2EAAAADAQABAAABAQC7ABapvicawSk3DeDuiNM2/LQgk40BibXDMN4NPe1zzsOsmWVj42ldGakpkvqqL75Nb6HQHAZwckYgzEYdrKA2erpg6hiKIsFAMFp4sIWhuAk7HeuE683pdoSWKygpV114J6w8i2fTOL9TVjLICFNUC7YQwLYow4HljKEgVsg1orTgjO5iTSSuRNcHAOVLPmsoqm48uRz09RjJZltFA2N4VmCA2scycfoKzzL+fUyoCNyb0c8oF6MW8veUIAbQAkF8eVcvA6PVKBBT0A7gLxi/ESeOu+j7AS3omXMP5PUh2epQd7s8BDvGCeBPJXesEl/ovoUKFWUHyKU96kAeG99d"
+    comment: "jonas.willingstorfer shanghai berlin"
+  christian.reich:
+    uid: 60191
+    key: "AAAAB3NzaC1yc2EAAAADAQABAAABAQC+5MO0SyUs1T8HYHQMcji+fWyuh3z/HcpDdzVYV6QbKhTi8FpaIKkYCgN7DV7Wfgdpvy46ju/5bQcyk9g/elDgFOiEwirTgDUqW7xhM38Ior4DCd6o9mQ8UXphcG2KaQnUY3JOtDND6dndb1zARR0rA6QxppvDoRciv/Ag+3r3Z0c7FsPd6xXUPNg3pBbprYZD2rT645v+LVAnhWLvwp6YzWlGZbvKJYC3IYCd7SENd5FD0IbUdgC9v7PjSGtXHR517qBFRaEychPKlo+e+Y3KlXPrDXoMC+ERRvxGasgcpYMRD8N3wxcQGRW55n34qhlAJ0eVZCv3baeCoh1dY/qF"
+    comment: "Christian-Reich Shanghei Berlin Freelancer"
+  ideenkitzel:
+    uid: 60173
+    key: "ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAAA/gCxASeton4XWMYqrqrjozNFHb2xvIbcyDRmZnsr83+a4FEFzH+APFOt7e4wLkuzQt+JR7r3m1wT2KsxUjKrssiGZF5fZQjgf4p12E9sf87fehn5XfW9/NzWUSjnKGx7Ho/0/8nJms3JWjAFQbQ7iqT6iwwI1vCHfb/BbBn3WtMFtQppihXATm9laropvN33F4hneTEsRC/6mkcPAekd97vZ6y4Om6G06xYLijy6Kpu6xKpNM7croP4s+EH9r4XRaINeQLjryKZE0Uk5H/2V3Pk5GdRaJzAdH5QbxKJI3Catoj/FOhEqxhxrUAb0tlJmiJYqVQNW9HuZbnSTL+c/"
+    comment: "ideenkitzel für www.emperra.com"
+    shell: "nologin"
+  frank.grunwald:
+    uid: 60184
+    key: "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"
+    comment: "Frank Grunwald Flughafen Berlin Brandenburg"
+  peter.kreinz:
+    uid: 60200
+    key: "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"
+    comment: "Peter Kreins - mbvd quiz"
+# emperra
+  ries:
+    uid: 60220
+    key: "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"
+    comment: "Jan Ries - Emperra"
+    shell: "bash"
+  bentrup:
+    uid: 60221
+    key: "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"
+    comment: "Dr. Markus Bentrup - Emperra"
+    shell: "bash"
+  pratsch:
+    uid: 60222
+    key: "AAAAB3NzaC1yc2EAAAADAQABAAACAQDCk5pdbMfAiie/bFoxFAHnHKtttnpYJRVYX2Nxfe4r2MeFKBHo3S5jqlHmMBiWdy6prwrGLsKqIbhiYmr2dknLy6ZMhEX1/B8MfG2Gf/PDbqq90KOGkzNlcW2n86IDaXcXB7d/PZV38S2/oS0+YWuaFxhLBHl/7wM2HgBXv6UQGLWqzevPhYaG335shJ4UZaGNa2b2nYrUzUJZ8JNHdACufDjGS2EGe21CAvjkqVU0AY3vPS113v9mi185zRHmx1VuFfnmiga+T4I0c6+JKXUcE4BWN3bw6zPp+8lo2btXonPohc3U8b+HZDyzTbaFOq8KG4a0ZhV16iRaaota/zCM+fTuIc0VtGsKLrp9CHo28mIbEBneF0RvMeQupkW7kmyz+fCO5hnIxrO73sJLutpw2rQKOKAkrgTEHTkNrT8BGqRbmVAhVuxcqqhNh6sje+fMakO09CVwUyhiDxrybKdFu75YESAFmYFZqFfiq6Pw+jcWDPTYjqchmTLHDnD9R3dBZwWCr5cPo1Vp8owiWz7HOT5wJexkuposcyfM21BXMWcsmHxUzgRVFVHFMemQYQuwRLdNZhW29neFkrRyC1Ap3Z8rQcfcJgC5YS/7Nuuwj1OJ1PWIiWcrMhIZ8fuDcjrvecv1me9wQDhghAOKcpcmbwmovVmGD29syjcWmEwLRw=="
+    comment: "stefan.pratsch@piobyte.de - Emperra"
+    shell: "bash"
+  bruestel:
+    uid: 60223
+    key: "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"
+    comment: "bruestel - Emperra"
+    shell: "bash"
+  neumann:
+    uid: 60225
+    key: "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"
+    comment: "Arne Neumann - Emperra test und www"
+  neumann-portal:
+    uid: 60226
+    key: "AAAAB3NzaC1yc2EAAAADAQABAAACAQC4mJlEKNYLEY3CUDT+45vzUmm6sGiq99wDsY3pdpX61WfK8dQnROPgsNSx4DfsSLKbYuNWffBVJyaOWOnNnbLSoeJt55IBmnG/cjsbNm2viOePkm3C4CZ8j/5SLOEAIlqLN+QDPnrcM6yzDc6HsA0b5dbEKi8bkQ2jv6qVvIperJacPHarGtA5P6PTnYcC2kTxgBlVmMR3eNB6pONF45wN5ew5wJnqxaUeh/CF1zI66V1IN/yAdYDH9eik7pXGwDmeMWtAuQoSm9i8HhscR27rgjT1CYp934v9R6y+kq46C+K0W3+97yaI86Uiu0k1iYg/p5FHQxj07WBrlNrZJpDFlR8+7qxa5a0OddJEz6vy3KlccmFeQ5dWVNhrqra0ShubM1+futSj3mHAaFKEFKX4l8+CswSwU6Hlbdd80jWxlvvf6rSTSOGmB96EXlvdmfgrPERHwNWI5ZXDmpqD8oL+ZrZHanLekmPSZHjldzNsWKX3BzsTrOIxNkGGdi5+N64l0hgc53dmThvMtrRNeuq3auUOI51AfWZTBgPE7lhBQJnl1QzDlmboRh1SMGyndU2iyCoo8YSCr1ypXK17GLmSaMQvFsHlPyp3Ts0AXCTaI2lVG9Y0l5+NP/A33hZO6BFwIYf73MhI3Cyhsg4A4T1qvbf3NoPvP7SQC9yyx5k+8w=="
+    comment: "Arne Neumann - Emperra portal live"
+  muhammad.naveed:
+    uid: 60224
+    key: "AAAAB3NzaC1yc2EAAAABJQAAAQEAh/iyuKSeI9MdQh9LSGRt7yj482vD8MaPysVXVH6UnthOu67TRL2Uw5+FoMVAsNTsEMq7lbPUA8vke3/YXZRZ7/bquQhX68nJQf1s4gjzNmJm1nnPTNc5Dm4oj42i14ETMCYoLsvvf9VkQkQL9NeSxfaLv8Hqzk1dZZc50VvlWN5d/Hm3D2xEIwm/KhxHbVhuSZyfh6mUA1UJnJkaz22nrPovlaexvloUxnR4kKeIzGndcKzEBWbJiFLfP6kDJk6BYMdf4kJDsHSU4CG2KKWXBiCZt6Lnpl95UZS9ti4tnKWKsETV77/0EHoC+OgQ1JR6zs1hVn9MEFNtb8uVeFpJ2w=="
+    comment: "Muhammad Naveed - Web-Entwickler Pixelpark München"
+    shell: "bash"
+  robert.tulke:
+    uid: 60185
+    key: "AAAAB3NzaC1yc2EAAAABJQAAAIB700X8d5u+/Cw/Sm9pW0rrbsL3cEMzJ2/UjiW4fKJrmWTwjsP82D8pQ3aXDLj830RxCjMqce899D+MtTEJVXYP39GoX4rw9zL1bmVd/AncysxH5FeZeVZq5kBFoRDUzsOT2dspibsNIJU5F1I3y7cBRgA8UN8N9oC4MNLW0HVx+w=="
+    comment: "Robert Tulke Berlin Airport"
+  
+
+# 60220   ries # j.ries@emperra.com
+# 60221   bentrup # m.betrup@emperra.com
+# 60222   pratsch
+# 60223   bruestel
+
+# ausgeschiedene Mitarbeiter
+  hendrik.jander:
+    apply: false
+  david.hanke:
+    apply: false
+  gregor.heink:
+    apply: false
+  sirko.krauskopf:
+    apply: false
+  rene.beiler:
+    apply: false
+  steffen.rick:
+    apply: false
+  martin.lechky:
+    apply: false
+  alexander.dall:
+    apply: false
+  felix.klemm:
+    apply: false
+  frank.beier:
+    apply: false
+  rouven.volk:
+    apply: false
+  axel.apitz:
+    apply: false
+  dirk.bartilla:
+    apply: false
+  markus.herzog:
+    apply: false
+  hakan.cosar:
+    apply: false
+  sebastian.kachel:
+    apply: false
+  ivo.haenisch:
+    apply: false
+  manja.junker:
+    apply: false
+  philip.hornig:
+    apply: false
+  florian.heckel:
+    apply: false
+  christian.koop:
+    apply: false
+  philipp.rixner:
+    apply: false
+# Service-User
+# auf design-berlin.pixelpark.net
+  sftp1:
+    apply: false
+    shell: "nologin"
+    sudo: false
+    uid: 20031
diff --git a/customer/1und1/git-1und1.novalocal.yaml b/customer/1und1/git-1und1.novalocal.yaml
new file mode 100644 (file)
index 0000000..b25351f
--- /dev/null
@@ -0,0 +1,23 @@
+---
+site::role: base
+site::additional_classes:
+  - postgresql::server
+
+# Diese Datei sollte umbenannt werden, sobald die domains in der Cloud funktionieren
+xymon::procs:
+  postgres:
+    color: red
+    text: Postgres Datenbank fuer Applikation
+    mincount: 1
+  unicorn_rails:
+    color: red
+    text: GitLab Application
+    mincount: 1
+  redis-server:
+    color: red
+    text: Redis Server
+    mincount: 1
+  nginx:
+    color: red
+    text: Webserver Nginx
+    mincount: 1
diff --git a/customer/1und1/production.yaml b/customer/1und1/production.yaml
new file mode 100644 (file)
index 0000000..a5d79f6
--- /dev/null
@@ -0,0 +1,51 @@
+---
+gitlab::git_user: git
+gitlab::git_home: '/home/git'
+gitlab::git_email: git@someserver.net
+gitlab::git_comment: GitLab
+gitlab::gitlab_sources: https://github.com/gitlabhq/gitlabhq.git
+gitlab::gitlab_branch: '7-7-stable'
+gitlab::gitlabshell_sources: https://github.com/gitlabhq/gitlab-shell.git
+gitlab::gitlabshell_branch: 'v2.4.2'
+gitlab::proxy_name: '1und1.pixelpark.net'
+gitlab::gitlab_dbtype: pgsql
+gitlab::gitlab_dbname: gitlabhq_production
+gitlab::gitlab_dbuser: git
+gitlab::gitlab_dbpwd: ENC[PKCS7,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]
+gitlab::gitlab_dbhost: localhost
+gitlab::gitlab_dbport: '5432'
+gitlab::gitlab_domain: '1und1.pixelpark.net'
+gitlab::gitlab_domain_alias: false
+gitlab::gitlab_backup: false # really?
+gitlab::gitlab_backup_path: 'tmp/backups' # (relative to $git_home)
+gitlab::gitlab_backup_keep_time: 0
+#gitlab::gitlab_backup_time: fqdn_rand(5)+1
+gitlab::gitlab_backup_postscript: false
+gitlab::gitlab_relative_url_root: /gitlab
+gitlab::gitlab_ssl: true
+gitlab::gitlab_ssl_cert: '/etc/ssl/certs/wildcard.pixelpark.net-cert.pem'
+gitlab::gitlab_ssl_key: '/etc/ssl/private/wildcard.pixelpark.net-key.pem'
+gitlab::gitlab_ssl_self_signed: false
+gitlab::gitlab_projects: '10'
+gitlab::gitlab_username_change: true
+gitlab::gitlab_unicorn_listen: 127.0.0.1
+gitlab::gitlab_unicorn_port: '8080'
+gitlab::gitlab_unicorn_worker: '2'
+gitlab::gitlab_bundler_flags: '--deployment'
+gitlab::gitlab_ruby_version: '2.0.0'
+#gitlab::exec_path: '${git_home}/.rbenv/shims:/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin'
+gitlab::gitlab_bundler_jobs: '1'
+gitlab::gitlab_ensure_postfix: true
+gitlab::gitlab_ensure_curl: true
+gitlab::ldap_enabled: true
+gitlab::ldap_host: 'ldap.pixelpark.com'
+gitlab::ldap_base: 'o=Pixelpark,o=isp'
+gitlab::ldap_uid: 'uid'
+gitlab::ldap_user_filter: '(|(isMemberOf=cn=1&1 Internet AG,ou=CRM-Groups,ou=Confluence,ou=Applications,o=Pixelpark,o=isp)(l=Pixelpark Berlin))'
+gitlab::ldap_port: '636'
+gitlab::ldap_method: ssl
+gitlab::ldap_bind_dn: 'uid=wwwadm,ou=wwwserver,ou=applications,o=pixelpark,o=isp'
+gitlab::ldap_bind_password: ENC[PKCS7,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]
+gitlab::ssh_port: '22'
+gitlab::google_analytics_id: ''
+gitlab::webserver_service_name: nginx
diff --git a/customer/basf/development.yaml b/customer/basf/development.yaml
new file mode 100644 (file)
index 0000000..e2b736c
--- /dev/null
@@ -0,0 +1,8 @@
+---
+accounts::users:
+  eduard.ritter:
+    apply: true
+    sudo: true
+  daniel.kurre:
+    apply: true
+    sudo: true
\ No newline at end of file
diff --git a/customer/bbm_aem/dev-author-dispatcher01-bbm.pixelpark.net.yaml b/customer/bbm_aem/dev-author-dispatcher01-bbm.pixelpark.net.yaml
new file mode 100644 (file)
index 0000000..0776feb
--- /dev/null
@@ -0,0 +1,4 @@
+---
+aem::dispatcher::proxy_host: dev-author01-bbm.pixelpark.net
+aem::dispatcher::proxy_port: 4502
+aem::dispatcher::type: author
\ No newline at end of file
diff --git a/customer/bbm_aem/dev-author01-bbm.pixelpark.net.yaml b/customer/bbm_aem/dev-author01-bbm.pixelpark.net.yaml
new file mode 100644 (file)
index 0000000..4a01869
--- /dev/null
@@ -0,0 +1,5 @@
+---
+site::additional_classes:
+  - aem::author
+  - aem
+
diff --git a/customer/bbm_aem/dev-dispatcher01-bbm.pixelpark.net.yaml b/customer/bbm_aem/dev-dispatcher01-bbm.pixelpark.net.yaml
new file mode 100644 (file)
index 0000000..71783e4
--- /dev/null
@@ -0,0 +1,4 @@
+---
+site::role: base
+aem::dispatcher::proxy_host: dev-publish01-bbm.pixelpark.net
+aem::dispatcher::proxy_port: 4503
\ No newline at end of file
diff --git a/customer/bbm_aem/dev-publish01-bbm.pixelpark.net.yaml b/customer/bbm_aem/dev-publish01-bbm.pixelpark.net.yaml
new file mode 100644 (file)
index 0000000..4c3c2b5
--- /dev/null
@@ -0,0 +1,2 @@
+---
+site::role: base
diff --git a/customer/bbm_aem/development.yaml b/customer/bbm_aem/development.yaml
new file mode 100644 (file)
index 0000000..54dcf0f
--- /dev/null
@@ -0,0 +1,87 @@
+---
+aem::author::license_download_id: ENC[PKCS7,MIIBmQYJKoZIhvcNAQcDoIIBijCCAYYCAQAxggEhMIIBHQIBADAFMAACAQEwDQYJKoZIhvcNAQEBBQAEggEAZF83Etm8X25Gqxvz3qjxsr7JqxCMcE78k8F0O6Bulf/jAIOz8GxymXoGjOaMq8AERRTJjzlBEi8se8hUHAavKBUNMO2jYoj9ZJjin9V8pk76iwJEJBPgndn3LthxjrHDC7SHvbpnBhudh8hG5lXVfFJ1jgaF9jMwUnMca15rnLuVguqVeQX1glMEnHc+gA51PrVPHaehP0zOS0SXlypN51Sgqvzzu7BMAa0Tn4qAkd26wzZGFYOq+91FK7uVKIxwphZm8PL8BRsEyCDzdmZjoGfg0UIzE7Sq5hhJLZUlN0dEj4jDvsVNgWFvNy1b+emflRzTMAs4fN977S8jcxFSMzBcBgkqhkiG9w0BBwEwHQYJYIZIAWUDBAEqBBDjFhmtjUJannKZG3BvRXGmgDAhjb/YNFFstQXxPmn67sppr/1GjVAuVPd5EiLJMm8msJoMeacoo7I5CAsCinndSSI=]
+aem::author::license_product_version: '6.0.0.20140509'
+aem::author::license_customer_name: 'Pixelpark'
+aem::author::license_product_name: 'Adobe Experience Manager'
+aem::author::install_mode: 'quickstart'
+aem::author::install_options:
+  download_type: maven
+  download_uri: "com.pixelpark.aem.bbm:aem-quickstart:6.0:jar"
+#aem::author::install_mode: 'backup'
+#aem::author::install_options:
+#  download_type: 'wget'
+#  download_uri: 'http://tools-bbm.pixelpark.net:8081/nexus/service/local/repositories/thirdparty/content/com/pixelpark/aem/bbm/aem_base_author/0.1.0/aem_base_author-0.1.0.tar.gz'
+
+aem::author::packages:
+  replication_config:
+    groupid: com.pixelpark.aem.bbm
+    artifactid: bbm-config-replicatonagent
+    version: 1.0.0
+
+aem::publish::license_download_id: ENC[PKCS7,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]
+aem::publish::license_product_version: '6.0.0.20140509'
+aem::publish::license_customer_name: 'Pixelpark'
+aem::publish::license_product_name: 'Adobe Experience Manager'
+aem::publish::install_mode: 'quickstart'
+aem::publish::install_options:
+  download_type: maven
+  download_uri: "com.pixelpark.aem.bbm:aem-quickstart:6.0:jar"
+#aem::publish::install_mode: 'backup'
+#aem::publish::install_options:
+#  download_type: 'wget'
+#  download_uri: 'http://tools-bbm.pixelpark.net:8081/nexus/service/local/repositories/thirdparty/content/com/pixelpark/aem/bbm/aem_base_publish/0.1.0/aem_base_publish-0.1.0.tar.gz'
+
+aem::publish::packages:
+  dispatcher_flush:
+    groupid: com.pixelpark.aem.bbm
+    artifactid: bbm-config-dispatcher-flushagent
+    version: 1.0.0
+
+aem::manage_oracle_java: true
+aem::base_path: '/opt/aem'
+aem::maven::install: true
+aem::maven::repos: 
+  - "id": "pixelpark.nexus"
+    "url": "http://tools-bbm.pixelpark.net:8081/nexus/content/repositories/thirdparty/"
+
+apache::default_vhost: false
+
+aem::dispatcher::version: "4.1.8"
+aem::dispatcher::download_uri: "com.pixelpark.aem.bbm:dispatcher-apache2.4:4.1.8:so"
+aem::domain_mappings:
+  dev-site01-bbm.pixelpark.net:
+    path: "/content/geometrixx"
+    server_aliases:
+      - dev-site01-project01-bbm.pixelpark.net
+      - dev-site01-project02-bbm.pixelpark.net
+      - dev-site01-project03-bbm.pixelpark.net
+    default_lang: en
+    languages:
+      - 'en'
+      - 'de'
+      - 'fr'
+      - 'it'
+  dev-site02-bbm.pixelpark.net:
+    path: "/content/geometrixx_mobile"
+    default_lang: en
+  dev-site03-bbm.pixelpark.net:
+    path: "/content/geometrixx-outdoors"
+    default_lang: en
+    
+aem::hosts:
+  dev-publish01-bbm.pixelpark.net:
+    ip: '77.74.232.106'
+    host_aliases:
+      - publish01
+  dev-publish02-bbm.pixelpark.net:
+    ip: '77.74.232.106'
+    host_aliases:
+      - publish02
+  dev-dispatcher01-bbm.pixelpark.net:
+    ip: '77.74.232.107'
+    host_aliases:
+      - flush01
+  dev-dispatcher02-bbm.pixelpark.net:
+    ip: '77.74.232.107'
+    host_aliases:
+      - flush02
\ No newline at end of file
diff --git a/customer/bibliomed/dev-bibliomed-de.pixelpark.com.yaml b/customer/bibliomed/dev-bibliomed-de.pixelpark.com.yaml
new file mode 100644 (file)
index 0000000..624c06b
--- /dev/null
@@ -0,0 +1,6 @@
+---
+site::role: base
+site::additional_classes:
+  - bibliomed
+  - pp_mcollective
+
diff --git a/customer/bibliomed/development.yaml b/customer/bibliomed/development.yaml
new file mode 100644 (file)
index 0000000..69530cd
--- /dev/null
@@ -0,0 +1,28 @@
+---
+accounts::users:
+  m_scholze:
+    apply: true
+    sudo: true
+  kim.kunc:
+    apply: true
+    sudo: true
+  annika.wenzel:
+    apply: true
+    sudo: true
+
+bibliomed::params::jdbc_default_url: "jdbc:postgresql://dev-bibliomed-de.pixelpark.com:5432/station24_liferay"
+bibliomed::params::jdbc_default_url_jcr: "jdbc:postgresql://dev-bibliomed-de.pixelpark.com:5432/station24_jcr"
+bibliomed::params::jdbc_default_username: "station24_user"
+bibliomed::params::jdbc_default_password: ENC[PKCS7,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]
+bibliomed::params::liferay_home: "/www/data/liferay"
+bibliomed::params::zeitschriftenarchiv_flash_base_path: "/www/data/liferay/zeitschriftenarchiv"
+bibliomed::params::domain_url: "dev-bibliomed-de.pixelpark.com"
+bibliomed::params::rootLogger_debug_level: "INFO"
+bibliomed::params::appender_debug_level: "DEBUG"
+bibliomed::params::logpath: "/www/logs/tomcat/dev.bibliomed.de"
+bibliomed::params::node_id: "dev"
+bibliomed::params::tomcat_server_name: 'dev.bibliomed.de'
+bibliomed::params::env: dev
+
+xymon::modules:
+  - 'net2'
\ No newline at end of file
diff --git a/customer/bibliomed/production.yaml b/customer/bibliomed/production.yaml
new file mode 100644 (file)
index 0000000..fbbb90f
--- /dev/null
@@ -0,0 +1,40 @@
+---
+accounts::users:
+  m_scholze:
+    apply: true
+  annika.wenzel:
+    apply: true
+
+
+bibliomed::params::liferay_home: "/www/data/liferay"
+bibliomed::params::tomcat_webapps_dir: "/www/htdocs/www.bibliomed.de/webapps"
+bibliomed::params::tomcat_site_dir: "/www/conf/tomcat/www.bibliomed.de"
+bibliomed::params::tomcat_libs_ext: "/www/conf/tomcat/www.bibliomed.de/lib/ext"
+# in portal-ext.properties noch aendern
+bibliomed::params::jdbc_default_url: "jdbc:postgresql://db01-bibliomed-de.pixelpark.net:5432/station24_liferay"
+bibliomed::params::jdbc_default_url_jcr: "jdbc:postgresql://db01-bibliomed-de.pixelpark.net:5432/station24_jcr"
+bibliomed::params::jdbc_default_username: "station24_user"
+bibliomed::params::jdbc_default_password: ENC[PKCS7,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]
+bibliomed::params::zeitschriftenarchiv_flash_base_path: "/www/data/liferay/zeitschriftenarchiv"
+bibliomed::params::domain_url: "www.bibliomedmanager.de"
+bibliomed::params::rootLogger_debug_level: "INFO"
+bibliomed::params::appender_debug_level: "INFO"
+bibliomed::params::logpath: "/www/logs/tomcat/www.bibliomed.de"
+bibliomed::params::tomcat_server_name: 'www.bibliomed.de'
+
+logstash::filter:
+  - tomcat
+logstash::generic_resource:
+  bibliomed_tomcat_liferay:
+    resource: file
+    order: 10 # Input
+    parameters:
+      path: /www/logs/tomcat/www.bibliomed.de/portal.log
+      type: tomcat
+      tags: 
+        - "%{customer}"
+        - "%{environment}"
+      codec:
+        type: multiline
+        what: previous
+        pattern: '(^\d+\serror)|(^.+Exception: .+)|(^\s+at .+)|(^\s+... \d+ more)|(^\s*Caused by:.+)'
\ No newline at end of file
diff --git a/customer/bibliomed/test-www01-bibliomed-de.pixelpark.net.yaml b/customer/bibliomed/test-www01-bibliomed-de.pixelpark.net.yaml
new file mode 100644 (file)
index 0000000..66f461f
--- /dev/null
@@ -0,0 +1,12 @@
+---
+site::additional_classes:
+  - bibliomed
+  - accounts
+  - logstash
+  - pp_mcollective
+
+
+bibliomed::params::node_id: "test_www01"
+bibliomed::params::logpath: "/www/logs/tomcat/test-www01-bibliomed-de.pixelpark.net"
+bibliomed::params::tomcat_server_name: 'test-www01-bibliomed-de.pixelpark.net'
+bibliomed::params::env: test-www01
diff --git a/customer/bibliomed/test-www02-bibliomed-de.pixelpark.net.yaml b/customer/bibliomed/test-www02-bibliomed-de.pixelpark.net.yaml
new file mode 100644 (file)
index 0000000..c3abf74
--- /dev/null
@@ -0,0 +1,11 @@
+---
+site::additional_classes:
+  - bibliomed
+  - accounts
+  - logstash
+  - pp_mcollective
+
+bibliomed::params::node_id: "test_www02"
+bibliomed::params::logpath: "/www/logs/tomcat/test-www02-bibliomed-de.pixelpark.net"
+bibliomed::params::tomcat_server_name: 'test-www02-bibliomed-de.pixelpark.net'
+bibliomed::params::env: test-www02
diff --git a/customer/bibliomed/test.yaml b/customer/bibliomed/test.yaml
new file mode 100644 (file)
index 0000000..659d27b
--- /dev/null
@@ -0,0 +1,41 @@
+---
+accounts::users:
+  m_scholze:
+    apply: true
+    sudo: true
+  kim.kunc:
+    apply: true
+    sudo: true
+  annika.wenzel:
+    apply: true
+    sudo: true
+
+#
+# in portal-ext.properties noch aendern
+bibliomed::params::jdbc_default_url: "jdbc:postgresql://test-db01-bibliomed-de.pixelpark.net:5432/station24_liferay"
+bibliomed::params::jdbc_default_url_jcr: "jdbc:postgresql://test-db01-bibliomed-de.pixelpark.net:5432/station24_jcr"
+bibliomed::params::jdbc_default_username: "station24_user"
+bibliomed::params::jdbc_default_password: ENC[PKCS7,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]
+bibliomed::params::liferay_home: "/www/data/liferay"
+bibliomed::params::zeitschriftenarchiv_flash_base_path: "/www/data/liferay/zeitschriftenarchiv"
+bibliomed::params::domain_url: "test-bibliomedmanager-de.pixelpark.net"
+bibliomed::params::rootLogger_debug_level: "INFO"
+bibliomed::params::appender_debug_level: "DEBUG"
+
+
+logstash::filter:
+  - tomcat
+logstash::generic_resource:
+  bibliomed_tomcat_liferay:
+    resource: file
+    order: 10 # Input
+    parameters:
+      path: /www/logs/tomcat/%{fqdn}/portal.log
+      type: tomcat
+      tags: 
+        - "%{customer}"
+        - "%{environment}"
+      codec:
+        type: multiline
+        what: previous
+        pattern: '(^\d+\serror)|(^.+Exception: .+)|(^\s+at .+)|(^\s+... \d+ more)|(^\s*Caused by:.+)'
\ No newline at end of file
diff --git a/customer/bibliomed/www01-bibliomed-de.pixelpark.net.yaml b/customer/bibliomed/www01-bibliomed-de.pixelpark.net.yaml
new file mode 100644 (file)
index 0000000..e41b0ad
--- /dev/null
@@ -0,0 +1,11 @@
+---
+site::additional_classes:
+  - bibliomed
+  - repo
+  - accounts
+  - logstash
+
+#
+# in portal-ext.properties noch aendern
+bibliomed::params::node_id: "www01"
+bibliomed::params::env: www01
diff --git a/customer/bibliomed/www02-bibliomed-de.pixelpark.net.yaml b/customer/bibliomed/www02-bibliomed-de.pixelpark.net.yaml
new file mode 100644 (file)
index 0000000..8ad51fb
--- /dev/null
@@ -0,0 +1,11 @@
+---
+site::additional_classes:
+  - bibliomed
+  - repo
+  - accounts
+  - logstash
+
+
+# in portal-ext.properties noch aendern
+bibliomed::params::node_id: "www02"
+bibliomed::params::env: www02
diff --git a/customer/bmas-sgb2/production.yaml b/customer/bmas-sgb2/production.yaml
new file mode 100644 (file)
index 0000000..962df7b
--- /dev/null
@@ -0,0 +1,5 @@
+---
+
+site::profile::apache::htdigest:
+  server:
+    www: ENC[PKCS7,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]
\ No newline at end of file
diff --git a/customer/bmas-sgb2/test-web01-sgb2-info.pixelpark.net.yaml b/customer/bmas-sgb2/test-web01-sgb2-info.pixelpark.net.yaml
new file mode 100644 (file)
index 0000000..7d6a679
--- /dev/null
@@ -0,0 +1,81 @@
+---
+# Oracle Linux 7
+site::role: base
+site::additional_classes:
+  - site::profile::drupal
+  - site::profile::mysql_server
+
+mysql::server::root_password: ENC[PKCS7,MIIBiQYJKoZIhvcNAQcDoIIBejCCAXYCAQAxggEhMIIBHQIBADAFMAACAQEwDQYJKoZIhvcNAQEBBQAEggEAOto44MjoWJmEj0Kp4+4I7ENX4kC5VZJhYt79m+2Q9JKQ4Ca9l7nyipLqBKQnV9fMftu0WFJha7h0uAIFkFzCSbSrHmMRjcC/aPpdLLCglwAJSDD71tTsbLMACcsEA4ygiAjQHlhIAW1kNO0zBx5c87+RvS911z7Iklsilrr9lJsL58HD4KmU8Wnt/U6m1LU/hV9yr/KEvaVZ6lPkDkX3zmx8vWFohJiFwK3TxJrRrAoY1v/Z9fShwy/F/Te+T2pTQjXDYLBOgv01URnR6vmpyBMLHP/AIZqdJERn+m89uIXXu5o6nQaWMq86Buwocz14kuHcv6EJw5OHapLr/vtHDjBMBgkqhkiG9w0BBwEwHQYJYIZIAWUDBAEqBBBLXxBvFdFdyXebdTfim7tEgCA0xepMbCwqZazqS1ATaZoGeSgHUT5IZ5WVuKxGoduH0w==]
+mysql::server::backup::backuppassword: ENC[PKCS7,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]
+site::profile::mysql_server::databases:
+  sgb2_drupal6:
+    user: sgb2_drupal6
+    host: '77.74.237.9'
+    password: ENC[PKCS7,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]
+  sgb2_drupal7:
+    user: sgb2_drupal7
+    password: ENC[PKCS7,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]
+    host: '77.74.237.8'
+  sgb2stat:
+    user: sgb2-kenntool
+    password: ENC[PKCS7,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]
+    host: '77.74.237.8'
+  sgb2stat_extern:
+    dbname: sgb2stat
+    user: sgb2-kenntool
+    password: ENC[PKCS7,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]
+    host: '%'  
+
+mysql::server::override_options:
+  mysqld:
+    bind-address: 0.0.0.0
+
+php::settings:
+  Date/date.timezone: Europe/Berlin
+  PHP/expose_php: 'Off'
+  PHP/post_max_size: 128M
+  PHP/upload_max_filesize: 128M
+  PHP/memory_limit: 256M
+php::extensions:
+  gd: {}
+  mbstring: {}
+#  pecl-uploadprogress: {} -> benötigt remi
+  mysqlnd: {}
+
+# www.gf.sgb2.info
+site::profile::drupal::projects:
+  www.gf.sgb2.info:
+    site_path: /srv/www/gf.sgb2.info
+    servername: test-www-gf-sgb2-info.pixelpark.net
+    ssl: true
+    ssl_cert: /etc/pki/tls/certs/wildcard.pixelpark.net-cert.pem
+    ssl_chain: /etc/pki/tls/certs/wildcard.pixelpark.net-cert.pem
+    ssl_key: /etc/pki/tls/private/wildcard.pixelpark.net-key.pem
+    #SetEnvIf User-Agent         ".*MSIE.*" nokeepalive ssl-unclean-shutdown downgrade-1.0 force-response-1.0
+    mode: '2775'
+    directories:
+      - directory_root:
+        provider: directory
+        path: '/srv/www/gf.sgb2.info'
+        options:
+          - FollowSymLinks
+          - MultiViews
+        allow_override:
+          - All
+        directoryindex: index.php
+      - location1:
+        provider: location
+        path: '/'
+        auth_type: Digest
+        auth_name: server
+        auth_digest_provider: file
+        auth_digest_algorithm: MD5
+        auth_user_file: '/etc/httpd/htdigest'
+        auth_require: 'valid-user'
+#    rewrites:
+#      - http_to_https:
+#        comment: 'Alles auf https umleiten'
+#        rewrite_cond:
+#          - '%%{ich-trickse}{HTTPS} !=on'
+#        rewrite_rule:
+#          - ^(.*)$  https://gf.sgb2.info$1  [R=301,L]
diff --git a/customer/bmas-sgb2/test-web02-sgb2-info.pixelpark.net.yaml b/customer/bmas-sgb2/test-web02-sgb2-info.pixelpark.net.yaml
new file mode 100644 (file)
index 0000000..0d22e2b
--- /dev/null
@@ -0,0 +1,47 @@
+---
+# CentOS 6.7
+site::role: base
+site::additional_classes:
+  - site::profile::apache
+  - apache::mod::php
+site::additional_packages:
+  php-gd: {}
+  php-mbstring: {}
+  php: {}
+  php-mysql: {}
+  php-drush-drush: {}
+
+# www.sgb2.info
+site::profile::apache::pp_vhosts:
+  www.sgb2.info:
+    servername: test-www-sgb2-info.pixelpark.net
+    docroot: '/srv/www/www.sgb2.info'
+    ssl: true
+    ssl_cert: /etc/pki/tls/certs/wildcard.pixelpark.net-cert.pem
+    ssl_chain: /etc/pki/tls/certs/wildcard.pixelpark.net-cert.pem
+    ssl_key: /etc/pki/tls/private/wildcard.pixelpark.net-key.pem
+    directories:
+      - root_directory:
+        provider: directory
+        path: '/srv/www/www.sgb2.info'
+        options:
+          - FollowSymLinks
+        allow_override:
+          - All
+      - location1:
+        provider: location
+        path: '/'
+        auth_type: Digest
+        auth_name: server
+        auth_digest_provider: file
+        auth_digest_algorithm: MD5
+        auth_user_file: '/etc/httpd/htdigest'
+        auth_require: 'valid-user'
+#    rewrites_non_ssl:
+#      - http_to_https:
+#        comment: 'Alles auf https umleiten'
+#        rewrite_rule:
+#          - ^(.*)$  https://www.sgb2.info$1  [R=301,L]
+    proxy_pass:
+      - { path: /statistik, url: 'http://test-web01-sgb2-info.pixelpark.net:8080/statistik' }
+      - { path: /Freibetragsrechner, url: 'http://test-web01-sgb2-info.pixelpark.net:8080/Freibetragsrechner' }
diff --git a/customer/bmas-sgb2/test.yaml b/customer/bmas-sgb2/test.yaml
new file mode 100644 (file)
index 0000000..840cb63
--- /dev/null
@@ -0,0 +1,11 @@
+---
+accounts::users:
+  hooman.paknahad:
+    apply: true
+    groups: 'jboss'
+  andreas.pinto-koehler:
+    apply: true
+
+site::profile::apache::htdigest:
+  server:
+    www: ENC[PKCS7,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]
\ No newline at end of file
diff --git a/customer/bmas-sgb2/web01-sgb2-info.pixelpark.net.yaml b/customer/bmas-sgb2/web01-sgb2-info.pixelpark.net.yaml
new file mode 100644 (file)
index 0000000..d5561bf
--- /dev/null
@@ -0,0 +1,78 @@
+---
+# Oracle Linux 7
+site::role: base
+site::additional_classes:
+  - site::profile::drupal
+  - site::profile::mysql_server
+
+mysql::server::root_password: ENC[PKCS7,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]
+mysql::server::backup::backuppassword: ENC[PKCS7,MIIBiQYJKoZIhvcNAQcDoIIBejCCAXYCAQAxggEhMIIBHQIBADAFMAACAQEwDQYJKoZIhvcNAQEBBQAEggEAOFPdpMLV7aUp0bknXGdPqi1FRjXrrigSejVq8xmUYbvYGSbXoSVvEWr1DqmOqzbaPvVeQnaQTPyvtZZzOweCIUqz5BYJFBOs7NroiFDxnCPsUh5Vxx5QbazTFNowssqRpfY8Qlr0N+J18gdejio3dQ8aXLshHaXK5weq1qRpLUej6AtpSYnyB6pIqATO6lmrIKa3n8YDMZvQ8ZrA7ot0cMH+yEmlqhEPrvGMq1QgmD3mrHNkC7R5t5lvuavtHoaEo5/436aQuBkJPL+ML4RdCa9EbajFqHegLd4ySwHG86Ca8JDnDW1wPFPOkAqSLPrZdVW9igFRN1PLmzOmbDoDgzBMBgkqhkiG9w0BBwEwHQYJYIZIAWUDBAEqBBBik7Z0hTbW9pKdNzM4LEshgCA5l5mWBvtIvwqg3vFp5Wcq7yxuULDaqc/gJUR8cf8fLQ==]
+site::profile::mysql_server::databases:
+  sgb2_drupal6:
+    user: sgb2_drupal6
+    host: '77.74.236.164'
+    password: ENC[PKCS7,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]
+  sgb2_drupal7:
+    user: sgb2_drupal7
+    password: ENC[PKCS7,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]
+    host: '77.74.236.163'
+  sgb2stat:
+    user: sgb2-kenntool
+    password: ENC[PKCS7,MIIBiQYJKoZIhvcNAQcDoIIBejCCAXYCAQAxggEhMIIBHQIBADAFMAACAQEwDQYJKoZIhvcNAQEBBQAEggEAgpOLlpvhOaCjp/skQ5qd64h0M9LdxeO3PCht4peIW02FR1KwtdQ8wxZgkcHnJB+0gcwtHN7XzUmIRwVsok07b4x8bCn5RBepCD6Saa8sm0nanXujsDhjKb2syE+Z5A5Lo7Vz+gWzXGPIQDYJrMqhP5vJV11ZZ1yY9T92Xke9y9s5TJleXMIJMRe88QNNi4MqafQZwiKMdyX6N9cfSmwP1BjnXh7ypyBCy4CC/reVi+hb7aDOHUjqQE4YGdYGhBIIObd2xtYw5AiOoHPZcFkSRSsnjWILuTS4TnLmGed2LVT5sd5MJp3ulDLYfFsf5Md7BAFo3461GFKnwofzvkWqxzBMBgkqhkiG9w0BBwEwHQYJYIZIAWUDBAEqBBAsLRqXaf35qxFguoUtrRK/gCDHTTmjvnSdCvRoXTIVIyJemoKX2fNxMIGu5SQSx/AcWg==]
+    host: '77.74.236.163' 
+
+mysql::server::override_options:
+  mysqld:
+    bind-address: 0.0.0.0
+
+php::settings:
+  Date/date.timezone: Europe/Berlin
+  PHP/expose_php: 'Off'
+  PHP/post_max_size: 128M
+  PHP/upload_max_filesize: 128M
+  PHP/memory_limit: 256M
+php::extensions:
+  gd: {}
+  mbstring: {}
+#  pecl-uploadprogress: {} -> benötigt remi
+  mysqlnd: {}
+
+# www.gf.sgb2.info
+site::profile::drupal::projects:
+  www.gf.sgb2.info:
+    site_path: /srv/www/gf.sgb2.info
+    servername: www.gf.sgb2.info
+    serveraliases:
+      - gf.sgb2.info
+      - www-gf-sgb2-info.pixelpark.net
+    ssl: false
+    ssl_cert: /etc/pki/tls/certs/wildcard.pixelpark.net-cert.pem
+    ssl_chain: /etc/pki/tls/certs/wildcard.pixelpark.net-cert.pem
+    ssl_key: /etc/pki/tls/private/wildcard.pixelpark.net-key.pem
+    #SetEnvIf User-Agent         ".*MSIE.*" nokeepalive ssl-unclean-shutdown downgrade-1.0 force-response-1.0
+    directories:
+      - directory_root:
+        provider: directory
+        path: '/srv/www/gf.sgb2.info'
+        options:
+          - FollowSymLinks
+          - MultiViews
+        allow_override:
+          - All
+        directoryindex: index.php
+#      - location1:
+#        provider: location
+#        path: '/'
+#        auth_type: Digest
+#        auth_name: server
+#        auth_digest_provider: file
+#        auth_digest_algorithm: MD5
+#        auth_user_file: '/etc/httpd/htdigest'
+#        auth_require: 'valid-user'
+#    rewrites:
+#      - http_to_https:
+#        comment: 'Alles auf https umleiten'
+#        rewrite_cond:
+#          - '%%{ich-trickse}{HTTPS} !=on'
+#        rewrite_rule:
+#          - ^(.*)$  https://gf.sgb2.info$1  [R=301,L]
\ No newline at end of file
diff --git a/customer/bmas-sgb2/web02-sgb2-info.pixelpark.net.yaml b/customer/bmas-sgb2/web02-sgb2-info.pixelpark.net.yaml
new file mode 100644 (file)
index 0000000..b978248
--- /dev/null
@@ -0,0 +1,108 @@
+---
+# CentOS 6.7
+site::role: base
+site::additional_classes:
+  - site::profile::apache
+  - apache::mod::php
+site::additional_packages:
+  php-gd: {}
+  php-mbstring: {}
+  php: {}
+  php-mysql: {}
+  php-drush-drush: {}
+
+apache::default_vhost: false
+
+# www.sgb2.info
+site::profile::apache::pp_vhosts:
+  www.sgb2.info:
+    servername: www.sgb2.info
+    serveraliases:
+      - sgb2.info
+      - xn--frdern-und-fordern-d3b.info
+      - www.xn--frdern-und-fordern-d3b.info
+      - foerdern-und-fordern.info
+      - www.foerdern-und-fordern.info
+      - hartziv.de
+      - www.hartziv.de
+      - jobcentersuche.de
+      - www.jobcentersuche.de
+      - arbeitsmarktreform.de
+      - www.arbeitsmarktreform.de
+      - www-sgb2-info.pixelpark.net
+    docroot: '/srv/www/www.sgb2.info'
+    ip: 77.74.236.164
+    ssl: true
+    ssl_cert: /etc/pki/tls/certs/www.sgb2.info-cert.pem
+    ssl_chain: /etc/pki/tls/certs/www.sgb2.info-cert.pem
+    ssl_key: /etc/pki/tls/private/www.sgb2.info-key.pem
+    directories:
+      - root_directory:
+        provider: directory
+        path: '/srv/www/www.sgb2.info'
+        options:
+          - FollowSymLinks
+        allow_override:
+          - All
+#      - location1:
+#        provider: location
+#        path: '/'
+#        auth_type: Digest
+#        auth_name: server
+#        auth_digest_provider: file
+#        auth_digest_algorithm: MD5
+#        auth_user_file: '/etc/httpd/htdigest'
+#        auth_require: 'valid-user'
+#    rewrites_non_ssl:
+#      - http_to_https:
+#        comment: 'Alles auf https umleiten'
+#        rewrite_rule:
+#          - ^(.*)$  https://www.sgb2.info$1  [R=301,L]
+    rewrites_ssl:
+      - alias:
+        comment: 'Alle Aliase auf Servername'
+        rewrite_cond: 
+          - '%%{ich-trickse}{HTTP_HOST} !^www\.sgb2\.info$ [NC]'
+        rewrite_rule: 
+          - '^(.*)$ https://www.sgb2.info$1 [L,R=301]'
+    rewrites:
+      - gemeinsame-planungsdokumente:
+        comment: BMASSGBZWEI-48
+        rewrite_rule:
+          - ^/seite/gemeinsame-planungsdokumente$ https://www.sgb2.info/sites/default/files/inlineFiles/files/gemeinsame_planungsgrundlagen_der_zielsteuerung_im_sgb_ii_fur_das_jahr_2016.pdf [R=301,L]
+    proxy_pass:
+      - { path: /statistik, url: 'http://web01-sgb2-info.pixelpark.net:8080/statistik' }
+      - { path: /Freibetragsrechner, url: 'http://web01-sgb2-info.pixelpark.net:8080/Freibetragsrechner' }
+  sgb2-kennzahlen:
+    servername: www.sgb2-kennzahlen.de
+    serveraliases:
+      - sgb2-kennzahlen.de
+      - www-sgb2-kennzahlen-de.pixelpark.net
+    docroot: '/srv/www/www.sgb2.info'
+    ip: 77.74.236.167
+    ssl: true
+    ssl_cert: /etc/pki/tls/certs/www.sgb2-kennzahlen.de-cert.pem
+    ssl_chain: /etc/pki/tls/certs/www.sgb2-kennzahlen.de-cert.pem
+    ssl_key: /etc/pki/tls/private/www.sgb2-kennzahlen.de-key.pem
+    directories:
+      - root_directory:
+        provider: directory
+        path: '/srv/www/www.sgb2.info'
+        options:
+          - FollowSymLinks
+        allow_override:
+          - All
+#      - location1:
+#        provider: location
+#        path: '/'
+#        auth_type: Digest
+#        auth_name: server
+#        auth_digest_provider: file
+#        auth_digest_algorithm: MD5
+#        auth_user_file: '/etc/httpd/htdigest'
+#        auth_require: 'valid-user'
+    rewrites:
+      - alias:
+        comment: 'Alle Aliase auf www.sgb2.info Unterseite'
+        rewrite_rule: 
+          - '^(.*)$ https://www.sgb2.info/kennzahlen/statistik$1 [L,R=301]'
\ No newline at end of file
diff --git a/customer/bmas-typo3/common.yaml b/customer/bmas-typo3/common.yaml
new file mode 100644 (file)
index 0000000..08f63e7
--- /dev/null
@@ -0,0 +1,13 @@
+---
+accounts::users:
+  service.typo3:
+    apply: true
+    group: apache
+
+apache::mpm_module: worker
+
+repo::remi_php55: true
+
+php::fpm::pools:
+  www:
+    ensure: absent
\ No newline at end of file
diff --git a/customer/bmas-typo3/development.yaml b/customer/bmas-typo3/development.yaml
new file mode 100644 (file)
index 0000000..59d341c
--- /dev/null
@@ -0,0 +1,149 @@
+---
+site::role: base
+site::additional_classes:
+  - site::profile::typo3
+  - site::profile::monitoring::mysql
+  - site::profile::mysql_server
+  - memcached
+  - logstash
+  - zabbix::agent
+
+# Wert nur temporaer
+zabbix::agent::include_dir_purge: false
+
+site::profile::apache::htdigest:
+  mensch:
+    www: ENC[PKCS7,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]
+  arbeit:
+    www: ENC[PKCS7,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]
+  inqacheck:
+    www: ENC[PKCS7,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]
+  
+
+mysql::server::root_password: ENC[PKCS7,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]
+mysql::server::backup::backuppassword: ENC[PKCS7,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]
+site::profile::monitoring::mysql::monitorpassword: ENC[PKCS7,MIIBiQYJKoZIhvcNAQcDoIIBejCCAXYCAQAxggEhMIIBHQIBADAFMAACAQEwDQYJKoZIhvcNAQEBBQAEggEAbuWYdTTzoHOKqbOXLpUlpuvx+Akt0DDWnt/L0mCDwj2Twj1fYFlRcWLO+7KZ9osV0FMQvOBqHQfAllJU2jpUTKR0uvIPIGrib3C4Etzl0eY/x4oBKzZ86zcYm3mNC/Y3c/sBet+q3+F+0NpW9Q/gPrFoxecJIsfRXouzGbRwrOzgXIlfbmB6dgbgAgfZp3qoPPrgekDS/jmmV8cvzuYw4a4/y0RwCE6jZo7yVVny9nDGfZHfAVHdBbRhs1lqe4vmh6hZyikgmKh+l07AqbKaZjTtUjYYjbbXRdm+oBli9QLv4LVZSsGOcmDIb7VnuHJ6eYsXNLQqxHQnurzsMhx25TBMBgkqhkiG9w0BBwEwHQYJYIZIAWUDBAEqBBDuht1eEevhz3TLbAo0EC6XgCAuQSJd08ILceScSHckcznuJYsJ4UAcdgLVBGXa/oixcQ==]
+site::profile::mysql_server::databases:
+  arbeiten:
+    user: bmas-arbeiten
+    password: ENC[PKCS7,MIIBiQYJKoZIhvcNAQcDoIIBejCCAXYCAQAxggEhMIIBHQIBADAFMAACAQEwDQYJKoZIhvcNAQEBBQAEggEAXFYrhAuiSMRqQTVA+ftpA5N2QuYZ9fh2bPuxlm15aUnxQ8kUpLgZEzV78ul6tfQeTGLj9cg9+ZcUHoJdDmmvjP5g2iEkINMhNxNifZa/UCmfwmCWaRCVjSajiFgIuCSl961WcAjq7sGgCJ3d8OgSV0wZ2qgElS0dY5rrn0VJWouUEnwyr2hmsezohvsdQOMIo7yP3Oxjx+EZ7Rj2STJhGgsDFc5//qrQ9WfXyoeIgZFGV0Zm/CmkzIG0wg9j5ewnM6IS0PGiGMo05NxS93gFHt5kRHR2jWV7KkSEuYdtvioDs3f4rLn6JiEOsJ6eE3jH69rorY602Pi3dG51hO1bgjBMBgkqhkiG9w0BBwEwHQYJYIZIAWUDBAEqBBCCF07KGfrxZLvAa7LgsrK9gCCEipwLQm/NfoTKfJKourvz2w2Ld3Cae1Vf0jZ2wwiuHw==]
+  unternehmenswertmensch:
+    user: bmas-unternehmen
+    password: ENC[PKCS7,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]
+  inqacheck:
+    user: inqacheck
+    password: ENC[PKCS7,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]
+
+memcached::max_memory: 256
+memcached::listen_ip: '127.0.0.1'
+
+php::dev: true
+php::pear: true
+
+php::extensions:
+  gd: {}
+  opcache: {}
+  mysqlnd: {}
+  soap: {}
+  suhosin:
+    settings: 
+      suhosin.request.max_varname_length: 200
+      suhosin.post.max_name_length: 200
+      suhosin.get.max_name_length: 200
+      suhosin.get.max_value_length: 2000
+      suhosin.executor.include.whitelist: 'phar,vfs'
+  mbstring: {}
+  pecl-memcache: {}
+  xdebug:
+    provider: pecl
+    settings:
+      xdebug.max_nesting_level: 400
+    zend: true
+
+php::settings:
+  Date/date.timezone: Europe/Berlin
+  PHP/expose_php: 'Off'
+
+site::profile::typo3::projects:
+  arbeitenviernull:
+    version: '6.2.16'
+    site_path: '/srv/www/arbeitenviernull'
+    db_pass: ENC[PKCS7,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]
+    db_user: bmas-arbeiten
+    db_name: arbeiten
+    servername: dev-www-arbeitenviernull-de.pixelpark.net
+    ssl_cert: '/etc/pki/tls/certs/wildcard.pixelpark.net-cert.pem'
+    ssl_key: '/etc/pki/tls/private/wildcard.pixelpark.net-key.pem'
+    ssl_chain: '/etc/pki/tls/certs/wildcard.pixelpark.net-cert.pem'
+    directories: 
+      - location1:
+        provider: location
+        path: '/'
+        auth_type: Digest
+        auth_name: arbeit
+        auth_digest_provider: file
+        auth_digest_algorithm: MD5
+        auth_user_file: '/etc/httpd/htdigest'
+        auth_require: 'valid-user'
+        require:
+          - local
+    user: service.typo3
+    mode: '2775'
+  unternehmenswertmensch:
+    version: '6.2.16'
+    site_path: '/srv/www/unternehmens-wert-mensch'
+    db_pass: ENC[PKCS7,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]
+    db_user: bmas-unternehmen
+    db_name: unternehmenswertmensch
+    servername: dev-unternehmens-wert-mensch-de.pixelpark.net
+    ssl_cert: '/etc/pki/tls/certs/wildcard.pixelpark.net-cert.pem'
+    ssl_key: '/etc/pki/tls/private/wildcard.pixelpark.net-key.pem'
+    ssl_chain: '/etc/pki/tls/certs/wildcard.pixelpark.net-cert.pem'
+    directories:
+      - location1:
+        provider: location
+        path: '/'
+        auth_type: Digest
+        auth_name: mensch
+        auth_digest_provider: file
+        auth_digest_algorithm: MD5
+        auth_user_file: '/etc/httpd/htdigest'
+        auth_require: 'valid-user'
+    user: service.typo3
+    mode: '2775'
+  inqacheck:
+    version: '6.2.16'
+    site_path: '/srv/www/inqa-check'
+    db_pass: ENC[PKCS7,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]
+    db_user: inqacheck
+    db_name: inqacheck
+    servername: dev-www-psyga-inqa-check-de.pixelpark.net
+    serveraliases:
+      - dev-www-fachkraefte-offensive-check-de.pixelpark.net
+      - dev-www-personalplaner-inqa-check-de.pixelpark.net
+      - dev-unternehmenscheck-fachkraefte-offensive-de.pixelpark.net
+      - dev-beschaeftigtencheck-fachkraefte-offensive-de.pixelpark.net
+    ssl_cert: '/etc/pki/tls/certs/wildcard.pixelpark.net-cert.pem'
+    ssl_key: '/etc/pki/tls/private/wildcard.pixelpark.net-key.pem'
+    ssl_chain: '/etc/pki/tls/certs/wildcard.pixelpark.net-cert.pem'
+    directories:
+      - location1:
+        provider: location
+        path: '/'
+        auth_type: Digest
+        auth_name: inqacheck
+        auth_digest_provider: file
+        auth_digest_algorithm: MD5
+        auth_user_file: '/etc/httpd/htdigest'
+        auth_require: 'valid-user'
+    user: service.typo3
+    mode: '2775'
+    rewrites:
+      - https:
+        comment: 'http to https'
+        rewrite_cond:
+          - '%%{ich-trickse}{HTTPS} !=on'
+        rewrite_rule:
+          - '(.*) https://%%{ich-trickse}{HTTP_HOST}%%{ich-trickse}{REQUEST_URI} [R=301,L]'
+    php_admin_value:
+      memory_limit: 256M
\ No newline at end of file
diff --git a/customer/bmas-typo3/production.yaml b/customer/bmas-typo3/production.yaml
new file mode 100644 (file)
index 0000000..f79bd4c
--- /dev/null
@@ -0,0 +1,302 @@
+---
+site::role: base
+site::additional_classes:
+#  - site::profile::apache_php
+  - site::profile::typo3
+  - mysql::server::backup
+  - site::profile::mysql_server
+  - memcached
+  - logstash
+
+
+mysql::server::root_password: ENC[PKCS7,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]
+mysql::server::backup::backuppassword: ENC[PKCS7,MIIBiQYJKoZIhvcNAQcDoIIBejCCAXYCAQAxggEhMIIBHQIBADAFMAACAQEwDQYJKoZIhvcNAQEBBQAEggEAeMtp2QDvxtg9WwqNbWHhFecjZEaOVmcdTQnJnhpO2Ytpt9GVFQ5VNap3/+t/7MPnvAOM7IWDifH7hSICSxWns9sUkJEWPP+eEQ/hXwku/GomwCf+iTWfkPzDrBwSsKkRHXC7jGDDgltjEKp8H2fJzp+h6mhYxo8ZLrLj87MJ+KDIf6os9yhd/nnn37PJHUCQdICwAcBlHGwxvhHk6lx3WtLdCdmZ3wxh1Qv9PlaTzTH1q8uoV18qcWx7X7GaVlqzmtMv95uzOkIswf30fVbZeM8XVDbFGio51VCFWH0wSJJHGCKH76HpoOiWOFVn7O0x1lnE3BiMkZ4v6XvXzf+lITBMBgkqhkiG9w0BBwEwHQYJYIZIAWUDBAEqBBDdgqOsmcJjSwfhR07d+yXfgCC3dKZ9I9PeZvbaNOMKB5W2S86j8dqDbGZu7Qy1YrpMCw==]
+site::profile::mysql_server::databases:
+  arbeiten:
+    user: bmas-arbeiten
+    password: ENC[PKCS7,MIIBiQYJKoZIhvcNAQcDoIIBejCCAXYCAQAxggEhMIIBHQIBADAFMAACAQEwDQYJKoZIhvcNAQEBBQAEggEAdwF+rew961ztYnHiBSQgq4detiJAX9wmBkmVRhIg4XyU0VoowZW24kqIcGNd3DQOnBV6yPGVF2K0ih3vYvVtE+f8YYNK0t2Vf/Z0ItczVos0Lp18AS0uljopV+5TIhynlTxKMcgKPw+VvHvZhNym3xnkUvYUdlVKJDsZ8i7jew2WsaW0KZJuTUrnVIDAVKh0dK3WP6JGbgaNcihQuS78A4IRi8DsOhyvUskmiy65LpQrwDnIJVM8QL5HiWdj6ejk6TaXn1la22QemnlkjTaQZdFVVxneSCKZgJr2Ty70cj1g6OuqL071A1NyhKUHi+5NAnvKR9ezeUoTQ1qGcKdPYzBMBgkqhkiG9w0BBwEwHQYJYIZIAWUDBAEqBBBRFsJ3881EciBFiNrgg0g+gCBy05N1Wcwlt1fsAPUJEX3LUSyewzfapTwElC3FA8kjEg==]
+  unternehmenswertmensch:
+    user: bmas-unternehmen
+    password: ENC[PKCS7,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]
+  inqacheck:
+    user: inqacheck
+    password: ENC[PKCS7,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]
+
+apache::default_vhost: false
+
+memcached::max_memory: 256
+memcached::listen_ip: '127.0.0.1'
+
+php::fpm::pools:
+  www:
+    php_admin_value:
+      memory_limit: 256M
+
+php::extensions:
+  gd: {}
+  opcache: {}
+  mysqlnd: {}
+  soap: {}
+  suhosin:
+    settings: 
+      suhosin.request.max_varname_length: 200
+      suhosin.post.max_name_length: 200
+      suhosin.get.max_name_length: 200
+      suhosin.get.max_value_length: 2000
+      suhosin.executor.include.whitelist: 'phar,vfs'
+  mbstring: {}
+  pecl-memcache: {}
+
+php::settings:
+  Date/date.timezone: Europe/Berlin
+  PHP/upload_max_filesize: 20M
+  PHP/post_max_size: 20M
+  PHP/max_execution_time: '240'
+  PHP/expose_php: 'Off'
+
+site::profile::apache::vhosts:
+  pdfgenerator:
+    docroot: /srv/www/pdf.fachkraefte-offensive.de
+    port: 80
+    ip: 217.66.58.167
+    serveradmin: webmaster@pixelpark.com
+    servername: pdf.fachkraefte-offensive.de
+    rewrites:
+      - wrong_request:
+        comment: "Flasche Anfragen werden zur Hauptseite umgeleitet"
+        rewrite_cond: 
+          - '%%{ich-trickse}{REQUEST_URI} "!^/pdfgenerator"'
+        rewrite_rule: 
+          - '^(.*)$ http://www.fachkraefte-offensive.de [R=301,L]'
+#    custom_fragment: 'ProxyPassMatch ^/(.*\.php(/.*)?)$ fcgi://127.0.0.1:9000/srv/www/pdfgenerator/$1'
+    directories:
+      - directory_docroot:
+        provider: 'directory'
+        path: "/srv/www/pdf.fachkraefte-offensive.de"
+        addhandlers:
+          - { handler: "proxy:unix:/var/run/php5-fpm-fachkraefte-offensive.sock|fcgi://./" , extensions: '.php' }
+        options:
+          - FollowSymLinks
+          - MultiViews
+        allow_override:
+          - None
+        directoryindex: 'index.php'
+
+site::profile::typo3::projects:
+  arbeitenviernull:
+    version: '6.2.16'
+    site_path: '/srv/www/arbeitenviernull'
+    db_pass: ENC[PKCS7,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]
+    db_user: bmas-arbeiten
+    db_name: arbeiten
+    ip: 217.66.58.165
+    servername: www.arbeitenviernull.de
+    serveraliases:
+      - www-arbeitenviernull-de.pixelpark.net
+      - www.arbeiten-4-null.de
+      - www.arbeiten-4-punkt-null.de
+      - www.arbeiten-4-0.de
+      - www.arbeiten-4null.de
+      - www.arbeiten4null.de
+      - www.arbeiten4punktnull.de
+      - www.arbeitenvierpunktnull.de
+      - www.arbeiten-vier-punkt-null.de
+      - arbeiten-4-null.de
+      - arbeiten-4-punkt-null.de
+      - arbeiten-4-0.de
+      - arbeiten-4null.de
+      - arbeiten4null.de
+      - arbeiten4punktnull.de
+      - arbeitenvierpunktnull.de
+      - arbeiten-vier-punkt-null.de
+      - arbeitenviernull.de
+      - futurale-filmfestival.de
+      - www.futurale-filmfestival.de
+      - futurale.de
+      - www.futurale.de
+    rewrites:
+      - alias:
+        comment: 'Filmfestival Presse'
+        rewrite_cond:
+          - '%%{ich-trickse}{HTTP_HOST} ^(www\.futurale-filmfestival\.de|futurale-filmfestival\.de|futurale\.de|www\.futurale\.de)$'
+          - '%%{ich-trickse}{REQUEST_URI} ^/presse(/?)$'
+        rewrite_rule:
+          - '^(.*)$ http://www.arbeitenviernull.de/filmfestival/pressematerial.html [R=301,L]'
+      - alias:
+        comment: 'Rewrite ueber-die-futurale'
+        rewrite_cond:
+          - '%%{ich-trickse}{HTTP_HOST} ^(www\.futurale-filmfestival\.de|futurale-filmfestival\.de|futurale\.de|www\.futurale\.de)$'
+        rewrite_rule:
+          - '^/ueber-die-futurale(/?)$ http://www.arbeitenviernull.de/filmfestival/ueber-die-futurale.html [R=301,L]'
+      - alias:
+        comment: 'Rewrite orte.html'
+        rewrite_cond:
+          - '%%{ich-trickse}{HTTP_HOST} ^(www\.futurale-filmfestival\.de|futurale-filmfestival\.de|futurale\.de|www\.futurale\.de)$'
+        rewrite_rule:
+          - '^/(orte|filme)(/?)$ http://www.arbeitenviernull.de/filmfestival/$1.html [R=301,L]'
+      - alias:
+        comment: 'Rewrite Orte'
+        rewrite_cond:
+          - '%%{ich-trickse}{HTTP_HOST} ^(www\.futurale-filmfestival\.de|futurale-filmfestival\.de|futurale\.de|www\.futurale\.de)$'
+          - '%%{ich-trickse}{REQUEST_URI} ^/([-,A-Za-z].*)(/?)$'
+        rewrite_rule:
+          - '^/(.*)$ http://www.arbeitenviernull.de/filmfestival/orte/$1.html [R=301,L]'
+      - alias:
+        comment: 'Rewrite Filmfestival'
+        rewrite_cond:
+          - '%%{ich-trickse}{HTTP_HOST} ^(www\.futurale-filmfestival\.de|futurale-filmfestival\.de|futurale\.de|www\.futurale\.de)$'
+        rewrite_rule:
+          - '^(.*)$ http://www.arbeitenviernull.de/futurale/filmfestival.html [R=301,L]'
+      - alias:
+        comment: 'Alle Aliase auf Servername'
+        rewrite_cond: 
+          - '%%{ich-trickse}{HTTP_HOST} !^www\.arbeitenviernull\.de$ [NC]'
+        rewrite_rule: 
+          - '^(.*)$ http://www.arbeitenviernull.de$1 [L,R=301]'
+    ssl_cert: '/etc/pki/tls/certs/www.arbeitenviernull.de-cert.pem'
+    ssl_key: '/etc/pki/tls/private/www.arbeitenviernull.de-key.pem'
+    ssl_chain: '/etc/pki/tls/certs/www.arbeitenviernull.de-cert.pem'
+    directories:
+      - location1:
+        provider: location
+        path: '/typo3/'
+        auth_type: Digest
+        auth_name: arbeit
+        auth_digest_provider: file
+        auth_digest_algorithm: MD5
+        auth_user_file: '/etc/httpd/htdigest'
+        auth_require: 'valid-user'
+        require:
+          - local
+      - location2:
+        provider: location
+        path: '/typo3/js'
+      - location3:
+        provider: location
+        path: '/typo3/sysext/rsaauth/resources/'
+    user: service.typo3
+    mode: '2775'
+  unternehmenswertmensch:
+    version: '6.2.16'
+    site_path: '/srv/www/unternehmens-wert-mensch'
+    db_pass: ENC[PKCS7,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]
+    db_user: bmas-unternehmen
+    db_name: unternehmenswertmensch
+    ip: 217.66.58.166
+    servername: www.unternehmens-wert-mensch.de
+    serveraliases:
+      - www-unternehmens-wert-mensch-de.pixelpark.net
+      - unternehmens-wert-mensch.de
+    rewrites:
+      - alias:
+        comment: 'Alle Aliase auf Servername'
+        rewrite_cond: 
+          - '%%{ich-trickse}{HTTP_HOST} !^www\.unternehmens-wert-mensch\.de$ [NC]'
+        rewrite_rule: 
+          - '^(.*)$ http://www.unternehmens-wert-mensch.de$1 [L,R=301]'
+    ssl_cert: '/etc/pki/tls/certs/www.unternehmens-wert-mensch.de-cert.pem'
+    ssl_key: '/etc/pki/tls/private/www.unternehmens-wert-mensch.de-key.pem'
+    ssl_chain: '/etc/pki/tls/certs/www.unternehmens-wert-mensch.de-cert.pem'
+    directories:
+      - location1:
+        provider: location
+        path: '/typo3/'
+        auth_type: Digest
+        auth_name: mensch
+        auth_digest_provider: file
+        auth_digest_algorithm: MD5
+        auth_user_file: '/etc/httpd/htdigest'
+        auth_require: 'valid-user'
+      - location2:
+        provider: location
+        path: '/typo3/sysext'
+    user: service.typo3
+    mode: '2775'
+  inqacheck:
+    version: '6.2.16'
+    site_path: '/srv/www/inqa-check'
+    db_pass: ENC[PKCS7,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]
+    db_user: inqacheck
+    db_name: inqacheck
+    ip: 217.66.58.168
+    servername: psyga.inqa-check.de
+    serveraliases:
+      - psyga-check.de
+      - www.psyga-check.de
+      - psyga.inqa-check.de
+      - personalplanung.inqa-check.de
+      - www.personalplanung.inqa-check.de
+# Pixelpark Addressen
+      - www-psyga-inqa-check-de.pixelpark.net
+      - www-personalplaner-inqa-check-de.pixelpark.net
+      - www-fachkraefte-offensive-check-de.pixelpark.net
+    ssl_cert: '/etc/pki/tls/certs/wildcard.inqa-check.de-cert.pem'
+    ssl_key: '/etc/pki/tls/private/wildcard.inqa-check.de-key.pem'
+    ssl_chain: '/etc/pki/tls/certs/wildcard.inqa-check.de-cert.pem'
+    directories:
+      - location1:
+        provider: location
+        path: '/typo3/'
+        auth_type: Digest
+        auth_name: inqacheck
+        auth_digest_provider: file
+        auth_digest_algorithm: MD5
+        auth_user_file: '/etc/httpd/htdigest'
+        auth_require: 'valid-user'
+    user: service.typo3
+    mode: '2775'
+    php_admin_value:
+      memory_limit: 256M
+    rewrites:
+      - wrong_alias:
+        comment: 'Rewrite falsch kommunizierter Domains psyga-check'
+        rewrite_cond:
+          - '%%{ich-trickse}{HTTP_HOST} ^(psyga-check.de|www.psyga-check.de)$'
+          - '%%{ich-trickse}{HTTPS} !=on'
+        rewrite_rule:
+          - '(.*) https://psyga.inqa-check.de%%{ich-trickse}{REQUEST_URI} [R=301,L]'
+      - wrong_alias_2:
+        comment: 'Rewrite falsch kommunizierter Domains personalplanung '
+        rewrite_cond:
+          - '%%{ich-trickse}{HTTP_HOST} ^www.personalplanung.inqa-check.de$'
+          - '%%{ich-trickse}{HTTPS} !=on'
+        rewrite_rule:
+          - '(.*) https://personalplanung.inqa-check.de%%{ich-trickse}{REQUEST_URI} [R=301,L]'
+      - https:
+        comment: 'http to https alle anderen '
+        rewrite_cond:
+          - '%%{ich-trickse}{HTTPS} !=on'
+        rewrite_rule:
+          - '(.*) https://%%{ich-trickse}{HTTP_HOST}%%{ich-trickse}{REQUEST_URI} [R=301,L]'
+  # laeuft in der selben Docroot wie inqacheck, muss aber aufgrund von SSL in einen seperaten VHost und auf eine seperate IP
+  fachkraefte-offensive:
+    version: '6.2.16'
+    site_path: '/srv/www/inqa-check'
+    db_pass: ENC[PKCS7,MIIBiQYJKoZIhvcNAQcDoIIBejCCAXYCAQAxggEhMIIBHQIBADAFMAACAQEwDQYJKoZIhvcNAQEBBQAEggEAoXhIE3LScKk47IO4nXcrbgQNQgsyD75DJhaURzgI2hCfp1RwhpINzL8py6SILYxcibhEyZWUAPf3jVqr2epjeiDH0DsemNUdjCrr58xGW8RVLOkdd9VQJSOsbSWPBaFpd835bf4HTiuC4SV0KIwtcZTY2l72EZ0YftoV0q/sKONgiZfhWvmE7uJ2fq0gADiSh24kj/q+1ySJ9vvB2ZxkzVs/ny7GUA7X9dORgVEXoZRXs3nesoXnqpjfkXmQlKu4+oapoRQ1EPtaWa0cHffTiKGOEdX1LsAIqb3iSjxIoyZM9gtUM2sYqSXgKdOOlZVjaxgQH0E7eVRBwrhgx6Vp/zBMBgkqhkiG9w0BBwEwHQYJYIZIAWUDBAEqBBDEiAzKKvLBnRd1nJZGmUzZgCDQmTbjzrxht7u+aEbfPNJjxhHY7EM+ChE2NQV6V5iSmg==]
+    db_user: inqacheck
+    db_name: inqacheck
+    manage_typo3_project: false # selbe docroot wie inqacheck
+    ip: 217.66.58.169
+    servername: unternehmenscheck.fachkraefte-offensive.de
+    serveraliases:
+      - beschaeftigtencheck.fachkraefte-offensive.de
+# Pixelpark Addressen
+      - beschaeftigtencheck-fachkraefte-offensive-de.pixelpark.net
+      - unternehmenscheck-fachkraefte-offensive-de.pixelpark.net
+    ssl_cert: '/etc/pki/tls/certs/wildcard.pixelpark.net-cert.pem'
+    ssl_key: '/etc/pki/tls/private/wildcard.pixelpark.net-key.pem'
+    ssl_chain: '/etc/pki/tls/certs/wildcard.pixelpark.net-cert.pem'
+    directories:
+      - location1:
+        provider: location
+        path: '/'
+        auth_type: Digest
+        auth_name: fachkraefte
+        auth_digest_provider: file
+        auth_digest_algorithm: MD5
+        auth_user_file: '/etc/httpd/htdigest'
+        auth_require: 'valid-user'
+    user: service.typo3
+    mode: '2775'
+    php_admin_value:
+      memory_limit: 256M
diff --git a/customer/bmas-typo3/test.yaml b/customer/bmas-typo3/test.yaml
new file mode 100644 (file)
index 0000000..1232670
--- /dev/null
@@ -0,0 +1,187 @@
+---
+site::role: base
+site::additional_classes:
+  - site::profile::typo3
+  - site::profile::apache_php
+  - mysql::server::backup
+  - site::profile::mysql_server
+  - memcached
+  - logstash
+
+site::profile::apache::htdigest:
+  mensch:
+    www: ENC[PKCS7,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]
+  arbeit:
+    www: ENC[PKCS7,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]
+  inqacheck:
+    www: ENC[PKCS7,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]
+  mikrokredit:
+    www: ENC[PKCS7,MIIBeQYJKoZIhvcNAQcDoIIBajCCAWYCAQAxggEhMIIBHQIBADAFMAACAQEwDQYJKoZIhvcNAQEBBQAEggEAE8RG8Y/esf4hnpVYDc3XuIflrN7nize6Gv3QUvEsXDmB4q6HR7V85oRJJ6pP/o9icu/11qN8+BgFRoal4s8hMKsFIEqw0sR6z95s8wB84wU9IN9MjXS9KFT9Om18RuMsz74AY3vhgacqH9Dbj52qfHXMPWTmYijxeAZw9XzTDz3AyUKw+eCy/94i8yENd54V5ZVulBNNfutIcmf5LLKX7bmgD8HUCgE9FWRJmuW5+jxGBH/Mgk8JFjF9/ZbVvmiufsStemEV78XErelgwSPRBhkLxmtk0PN/R9MrBRtdv0zmOScPfTcG8rdZUO6TbVTxryFFXwPOdxzGLkRS4cs5XDA8BgkqhkiG9w0BBwEwHQYJYIZIAWUDBAEqBBABIKUHu7I/2F6Ied8+ixWjgBAvupDpl3Fz5DfDRHVB/RFh]
+
+mysql::server::root_password: ENC[PKCS7,MIIBiQYJKoZIhvcNAQcDoIIBejCCAXYCAQAxggEhMIIBHQIBADAFMAACAQEwDQYJKoZIhvcNAQEBBQAEggEAGWdyukG0mmYP234uDJZBaiTdSdJcqnhIxgAVA10b9AcyBZecycCnZeGX+1kQW3Hyc+Gg1W01/oRYfXE4iDz77R7fJ4A7yzWS3cVIS+Zm8g9dnEtXe/+EPk70vbiCB4iSR1z6aY/SSpnUyqdjG2k5Yj3oqcfmpoNMBd7+J+048wgU2eEX3zXmOTnWwlFBh3iYZvtMjZBSY8zc5kVKuGSiCXyv9Cj2aQWux84Vm6hyIkh9uSUnU+cKpdS6gQRpNNu1W1GXRJ7bSjaqh1MiOB3wHMHrucVYVYI6mJyHSqsk9Olk3Xp2y/0K4N8781VymFYyaTmpTIJp9tCf5Sd4AkOVHjBMBgkqhkiG9w0BBwEwHQYJYIZIAWUDBAEqBBB7mqLpJvcSDEJPYt35AsuxgCAQ+fPJQzCaH37KDICI6BTROsRqi9V76kMAcl4Khm6lnw==]
+mysql::server::backup::backuppassword: ENC[PKCS7,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]
+site::profile::mysql_server::databases:
+  arbeiten:
+    user: bmas-arbeiten
+    password: ENC[PKCS7,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]
+  unternehmenswertmensch:
+    user: bmas-unternehmen
+    password: ENC[PKCS7,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]
+  inqacheck:
+    user: inqacheck
+    password: ENC[PKCS7,MIIBiQYJKoZIhvcNAQcDoIIBejCCAXYCAQAxggEhMIIBHQIBADAFMAACAQEwDQYJKoZIhvcNAQEBBQAEggEAgj+H3Pqr5yfjBYgfBvpwQ+SuFkEka5krQ0P4oNgqQ6FXDX8RQtmtfSGTrEzxXWW4+z3TFwPuyMJQhNrn3AX6IqrpP27Xt0SXpVNikiCfU3FIsu6AqM5yNak+DhTUfbiMPM5GD0JteX+pidXef9iO9MERt1tpcOlCVEYXSIw93s4lgEHscbDj6JN0PNpsvondsVjVxSmZqLLlIYTljOPOHaZkc7tst3c//0WikIXc4Gp8q8blbbDKfhEmVZEAWXEuf4Oi8Ds62mfD4jmfN3yTvLgXHwR4+fei8/uk0d+GW+kk+tNaW2HQHvR/tdqTboopPaYl0ZIXd7xFFwUG3BYiTDBMBgkqhkiG9w0BBwEwHQYJYIZIAWUDBAEqBBByDNu0oD6bl8ctiun0WUHkgCAZCxY1oJEsuKA4hBQEt8io923kJSwSqWTHnlvGHMGyNw==]
+
+memcached::max_memory: 256
+memcached::listen_ip: '127.0.0.1'
+
+php::extensions:
+  gd: {}
+  opcache: {}
+  mysqlnd: {}
+  soap: {}
+  suhosin:
+    settings:
+      suhosin.request.max_varname_length: 200
+      suhosin.post.max_name_length: 200
+      suhosin.get.max_name_length: 200
+      suhosin.get.max_value_length: 2000
+      suhosin.executor.include.whitelist: 'phar,vfs'
+  mbstring: {}
+  pecl-memcache: {}
+  xdebug:
+    provider: pecl
+    settings:
+      xdebug.max_nesting_level: 400
+    zend: true
+
+php::dev: true
+php::pear: true
+
+php::settings:
+  Date/date.timezone: Europe/Berlin
+  PHP/upload_max_filesize: 20M
+  PHP/post_max_size: 20M
+  PHP/max_execution_time: '240'
+  PHP/expose_php: 'Off'
+
+site::profile::typo3::projects:
+  arbeitenviernull:
+    version: '6.2.16'
+    site_path: '/srv/www/arbeitenviernull'
+    db_pass: ENC[PKCS7,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]
+    db_user: bmas-arbeiten
+    db_name: arbeiten
+    servername: test-www-arbeitenviernull-de.pixelpark.net
+    ssl_cert: '/etc/pki/tls/certs/wildcard.pixelpark.net-cert.pem'
+    ssl_key: '/etc/pki/tls/private/wildcard.pixelpark.net-key.pem'
+    ssl_chain: '/etc/pki/tls/certs/wildcard.pixelpark.net-cert.pem'
+    directories:
+      - location1:
+        provider: location
+        path: '/'
+        auth_type: Digest
+        auth_name: arbeit
+        auth_digest_provider: file
+        auth_digest_algorithm: MD5
+        auth_user_file: '/etc/httpd/htdigest'
+        auth_require: 'valid-user'
+        require:
+          - local
+    user: service.typo3
+    mode: '2775'
+  unternehmenswertmensch:
+    version: '6.2.16'
+    site_path: '/srv/www/unternehmens-wert-mensch'
+    db_pass: ENC[PKCS7,MIIBiQYJKoZIhvcNAQcDoIIBejCCAXYCAQAxggEhMIIBHQIBADAFMAACAQEwDQYJKoZIhvcNAQEBBQAEggEAhVcbxljYBCoTIMGPNbeZtEGr185rwtoRGRth+zioLQbDAvCo46ysZcmjUHbis6qHqNUvBJHTK6dVi53t/MCQ3OIbQqni6TpJf1lDfFETOAgaA2Jvi4/8265HcXF7z38m3XYciw/dygIqNRNp7FdzYWzs0lzGWlaNAybLlRPia9nrn1IdHmchA5hYbydPgESggCbEJbkOp69yxZkWgE7j+WQgQP7Icly8nOHzjoFYmO5W2LlmKRQirxntp42Jt8gGk0eo1ePCJrM1afGbcEDbSF19jppIS8et0Z/Ry3D94nvEEMFSSSZ0qyogJPtoM0JqdfXSDpGtmmcn+N38fZeGmDBMBgkqhkiG9w0BBwEwHQYJYIZIAWUDBAEqBBATmU7PTILKOXtEG8PiSazBgCAuVOkQjx7IthKheSnohL6wyyOen4LDjSl/qtxlvhbPMw==]
+    db_user: bmas-unternehmen
+    db_name: unternehmenswertmensch
+    servername: test-unternehmens-wert-mensch-de.pixelpark.net
+    ssl_cert: '/etc/pki/tls/certs/wildcard.pixelpark.net-cert.pem'
+    ssl_key: '/etc/pki/tls/private/wildcard.pixelpark.net-key.pem'
+    ssl_chain: '/etc/pki/tls/certs/wildcard.pixelpark.net-cert.pem'
+    directories:
+      - location1:
+        provider: location
+        path: '/'
+        auth_type: Digest
+        auth_name: mensch
+        auth_digest_provider: file
+        auth_digest_algorithm: MD5
+        auth_user_file: '/etc/httpd/htdigest'
+        auth_require: 'valid-user'
+    user: service.typo3
+    mode: '2775'
+  inqacheck:
+    version: '6.2.16'
+    site_path: '/srv/www/inqa-check'
+    db_pass: ENC[PKCS7,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]
+    db_user: inqacheck
+    db_name: inqacheck
+    servername: test-www-psyga-inqa-check-de.pixelpark.net
+    serveraliases:
+      - test-www-fachkraefte-offensive-check-de.pixelpark.net
+      - test-www-personalplaner-inqa-check-de.pixelpark.net
+      - test-unternehmenscheck-fachkraefte-offensive-de.pixelpark.net
+      - test-beschaeftigtencheck-fachkraefte-offensive-de.pixelpark.net
+    ssl_cert: '/etc/pki/tls/certs/wildcard.pixelpark.net-cert.pem'
+    ssl_key: '/etc/pki/tls/private/wildcard.pixelpark.net-key.pem'
+    ssl_chain: '/etc/pki/tls/certs/wildcard.pixelpark.net-cert.pem'
+    directories:
+      - location1:
+        provider: location
+        path: '/'
+        auth_type: Digest
+        auth_name: inqacheck
+        auth_digest_provider: file
+        auth_digest_algorithm: MD5
+        auth_user_file: '/etc/httpd/htdigest'
+        auth_require: 'valid-user'
+    user: service.typo3
+    mode: '2775'
+    rewrites:
+      - https:
+        comment: 'http to https'
+        rewrite_cond:
+          - '%%{ich-trickse}{HTTPS} !=on'
+        rewrite_rule:
+          - '(.*) https://%%{ich-trickse}{HTTP_HOST}%%{ich-trickse}{REQUEST_URI} [R=301,L]'
+    php_admin_value:
+      memory_limit: 256M
+
+site::profile::apache_php::vhosts:
+  mikrokredit:
+    docroot: /srv/www/mikrokredit
+    port: 80
+    docroot_owner: service.typo3
+    servername:  test-www-mein-mikrokredit-de.pixelpark.net
+    directories:
+      - directory_root:
+        provider: directory
+        path: /srv/www/mikrokredit
+        options:
+          - FollowSymLinks
+          - MultiViews
+        allow_override:
+          - All
+        addhandlers:
+          handler: "proxy:unix:/var/run/php5-fpm-mikrokredit.sock|fcgi://./"
+          extensions: ".php"
+      - location_root:
+        provider: location
+        path: '/'
+        auth_type: Digest
+        auth_name: mikrokredit
+        auth_digest_provider: file
+        auth_digest_algorithm: MD5
+        auth_user_file: '/etc/httpd/htdigest'
+        auth_require: 'valid-user'
+        require:
+          - local
+
+site::profile::apache_php::fpm_pool:
+  mikrokredit:
+    listen: "/var/run/php5-fpm-mikrokredit.sock"
+    listen_owner: apache
+    listen_group: apache
+    user: apache
+    group: apache
diff --git a/customer/bmas/lb-bmas-de.pixelpark.net.yaml b/customer/bmas/lb-bmas-de.pixelpark.net.yaml
new file mode 100644 (file)
index 0000000..4c3c2b5
--- /dev/null
@@ -0,0 +1,2 @@
+---
+site::role: base
diff --git a/customer/bmas/master01-bmas-gsb6-de.pixelpark.net.yaml b/customer/bmas/master01-bmas-gsb6-de.pixelpark.net.yaml
new file mode 100644 (file)
index 0000000..197004a
--- /dev/null
@@ -0,0 +1,5 @@
+---
+site::additional_classes:
+  - accounts
+  - pp_mcollective
+
diff --git a/customer/bmas/production.yaml b/customer/bmas/production.yaml
new file mode 100644 (file)
index 0000000..ed97d53
--- /dev/null
@@ -0,0 +1 @@
+---
diff --git a/customer/bmas/red-bmas-gsb6-de.pixelpark.net.yaml b/customer/bmas/red-bmas-gsb6-de.pixelpark.net.yaml
new file mode 100644 (file)
index 0000000..197004a
--- /dev/null
@@ -0,0 +1,5 @@
+---
+site::additional_classes:
+  - accounts
+  - pp_mcollective
+
diff --git a/customer/bmas/slave01-bmas-gsb6-de.pixelpark.net.yaml b/customer/bmas/slave01-bmas-gsb6-de.pixelpark.net.yaml
new file mode 100644 (file)
index 0000000..af95ee4
--- /dev/null
@@ -0,0 +1,4 @@
+---
+site::additional_classes:
+  - accounts
+
diff --git a/customer/bmas/test-lb-bmas-de.pixelpark.net.yaml b/customer/bmas/test-lb-bmas-de.pixelpark.net.yaml
new file mode 100644 (file)
index 0000000..31dd860
--- /dev/null
@@ -0,0 +1,2 @@
+---
+site::role: base
\ No newline at end of file
diff --git a/customer/bmas/test-master01-bmas-gsb6-de.pixelpark.net.yaml b/customer/bmas/test-master01-bmas-gsb6-de.pixelpark.net.yaml
new file mode 100644 (file)
index 0000000..e80331e
--- /dev/null
@@ -0,0 +1,4 @@
+---
+site::additional_classes:
+  - pp_mcollective
+
diff --git a/customer/bmas/test-red-bmas-gsb6-de.pixelpark.net.yaml b/customer/bmas/test-red-bmas-gsb6-de.pixelpark.net.yaml
new file mode 100644 (file)
index 0000000..e80331e
--- /dev/null
@@ -0,0 +1,4 @@
+---
+site::additional_classes:
+  - pp_mcollective
+
diff --git a/customer/bmas/test-slave01-bmas-gsb6-de.pixelpark.net.yaml b/customer/bmas/test-slave01-bmas-gsb6-de.pixelpark.net.yaml
new file mode 100644 (file)
index 0000000..af95ee4
--- /dev/null
@@ -0,0 +1,4 @@
+---
+site::additional_classes:
+  - accounts
+
diff --git a/customer/bmas/test-www-anmeldung-bmas-de.pixelpark.net.yaml b/customer/bmas/test-www-anmeldung-bmas-de.pixelpark.net.yaml
new file mode 100644 (file)
index 0000000..2b11f0a
--- /dev/null
@@ -0,0 +1,43 @@
+---
+site::role: base
+site::additional_classes:
+  - httpd
+  - vivenio::app_server::tomcat
+  - vivenio::webserver::apache
+
+# zetiwerk stellt die Applikation beim Veranstaltungstool
+accounts::users:
+  zeitwerk:
+    apply: true
+    sudo: true
+
+httpd::webserver:
+  test-www-anmeldung-bmas-de.pixelpark.net:
+    modules:
+      - proxy_ajp
+    listens:
+      - 0.0.0.0:80
+      - 0.0.0.0:443
+    extendedStatus: true
+    worker: true
+    
+    
+vivenio::webserver::apache::host_servername: test-www-anmeldung-bmas-de.pixelpark.net
+vivenio::webserver::apache::ssl: true
+vivenio::webserver::apache::ssl_cert: /www/conf/certs/test-www-anmeldung-bmas-de.pixelpark.net
+vivenio::webserver::apache::ssl_key: /www/conf/certs/test-www-anmeldung-bmas-de.pixelpark.net
+vivenio::webserver::apache::ssl_ca: /www/conf/certs/test-www-anmeldung-bmas-de.pixelpark.net
+vivenio::webserver::apache::proxy_host: test-www-anmeldung-bmas-de.pixelpark.net
+
+vivenio::app_server::tomcat::site_name: test-www-anmeldung-bmas-de.pixelpark.net
+vivenio::app_server::tomcat::catalina_shared_loader:
+  - '/www/sites/vivenio_webapps/vivenio/reportDesigns'
+  - '/www/sites/vivenio_webapps/event/reportDesigns'
+
+xymon::procs:
+  postgres:
+    color: red
+    text: Postgres Datenbank fuer Applikation
+  java:
+    color: red
+    text: Tomcat Java Applikation Vivenio
\ No newline at end of file
diff --git a/customer/bmas/test-www01-bmas-gsb6-de.pixelpark.net.yaml b/customer/bmas/test-www01-bmas-gsb6-de.pixelpark.net.yaml
new file mode 100644 (file)
index 0000000..197004a
--- /dev/null
@@ -0,0 +1,5 @@
+---
+site::additional_classes:
+  - accounts
+  - pp_mcollective
+
diff --git a/customer/bmas/test-www02-bmas-gsb6-de.pixelpark.net.yaml b/customer/bmas/test-www02-bmas-gsb6-de.pixelpark.net.yaml
new file mode 100644 (file)
index 0000000..197004a
--- /dev/null
@@ -0,0 +1,5 @@
+---
+site::additional_classes:
+  - accounts
+  - pp_mcollective
+
diff --git a/customer/bmas/test.yaml b/customer/bmas/test.yaml
new file mode 100644 (file)
index 0000000..73b314f
--- /dev/null
@@ -0,0 +1 @@
+---
\ No newline at end of file
diff --git a/customer/bmas/www-anmeldung-bmas-de.pixelpark.net.yaml b/customer/bmas/www-anmeldung-bmas-de.pixelpark.net.yaml
new file mode 100644 (file)
index 0000000..d8345e5
--- /dev/null
@@ -0,0 +1,44 @@
+---
+site::role: base
+site::additional_classes:
+  - httpd
+  - vivenio
+  - vivenio::app_server::tomcat
+  - vivenio::webserver::apache
+
+# zetiwerk stellt die Applikation beim Veranstaltungstool
+accounts::users:
+  zeitwerk:
+    apply: true
+    sudo: true
+
+
+httpd::webserver:
+  www.anmeldung.bmas.de:
+    modules:
+      - proxy_ajp
+    listens:
+      - 0.0.0.0:80
+      - 0.0.0.0:443
+    extendedStatus: true
+    worker: true
+
+vivenio::webserver::apache::host_servername: www.anmeldung.bmas.de
+vivenio::webserver::apache::ssl: true
+vivenio::webserver::apache::ssl_cert: /www/conf/certs/www.anmeldung.bmas.de.pem
+vivenio::webserver::apache::ssl_key: /www/conf/certs/www.anmeldung.bmas.de.pem
+vivenio::webserver::apache::ssl_ca: /www/conf/certs/geotrust_intermediate.pem
+vivenio::webserver::apache::proxy_host: www.anmeldung.bmas.de
+
+vivenio::app_server::tomcat::site_name: www.anmeldung.bmas.de
+vivenio::app_server::tomcat::catalina_shared_loader:
+  - '/www/sites/vivenio_webapps/vivenio/reportDesigns'
+  - '/www/sites/vivenio_webapps/event/reportDesigns'
+
+xymon::procs:
+  postgres:
+    color: red
+    text: Postgres Datenbank fuer Applikation
+  java:
+    color: red
+    text: Tomcat Java Applikation Vivenio
diff --git a/customer/bmas/www01-bmas-gsb6-de.pixelpark.net.yaml b/customer/bmas/www01-bmas-gsb6-de.pixelpark.net.yaml
new file mode 100644 (file)
index 0000000..197004a
--- /dev/null
@@ -0,0 +1,5 @@
+---
+site::additional_classes:
+  - accounts
+  - pp_mcollective
+
diff --git a/customer/bmbf/common.yaml b/customer/bmbf/common.yaml
new file mode 100644 (file)
index 0000000..6c16690
--- /dev/null
@@ -0,0 +1,27 @@
+---
+
+accounts::users:
+  service.typo3:
+    apply: true
+    group: apache
+    sudo: true
+    sudo_cmds:
+      - NODEWALL
+  samuel.bufe:
+    apply: true
+    sudo: true
+
+sudo::configs:
+  cmd_alias:
+    priority: '05'
+    content: 'Cmnd_Alias NODEWALL = /bin/systemctl * node-wall@service.typo3.service'
+
+apache::mpm_module: worker
+nodejs::manage_package_repo: false
+
+php::fpm::pools:
+  www:
+    ensure: absent
+
+xymon::disk_warnlevel: 80
+xymon::disk_paniclevel: 90
\ No newline at end of file
diff --git a/customer/bmbf/production.yaml b/customer/bmbf/production.yaml
new file mode 100644 (file)
index 0000000..b31f674
--- /dev/null
@@ -0,0 +1,134 @@
+---
+site::role: base
+site::additional_classes:
+  - site::profile::typo3
+  - site::profile::mysql_server
+  - nodejs
+
+site::profile::galera_cluster::galera_servers:
+  - 217.66.55.5
+  - 217.66.55.6
+  - 217.66.55.7
+site::profile::galera_cluster::galera_master: web01-bmbf.pixelpark.net
+site::profile::galera_cluster::root_password: ENC[PKCS7,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]
+site::profile::galera_cluster::status_password: ENC[PKCS7,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]
+
+mysql::server::root_password: ENC[PKCS7,MIIBiQYJKoZIhvcNAQcDoIIBejCCAXYCAQAxggEhMIIBHQIBADAFMAACAQEwDQYJKoZIhvcNAQEBBQAEggEAdBajbgbVRJSdszSDSxrbkO6Rogz/PNC/W75lEEHUlw94SOidFUN86wKqSJB9gytIoM2K4ukGTXJDwQRYhJednWwWBNHqtWk3ClMOTDQw0o3/KdJ7HoyyLEWsCnfUy/Hq2KIwC3t8AiiSfXmOJ8H6DnLiIT6pLUZbfgDoaUYJOMQTeoEmxhhUHREpjweNCu/8WG8R6xgKrt0W7ILVKD0e5+Kg80mVYcvDPoxTchG4PzM3KNUeD3SyfqMmaTkOD1woMCnUaq3sskWOl/G6ZaQHBTLW9beo9u6Gs0oQQ+rzSY7UWZotLLPlF/2yHxFDBEtOkhxIZhIyVukCHGD/V9kWvDBMBgkqhkiG9w0BBwEwHQYJYIZIAWUDBAEqBBBSc6nwN2fshF+xNb+waMNvgCAaluCBBJrCp1yDz5CzERik0IDw0zUl+KMwBpdJns7Uxg==]
+
+mysql::server::backup::backuppassword: ENC[PKCS7,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]
+site::profile::mysql_server::databases:
+  stadtklang:
+    user: stadtklang
+    password: ENC[PKCS7,MIIBiQYJKoZIhvcNAQcDoIIBejCCAXYCAQAxggEhMIIBHQIBADAFMAACAQEwDQYJKoZIhvcNAQEBBQAEggEASKiPD6fAj/kftFPD5z/yg2NH+j0yq/dPx5JZ3ZP0XLU81RMCfh3wzk38Tnor3FLyYV9O8FeRsHBq8Z7tBazpncfPAZc2uM9e7w2I5TF4RbjmTrpCBx8MVT+FV/rHZeNiLDVxm7RwO6yAgta68XxKFsRnugCNcWzcMWEszPvwSGHois8EqfOKrCDr90RUJCsOcZ4jIceiGWOaCqx9Y8HpD0pnaQFDpjbtMEUzoqeAwNinlWoiTZnOTQMgksaEqR4wwBZFlrvf7IGzfXWVma0s+WWCrFN7hQ+gTPJ+oQ9o2jdpI+f3c+hfINvOUxbJ7E8lkjFmlJQ8yxKbxxT6TIu7XjBMBgkqhkiG9w0BBwEwHQYJYIZIAWUDBAEqBBDqARGIww8lS1LTIN5OeJCRgCAQqHaLF5wHCYJEDq4CbLbxsStMo14+S9LSEAq2ikEV5A==]
+
+site::profile::typo3::projects:
+  stadtklang:
+    servername: www.wissenschaftsjahr-zukunftsstadt.de
+    db_pass: ENC[PKCS7,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]
+    site_path: '/srv/www/stadtklang'
+    version: '6.2.16'
+    serveraliases:
+      - web01-bmbf.pixelpark.net
+      - web02-bmbf.pixelpark.net
+      - web03-bmbf.pixelpark.net
+      - www.stadtklang2015.de
+      - wissenschaftsjahr-zukunftsstadt.de
+      - stadtklang2015.de
+      - www-wissenschaftsjahr-zukunftsstadt-de.pixelpark.net
+    ssl_cert: '/etc/pki/tls/certs/www.wissenschaftsjahr-zukunftsstadt.de-cert.pem'
+    ssl_key: '/etc/pki/tls/private/www.wissenschaftsjahr-zukunftsstadt.de-key.pem'
+    ssl_chain: '/etc/pki/tls/certs/www.wissenschaftsjahr-zukunftsstadt.de-cert.pem'
+    directories:
+      - location1:
+        provider: location
+        path: '/typo3/'
+        auth_type: Digest
+        auth_name: server
+        auth_digest_provider: file
+        auth_digest_algorithm: MD5
+        auth_user_file: '/etc/httpd/htdigest'
+        auth_require: 'valid-user'
+        require:
+          - local
+      - location2:
+        provider: location
+        path: '/typo3/sysext/'
+      - location3:
+        provider: location
+        path: '/typo3/js/'
+      - location4:
+        provider: location
+        path: '/typo3/contrib/'
+    rewrites_no_ssl: 
+      - stadtklang:
+        comment: 'Stadtklang auf Weiterleitung'
+        rewrite_cond: 
+          - '%%{ich-trickse}{HTTP_HOST} ^www\.stadtklang2015\.de$ [NC,OR]'
+          - '%%{ich-trickse}{HTTP_HOST} ^stadtklang2015\.de$ [NC]'
+        rewrite_rule: 
+          - '^(.*)$ https://www.wissenschaftsjahr-zukunftsstadt.de/stadtklang$1 [L,R=301]'
+      - https:
+        comment: 'all to https'
+        rewrite_rule: 
+          - '^(.*)$ https://www.wissenschaftsjahr-zukunftsstadt.de$1 [L,R=301]'
+    rewrites_ssl:
+      - experten1:
+        comment: 'experten landing Page ohne Endung'
+        rewrite_cond:
+          - '%%{ich-trickse}{HTTP_HOST} ^www.wissenschaftsjahr-zukunftsstadt.de$'
+        rewrite_rule:
+          - '^/alle-themen/das-sagen-die-experten(/?)$ https://www.wissenschaftsjahr-zukunftsstadt.de/neues-aus-der-wissenschaft/das-sagen-die-experten [L,R=301]'
+      - experten2:
+        comment: 'experten landing Page mit Endung'
+        rewrite_cond:
+          - '%%{ich-trickse}{HTTP_HOST} ^www.wissenschaftsjahr-zukunftsstadt.de$'
+        rewrite_rule:
+          - '^/alle-themen/das-sagen-die-experten.html$ https://www.wissenschaftsjahr-zukunftsstadt.de/neues-aus-der-wissenschaft/das-sagen-die-experten [L,R=301]'
+      - experten3:
+        comment: 'experten Subpage'
+        rewrite_cond:
+          - '%%{ich-trickse}{HTTP_HOST} ^www.wissenschaftsjahr-zukunftsstadt.de$'
+        rewrite_rule:
+          - '^/alle-themen/das-sagen-die-experten/(.*)$ https://www.wissenschaftsjahr-zukunftsstadt.de/neues-aus-der-wissenschaft/das-sagen-die-experten/$1 [L,R=301]'
+      - vorOrt:
+        comment: 'vor Ort'
+        rewrite_cond:
+          - '%%{ich-trickse}{HTTP_HOST} ^www.wissenschaftsjahr-zukunftsstadt.de$'
+        rewrite_rule:
+          - '^/alle-themen/wissenschaft-vor-ort.html$ https://www.wissenschaftsjahr-zukunftsstadt.de/neues-aus-der-wissenschaft/wissenschaft-vor-ort.html [L,R=301]'
+      - sitemap:
+        comment: 'google Sitemap'
+        rewrite_cond:
+          - '%%{ich-trickse}{HTTP_HOST} ^www.wissenschaftsjahr-zukunftsstadt.de$'
+        rewrite_rule:
+          - '^/sitemap.xml$ https://www.wissenschaftsjahr-zukunftsstadt.de/index.php?eID=dd_googlesitemap [L,R=301]'
+      - veranstaltung:
+        comment: 'Veranstaltung'
+        rewrite_cond:
+          - '%%{ich-trickse}{HTTP_HOST} ^www.wissenschaftsjahr-zukunftsstadt.de$'
+        rewrite_rule:
+          - '^/veranstaltungen.xml$ https://www.wissenschaftsjahr-zukunftsstadt.de/index.php?eID=dd_googlesitemap&sitemap=pp_veranstaltungskalender&type=va&singlePid=5&pidList=34 [L,R=301]'
+#      - newsletter:
+#        comment: 'Newsletter'
+#        rewrite_cond:
+#          - '%%{ich-trickse}{REQUEST_URI} ^/service/newsletter.html$'
+#        rewrite_rule:
+#          - '^(.*)$ https://www.wissenschaftsjahr-zukunftsstadt.de/neues-aus-der-wissenschaft/newsletter.html [R=301,L]'
+      - auftakt:
+        comment: 'Auftakt'
+        rewrite_cond:
+          - '%%{ich-trickse}{REQUEST_URI} ^/auftakt$'
+        rewrite_rule:
+          - '^(.*)$ https://www.bmbf.de/wj15_zukunftsstadt/formular/index.php [L,R=301]'
+      - minecraft:
+        comment: 'Mincraft Redirect'
+        rewrite_cond:
+          - '%%{ich-trickse}{HTTP_HOST} ^www.wissenschaftsjahr-zukunftsstadt.de$'
+        rewrite_rule:
+          - '^/minecraft$ https://www.wissenschaftsjahr-zukunftsstadt.de/index.php?id=558 [L,R=303]'
+    user: service.typo3
+    mode: '2775'
+    php_admin_value:
+      post_max_size: 500M
+      upload_max_filesize: 500M
+      always_populate_raw_post_data: -1
diff --git a/customer/bmbf/test.yaml b/customer/bmbf/test.yaml
new file mode 100644 (file)
index 0000000..e55e1e3
--- /dev/null
@@ -0,0 +1,43 @@
+---
+site::role: base
+site::additional_classes:
+  - site::profile::typo3
+  - site::profile::mysql_server
+  - nodejs
+
+mysql::server::root_password: ENC[PKCS7,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]
+
+mysql::server::backup::backuppassword: ENC[PKCS7,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]
+site::profile::mysql_server::databases:
+  stadtklang:
+    user: stadtklang
+    password: ENC[PKCS7,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]
+
+site::profile::typo3::projects:
+  stadtklang:
+    servername: test-web01-bmbf.pixelpark.net
+    db_pass: ENC[PKCS7,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]
+    site_path: '/srv/www/stadtklang'
+    version: '6.2.16'
+    ssl_real: true
+    ssl_cert: '/etc/pki/tls/certs/wildcard.pixelpark.net-cert.pem'
+    ssl_key: '/etc/pki/tls/private/wildcard.pixelpark.net-key.pem'
+    ssl_chain: '/etc/pki/tls/certs/wildcard.pixelpark.net-cert.pem'
+    directories:
+      - location1:
+        provider: location
+        path: '/'
+        auth_type: Digest
+        auth_name: server
+        auth_digest_provider: file
+        auth_digest_algorithm: MD5
+        auth_user_file: '/etc/httpd/htdigest'
+        auth_require: 'valid-user'
+        require:
+          - local
+    user: service.typo3
+    mode: '2775'
+    php_admin_value:
+      post_max_size: 500M
+      upload_max_filesize: 500M
+      always_populate_raw_post_data: -1
\ No newline at end of file
diff --git a/customer/bmf-datacenter/common.yaml b/customer/bmf-datacenter/common.yaml
new file mode 100644 (file)
index 0000000..3c4400a
--- /dev/null
@@ -0,0 +1,28 @@
+---
+accounts::users:
+  service.typo3:
+    apply: true
+    group: apache
+
+site::role: base
+site::additional_classes:
+  - site::profile::typo3
+  - site::profile::mysql_server
+  - site::profile::wordpress
+  - apache::mod::headers
+  - logstash
+
+apache::default_vhost: false
+apache::mpm_module: worker
+
+php::fpm::pools:
+  www:
+    ensure: absent
+
+php::settings:
+  Date/date.timezone: Europe/Berlin
+  PHP/expose_php: 'Off'
+
+mysql::server::override_options:
+  'mysqld':
+    ft_min_word_len: '3'
diff --git a/customer/bmf-datacenter/production.yaml b/customer/bmf-datacenter/production.yaml
new file mode 100644 (file)
index 0000000..1e9fc19
--- /dev/null
@@ -0,0 +1,133 @@
+---
+
+mysql::server::root_password: ENC[PKCS7,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]
+mysql::server::backup::backuppassword: ENC[PKCS7,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]
+site::profile::mysql_server::databases:
+  bundeshaushalt:
+    user: datacenter
+    password: ENC[PKCS7,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]
+
+
+php::extensions:
+  gd: {}
+  opcache: {}
+  mysqlnd: {}
+  suhosin:
+    settings:
+      suhosin.request.max_varname_length: 200
+      suhosin.post.max_name_length: 200
+      suhosin.get.max_name_length: 200
+      suhosin.get.max_value_length: 2000
+      suhosin.executor.include.whitelist: 'phar,vfs'
+  mbstring: {}
+  soap: {}
+  xml: {}
+
+php::cli::settings:
+  PHP/memory_limit: 512M
+  PHP/max_execution_time: '0'
+
+site::profile::apache::htdigest:
+  server:
+    www: ENC[PKCS7,MIIBiQYJKoZIhvcNAQcDoIIBejCCAXYCAQAxggEhMIIBHQIBADAFMAACAQEwDQYJKoZIhvcNAQEBBQAEggEArGsd8jo1aMkcLYmh0STJoh6zCICfwUCP+v56RikVVymWch8NztOGdPSIK0vYLbLaiky5XKNt3eatbxtlKfJi7ar8sxuhWewHdl4nGRGp97nmAp4iLse+EJkW5s2zoE3Fam4R5VSgZNUZyyf2KRJN2FKMgfukFfNXhKrwvK9tQNDTS7cbS0FsbAlf69J3ExK/v+wH/KkeNNZotVJncl71PJHriqR6/NkHA8zhT+6YCVEGbOW+YLzdIb/9CTm/jQjhbZ+fkHcChlHyraiZj83vHICi/+Pud66e63IAzBZIyXh2HI68losiGvLJ6pjS/mmBwNvzGwfUAXx0odRXwW78VzBMBgkqhkiG9w0BBwEwHQYJYIZIAWUDBAEqBBDChe5YmV3+3ANU2B6Q34pkgCBfu2Aubb+CmXqzpzjNWAetRux2suldVCwUIdr55hMoTg==]
+  server2:
+    www: ENC[PKCS7,MIIBiQYJKoZIhvcNAQcDoIIBejCCAXYCAQAxggEhMIIBHQIBADAFMAACAQEwDQYJKoZIhvcNAQEBBQAEggEAYbQJT55dOxh7jepwrmNqOn/nlp6nSGSGQ1QVnmBXZ5K9w2bCe3G2sFPykoHEZiEz4wqzWMHpsiPbEMNJ+GVUN9IV3d6YNrTIbKZNIc8xCfe81Idk0TrvocNvWr3IM62zQ/mdFHTqylX7xbuHpcuJ763J92+K0SrvvUFahg7GZiMKtmJoyNTJdjjGmfIUIvb5mW3J/fX0NlKamacesE8rs83fGHJo1YXPG8pTkiKdoRG/U+0rNm4bgo1FuoLcAvBl3nAdNwzcfZMxzTtO5J2+BtCYhh4kLAgACsEeaTCuUusbZo98jap5gvIRbR6pd+zopwKGN6TigO45IMt4Ji0mPDBMBgkqhkiG9w0BBwEwHQYJYIZIAWUDBAEqBBDSXfobC7Cou8NwvPNeg72xgCCBg9DOKOiI18KynyLxQX7B898jhcT///3ZR8p1r0lhPQ==]
+
+site::profile::typo3::projects:
+  bundeshaushalt:
+    version: '7.6.1'
+    site_path: '/var/www/html/web.bundeshaushalt-info.de'
+    db_pass: ENC[PKCS7,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]
+    db_user: datacenter
+    db_name: bundeshaushalt
+    servername: www.bundeshaushalt-info.de
+    serveraliases:
+      - bundeshaushalt-info.de
+    rewrites:
+      - alias:
+        comment: 'Alle Aliase auf Servername'
+        rewrite_cond:
+          - '%%{ich-trickse}{HTTP_HOST} !^www\.bundeshaushalt-info\.de$ [NC]'
+          - '%%{ich-trickse}{REMOTE_ADDR} !^77\.74\.239\.51$'
+          - '%%{ich-trickse}{REQUEST_URI} !^/logs'
+          - '%%{ich-trickse}{REQUEST_URI} !^/status'
+          - '%%{ich-trickse}{REQUEST_URI} !^/server-status'
+        rewrite_rule:
+          - '^(.*)$ http://www.bundeshaushalt-info.de$1 [L,R=301]'
+    aliases:
+      alias: '/logs'
+      path: '/var/log/httpd'
+    access_log_format: urchinpp_xf4
+    ssl_real: false # because we are behind lb
+#    ssl_cert: '/etc/pki/tls/certs/www.bundeshaushalt-info.de-cert.pem'
+#    ssl_key: '/etc/pki/tls/private/www.bundeshaushalt-info.de-key.pem'
+#    ssl_chain: '/etc/pki/tls/certs/www.bundeshaushalt-info.de-cert.pem'
+    directories:
+      - directory2:
+        provider: directory
+        path: '/var/www/html/web.bundeshaushalt-info.de/rest/'
+        directoryindex: 'index.json'
+      - location2:
+        provider: location
+        path: '/typo3/'
+        auth_type: Digest
+        auth_name: server
+        auth_digest_provider: file
+        auth_digest_algorithm: MD5
+        auth_user_file: '/etc/httpd/htdigest'
+        auth_require: 'valid-user'
+        require:
+          - local
+      - location3:
+        provider: location
+        path: '/typo3/sysext/'
+      - location4:
+        provider: location
+        path: '/typo3/js/'
+      - locsetenvif_sslation5:
+        provider: location
+        path: '/logs'
+        require:
+          - ip 77.74.239.51
+    user: service.typo3
+    mode: '2775'
+    setenvif_ssl:
+      - 'HTTPS on HTTPS=on'
+    php_admin_value:
+      upload_max_filesize: 500M
+      post_max_size: 500M
+      max_input_vars: 1500
+      memory_limit: 256M
+      always_populate_raw_post_data: -1
+
+site::profile::wordpress::manage_php: false
+site::profile::wordpress::projects:
+  so-klingt-europa-de:
+    docroot: '/var/www/so-klingt-europa-de'
+    servername: www-so-klingt-europa-de.pixelpark.net
+    ssl_cert: '/etc/pki/tls/certs/wildcard.pixelpark.net-cert.pem'
+    ssl_key: '/etc/pki/tls/private/wildcard.pixelpark.net-key.pem'
+    ssl_chain: '/etc/pki/tls/certs/wildcard.pixelpark.net-cert.pem'
+    directories:
+      - directory1:
+        provider: directory
+        path: '/var/www/so-klingt-europa-de'
+        addhandlers:
+          - { handler: "proxy:unix:/var/run/php5-fpm-bundeshaushalt.sock|fcgi://./" , extensions: '.php' }
+        options:
+          - FollowSymLinks
+          - MultiViews
+        allow_override:
+          - All
+        directoryindex: 'index.php'
+      - location1:
+        provider: location
+        path: '/'
+        auth_type: Digest
+        auth_name: server2
+        auth_digest_provider: file
+        auth_digest_algorithm: MD5
+        auth_user_file: '/etc/httpd/htdigest'
+        auth_require: 'valid-user'
+        require:
+          - local
diff --git a/customer/bmf-datacenter/test.yaml b/customer/bmf-datacenter/test.yaml
new file mode 100644 (file)
index 0000000..3d22080
--- /dev/null
@@ -0,0 +1,119 @@
+---
+
+mysql::server::root_password: ENC[PKCS7,MIIBiQYJKoZIhvcNAQcDoIIBejCCAXYCAQAxggEhMIIBHQIBADAFMAACAQEwDQYJKoZIhvcNAQEBBQAEggEAhANiKciHcmZldGrwiQg9WZthD0SbElB4IFXB4c97hPV2pQCYi6AyuI5Y/FqEuc9IbO0q7ULbSaebxV1wi+fuhEivpa76yEXeWb6FsM3oArNGQ0wfK4B9Nb1RInpY3NGU2Xe2Qj9ge725kmaB0lqK6QPKD7FJFmn7QkhH7Y2AAEN+G677fuu6MpD0PizdfC7BftmbJT/XWs6rbh6tvYHaZiIuuJJPRsms8nBxUVm0J2XxT7K5o3mXyqA+TNNOqoljLTXRmqFup4/gdkJBFepmtEDFcfh+Y6K7YpoVBxBVyw+Fvgm27PoQEmeYWIe4OX6rGr6Ex/jNFcFgQ/Z+hB+svzBMBgkqhkiG9w0BBwEwHQYJYIZIAWUDBAEqBBB+sQ1miUyAv6JfaUhMU78ugCCqjlkfy5JP66NJXlIV6OIA3oydvUY1FCtHBlKesFJ2FA==]
+mysql::server::backup::backuppassword: ENC[PKCS7,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]
+site::profile::mysql_server::databases:
+  bundeshaushalt:
+    user: datacenter
+    password: ENC[PKCS7,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]
+
+
+php::extensions:
+  gd: {}
+  opcache: {}
+  mysqlnd: {}
+  suhosin:
+    settings:
+      suhosin.request.max_varname_length: 200
+      suhosin.post.max_name_length: 200
+      suhosin.get.max_name_length: 200
+      suhosin.get.max_value_length: 2000
+      suhosin.executor.include.whitelist: 'phar,vfs'
+  mbstring: {}
+  soap: {}
+  xml: {}
+
+php::cli::settings:
+  PHP/memory_limit: 512M
+  PHP/max_execution_time: '0'
+
+site::profile::apache::htdigest:
+  server:
+    www: ENC[PKCS7,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]
+  server2:
+    www: ENC[PKCS7,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]
+
+site::profile::typo3::projects:
+  bundeshaushalt:
+    version: '7.6.1'
+    site_path: '/var/www/html/web.bundeshaushalt-info.de'
+    db_pass: ENC[PKCS7,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]
+    db_user: datacenter
+    db_name: bundeshaushalt
+    servername: test-web01-bundeshaushalt-info.pixelpark.net
+    ssl_cert: '/etc/pki/tls/certs/wildcard.pixelpark.net-cert.pem'
+    ssl_key: '/etc/pki/tls/private/wildcard.pixelpark.net-key.pem'
+    ssl_chain: '/etc/pki/tls/certs/wildcard.pixelpark.net-cert.pem'
+    directories:
+      - directory1:
+        provider: directory
+        path: '/var/www/html/web.bundeshaushalt-info.de/'
+        options:
+          - FollowSymLinks
+          - MultiViews
+        allow_override:
+          - All
+      - location1:
+        provider: location
+        path: '/'
+        auth_type: Digest
+        auth_name: server
+        auth_digest_provider: file
+        auth_digest_algorithm: MD5
+        auth_user_file: '/etc/httpd/htdigest'
+        auth_require: 'valid-user'
+        require:
+          - local
+      - directory2:
+        provider: directory
+        path: '/var/www/html/web.bundeshaushalt-info.de/rest/'
+        directoryindex: 'index.json'
+      #- location_typo3:
+      #  provider: location
+      #  path: '/typo3/'
+      #  require:
+      #    - local
+      #    - "ip 217.66.51 81.173.202"
+      - location_typo_all:
+        provider: location
+        path: '/typo3/sysext'
+    user: service.typo3
+    mode: '2775'
+    php_admin_value:
+      upload_max_filesize: 500M
+      post_max_size: 500M
+      max_input_vars: 1500
+      memory_limit: 256M
+      always_populate_raw_post_data: -1
+
+site::profile::wordpress::manage_php: false
+site::profile::wordpress::projects:
+  so-klingt-europa-de:
+    docroot: '/var/www/so-klingt-europa-de'
+    servername: test-www-so-klingt-europa-de.pixelpark.net
+    ssl_cert: '/etc/pki/tls/certs/wildcard.pixelpark.net-cert.pem'
+    ssl_key: '/etc/pki/tls/private/wildcard.pixelpark.net-key.pem'
+    ssl_chain: '/etc/pki/tls/certs/wildcard.pixelpark.net-cert.pem'
+    directories:
+      - directory1:
+        provider: directory
+        path: '/var/www/so-klingt-europa-de'
+        addhandlers:
+          - { handler: "proxy:unix:/var/run/php5-fpm-bundeshaushalt.sock|fcgi://./" , extensions: '.php' }
+        options:
+          - FollowSymLinks
+          - MultiViews
+        allow_override:
+          - All
+        directoryindex: 'index.php'
+      - location1:
+        provider: location
+        path: '/'
+        auth_type: Digest
+        auth_name: server2
+        auth_digest_provider: file
+        auth_digest_algorithm: MD5
+        auth_user_file: '/etc/httpd/htdigest'
+        auth_require: 'valid-user'
+        require:
+          - local
diff --git a/customer/bmf/blog-bmf-de.pixelpark.net.yaml b/customer/bmf/blog-bmf-de.pixelpark.net.yaml
new file mode 100644 (file)
index 0000000..4c3c2b5
--- /dev/null
@@ -0,0 +1,2 @@
+---
+site::role: base
diff --git a/customer/bmf/db01-bmf-de.pixelpark.net.yaml b/customer/bmf/db01-bmf-de.pixelpark.net.yaml
new file mode 100644 (file)
index 0000000..7ba3ff7
--- /dev/null
@@ -0,0 +1,47 @@
+---
+site::role: base
+site::additional_classes:
+  - site::profile::galera_cluster
+  - site::profile::mysql_server
+  - logstash
+
+mysql::server::override_options:
+  mysqld:
+    innodb_file_per_table: ON
+
+site::profile::galera_cluster::galera_servers:
+  - 192.168.64.3
+  - 192.168.64.4
+  - 192.168.64.5
+
+site::profile::galera_cluster::galera_master: db01-bmf-de.pixelpark.net
+site::profile::galera_cluster::root_password: ENC[PKCS7,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]
+site::profile::galera_cluster::status_password: ENC[PKCS7,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]
+
+mysql::server::backup::backuppassword: ENC[PKCS7,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]
+site::profile::mysql_server::databases:
+  CMMASTER:
+    user: CMMASTER
+    password: ENC[PKCS7,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]
+    host: '192.168.64.%'
+  CMSLAVE:
+    user: CMSLAVE
+    password: ENC[PKCS7,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]
+    host: '192.168.64.%'
+  CMTOMCATLIVE:
+    user: CMTOMCATLIVE
+    password: ENC[PKCS7,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]
+    host: '192.168.64.%'
+  CMMASTER-TEST:
+    user: CMMASTER-TST
+    password: ENC[PKCS7,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]
+    host: '192.168.61.%'
+  CMSLAVE-TEST:
+    user: CMSLAVE-TST
+    password: ENC[PKCS7,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]
+    host: '192.168.61.%'
+  CMTOMCATLIVE-TEST:
+    user: CMTOMCATLIVE-TST
+    password: ENC[PKCS7,MIIBiQYJKoZIhvcNAQcDoIIBejCCAXYCAQAxggEhMIIBHQIBADAFMAACAQEwDQYJKoZIhvcNAQEBBQAEggEARsVbRFx5YSVHCpzJOisnWdbiLuvw2G2jo0Gqi9Y5Cp1TDpz+TgbswiGCqFNUFiE6iau0dWstFZ40XAkR4sz7oU5hlQhMQI1zO9GC42lSgP7Tz2FbyJ9EQ8n5xlmErHwL0JvL3TJ2J3jY67ZshxmZSSU2/lMRatA7yG4SSYfjG7F2iNoBVw8Loom0MDnBEeTIhxwPLxaoYgcsf7UmdEgkhWgv477ftK56DhDQq90NYKa4mn7MEQAylpu0lv7jwP1PmmriznDpYD5zmkTADTZ0Jdlz0f4n2xbEenmhHfHaab2ttRA//mfrL98Pj1YdxrXfMPd0msM8MBA41YwZe9J/EzBMBgkqhkiG9w0BBwEwHQYJYIZIAWUDBAEqBBCaSLA5Nao9ZM/CkntisSlNgCDZRIMUyJVLZu+dxUDtAtvHpliOwpeGSri1p+eDM1Phog==]
+    host: '192.168.61.%'
+
diff --git a/customer/bmf/db02-bmf-de.pixelpark.net.yaml b/customer/bmf/db02-bmf-de.pixelpark.net.yaml
new file mode 100644 (file)
index 0000000..7ba3ff7
--- /dev/null
@@ -0,0 +1,47 @@
+---
+site::role: base
+site::additional_classes:
+  - site::profile::galera_cluster
+  - site::profile::mysql_server
+  - logstash
+
+mysql::server::override_options:
+  mysqld:
+    innodb_file_per_table: ON
+
+site::profile::galera_cluster::galera_servers:
+  - 192.168.64.3
+  - 192.168.64.4
+  - 192.168.64.5
+
+site::profile::galera_cluster::galera_master: db01-bmf-de.pixelpark.net
+site::profile::galera_cluster::root_password: ENC[PKCS7,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]
+site::profile::galera_cluster::status_password: ENC[PKCS7,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]
+
+mysql::server::backup::backuppassword: ENC[PKCS7,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]
+site::profile::mysql_server::databases:
+  CMMASTER:
+    user: CMMASTER
+    password: ENC[PKCS7,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]
+    host: '192.168.64.%'
+  CMSLAVE:
+    user: CMSLAVE
+    password: ENC[PKCS7,MIIBiQYJKoZIhvcNAQcDoIIBejCCAXYCAQAxggEhMIIBHQIBADAFMAACAQEwDQYJKoZIhvcNAQEBBQAEggEAFnAjulyUZqzNhmFxU8h+2wnrTHbnsvWQmrscVBc3FQG3rN9rJPkW2xmIX2uHleKEUQLgiSXRp84wrvhnoZ32AqdvpQAGfZGcFCzTDYhZVC9GpqJwG0033AdXNWsrbjHZkeS4r6GvB8vxRMx1C6PkFlhbuVd130aDskIuZNOrv0fwPGAyzmJNIYUaJ17G1LMj3H9k2o6+FFJOFQPAAKNPtX6uF6P7o9RN1Ku/3vnSuqnaB9uz5BGPLhkbeNK3RNFDXBmDU+nnyGY7WYXH5+3rSFmqJmrbIqh/tM6ALSnukA552KDpoKLyb2WIZaNEtjo4svs2i5kGl5O6fPxqIaus9DBMBgkqhkiG9w0BBwEwHQYJYIZIAWUDBAEqBBAMECKfNUDN/6XbcMOosHcygCCzLEDDtL0iZKWBoRRuwF7RRJF5DfFBlTuchrajHqgYOQ==]
+    host: '192.168.64.%'
+  CMTOMCATLIVE:
+    user: CMTOMCATLIVE
+    password: ENC[PKCS7,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]
+    host: '192.168.64.%'
+  CMMASTER-TEST:
+    user: CMMASTER-TST
+    password: ENC[PKCS7,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]
+    host: '192.168.61.%'
+  CMSLAVE-TEST:
+    user: CMSLAVE-TST
+    password: ENC[PKCS7,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]
+    host: '192.168.61.%'
+  CMTOMCATLIVE-TEST:
+    user: CMTOMCATLIVE-TST
+    password: ENC[PKCS7,MIIBiQYJKoZIhvcNAQcDoIIBejCCAXYCAQAxggEhMIIBHQIBADAFMAACAQEwDQYJKoZIhvcNAQEBBQAEggEARsVbRFx5YSVHCpzJOisnWdbiLuvw2G2jo0Gqi9Y5Cp1TDpz+TgbswiGCqFNUFiE6iau0dWstFZ40XAkR4sz7oU5hlQhMQI1zO9GC42lSgP7Tz2FbyJ9EQ8n5xlmErHwL0JvL3TJ2J3jY67ZshxmZSSU2/lMRatA7yG4SSYfjG7F2iNoBVw8Loom0MDnBEeTIhxwPLxaoYgcsf7UmdEgkhWgv477ftK56DhDQq90NYKa4mn7MEQAylpu0lv7jwP1PmmriznDpYD5zmkTADTZ0Jdlz0f4n2xbEenmhHfHaab2ttRA//mfrL98Pj1YdxrXfMPd0msM8MBA41YwZe9J/EzBMBgkqhkiG9w0BBwEwHQYJYIZIAWUDBAEqBBCaSLA5Nao9ZM/CkntisSlNgCDZRIMUyJVLZu+dxUDtAtvHpliOwpeGSri1p+eDM1Phog==]
+    host: '192.168.61.%'
+
diff --git a/customer/bmf/db03-bmf-de.pixelpark.net.yaml b/customer/bmf/db03-bmf-de.pixelpark.net.yaml
new file mode 100644 (file)
index 0000000..7ba3ff7
--- /dev/null
@@ -0,0 +1,47 @@
+---
+site::role: base
+site::additional_classes:
+  - site::profile::galera_cluster
+  - site::profile::mysql_server
+  - logstash
+
+mysql::server::override_options:
+  mysqld:
+    innodb_file_per_table: ON
+
+site::profile::galera_cluster::galera_servers:
+  - 192.168.64.3
+  - 192.168.64.4
+  - 192.168.64.5
+
+site::profile::galera_cluster::galera_master: db01-bmf-de.pixelpark.net
+site::profile::galera_cluster::root_password: ENC[PKCS7,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]
+site::profile::galera_cluster::status_password: ENC[PKCS7,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]
+
+mysql::server::backup::backuppassword: ENC[PKCS7,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]
+site::profile::mysql_server::databases:
+  CMMASTER:
+    user: CMMASTER
+    password: ENC[PKCS7,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]
+    host: '192.168.64.%'
+  CMSLAVE:
+    user: CMSLAVE
+    password: ENC[PKCS7,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]
+    host: '192.168.64.%'
+  CMTOMCATLIVE:
+    user: CMTOMCATLIVE
+    password: ENC[PKCS7,MIIBiQYJKoZIhvcNAQcDoIIBejCCAXYCAQAxggEhMIIBHQIBADAFMAACAQEwDQYJKoZIhvcNAQEBBQAEggEAZDpGjfMmKGixmGsIZQQKrLBTv+gTkMdO+1ektkZo+tHkzApoN7mA5rXX6dhpwpAJEyAP94DHfW+izQXn0j6uKXWF1Bd9F8OHQXilXvDuyncievhVSNIBMyqeWOaTQT2KSMQu7adznvvZIobHC3HIjXX1oUyAz8Q1dY3lugxBOJKqnPFM3HeryWShtlV5vkUG7khBPLHkrB4WRn3h2BjuniX8oHyzblW3ZCLmymBLqjFp+UIma0R3+j6LUd3BJ55/2djC9eElCPiRoLcMl9ruFMDLP9i+xi4Qg0Zng5Jrk/aOa++SpIWNbblucH1w23c9ZydGymFPictLR+4FlKYcNDBMBgkqhkiG9w0BBwEwHQYJYIZIAWUDBAEqBBB5ncmvkAujtn8nOlDdu9NCgCDRLpkshR18gNTBrvs4RfCjG2X0qXzXbxt9yP6LsAVquw==]
+    host: '192.168.64.%'
+  CMMASTER-TEST:
+    user: CMMASTER-TST
+    password: ENC[PKCS7,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]
+    host: '192.168.61.%'
+  CMSLAVE-TEST:
+    user: CMSLAVE-TST
+    password: ENC[PKCS7,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]
+    host: '192.168.61.%'
+  CMTOMCATLIVE-TEST:
+    user: CMTOMCATLIVE-TST
+    password: ENC[PKCS7,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]
+    host: '192.168.61.%'
+
diff --git a/customer/bmf/dev-blog-bmf-de.pixelpark.net.yaml b/customer/bmf/dev-blog-bmf-de.pixelpark.net.yaml
new file mode 100644 (file)
index 0000000..4c3c2b5
--- /dev/null
@@ -0,0 +1,2 @@
+---
+site::role: base
diff --git a/customer/bmf/dev-bmf-de.pixelpark.net.yaml b/customer/bmf/dev-bmf-de.pixelpark.net.yaml
new file mode 100644 (file)
index 0000000..31dd860
--- /dev/null
@@ -0,0 +1,2 @@
+---
+site::role: base
\ No newline at end of file
diff --git a/customer/bmf/dev-db-bmf-de.pixelpark.net.yaml b/customer/bmf/dev-db-bmf-de.pixelpark.net.yaml
new file mode 100644 (file)
index 0000000..8c115e1
--- /dev/null
@@ -0,0 +1,4 @@
+---
+site::role: base
+site::additional_classes:
+  - site::profile::mysql_server
diff --git a/customer/bmf/development.yaml b/customer/bmf/development.yaml
new file mode 100644 (file)
index 0000000..a42460a
--- /dev/null
@@ -0,0 +1,38 @@
+---
+
+mysql::server::override_options:
+  mysqld:
+    bind-address: 0.0.0.0
+
+mysql::server::root_password: ENC[PKCS7,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]
+mysql::server::backup::backuppassword: ENC[PKCS7,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]
+site::profile::mysql_server::databases:
+  CMCONTENT:
+    user: CMCONTENT
+    password: ENC[PKCS7,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]
+    host: '%'
+  CMTOMCATCONTENT:
+    user: CMTOMCATCONTENT
+    password: ENC[PKCS7,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]
+    host: '%'
+  CMSLAVE:
+    user: CMSLAVE
+    password: ENC[PKCS7,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]
+    host: '%'
+  CMMASTER:
+    user: CMMASTER
+    password: ENC[PKCS7,MIIBiQYJKoZIhvcNAQcDoIIBejCCAXYCAQAxggEhMIIBHQIBADAFMAACAQEwDQYJKoZIhvcNAQEBBQAEggEAMPct1C9P6hVRza4Xic2pK3Y7tGIPJDAYrqqk5n8FD3OEL8HBP0eVMCmw2Jrn/sq5kMOhB7jFOk10NA5OO5EBemo7/WcVzcyH4ja1kgnAFYWxqOjqpIOQhqsrrVdyDQ/MZ4hC8cU8ZCH8Up9szgx4JQ3KYkRExDET79PmnltiRK35Il6ewVpBjDclS242i0YvWQsEszBuzYyd5cBOp6jBWluSRIgKdlZo8sbNjGtSR/dJ4x+knq4C/+athrZs/y+JaeXvQRjKtrxRg9rX52gDIwu2XbqiCgbPyrknoOmJERifUBvmmh3lCKvgm0H7QHydkbpc4MLCUxjYHvN/p0dgLDBMBgkqhkiG9w0BBwEwHQYJYIZIAWUDBAEqBBCzo09PpuwEhqqbiFmSp5c9gCDVdW+Hzem5zCAryeJ8UaTFSzDh/DKiS0zokvCHj3Vl6Q==]
+    host: '%'
+  CMTOMCATLIVE:
+    user: CMTOMCATLIVE
+    password: ENC[PKCS7,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]
+    host: '%'
+  MAILDISTRIBUTOR:
+    user: MAILDISTRIBUTOR
+    password: ENC[PKCS7,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]
+    host: '%'
+  CMTOMCATLIVE_2:
+    dbname: CMTOMCATLIVE
+    user: CMTOMCATLIVE
+    password: ENC[PKCS7,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]
+    host: '217.66.51.%'
diff --git a/customer/bmf/master01-bmf-de.pixelpark.net.yaml b/customer/bmf/master01-bmf-de.pixelpark.net.yaml
new file mode 100644 (file)
index 0000000..31dd860
--- /dev/null
@@ -0,0 +1,2 @@
+---
+site::role: base
\ No newline at end of file
diff --git a/customer/bmf/news01-bmf-de.pixelpark.net.yaml b/customer/bmf/news01-bmf-de.pixelpark.net.yaml
new file mode 100644 (file)
index 0000000..4c3c2b5
--- /dev/null
@@ -0,0 +1,2 @@
+---
+site::role: base
diff --git a/customer/bmf/red-bmf-de.pixelpark.net.yaml b/customer/bmf/red-bmf-de.pixelpark.net.yaml
new file mode 100644 (file)
index 0000000..95a4fc8
--- /dev/null
@@ -0,0 +1,25 @@
+---
+site::role: base
+site::additional_classes:
+  - site::profile::mysql_server
+
+mysql::server::override_options:
+  mysqld:
+    bind-address: 0.0.0.0
+    basedir: '/usr/mysql/5.5'
+
+mysql::server::root_password: ENC[PKCS7,MIIBiQYJKoZIhvcNAQcDoIIBejCCAXYCAQAxggEhMIIBHQIBADAFMAACAQEwDQYJKoZIhvcNAQEBBQAEggEAwS6zo6MFyZ2bwUX7jqYK/7bxtEMCjlzPo0qKBTK7BybpZ0bXTP2tHB7lf/tMiZCuIYQXv0jo45IrDIDmjbI3F9l1+pe+9HTUi4Bldm3bgNYJ11hnTj2zvy4OFshQNT+Osgl4xyIeitW2QEicirU2Sxu2j2bPeYCmEcHQQ7+wp5kBTwNOFhFGAPT193utWGRNoM5F6kdyzH30w3ROEUiaHtBJ7guVP/dtOSu/2G6ZTZdbuelY9HIP0HY5Q+wF9ijGX8jcFgH/d5fjF1nC6U0cZ1+kAaATmO0tBhjd6fNNxnS7MwzOcnnjUb+55DCNLfbzGs2QX8jyg3yVMFgLDkvjkDBMBgkqhkiG9w0BBwEwHQYJYIZIAWUDBAEqBBBKUL10b68L7XHjlvWUyCRggCA+/9M2Vvhr06kb+3DCz+Pa9pE6xzBLP2V7NW4XUlFKKg==]
+mysql::server::backup::backuppassword: ENC[PKCS7,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]
+site::profile::mysql_server::databases:
+  CMCONTENT:
+    user: CMCONTENT
+    password: ENC[PKCS7,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]
+    host: '%'
+  CMTOMCATCONTENT:
+    user: CMTOMCATCONTENT
+    password: ENC[PKCS7,MIIBiQYJKoZIhvcNAQcDoIIBejCCAXYCAQAxggEhMIIBHQIBADAFMAACAQEwDQYJKoZIhvcNAQEBBQAEggEADGwkTI1yUh1SdRMbxRf6IX+b+U7cDsVFEttiOhRb1TAFCo1G8amHjkNbviES4x4UyLT1DynF0sSwjSG5kckiK5sAIlExHZV5Y5Oo5FFoIn9QOXp2HthRb2Ez991cFLXzu+dyfJvkhCSwKlDEXnDytWQMi8tIja9BC/M/sX58jGlgM8xmTqtJgHjaf1xe43wxcCyMuJDpInlBejXIagAxvip6AXlnokC9ZAwRUjvXuxdqg36x39d/CMTxY77louE0/zD4Cl/dQ4DhlWLyjrRWxoK/Q/vMxmFJ2iY66TWKMHsuvTtSIeR3M4FMQMpRg6yukV2PLalNTxjOw+MKjeChzTBMBgkqhkiG9w0BBwEwHQYJYIZIAWUDBAEqBBBIHJrl7+qp9N6vyVu/z2JlgCBSFWt3ahN8xw5HTB/9KboOKnGWRmsOCxyMDMquvW19dQ==]
+    host: '%'
+  MAILDISTRIBUTOR:
+    user: MAILDISTRIBUTOR
+    password: ENC[PKCS7,MIIBiQYJKoZIhvcNAQcDoIIBejCCAXYCAQAxggEhMIIBHQIBADAFMAACAQEwDQYJKoZIhvcNAQEBBQAEggEAcP5oogzWRBV8tqm+LDMCvE6QnJ6z5UD4oQTJ+qVEogUgPgETj4xB3qHIvKd1DnS+U3cXYJQunX1PE09tUNMcdiVLKgYf4UN4RF+s3e/F2O2O/3vJTno36bDS0fICn2x5XfDWuMm4gMLFfWufds2gduVwLuX6cw2t688+3w+ISi9ksRobALXZbMIb6A99PfKCSuxTGhpw19SC7xeY64W4091edxTzxF3S7IJokApkdBbd9/ejCMAAAgEyahFOhz77kbo9W+npl8ZoRwTFiKhzMqM/AMVFTlbayz+8Hc5KYOH/QeBQQ2djIfXeqVWNxP1A4dbIN4qjxPD0FKQZB/6y0jBMBgkqhkiG9w0BBwEwHQYJYIZIAWUDBAEqBBC4WZ0UpotryLHtalVBG4B3gCCUWwdC7W73X88UmeB1wmRuXQaXKFweJ3zdyVm0PmEFjQ==]
+    host: '%'
diff --git a/customer/bmf/slave01-bmf-de.pixelpark.net.yaml b/customer/bmf/slave01-bmf-de.pixelpark.net.yaml
new file mode 100644 (file)
index 0000000..31dd860
--- /dev/null
@@ -0,0 +1,2 @@
+---
+site::role: base
\ No newline at end of file
diff --git a/customer/bmf/test-blog-bmf-de.pixelpark.net.yaml b/customer/bmf/test-blog-bmf-de.pixelpark.net.yaml
new file mode 100644 (file)
index 0000000..4c3c2b5
--- /dev/null
@@ -0,0 +1,2 @@
+---
+site::role: base
diff --git a/customer/bmf/test-master01-bmf-de.pixelpark.net.yaml b/customer/bmf/test-master01-bmf-de.pixelpark.net.yaml
new file mode 100644 (file)
index 0000000..31dd860
--- /dev/null
@@ -0,0 +1,2 @@
+---
+site::role: base
\ No newline at end of file
diff --git a/customer/bmf/test-news01-bmf-de.pixelpark.net.yaml b/customer/bmf/test-news01-bmf-de.pixelpark.net.yaml
new file mode 100644 (file)
index 0000000..4c3c2b5
--- /dev/null
@@ -0,0 +1,2 @@
+---
+site::role: base
diff --git a/customer/bmf/test-red-bmf-de.pixelpark.net.yaml b/customer/bmf/test-red-bmf-de.pixelpark.net.yaml
new file mode 100644 (file)
index 0000000..7e9f2fc
--- /dev/null
@@ -0,0 +1,25 @@
+---
+site::role: base
+site::additional_classes:
+  - site::profile::mysql_server
+
+mysql::server::override_options:
+  mysqld:
+    bind-address: 0.0.0.0
+    basedir: '/usr/mysql/5.5'
+
+mysql::server::root_password: ENC[PKCS7,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]
+mysql::server::backup::backuppassword: ENC[PKCS7,MIIBeQYJKoZIhvcNAQcDoIIBajCCAWYCAQAxggEhMIIBHQIBADAFMAACAQEwDQYJKoZIhvcNAQEBBQAEggEAe0KiPBpUBLzFSTdb0CsMHfnBwE9Rr69THLyqHAtyrBq83/6tr7oIp6f77AsOM3x4h1grdAS4N/qilV2endjhH48e/7WBftxU3jwt4sRme8/LGcjRgxtQDsINgIX4MWbPRjxBbo1iIEHA9HE/fD2K+8WK1wuYlGPI7Kn5Sk9+UHxLSNNTSIHPel29G6nwpeNAw1kAacEWFEnUIP4AviToOnTGj9FIrwi9xMb22jJ3gkrzyO9HCsIxGLtimQcayQvGxXBd5lzhsD3d3KE0grb9bcibuAgYwlEUpsA6oyYiwWkUL81sw4vZJj1RJnk+dykiTzBejHWQgi8ToJBT5TZg1DA8BgkqhkiG9w0BBwEwHQYJYIZIAWUDBAEqBBAwrAUE0192AUrWeRqq18xYgBCdO9qFWG45RWW6ZtdH2ZVA]
+site::profile::mysql_server::databases:
+  CMCONTENT:
+    user: CMCONTENT
+    password: ENC[PKCS7,MIIBeQYJKoZIhvcNAQcDoIIBajCCAWYCAQAxggEhMIIBHQIBADAFMAACAQEwDQYJKoZIhvcNAQEBBQAEggEAUEvK26J+IyAdMc4rK6rjfQ19SjVTk8tTnRLVqzdydmDayk186em3FSYiMgErc3ldsYrGJuHggLq3UP4hi+9ke/l/ImMSIekusg4pHEaBBQ5Qm+JRUBzlJDdRCj/QYNx5ZMY0or0vr32Vx2X0S0KD1Bq9ApW28A4XIVFACxGdaAb9ThENs+9m6qjlCEnvnItFPrDq5Dh2Pj1MoqOQDGotIRC+6nVtujn7NzgRUKGb1MuMO+d64D+V9SrFdCcr4+ywQZ0JxJYp0nCd3ooa+COv0wRSkorbPVUEA7v5v6LZNgcyDX3RmfpAguE2LouPZ1LDMRcL7D1qHTK4ubN3BZqFRjA8BgkqhkiG9w0BBwEwHQYJYIZIAWUDBAEqBBBt6e9pVRI1hiBsJlfrF/FMgBC4u/YWTlvYRLk4dLZpGTBX]
+    host: '%'
+  CMTOMCATCONTENT:
+    user: CMTOMCATCONTENT
+    password: ENC[PKCS7,MIIBeQYJKoZIhvcNAQcDoIIBajCCAWYCAQAxggEhMIIBHQIBADAFMAACAQEwDQYJKoZIhvcNAQEBBQAEggEAkQMO1PZGSTWb1quFQRPpslsRdbtJU6+mEL8GDSBj9dhwZkeDnojS3SkkpexamUfucs8WrEueFPw2A6dq6782D37T6EGLIFvi5knNUBit1S9lmOHe4v36QLaan3vb4mlWny2KrgXVsD8qn2SI2K9ddZ0J4JbsKJ6fxkCdfJq6CcDfQnNq1mqNs7CP3RzfLwt+SD6S9mOD7mA6MO4yqciU1J+wjAT288XRck2DFG3xRIzI1T0yq+KvHUYPwjUA3zvSHchwI6tb/xLGGIrufghVTZoaM2oz3tl4ZXgl/n37jI8vKi2WHYYgo2ddEdrRmlCJQI8wYW274ZS/TXvGgHWtSDA8BgkqhkiG9w0BBwEwHQYJYIZIAWUDBAEqBBAKS/DRJbMCoKw3pcvsCO3XgBC3jMyMBOhaYz7ZArtCG5rg]
+    host: '%'
+  MAILDISTRIBUTOR:
+    user: MAILDISTRIBUTOR
+    password: ENC[PKCS7,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]
+    host: '%'
diff --git a/customer/bmf/test-slave01-bmf-de.pixelpark.net.yaml b/customer/bmf/test-slave01-bmf-de.pixelpark.net.yaml
new file mode 100644 (file)
index 0000000..31dd860
--- /dev/null
@@ -0,0 +1,2 @@
+---
+site::role: base
\ No newline at end of file
diff --git a/customer/bmf/test-www01-bmf-de.pixelpark.net.yaml b/customer/bmf/test-www01-bmf-de.pixelpark.net.yaml
new file mode 100644 (file)
index 0000000..31dd860
--- /dev/null
@@ -0,0 +1,2 @@
+---
+site::role: base
\ No newline at end of file
diff --git a/customer/bmf/test-www02-bmf-de.pixelpark.net.yaml b/customer/bmf/test-www02-bmf-de.pixelpark.net.yaml
new file mode 100644 (file)
index 0000000..31dd860
--- /dev/null
@@ -0,0 +1,2 @@
+---
+site::role: base
\ No newline at end of file
diff --git a/customer/bmf/test.yaml b/customer/bmf/test.yaml
new file mode 100644 (file)
index 0000000..e69de29
diff --git a/customer/bmf/www01-bmf-de.pixelpark.net.yaml b/customer/bmf/www01-bmf-de.pixelpark.net.yaml
new file mode 100644 (file)
index 0000000..31dd860
--- /dev/null
@@ -0,0 +1,2 @@
+---
+site::role: base
\ No newline at end of file
diff --git a/customer/bmf/www02-bmf-de.pixelpark.net.yaml b/customer/bmf/www02-bmf-de.pixelpark.net.yaml
new file mode 100644 (file)
index 0000000..31dd860
--- /dev/null
@@ -0,0 +1,2 @@
+---
+site::role: base
\ No newline at end of file
diff --git a/customer/bmf/www03-bmf-de.pixelpark.net.yaml b/customer/bmf/www03-bmf-de.pixelpark.net.yaml
new file mode 100644 (file)
index 0000000..31dd860
--- /dev/null
@@ -0,0 +1,2 @@
+---
+site::role: base
\ No newline at end of file
diff --git a/customer/bmf/www04-bmf-de.pixelpark.net.yaml b/customer/bmf/www04-bmf-de.pixelpark.net.yaml
new file mode 100644 (file)
index 0000000..31dd860
--- /dev/null
@@ -0,0 +1,2 @@
+---
+site::role: base
\ No newline at end of file
diff --git a/customer/bmwi-gruenderwoche/common.yaml b/customer/bmwi-gruenderwoche/common.yaml
new file mode 100644 (file)
index 0000000..7fee9da
--- /dev/null
@@ -0,0 +1,35 @@
+---
+accounts::users:
+  deploy.vogel:
+    apply: true
+    group: apache
+  service.typo3:
+    apply: true
+    group: apache
+
+site::role: base
+site::additional_classes:
+  - site::profile::typo3
+  - site::profile::mysql_server
+  - apache::mod::headers
+  - logstash
+
+apache::default_vhost: false
+apache::mpm_module: worker
+
+repo::remi_php56: true
+
+php::extensions:
+  gd: {}
+  opcache: {}
+  mysqlnd: {}
+  soap: {}
+  mbstring: {}
+  xml: {}
+  suhosin:
+    settings:
+      suhosin.request.max_varname_length: 200
+      suhosin.post.max_name_length: 200
+      suhosin.get.max_name_length: 200
+      suhosin.get.max_value_length: 2000
+      suhosin.executor.include.whitelist: 'phar,vfs'
diff --git a/customer/bmwi-gruenderwoche/development.yaml b/customer/bmwi-gruenderwoche/development.yaml
new file mode 100644 (file)
index 0000000..6af63e7
--- /dev/null
@@ -0,0 +1,43 @@
+---
+
+mysql::server::root_password: ENC[PKCS7,MIIBiQYJKoZIhvcNAQcDoIIBejCCAXYCAQAxggEhMIIBHQIBADAFMAACAQEwDQYJKoZIhvcNAQEBBQAEggEAjgIlslu9h1hCzV+n9BsoynXr/T9ZPJhAXG/7Bdo3U5ruwLLFpulw9JOYK9LIoo6hnU6QyH3zbiOt/iHuv54eUhZOl5KfRBZ+xtNE/lxE17rFA1LqaC1X7t7zLp/+nH7aomxLo/l1+JZKaQQ2WIFvMlAodrV2r5PKNy8Gv8U5D4r7tkRqOWDFuuVev7LLbOOE4uMIooZUDlhkPHJNmIaB5u/6myAsIJXUXbKsdLiSzqQDRMoQ9zcY79XDJ3LGUSRFaoPZWBPC5SdHjEREjO6TS8kKBHm/VjyR48lvA8LSEWhgjfBXXBJGSYIgIZWIaecyZyFsUHVU2hImkTw/iKUXwjBMBgkqhkiG9w0BBwEwHQYJYIZIAWUDBAEqBBCWrXNvB/BgelVcWZJ0ZdJ1gCAlUcbqItPp6qDXbqw+kdRYPuq4jkZQ1+EBwTo2oAnLrg==]
+mysql::server::backup::backuppassword: ENC[PKCS7,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]
+site::profile::mysql_server::databases:
+  gruenderwoche:
+    user: gruenderwoche
+    password: jI8AS9FZycSPdFKY
+
+php::dev: true
+php::pear: true
+
+site::profile::apache::htdigest:
+  server:
+    www: xZAnxmu5hjAQoK4b
+site::profile::typo3::projects:
+  gruenderwoche:
+    version: '7.6.2'
+    site_path: '/var/www/www-bmwi-grwo.pixelpark.net'
+    db_pass: jI8AS9FZycSPdFKY
+    db_user: gruenderwoche
+    db_name: gruenderwoche
+    servername: dev-www-bmwi-grwo.pixelpark.net
+    ssl_cert: '/etc/pki/tls/certs/wildcard.pixelpark.net-cert.pem'
+    ssl_key: '/etc/pki/tls/private/wildcard.pixelpark.net-key.pem'
+    ssl_chain: '/etc/pki/tls/certs/wildcard.pixelpark.net-cert.pem'
+    directories:
+      - location1:
+        provider: location
+        path: '/'
+        auth_type: Digest
+        auth_name: server
+        auth_digest_provider: file
+        auth_digest_algorithm: MD5
+        auth_user_file: '/etc/httpd/htdigest'
+        auth_require: 'valid-user'
+        require:
+          - local
+    user: service.typo3
+    mode: '2775'
+    php_admin_value:
+      always_populate_raw_post_data: -1
+      max_input_vars: '1500'
diff --git a/customer/bmwi-gruenderwoche/production.yaml b/customer/bmwi-gruenderwoche/production.yaml
new file mode 100644 (file)
index 0000000..234ff9b
--- /dev/null
@@ -0,0 +1,43 @@
+---
+
+mysql::server::root_password: ENC[PKCS7,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]
+mysql::server::backup::backuppassword: ENC[PKCS7,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]
+site::profile::mysql_server::databases:
+  gruenderwoche:
+    user: gruenderwoche
+    password: ENC[PKCS7,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]
+
+php::dev: true
+php::pear: true
+
+site::profile::apache::htdigest:
+  server:
+    www: ENC[PKCS7,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]
+site::profile::typo3::projects:
+  gruenderwoche:
+    version: '7.6.2'
+    site_path: '/var/www/www-bmwi-grwo.pixelpark.net'
+    db_pass: ENC[PKCS7,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]
+    db_user: gruenderwoche
+    db_name: gruenderwoche
+    servername: www-bmwi-grwo.pixelpark.net
+    ssl_cert: '/etc/pki/tls/certs/wildcard.pixelpark.net-cert.pem'
+    ssl_key: '/etc/pki/tls/private/wildcard.pixelpark.net-key.pem'
+    ssl_chain: '/etc/pki/tls/certs/wildcard.pixelpark.net-cert.pem'
+    directories:
+      - location1:
+        provider: location
+        path: '/'
+        auth_type: Digest
+        auth_name: server
+        auth_digest_provider: file
+        auth_digest_algorithm: MD5
+        auth_user_file: '/etc/httpd/htdigest'
+        auth_require: 'valid-user'
+        require:
+          - local
+    user: service.typo3
+    mode: '2775'
+    php_admin_value:
+      always_populate_raw_post_data: -1
+      max_input_vars: '1500'
diff --git a/customer/bmwi-gruenderwoche/test.yaml b/customer/bmwi-gruenderwoche/test.yaml
new file mode 100644 (file)
index 0000000..d1c8a7a
--- /dev/null
@@ -0,0 +1,43 @@
+---
+
+mysql::server::root_password: ENC[PKCS7,MIIBiQYJKoZIhvcNAQcDoIIBejCCAXYCAQAxggEhMIIBHQIBADAFMAACAQEwDQYJKoZIhvcNAQEBBQAEggEAVvmiQtCIC3PdhZOWHBHSE/S639igwLABG7VzOn4MrByQSzBvPhilFFNw+aUHyh2MPfsHAGFF/IFWZkDqmySFj6Q5IuTBzabpwHE1DhzR+8DLmKxtOZ+zSpIvfa+h0s8FX1GGqAVY8Et0JbB6GnZ2057T+Kc1IgWZf/mKmvM2EHFfgsqcLmw4oxz/rdW+Q6NOMsmcj8T2bZCMXYopI3a9tTKeOgHkrs31vyb8MWHK68xJIWPGaSHFVKyaPlT+b33iMCC8MVv838vhvLfe9sH5GlakgXs2OrvAW1ILwXpv4jES73gBUEYXTRUvMAfET4NGJXZcWYiYYE3DC4/kbc3RlzBMBgkqhkiG9w0BBwEwHQYJYIZIAWUDBAEqBBALGuz2fgEW/gJl1Z6DYl+3gCC7rPlCsmXnXNftgfyBqLhjkDnnCB8m3ZZtdqI+jqPa5A==]
+mysql::server::backup::backuppassword: ENC[PKCS7,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]
+site::profile::mysql_server::databases:
+  gruenderwoche:
+    user: gruenderwoche
+    password: ENC[PKCS7,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]
+
+php::dev: true
+php::pear: true
+
+site::profile::apache::htdigest:
+  server:
+    www: ENC[PKCS7,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]
+site::profile::typo3::projects:
+  gruenderwoche:
+    version: '7.6.2'
+    site_path: '/var/www/www-bmwi-grwo.pixelpark.net'
+    db_pass: ENC[PKCS7,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]
+    db_user: gruenderwoche
+    db_name: gruenderwoche
+    servername: test-www-bmwi-grwo.pixelpark.net
+    ssl_cert: '/etc/pki/tls/certs/wildcard.pixelpark.net-cert.pem'
+    ssl_key: '/etc/pki/tls/private/wildcard.pixelpark.net-key.pem'
+    ssl_chain: '/etc/pki/tls/certs/wildcard.pixelpark.net-cert.pem'
+    directories:
+      - location1:
+        provider: location
+        path: '/'
+        auth_type: Digest
+        auth_name: server
+        auth_digest_provider: file
+        auth_digest_algorithm: MD5
+        auth_user_file: '/etc/httpd/htdigest'
+        auth_require: 'valid-user'
+        require:
+          - local
+    user: service.typo3
+    mode: '2775'
+    php_admin_value:
+      always_populate_raw_post_data: -1
+      max_input_vars: '1500'
diff --git a/customer/bmwi/bmwi-outbound-proxy.pixelpark.net.yaml b/customer/bmwi/bmwi-outbound-proxy.pixelpark.net.yaml
new file mode 100644 (file)
index 0000000..4c3c2b5
--- /dev/null
@@ -0,0 +1,2 @@
+---
+site::role: base
diff --git a/customer/bmwi/listserv-bmwi-de.pixelpark.net.yaml b/customer/bmwi/listserv-bmwi-de.pixelpark.net.yaml
new file mode 100644 (file)
index 0000000..4c3c2b5
--- /dev/null
@@ -0,0 +1,2 @@
+---
+site::role: base
diff --git a/customer/bmwi/master01-bmwi-de.pixelpark.net.yaml b/customer/bmwi/master01-bmwi-de.pixelpark.net.yaml
new file mode 100644 (file)
index 0000000..197004a
--- /dev/null
@@ -0,0 +1,5 @@
+---
+site::additional_classes:
+  - accounts
+  - pp_mcollective
+
diff --git a/customer/bmwi/poros.pixelpark.net.yaml b/customer/bmwi/poros.pixelpark.net.yaml
new file mode 100644 (file)
index 0000000..25bb2dc
--- /dev/null
@@ -0,0 +1,9 @@
+---
+site::additional_classes:
+  - accounts
+
+accounts::users:
+  david.winter:
+    apply: true
+  christoph.langnickel:
+    apply: true
diff --git a/customer/bmwi/test-listserv-bmwi-de.pixelpark.net.yaml b/customer/bmwi/test-listserv-bmwi-de.pixelpark.net.yaml
new file mode 100644 (file)
index 0000000..f431668
--- /dev/null
@@ -0,0 +1,17 @@
+---
+site::role: base
+mailman::enable_service: true
+mailman::site_pw: 'CHANGEME'
+mailman::language: 'en'
+mailman::mta: 'Postfix'
+mailman::smtp_max_rcpts: '50'
+mailman::enable_service: true
+
+httpd::webserver:
+  test-listserv-bmwi-de-tmp.pixelpark.net:
+    modules:
+      - cgid
+
+xymon::disks:
+  '/boot':
+    ignore: true
\ No newline at end of file
diff --git a/customer/bmwi/test-www02-bmwi-de.pixelpark.net.yaml b/customer/bmwi/test-www02-bmwi-de.pixelpark.net.yaml
new file mode 100644 (file)
index 0000000..af95ee4
--- /dev/null
@@ -0,0 +1,4 @@
+---
+site::additional_classes:
+  - accounts
+
diff --git a/customer/buschjaeger/common.yaml b/customer/buschjaeger/common.yaml
new file mode 100644 (file)
index 0000000..68c5893
--- /dev/null
@@ -0,0 +1,6 @@
+---
+accounts::users:
+  service.typo3:
+    apply: true
+    group: httpd
+    shell: bash
diff --git a/customer/buschjaeger/test.yaml b/customer/buschjaeger/test.yaml
new file mode 100644 (file)
index 0000000..bf62e26
--- /dev/null
@@ -0,0 +1,58 @@
+---
+site::role: base
+#site::additional_classes:
+#  - site::profile::typo3
+#  - site::profile::mysql_server
+
+repo::remi_php55: true
+
+site::profile::mysql_server::databases:
+  typo3:
+    user: typo3
+    password: ENC[PKCS7,MIIBeQYJKoZIhvcNAQcDoIIBajCCAWYCAQAxggEhMIIBHQIBADAFMAACAQEwDQYJKoZIhvcNAQEBBQAEggEALbFl19TRQy3e20BFQNgu7SRN4uAryldw/oyel2nJ5sqgK7izhf2HDzmsAl9RSFGC0PG0qAyolA8YNTZc0yWjbSi6yuVIQjfmHB+N4nxTMpTL8rYCZsrNF7sSHQdD7VBXEX0igQhC/wFHqJQQ0dTy1xoeWCb2wkkoNEzt2hosLtic6cZMoV+muKnUQl1AbI6deOCZgULb/vatINwxzbmGb+TANjAJLCBOYQ9BL4PJgbaWaRwZzOJVGaS3aIsNktTe9AhWkpWipDMqnVvaEVFCiopS/oQKlmxebIIiAKG3D4xVRAW+uMA3zFcvPtMgv9UhpS2OIlY7v81dUCq5lLn3hTA8BgkqhkiG9w0BBwEwHQYJYIZIAWUDBAEqBBBLoguHYFkTUzjHyBnSqCdWgBATsQAG3lTAEKoEKRRAVZsw]
+
+mysql::server::root_password: ENC[PKCS7,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]
+mysql::server::backup::backuppassword: ENC[PKCS7,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]
+
+php::settings:
+  Date/date.timezone: Europe/Berlin
+  PHP/expose_php: 'Off'
+
+site::profile::typo3::projects:
+  buschjaeger:
+    version: '6.2.16'
+    site_path: '/srv/www/buschjaeger'
+    db_pass: ENC[PKCS7,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]
+    db_user: typo3
+    db_name: typo3
+    servername: test-www-busch-jaeger-de.pixelpark.net
+    ssl_cert: '/etc/pki/tls/certs/wildcard.pixelpark.net-cert.pem'
+    ssl_key: '/etc/pki/tls/private/wildcard.pixelpark.net-key.pem'
+    ssl_chain: '/etc/pki/tls/certs/wildcard.pixelpark.net-cert.pem'
+    directories:
+      - directory1:
+        provider: directory
+        path: '/srv/www/buschjaeger'
+        options:
+          - Indexes
+          - FollowSymLinks
+          - MultiViews
+        allow_override:
+          - FileInfo
+          - Indexes
+        directoryindex: index.php
+      - location1:
+        provider: location
+        path: '/'
+        auth_type: Digest
+        auth_name: Server
+        auth_digest_provider: file
+        auth_digest_algorithm: MD5
+        auth_user_file: '/etc/httpd/htdigest'
+        auth_require: 'valid-user'
+        require:
+          - local
+    user: service.typo3
+    mode: '2775'
+    php_admin_value:
+      memory_limit: 256M
\ No newline at end of file
diff --git a/customer/buschjaeger/www01-busch-jaeger-de.pixelpark.net.yaml b/customer/buschjaeger/www01-busch-jaeger-de.pixelpark.net.yaml
new file mode 100644 (file)
index 0000000..4c3c2b5
--- /dev/null
@@ -0,0 +1,2 @@
+---
+site::role: base
diff --git a/customer/buschjaeger/www02-busch-jaeger-de.pixelpark.net.yaml b/customer/buschjaeger/www02-busch-jaeger-de.pixelpark.net.yaml
new file mode 100644 (file)
index 0000000..4c3c2b5
--- /dev/null
@@ -0,0 +1,2 @@
+---
+site::role: base
diff --git a/customer/datev/development.yaml b/customer/datev/development.yaml
new file mode 100644 (file)
index 0000000..d35c86e
--- /dev/null
@@ -0,0 +1,20 @@
+---
+accounts::users:
+  lothar.schickhoff:
+    apply: true
+    sudo: true
+  tim.schroeder:
+    apply: true
+    sudo: true
+  sebastian.bayer:
+    apply: true
+    sudo: true
+  christian.beyer:
+    apply: true
+    sudo: true
+  markus.hettlich:
+    apply: true
+    sudo: true
+  tamas.roszler:
+    apply: true
+    sudo: true
diff --git a/customer/dba/orarepo.pixelpark.net.yaml b/customer/dba/orarepo.pixelpark.net.yaml
new file mode 100644 (file)
index 0000000..4c3c2b5
--- /dev/null
@@ -0,0 +1,2 @@
+---
+site::role: base
diff --git a/customer/dbad/arachne.pixelpark.net.yaml b/customer/dbad/arachne.pixelpark.net.yaml
new file mode 100644 (file)
index 0000000..a805209
--- /dev/null
@@ -0,0 +1,9 @@
+---
+accounts::users:
+# Das Buero am Draht
+  thomas.kamann:
+    apply: false
+  thomas.mues:
+    apply: false
+  florian.keller:
+    apply: true
\ No newline at end of file
diff --git a/customer/dbad/common.yaml b/customer/dbad/common.yaml
new file mode 100644 (file)
index 0000000..fa75f3e
--- /dev/null
@@ -0,0 +1,3 @@
+---
+site::profile::apache::enable_logstash: false
+apache::mpm_module: worker
\ No newline at end of file
diff --git a/customer/dbad/dbad-web25.pixelpark.net.yaml b/customer/dbad/dbad-web25.pixelpark.net.yaml
new file mode 100644 (file)
index 0000000..af95ee4
--- /dev/null
@@ -0,0 +1,4 @@
+---
+site::additional_classes:
+  - accounts
+
diff --git a/customer/dbad/dbad-web26.pixelpark.net.yaml b/customer/dbad/dbad-web26.pixelpark.net.yaml
new file mode 100644 (file)
index 0000000..af95ee4
--- /dev/null
@@ -0,0 +1,4 @@
+---
+site::additional_classes:
+  - accounts
+
diff --git a/customer/dbad/dbad-web27.pixelpark.net.yaml b/customer/dbad/dbad-web27.pixelpark.net.yaml
new file mode 100644 (file)
index 0000000..7e76896
--- /dev/null
@@ -0,0 +1,9 @@
+---
+site::additional_classes:
+  - accounts
+
+# Appzone
+accounts::users:
+# Das Buero am Draht
+  db.admin:
+    apply: true
diff --git a/customer/dbad/dbad-web28.pixelpark.net.yaml b/customer/dbad/dbad-web28.pixelpark.net.yaml
new file mode 100644 (file)
index 0000000..7e76896
--- /dev/null
@@ -0,0 +1,9 @@
+---
+site::additional_classes:
+  - accounts
+
+# Appzone
+accounts::users:
+# Das Buero am Draht
+  db.admin:
+    apply: true
diff --git a/customer/dbad/dbad-web29.pixelpark.net.yaml b/customer/dbad/dbad-web29.pixelpark.net.yaml
new file mode 100644 (file)
index 0000000..67db113
--- /dev/null
@@ -0,0 +1,22 @@
+---
+site::additional_classes:
+  - accounts
+
+# RVS Zone
+accounts::users:
+# Das Buero am Draht
+  thomas.kamann:
+    sudo_cmds:
+      - SURVS
+  thomas.mues:
+    sudo_cmds:
+      - SURVS
+  gerhard.lehmann:
+    sudo_cmds:
+      - SURVS
+  tim.schierbaum:
+    sudo_cmds:
+      - SURVS
+  marco.wagner:
+    sudo_cmds:
+      - SURVS
\ No newline at end of file
diff --git a/customer/dbad/dbad-web30.pixelpark.net.yaml b/customer/dbad/dbad-web30.pixelpark.net.yaml
new file mode 100644 (file)
index 0000000..eabe824
--- /dev/null
@@ -0,0 +1,3 @@
+---
+site::additional_classes:
+  - accounts
\ No newline at end of file
diff --git a/customer/dbad/dbad-web36.pixelpark.net.yaml b/customer/dbad/dbad-web36.pixelpark.net.yaml
new file mode 100644 (file)
index 0000000..dd2adab
--- /dev/null
@@ -0,0 +1,11 @@
+---
+site::role: base
+#site::additional_classes:
+#  - site::profile::apache
+#  - apache::mod::ssl
+#  - apache::mod::security
+#  - apache::mod::rewrite
+#  - apache::mod::headers
+#  - apache::mod::proxy
+#  - apache::mod::proxy_http
+#  - apache::mod::setenvif
\ No newline at end of file
diff --git a/customer/dbad/dbad-web37.pixelpark.net.yaml b/customer/dbad/dbad-web37.pixelpark.net.yaml
new file mode 100644 (file)
index 0000000..dd2adab
--- /dev/null
@@ -0,0 +1,11 @@
+---
+site::role: base
+#site::additional_classes:
+#  - site::profile::apache
+#  - apache::mod::ssl
+#  - apache::mod::security
+#  - apache::mod::rewrite
+#  - apache::mod::headers
+#  - apache::mod::proxy
+#  - apache::mod::proxy_http
+#  - apache::mod::setenvif
\ No newline at end of file
diff --git a/customer/dbad/dbad-web38.pixelpark.net.yaml b/customer/dbad/dbad-web38.pixelpark.net.yaml
new file mode 100644 (file)
index 0000000..baabd38
--- /dev/null
@@ -0,0 +1,10 @@
+---
+site::role: base
+repo::redhat::oel7::ol7_MySQL56_baseurl: 'http://public-yum.oracle.com/repo/OracleLinux/OL7/MySQL56/$basearch/'
+repo::redhat::oel7::ol7_MySQL56_enable: 1
+
+# Appzone
+accounts::users:
+# Das Buero am Draht
+  db.admin:
+    apply: true
\ No newline at end of file
diff --git a/customer/dbad/dbad-web39.pixelpark.net.yaml b/customer/dbad/dbad-web39.pixelpark.net.yaml
new file mode 100644 (file)
index 0000000..baabd38
--- /dev/null
@@ -0,0 +1,10 @@
+---
+site::role: base
+repo::redhat::oel7::ol7_MySQL56_baseurl: 'http://public-yum.oracle.com/repo/OracleLinux/OL7/MySQL56/$basearch/'
+repo::redhat::oel7::ol7_MySQL56_enable: 1
+
+# Appzone
+accounts::users:
+# Das Buero am Draht
+  db.admin:
+    apply: true
\ No newline at end of file
diff --git a/customer/dbad/nemesis.pixelpark.net.yaml b/customer/dbad/nemesis.pixelpark.net.yaml
new file mode 100644 (file)
index 0000000..4c3c2b5
--- /dev/null
@@ -0,0 +1,2 @@
+---
+site::role: base
diff --git a/customer/dbad/production.yaml b/customer/dbad/production.yaml
new file mode 100644 (file)
index 0000000..362f1b7
--- /dev/null
@@ -0,0 +1,216 @@
+---
+
+accounts::users:
+# Das Buero am Draht
+  db.admin:
+    uid: 60155
+    apply: false
+    comment: "DB-Admin"
+    shell: "bash"
+    group: "dba"
+    sudo: true
+    sudo_cmds: 
+     - DATABASE
+     - DBEDIT
+  dbad.admin:
+    uid: 0
+    apply: true
+    comment: "DBAD-Admin"
+    shell: "bash"
+    group: "root"  
+  fabian.hahn:
+    uid: 60150
+    apply: true
+    comment: "Fabian-Hahn dbad"
+    key: "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"
+    shell: "bash"
+    group: "dbad"
+  gerhard.lehmann:
+    uid: 60151
+    apply: true
+    comment: "Gerhard-Lehmann dbad"
+    key: "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"
+    shell: "bash"
+    group: "dbad"
+    sudo: true
+    sudo_cmds:
+      - JBOSS
+      - TOMCAT
+      - WWW
+      - DOCEDIT
+      - LOGEDIT
+      - DEALERDATAEDIT
+      - WEBEDIT
+      - RM
+      - LN
+      - CRONBYTOMCAT
+      - CRONBYJBOSS
+      - CRONBYWWW
+      - CRONBYRVS
+      - SUDBADMIN
+      - SURVS
+      - SUNAMED
+      - SUMUNIN
+      - SUDBADADMIN
+      - SUDBADMIN
+  thomas.kamann:
+    uid: 60152
+    apply: true
+    comment: "Thomas-Kamann dbad"
+    key: "AAAAB3NzaC1yc2EAAAABIwAAAQEAoIHX+I1E3MuUBSU2JKN+J8Yum73CzTu7l7RTb/TUfUbEA/Srgzp3HfiPcqb+ML797MWB5nUCpKdQG+vd7nG6/7awZYt2iFP9jZTjF0TP9Eba+d2DfT4LqbKJLbgMUdfA4Vb0tXvzPoRTxOepn3ZUWZ/ul64F/cqCOEopftW3BbKDLqfkCow8RKhsqAI5L3deZ0lk8CyvmpeiojaDKWIaOS7obMcVUoKx25wkFyR7IojbbXpBFEYu76PpGGTuyrj/03s3KhkAhM5l72QvFZIEUA6r7tTvlrhjDdX6W/Kf5Vhvl5FwHlZEhogYbucfk7UVwSoaZ88AX+t6U1s1s+id0w=="
+    shell: "bash"
+    group: "dbad"
+    sudo: true
+    sudo_cmds:
+      - JBOSS
+      - TOMCAT
+      - WWW
+      - DOCEDIT
+      - LOGEDIT
+      - DEALERDATAEDIT
+      - WEBEDIT
+      - LN
+      - RM
+      - CP
+      - CRONBYTOMCAT
+      - CRONBYJBOSS
+      - CRONBYWWW
+      - CRONBYRVS
+      - SUDBADMIN
+  thomas.mues:
+    uid: 60153
+    apply: true
+    comment: "Thomas-Mues dbad"
+    key: "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"
+    shell: "bash"
+    group: "dbad"
+    sudo: true
+    sudo_cmds:
+      - JBOSS
+      - TOMCAT
+      - WWW
+      - DOCEDIT
+      - LOGEDIT
+      - DEALERDATAEDIT
+      - WEBEDIT
+      - LN
+      - RM
+      - CP
+      - CRONBYTOMCAT
+      - CRONBYJBOSS
+      - CRONBYWWW
+      - CRONBYRVS
+      - SUDBADMIN
+  tim.schierbaum:
+    uid: 60157
+    apply: true
+    comment: "Tim-Schierbaum dbad"
+    key: "AAAAB3NzaC1yc2EAAAADAQABAAACAQC3uHz5v9Q+/2NbSZuzbJjXShZ1HRrxl8VxKULVQDI59wYYfHskfGXrPjmsVInNaJXiICHa4SVSRClHPji1dSmLiFrnmq1pRYUD6KZFI8NHTUWsCJn+UYMM32YNuUwj7/L2yLYV+tTAujTfiTVld+QoOuMaiSzrsPVI/QLNb4WJKCNguDaMOPMkzfrtvV4lWs17809x2+7j0/0nXjj0VwR5OQMLgeOUMEfd9f8ope0GTeKrGBaiqzhskwibg8rk6Lw5i/BpNmdFYEV9Tk/ZC4zeHIC4gyElayyUSpViPsDTaPHJAfljwA2qPCCGPmn46yH7Iti+Xj5vKluM5Zbm7+JLWz18lpbiURKO6Sq3iY/n9aiG+QmFZPHtbZ5+zmx8iPevDO5z74ZiFVospXUiauhh1nBE6RjSXPiWhFKNK6ONKGBmpie0dd1rZnqBzt2g3QgqJKjalcrbbs3XN0yt+LtrwJiD7PJSfZEzt0NmZGl2sbMvnC3RN9wbPs8OsKZtvBxCh4oD69IoTfb6mMzWvVP7fEkhTrQv0bHz6BzUGef8nV6C3LajPauUkjxBr/BEx5BvicfZx6HX5cO2eYr4RSD1Qbai7E3xKwlykT8sb3BiqyzQuzCqD5OOEIJBEvXELjzNs1PDfXduWdeQUTFHcChCoN+WEFDieoh/N/p+lIXfqQ=="
+    shell: "bash"
+    group: "dbad"
+    sudo: true
+    sudo_cmds:
+      - JBOSS
+      - TOMCAT
+      - WWW
+      - DOCEDIT
+      - LOGEDIT
+      - DEALERDATAEDIT
+      - WEBEDIT
+      - LN
+      - RM
+      - CP
+      - CRONBYTOMCAT
+      - CRONBYJBOSS
+      - CRONBYWWW
+      - CRONBYRVS
+      - SUDBADMIN
+  marco.wagner:
+    uid: 60158
+    apply: true
+    comment: "Marco-Wagner dbad"
+    key: "AAAAB3NzaC1yc2EAAAADAQABAAACAQC2IIGIfy39R7cP67FUbHRwNujnx+M8UDLXMleUYrceuRpUpw2PE9EYTGxp9YInJuER9XjsWPAoe5WaEdikxNuVC3vll7PY2iw2chEEWn/9FrX9nxSLjZfmjhUzuE+/BZMqhIrTicbm+ABxYsSQ0WdKt5mxM2gWgbjjpGxQSZph0NIAT2Qu4JUWUU+E4m2Z1goFMvIyP0RxIiRvXAWs6kZsbEZoagPEdmK1w8h+n9LdkQSK3vI2JsRB0pXK7OUp/t5FovrjEUPPrR6Oh84ZXiQcfdZuTF3gFnu2deqpBn5TwX+q0kcUquGBxwNUy5JkdULRPsAYddWSGu3uKJC7SDOx3/kHuBmKn5eNSWa/oUThDPphbpvAHO5FQmiB3baTON4XqcTsLEhul4Kr55pr5zyVOGR4Z6F4iBzb7pfKMuct0EPc2Kssz54jX9+TkAOxU39VAruAODwrv91tZG97uqKhmDjqpaCBTgpq1Tl20k4FqoV/PQyK4oPKoRm5+ea9wN1J7AHmx8kZxhwtQVnDIfSiIu4tE334OcOiGoJvU8UIVkUO/Bx7H++ALtvBQ7Y8CVawtfUzuxNMut2/tIeA/2qR6ws4SKCc/Urrs2GZFcO6t+2GFB3P/czLJR5jnI1s7occ8wqZCLJPyxl36leZq/TXFMTt9LJ/9VHgzqY5Vfh4qQ=="
+    shell: "bash"
+    group: "dbad"
+    sudo: true
+    sudo_cmds:
+      - JBOSS
+      - TOMCAT
+      - WWW
+      - DOCEDIT
+      - LOGEDIT
+      - DEALERDATAEDIT
+      - WEBEDIT
+      - LN
+      - RM
+      - CP
+      - CRONBYTOMCAT
+      - CRONBYJBOSS
+      - CRONBYWWW
+      - CRONBYRVS
+      - SUDBADMIN
+  florian.keller:
+    uid: 60156
+    apply: false
+    comment: "Florian Keller dbad"
+    key: "AAAAB3NzaC1yc2EAAAABIwAAAIEAuGDISf8WxYgBZBTvE5vUl66HwY2n3SBVzrDI8hidX/Pv1MsoWPbTnCF5uaxP2PxW1Wa5vE4BwbpazN8hMxYIvkLX+eck44u1EgdugJ19Lma1sOl1JexsSh/6ygYVN4yBmwAkqE+d6SGNodRUXPygE4i2aE2c4CDvQBZj0HUzhh8="
+    shell: "bash"
+    group: "dbad"
+    sudo: true
+    sudo_cmds:
+      - SUORACLE
+  deployer:
+    uid: 60154
+    apply: true
+    comment: "DeployUser-DBAD"
+    shell: "bash"
+    group: "dbad"
+    keys:
+      thomas@four.intern.dasburo.com:
+        key: "AAAAB3NzaC1yc2EAAAADAQABAAACAQDVe40SCGoKtQOYouK7mWMJBvedRB8t09hGaz79ojNr6CrzTYi7XPLUqT7WWeCDOrhz8U9ZX5Jx4Pf6Fyn4FY14XmW2FSRXcV5xibBAsJ9wrL9nNar+iAF8kF+WsxI9zG1Ha9LGAG0Sc+YfFRZlK1KdtPxpOaI9URVFnWmjTXC3KBcESdeqOX6Hvl3PQUwqTOn+CP0IvE4ASWN52gww4kUMZbhTnuXvKfJV17lMpQKY+qcpA/rANtux4Q+C9kwTzNLOxEiTBjhlM5yOWq0QXMq+KOTYuyubqcbrtRSkBt70oA3gysEcFdtp/bcXNKZhruX7l6HZTs6hjcMxmoPAsTFd5Rfw+lV/sdPaxfhIUjq4X2wq6CcWT+tShiPoF6CQLtGSISMg8/bBayX3m21lu6uMA0obr4dXL83UWJwSQivgrOortAGDa92D1WGmFU8F7Sd38TnDtpTCbk2BkH5LIJCumndMu2vZVl0/vcCD3Wt7/3GjUY77X/3mk8ezet9VoT5+c1mcocyR9+7Y3drh4kFCXITKZ2GDFFH1bRL0NkBABuxe6vNJE3ShGHq22LojReB0Luz0hGlX0NoHhN+qpL5sx2TUiuPXDXhlfzGMoO40muZlrqR48zbjIPEYm5qrtSqZkJIAGUSbQ//fO92CUH1i4Z/TI1xtQ1/1la4sgRqshQ=="
+      tom@tomspc:
+        key: "AAAAB3NzaC1yc2EAAAABIwAAAQEAoIHX+I1E3MuUBSU2JKN+J8Yum73CzTu7l7RTb/TUfUbEA/Srgzp3HfiPcqb+ML797MWB5nUCpKdQG+vd7nG6/7awZYt2iFP9jZTjF0TP9Eba+d2DfT4LqbKJLbgMUdfA4Vb0tXvzPoRTxOepn3ZUWZ/ul64F/cqCOEopftW3BbKDLqfkCow8RKhsqAI5L3deZ0lk8CyvmpeiojaDKWIaOS7obMcVUoKx25wkFyR7IojbbXpBFEYu76PpGGTuyrj/03s3KhkAhM5l72QvFZIEUA6r7tTvlrhjDdX6W/Kf5Vhvl5FwHlZEhogYbucfk7UVwSoaZ88AX+t6U1s1s+id0w=="
+      mw@dasburo.com:
+        key: "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"
+    sudo: true
+    sudo_cmds:
+      - JBOSS
+      - TOMCAT
+      - WWW
+      - DOCEDIT
+      - LOGEDIT
+      - DEALERDATAEDIT
+      - WEBEDIT
+      - LN
+      - CHOWNWWW
+      - UNZIPWWW
+
+sudo::configs:
+  cmd_alias:
+    priority: "05"
+    content: |
+      Cmnd_Alias CHOWNWWW = /bin/chown -R * /www/*,/bin/chown -R * /etc/my.cnf,/bin/chown -R * /var/lib/mysql/*,/bin/chown -R * /var/www/*,/bin/chown -R * /var/log/httpd/*,/bin/chown -R * /var/lib/tomcat-instances/*
+      Cmnd_Alias CP = /bin/cp,/bin/cp -f,/bin/cp -rf
+      Cmnd_Alias CRONBYJBOSS = /usr/bin/crontab -u jboss -e
+      Cmnd_Alias CRONBYRVS = /usr/bin/crontab -u rvs -e
+      Cmnd_Alias CRONBYTOMCAT = /usr/bin/crontab -u tomcat -e
+      Cmnd_Alias CRONBYWWW = /usr/bin/crontab -u www -e
+      Cmnd_Alias DATABASE = /www/bin/mysql,/bin/systemctl * mysqld,/bin/systemctl * mysqld.service
+      Cmnd_Alias DBEDIT = /usr/bin/vim /www/conf/mysql/*,/bin/rm /www/conf/mysql/*, /usr/bin/vim /etc/my.cnf,/bin/rm /etc/my.cnf
+      Cmnd_Alias DEALERDATAEDIT = /usr/bin/vim /www/dealerdata/*,/bin/rm /www/dealerdata/*
+      Cmnd_Alias DOCEDIT = /usr/bin/vim /www/htdocs/*,/bin/rm /www/htdocs/*,/bin/rm -f /www/htdocs/*,/bin/rm -rf /www/htdocs/*,/usr/bin/vim /var/www/*,/bin/rm -f /var/www/*,/bin/rm -rf /var/www/*
+      Cmnd_Alias JBOSS = /www/bin/jboss,/www/bin/jboss.user,/bin/systemctl * jboss-vwnavc-live02.service,/bin/systemctl * jboss-vwnavc-qs02.service
+      Cmnd_Alias LN = /bin/ln,/bin/ln -s
+      Cmnd_Alias LOGEDIT = /usr/bin/vim /www/logs/*,/bin/rm /www/logs/*,/bin/rm -f /www/logs/*,/bin/rm -rf /www/logs/*,/usr/bin/vim /var/log/httpd/*,/bin/rm /var/log/httpd/*,/bin/rm -f /var/log/httpd/*,/bin/rm -rf /var/log/httpd/*
+      Cmnd_Alias MSQL = /www/bin/mysql,/bin/systemctl * mysqld,/bin/systemctl * mysqld.service
+      Cmnd_Alias RM = /bin/rm,/bin/rm -f,/bin/rm -rf
+      Cmnd_Alias SUDBADADMIN = /bin/su - dbad.admin
+      Cmnd_Alias SUDBADMIN = /bin/su - db.admin
+      Cmnd_Alias SUMUNIN = /bin/su - munin
+      Cmnd_Alias SUNAMED = /bin/su - named
+      Cmnd_Alias SUORACLE = /bin/su - oracle
+      Cmnd_Alias SURVS = /bin/su - rvs
+      Cmnd_Alias TOMCAT = /www/bin/tomcat,/bin/systemctl * tomcat@*
+      Cmnd_Alias UNZIPWWW = /usr/bin/unzip,/usr/bin/unzip * -d /www/,/usr/bin/unzip -o * -d /www/*,/usr/bin/unzip *
+      Cmnd_Alias WEBEDIT = /usr/bin/vim /www/conf/*,!/usr/bin/vim /www/conf/mysql/*,/bin/rm /www/conf/*,/bin/rm -f /www/conf/*,/bin/rm -rf /www/conf/*,!/bin/rm /www/conf/mysql/*,!/bin/rm -f /www/conf/mysql/*,!/bin/rm -rf /www/conf/mysql/*,/usr/bin/vim /etc/httpd/*,/usr/bin/vim /etc/my.cnf,/bin/rm /etc/httpd/*,/bin/rm -f /etc/httpd/*,/bin/rm -rf /etc/httpd/*
+      Cmnd_Alias WWW = /www/bin/www2,/bin/systemctl * httpd*
diff --git a/customer/docmorris/prd-app01-fact-01-dm.pixelpark.net.yaml b/customer/docmorris/prd-app01-fact-01-dm.pixelpark.net.yaml
new file mode 100644 (file)
index 0000000..4c3c2b5
--- /dev/null
@@ -0,0 +1,2 @@
+---
+site::role: base
diff --git a/customer/dpag/standorte-zonehost01.pixelpark.net.yaml b/customer/dpag/standorte-zonehost01.pixelpark.net.yaml
new file mode 100644 (file)
index 0000000..4c3c2b5
--- /dev/null
@@ -0,0 +1,2 @@
+---
+site::role: base
diff --git a/customer/dpag/standorte-zonehost02.pixelpark.net.yaml b/customer/dpag/standorte-zonehost02.pixelpark.net.yaml
new file mode 100644 (file)
index 0000000..4c3c2b5
--- /dev/null
@@ -0,0 +1,2 @@
+---
+site::role: base
diff --git a/customer/dpdhl/dev-delivering-tomorrow-com.pixelpark.net.yaml b/customer/dpdhl/dev-delivering-tomorrow-com.pixelpark.net.yaml
new file mode 100644 (file)
index 0000000..df5b062
--- /dev/null
@@ -0,0 +1,7 @@
+---
+site::role: base
+site::additional_classes:
+  - site::profile::mysql_server
+  - site::profile::wordpress
+  - logstash
+
diff --git a/customer/dpdhl/development.yaml b/customer/dpdhl/development.yaml
new file mode 100644 (file)
index 0000000..120e113
--- /dev/null
@@ -0,0 +1,66 @@
+---
+
+accounts::users:
+  konrad.tadesse:
+    apply: true
+  thomas.bussmeyer:
+    apply: true
+  deploy.vogel:
+    apply: true
+    sudo: false
+  christof.hoefler:
+    apply: true
+  
+mysql::server::root_password: ENC[PKCS7,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]
+mysql::server::backup::backuppassword: ENC[PKCS7,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]
+site::profile::mysql_server::databases:
+  dpdhl:
+    user: dpdhl
+    password: ENC[PKCS7,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]
+
+apache::mpm_module: worker
+apache::default_vhost: false
+
+site::profile::wordpress::projects:
+  'delivering-tomorrow-com':
+    servername: dev-delivering-tomorrow-com.pixelpark.net
+    ip: 217.66.57.21
+    ssl_cert: '/etc/pki/tls/certs/wildcard.pixelpark.net-cert.pem'
+    ssl_key: '/etc/pki/tls/private/wildcard.pixelpark.net-key.pem'
+    ssl_chain: '/etc/pki/tls/certs/wildcard.pixelpark.net-cert.pem'
+    group: pixel
+    directories:
+      - directory1:
+        provider: directory
+        path: '/var/www/html/delivering-tomorrow-com/'
+        options:
+          - FollowSymLinks
+          - MultiViews
+        allow_override:
+          - All
+          
+php::settings:
+  Date/date.timezone: Europe/Berlin
+  PHP/expose_php: 'Off'
+
+php::fpm::pools:
+  www:
+    php_admin_value:
+      memory_limit: 64M
+      upload_max_filesize: 40M
+      post_max_size: 40M
+      max_execution_time: '240'
+
+php::extensions:
+  gd: {}
+  mbstring: {}
+  pdo: {}
+  mcrypt: {}
+  xml: {}
+  pecl-gmagick: {}
+  pspell: {}
+  xmlrpc: {}
+  mysqlnd: {}
+
+php::dev: true
+php::pear: true
diff --git a/customer/emperra/db2-portal-esysta-com.pixelpark.net.yaml b/customer/emperra/db2-portal-esysta-com.pixelpark.net.yaml
new file mode 100644 (file)
index 0000000..4c3c2b5
--- /dev/null
@@ -0,0 +1,2 @@
+---
+site::role: base
diff --git a/customer/emperra/portal-esysta-com.pixelpark.net.yaml b/customer/emperra/portal-esysta-com.pixelpark.net.yaml
new file mode 100644 (file)
index 0000000..e84fa35
--- /dev/null
@@ -0,0 +1,294 @@
+---
+accounts::users:
+  ries:
+    apply: true
+    sudo: true
+    group: emperra
+    groups:
+      - dialog
+    sudo_cmds:
+      - DIALOG
+      - APACHE
+  bentrup:
+    apply: true
+    sudo: true
+    group: emperra
+    groups:
+      - dialog
+    sudo_cmds:
+      - DIALOG
+      - APACHE
+  pratsch:
+    apply: true
+    sudo: true
+    group: emperra
+    groups:
+      - dialog
+    sudo_cmds:
+      - DIALOG
+      - APACHE
+  bruestel:
+    apply: true
+    sudo: true
+    group: emperra
+    groups:
+      - dialog
+    sudo_cmds:
+      - DIALOG
+      - APACHE
+
+sudo::configs:
+  cmd_alias:
+    priority: "05"
+    content: |
+      Cmnd_Alias DIALOG = /bin/systemctl * DIAlog.service
+      Cmnd_Alias APACHE = /bin/systemctl * httpd.service
+  dialog:
+    priority: "06"
+    content: |
+      %dialog ALL=(dialog) NOPASSWD: ALL
+
+
+site::role: base
+site::additional_classes:
+  - site::profile::apache
+  - apache::mod::wsgi
+  - python
+
+site::additional_packages:
+  freetype-devel: {}
+  gcc-c++: {}
+  libpng-devel: {}
+  git: {}
+  openssl-devel: {}
+  postgresql-devel: {}
+
+
+python::dev: true
+python::use_epel: false
+python::manage_gunicorn: false
+python::virtualenv: true
+python::python_virtualenvs:
+  '/var/lib/python-venv/esysta':
+    ensure: present
+    group: emperra
+    mode: '2775'
+python::python_pips:
+  psycopg2:
+    ensure: 2.5.2
+    virtualenv: '/var/lib/python-venv/esysta'
+    group: emperra
+  matplotlib:
+    ensure: 1.2.1
+    virtualenv: '/var/lib/python-venv/esysta'
+    group: emperra
+  numpy:
+    ensure: 1.6.1
+    virtualenv: '/var/lib/python-venv/esysta'
+    group: emperra
+  Twisted:
+    ensure: 10.1.0
+    virtualenv: '/var/lib/python-venv/esysta'
+    group: emperra
+  PIL:
+    ensure: 1.1.7
+    url: http://effbot.org/downloads/Imaging-1.1.7.tar.gz
+    virtualenv: '/var/lib/python-venv/esysta'
+    group: emperra
+  Django:
+    ensure: 1.6.10
+    virtualenv: '/var/lib/python-venv/esysta'
+    group: emperra
+  egenix-mx-base:
+    ensure: 3.2.9
+    virtualenv: '/var/lib/python-venv/esysta'
+    group: emperra
+  pyOpenSSL:
+    ensure: 0.13.1
+    virtualenv: '/var/lib/python-venv/esysta'
+    group: emperra
+  python-dateutil:
+    ensure: 1.4.1
+    virtualenv: '/var/lib/python-venv/esysta'
+    group: emperra
+  PyYAML:
+    ensure: '3.10'
+    virtualenv: '/var/lib/python-venv/esysta'
+    group: emperra
+  reportlab:
+    ensure: 2.4
+    virtualenv: '/var/lib/python-venv/esysta'
+    group: emperra
+  requests:
+    ensure: 2.2.1
+    virtualenv: '/var/lib/python-venv/esysta'
+    group: emperra
+  zope.interface:
+    ensure: 4.0.5
+    virtualenv: '/var/lib/python-venv/esysta'
+    group: emperra
+
+apache::default_vhost: false
+apache::mpm_module: event
+
+apache::mod::wsgi::wsgi_python_home: /var/lib/python-venv/esysta
+
+site::profile::apache::vhosts:
+  dummy-http:
+    servername: portal.esysta.com
+    serveraliases:
+      - 'portal.dia.log.medimatik.de'
+      - '*.portal.dia.log.medimatik.de'
+      - 'portal.dia-log.medimatik.de'
+      - '*.portal.dia-log.medimatik.de'
+      - 'portal.dialog.medimatik.de'
+      - '*.portal.dialog.medimatik.de'
+      - 'portal.dia.log.medimatik.com'
+      - '*.portal.dia.log.medimatik.com'
+      - 'portal.dia-log.medimatik.com'
+      - '*.portal.dia-log.medimatik.com'
+      - 'portal.dialog.medimatik.com'
+      - '*.portal.dialog.medimatik.com'
+      - '*.portal.esysta.com'
+    docroot: '/var/empty'
+    docroot_owner: root
+    docroot_mode: '0775'
+    ip: 77.74.237.40
+    port: 80
+    directories:
+      - directory_root:
+        provider: directory
+        path: '/var/empty'
+        options:
+          - FollowSymLinks
+          - MultiViews
+        allow_override:
+          - None
+    rewrites:
+      - httpsonly:
+        comment: 'Alles auf https umleiten.'
+        rewrite_rule:
+          - ^(.*)$ https://%%{ich-trickse}{HTTP_HOST}$1 [R=301,L]
+  arzt:
+    servername: doc.esysta.com
+    serveraliases:
+      - arzt.portal.dia.log.medimatik.de
+      - arzt-portal-esysta-com.pixelpark.net
+    docroot: '/var/www/esysta'
+    docroot_owner: apache
+    docroot_group: dialog
+    docroot_mode: '2775'
+    ip: 77.74.237.40
+    port: 443
+    ssl: true
+    ssl_cert: /etc/pki/tls/certs/portal.esysta.com-cert.pem
+    ssl_chain: /etc/pki/tls/certs/portal.esysta.com-cert.pem
+    ssl_key: /etc/pki/tls/private/portal.esysta.com-key.pem
+    directories:
+      - directory_root:
+        provider: directory
+        path: '/var/www/esysta'
+        options:
+          - FollowSymLinks
+          - MultiViews
+        allow_override:
+          - All
+    wsgi_daemon_process: arzt
+    wsgi_daemon_process_options:
+      processes: 2
+      threads: 15
+      display-name: "%%{BLUBB}{GROUP}"
+      maximum-requests: 10000
+      python-path: "/var/lib/python-venv/esysta/lib/python2.7/site-packages:/var/www/esysta/lib"
+    wsgi_process_group: arzt
+    wsgi_script_aliases:
+      '/': '/var/www/esysta/lib/doctor/wsgi.py'
+    aliases:
+      - alias: '/media'
+        path: '/var/lib/python-venv/esysta/lib/python2.7/site-packages/django/contrib/admin/static/'
+      - alias: '/site-media'
+        path: '/var/www/esysta/media'
+      - alias: '/site-video'
+        path: '/var/www/esysta/site-video'
+  portal:
+    servername: portal.esysta.com
+    serveraliases:
+      - portal.dia.log.medimatik.de
+      - portal-esysta-com.pixelpark.net
+    docroot: '/var/www/esysta'
+    docroot_owner: apache
+    docroot_group: dialog
+    docroot_mode: '2775'
+    ip: 77.74.237.40
+    port: 443
+    ssl: true
+    ssl_cert: /etc/pki/tls/certs/portal.esysta.com-cert.pem
+    ssl_chain: /etc/pki/tls/certs/portal.esysta.com-cert.pem
+    ssl_key: /etc/pki/tls/private/portal.esysta.com-key.pem
+    directories:
+      - directory_root:
+        provider: directory
+        path: '/var/www/esysta'
+        options:
+          - FollowSymLinks
+          - MultiViews
+        allow_override:
+          - All
+    wsgi_daemon_process: portal
+    wsgi_daemon_process_options:
+      processes: 2
+      threads: 15
+      display-name: "%%{BLUBB}{GROUP}"
+      maximum-requests: 10000
+      python-path: "/var/lib/python-venv/esysta/lib/python2.7/site-packages:/var/www/esysta/lib"
+    wsgi_process_group: portal
+    wsgi_script_aliases:
+      '/': '/var/www/esysta/lib/patient/wsgi.py'
+    aliases:
+      - alias: '/media'
+        path: '/var/lib/python-venv/esysta/lib/python2.7/site-packages/django/contrib/admin/static/'
+      - alias: '/site-media'
+        path: '/var/www/esysta/media'
+      - alias: '/site-video'
+        path: '/var/www/esysta/site-video'
+  mitarbeiter:
+    servername: mitarbeiter.esysta.com
+    serveraliases:
+      - mitarbeiter.portal.dia.log.medimatik.de
+      - mitarbeiter-esysta-com.pixelpark.net
+    docroot: '/var/www/esysta'
+    docroot_owner: apache
+    docroot_group: dialog
+    docroot_mode: '2775'
+    ip: 77.74.237.40
+    port: 443
+    ssl: true
+    ssl_cert: /etc/pki/tls/certs/portal.esysta.com-cert.pem
+    ssl_chain: /etc/pki/tls/certs/portal.esysta.com-cert.pem
+    ssl_key: /etc/pki/tls/private/portal.esysta.com-key.pem
+    directories:
+      - directory_root:
+        provider: directory
+        path: '/var/www/esysta'
+        options:
+          - FollowSymLinks
+          - MultiViews
+        allow_override:
+          - All
+    wsgi_daemon_process: mitarbeiter
+    wsgi_daemon_process_options:
+      processes: 2
+      threads: 15
+      display-name: "%%{BLUBB}{GROUP}"
+      maximum-requests: 10000
+      python-path: "/var/lib/python-venv/esysta/lib/python2.7/site-packages:/var/www/esysta/lib"
+    wsgi_process_group: mitarbeiter
+    wsgi_script_aliases:
+      '/': '/var/www/esysta/lib/support/wsgi.py'
+    aliases:
+      - alias: '/media'
+        path: '/var/lib/python-venv/esysta/lib/python2.7/site-packages/django/contrib/admin/static/'
+      - alias: '/site-media'
+        path: '/var/www/esysta/media'
+      - alias: '/site-video'
+        path: '/var/www/esysta/site-video'
diff --git a/customer/emperra/test-portal-esysta-com.pixelpark.net.yaml b/customer/emperra/test-portal-esysta-com.pixelpark.net.yaml
new file mode 100644 (file)
index 0000000..0943c48
--- /dev/null
@@ -0,0 +1,525 @@
+---
+accounts::users:
+  ries:
+    apply: true
+    sudo: true
+    group: emperra
+    groups:
+      - dialog
+    sudo_cmds:
+      - DIALOG
+      - DIALOGNOSSL
+      - APACHE
+      - POSTGRES
+  bentrup:
+    apply: true
+    sudo: true
+    group: emperra
+    groups:
+      - dialog
+    sudo_cmds:
+      - DIALOG
+      - DIALOGNOSSL
+      - APACHE
+      - POSTGRES
+  pratsch:
+    apply: true
+    sudo: true
+    group: emperra
+    groups:
+      - dialog
+    sudo_cmds:
+      - DIALOG
+      - DIALOGNOSSL
+      - APACHE
+      - POSTGRES
+  bruestel:
+    apply: true
+    sudo: true
+    group: emperra
+    groups:
+      - dialog
+    sudo_cmds:
+      - DIALOG
+      - DIALOGNOSSL
+      - APACHE
+      - POSTGRES
+
+sudo::configs:
+  cmd_alias:
+    priority: "05"
+    content: |
+      Cmnd_Alias DIALOG = /bin/systemctl * DIAlog.service
+      Cmnd_Alias DIALOGNOSSL = /bin/systemctl * DIAlogNOSSL.service
+      Cmnd_Alias APACHE = /bin/systemctl * httpd.service
+      Cmnd_Alias POSTGRES = /bin/systemctl * postgresql.service
+  dialog:
+    priority: "06"
+    content: |
+      %dialog ALL=(dialog) NOPASSWD: ALL
+
+
+site::role: base
+site::additional_classes:
+  - site::profile::apache
+  - apache::mod::wsgi
+  - python
+
+site::additional_packages:
+  freetype-devel: {}
+  gcc-c++: {}
+  libpng-devel: {}
+  git: {}
+  openssl-devel: {}
+
+
+python::dev: true
+python::use_epel: false
+python::manage_gunicorn: false
+python::virtualenv: true
+python::python_virtualenvs:
+  '/var/lib/python-venv/esysta':
+    ensure: present
+    group: emperra
+    mode: '2775'
+python::python_pips:
+  psycopg2:
+    ensure: 2.5.2
+    virtualenv: '/var/lib/python-venv/esysta'
+    group: emperra
+  matplotlib:
+    ensure: 1.2.1
+    virtualenv: '/var/lib/python-venv/esysta'
+    group: emperra
+  numpy:
+    ensure: 1.6.1
+    virtualenv: '/var/lib/python-venv/esysta'
+    group: emperra
+  Twisted:
+    ensure: 10.1.0
+    virtualenv: '/var/lib/python-venv/esysta'
+    group: emperra
+  PIL:
+    ensure: 1.1.7
+    url: http://effbot.org/downloads/Imaging-1.1.7.tar.gz
+    virtualenv: '/var/lib/python-venv/esysta'
+    group: emperra
+  Django:
+    ensure: 1.6.10
+    virtualenv: '/var/lib/python-venv/esysta'
+    group: emperra
+  egenix-mx-base:
+    ensure: 3.2.9
+    virtualenv: '/var/lib/python-venv/esysta'
+    group: emperra
+  pyOpenSSL:
+    ensure: 0.13.1
+    virtualenv: '/var/lib/python-venv/esysta'
+    group: emperra
+  python-dateutil:
+    ensure: 1.4.1
+    virtualenv: '/var/lib/python-venv/esysta'
+    group: emperra
+  PyYAML:
+    ensure: '3.10'
+    virtualenv: '/var/lib/python-venv/esysta'
+    group: emperra
+  reportlab:
+    ensure: 2.4
+    virtualenv: '/var/lib/python-venv/esysta'
+    group: emperra
+  requests:
+    ensure: 2.2.1
+    virtualenv: '/var/lib/python-venv/esysta'
+    group: emperra
+  zope.interface:
+    ensure: 4.0.5
+    virtualenv: '/var/lib/python-venv/esysta'
+    group: emperra
+
+
+
+
+
+apache::default_vhost: false
+apache::mpm_module: event
+
+apache::mod::wsgi::wsgi_python_home: /var/lib/python-venv/esysta
+
+site::profile::apache::vhosts:
+  dummy-http:
+    servername: test-portal-esysta-com.pixelpark.net
+    serveraliases:
+      - arzt-develop-esysta-com.pixelpark.net
+      - arzt-master-esysta-com.pixelpark.net
+      - arzt-sandbox-esysta-com.pixelpark.net
+      - portal-develop-esysta-com.pixelpark.net
+      - portal-master-esysta-com.pixelpark.net
+      - portal-sandbox-esysta-com.pixelpark.net
+      - mitarbeiter-develop-esysta-com.pixelpark.net
+      - mitarbeiter-master-esysta-com.pixelpark.net
+      - mitarbeiter-sandbox-esysta-com.pixelpark.net
+    docroot: '/var/empty'
+    docroot_owner: root
+    docroot_mode: '0775'
+    ip: 77.74.238.72
+    port: 80
+    directories:
+      - directory_root:
+        provider: directory
+        path: '/var/empty'
+        options:
+          - FollowSymLinks
+          - MultiViews
+        allow_override:
+          - None
+    rewrites:
+      - httpsonly:
+        comment: 'Alles auf https umleiten.'
+        rewrite_rule:
+          - ^(.*)$ https://%%{ich-trickse}{HTTP_HOST}$1 [R=301,L]
+  arzt-develop:
+    servername: arzt-develop-esysta-com.pixelpark.net
+    docroot: '/var/www/esysta/develop'
+    docroot_owner: apache
+    docroot_group: dialog
+    docroot_mode: '2775'
+    ip: 77.74.238.72
+    port: 443
+    ssl: true
+    ssl_cert: /etc/pki/tls/certs/wildcard.pixelpark.net-cert.pem
+    ssl_chain: /etc/pki/tls/certs/wildcard.pixelpark.net-cert.pem
+    ssl_key: /etc/pki/tls/private/wildcard.pixelpark.net-key.pem
+    directories:
+      - directory_root:
+        provider: directory
+        path: '/var/www/esysta/develop'
+        options:
+          - FollowSymLinks
+          - MultiViews
+        allow_override:
+          - All
+    wsgi_daemon_process: arzt-develop
+    wsgi_daemon_process_options:
+      processes: 2
+      threads: 15
+      display-name: "%%{BLUBB}{GROUP}"
+      maximum-requests: 10000
+      python-path: "/var/lib/python-venv/esysta/lib/python2.7/site-packages:/var/www/esysta/develop/lib"
+    wsgi_process_group: arzt-develop
+    wsgi_script_aliases:
+      '/': '/var/www/esysta/develop/lib/doctor/wsgi.py'
+    aliases:
+      - alias: '/media'
+        path: '/var/lib/python-venv/esysta/lib/python2.7/site-packages/django/contrib/admin/static/'
+      - alias: '/site-media'
+        path: '/var/www/esysta/develop/media'
+      - alias: '/site-video'
+        path: '/var/www/esysta/develop/site-video'
+  arzt-master:
+    servername: arzt-master-esysta-com.pixelpark.net
+    docroot: '/var/www/esysta/master'
+    docroot_owner: apache
+    docroot_group: dialog
+    docroot_mode: '2775'
+    ip: 77.74.238.72
+    port: 443
+    ssl: true
+    ssl_cert: /etc/pki/tls/certs/wildcard.pixelpark.net-cert.pem
+    ssl_chain: /etc/pki/tls/certs/wildcard.pixelpark.net-cert.pem
+    ssl_key: /etc/pki/tls/private/wildcard.pixelpark.net-key.pem
+    directories:
+      - directory_root:
+        provider: directory
+        path: '/var/www/esysta/master'
+        options:
+          - FollowSymLinks
+          - MultiViews
+        allow_override:
+          - All
+    wsgi_daemon_process: arzt-master
+    wsgi_daemon_process_options:
+      processes: 2
+      threads: 15
+      display-name: "%%{BLUBB}{GROUP}"
+      maximum-requests: 10000
+      python-path: "/var/lib/python-venv/esysta/lib/python2.7/site-packages:/var/www/esysta/master/lib"
+    wsgi_process_group: arzt-master
+    wsgi_script_aliases:
+      '/': '/var/www/esysta/master/lib/doctor/wsgi.py'
+    aliases:
+      - alias: '/media'
+        path: '/var/lib/python-venv/esysta/lib/python2.7/site-packages/django/contrib/admin/static/'
+      - alias: '/site-media'
+        path: '/var/www/esysta/master/media'
+      - alias: '/site-video'
+        path: '/var/www/esysta/master/site-video'
+  arzt-sandbox:
+    servername: arzt-sandbox-esysta-com.pixelpark.net
+    docroot: '/var/www/esysta/sandbox'
+    docroot_owner: apache
+    docroot_group: dialog
+    docroot_mode: '2775'
+    ip: 77.74.238.72
+    port: 443
+    ssl: true
+    ssl_cert: /etc/pki/tls/certs/wildcard.pixelpark.net-cert.pem
+    ssl_chain: /etc/pki/tls/certs/wildcard.pixelpark.net-cert.pem
+    ssl_key: /etc/pki/tls/private/wildcard.pixelpark.net-key.pem
+    directories:
+      - directory_root:
+        provider: directory
+        path: '/var/www/esysta/sandbox'
+        options:
+          - FollowSymLinks
+          - MultiViews
+        allow_override:
+          - All
+    wsgi_daemon_process: arzt-sandbox
+    wsgi_daemon_process_options:
+      processes: 2
+      threads: 15
+      display-name: "%%{BLUBB}{GROUP}"
+      maximum-requests: 10000
+      python-path: "/var/lib/python-venv/esysta/lib/python2.7/site-packages:/var/www/esysta/sandbox/lib"
+    wsgi_process_group: arzt-sandbox
+    wsgi_script_aliases:
+      '/': '/var/www/esysta/sandbox/lib/doctor/wsgi.py'
+    aliases:
+      - alias: '/media'
+        path: '/var/lib/python-venv/esysta/lib/python2.7/site-packages/django/contrib/admin/static/'
+      - alias: '/site-media'
+        path: '/var/www/esysta/sandbox/media'
+      - alias: '/site-video'
+        path: '/var/www/esysta/sandbox/site-video'
+  portal-develop:
+    servername: portal-develop-esysta-com.pixelpark.net
+    docroot: '/var/www/esysta/develop'
+    docroot_owner: apache
+    docroot_group: dialog
+    docroot_mode: '2775'
+    ip: 77.74.238.72
+    port: 443
+    ssl: true
+    ssl_cert: /etc/pki/tls/certs/wildcard.pixelpark.net-cert.pem
+    ssl_chain: /etc/pki/tls/certs/wildcard.pixelpark.net-cert.pem
+    ssl_key: /etc/pki/tls/private/wildcard.pixelpark.net-key.pem
+    directories:
+      - directory_root:
+        provider: directory
+        path: '/var/www/esysta/develop'
+        options:
+          - FollowSymLinks
+          - MultiViews
+        allow_override:
+          - All
+    wsgi_daemon_process: portal-develop
+    wsgi_daemon_process_options:
+      processes: 2
+      threads: 15
+      display-name: "%%{BLUBB}{GROUP}"
+      maximum-requests: 10000
+      python-path: "/var/lib/python-venv/esysta/lib/python2.7/site-packages:/var/www/esysta/develop/lib"
+    wsgi_process_group: portal-develop
+    wsgi_script_aliases:
+      '/': '/var/www/esysta/develop/lib/patient/wsgi.py'
+    aliases:
+      - alias: '/media'
+        path: '/var/lib/python-venv/esysta/lib/python2.7/site-packages/django/contrib/admin/static/'
+      - alias: '/site-media'
+        path: '/var/www/esysta/develop/media'
+      - alias: '/site-video'
+        path: '/var/www/esysta/develop/site-video'
+  portal-master:
+    servername: portal-master-esysta-com.pixelpark.net
+    docroot: '/var/www/esysta/master'
+    docroot_owner: apache
+    docroot_group: dialog
+    docroot_mode: '2775'
+    ip: 77.74.238.72
+    port: 443
+    ssl: true
+    ssl_cert: /etc/pki/tls/certs/wildcard.pixelpark.net-cert.pem
+    ssl_chain: /etc/pki/tls/certs/wildcard.pixelpark.net-cert.pem
+    ssl_key: /etc/pki/tls/private/wildcard.pixelpark.net-key.pem
+    directories:
+      - directory_root:
+        provider: directory
+        path: '/var/www/esysta/master'
+        options:
+          - FollowSymLinks
+          - MultiViews
+        allow_override:
+          - All
+    wsgi_daemon_process: portal-master
+    wsgi_daemon_process_options:
+      processes: 2
+      threads: 15
+      display-name: "%%{BLUBB}{GROUP}"
+      maximum-requests: 10000
+      python-path: "/var/lib/python-venv/esysta/lib/python2.7/site-packages:/var/www/esysta/master/lib"
+    wsgi_process_group: portal-master
+    wsgi_script_aliases:
+      '/': '/var/www/esysta/master/lib/patient/wsgi.py'
+    aliases:
+      - alias: '/media'
+        path: '/var/lib/python-venv/esysta/lib/python2.7/site-packages/django/contrib/admin/static/'
+      - alias: '/site-media'
+        path: '/var/www/esysta/master/media'
+      - alias: '/site-video'
+        path: '/var/www/esysta/master/site-video'
+  portal-sandbox:
+    servername: portal-sandbox-esysta-com.pixelpark.net
+    docroot: '/var/www/esysta/sandbox'
+    docroot_owner: apache
+    docroot_group: dialog
+    docroot_mode: '2775'
+    ip: 77.74.238.72
+    port: 443
+    ssl: true
+    ssl_cert: /etc/pki/tls/certs/wildcard.pixelpark.net-cert.pem
+    ssl_chain: /etc/pki/tls/certs/wildcard.pixelpark.net-cert.pem
+    ssl_key: /etc/pki/tls/private/wildcard.pixelpark.net-key.pem
+    directories:
+      - directory_root:
+        provider: directory
+        path: '/var/www/esysta/sandbox'
+        options:
+          - FollowSymLinks
+          - MultiViews
+        allow_override:
+          - All
+    wsgi_daemon_process: portal-sandbox
+    wsgi_daemon_process_options:
+      processes: 2
+      threads: 15
+      display-name: "%%{BLUBB}{GROUP}"
+      maximum-requests: 10000
+      python-path: "/var/lib/python-venv/esysta/lib/python2.7/site-packages:/var/www/esysta/sandbox/lib"
+    wsgi_process_group: portal-sandbox
+    wsgi_script_aliases:
+      '/': '/var/www/esysta/sandbox/lib/patient/wsgi.py'
+    aliases:
+      - alias: '/media'
+        path: '/var/lib/python-venv/esysta/lib/python2.7/site-packages/django/contrib/admin/static/'
+      - alias: '/site-media'
+        path: '/var/www/esysta/sandbox/media'
+      - alias: '/site-video'
+        path: '/var/www/esysta/sandbox/site-video'
+
+
+
+  mitarbeiter-develop:
+    servername: mitarbeiter-develop-esysta-com.pixelpark.net
+    docroot: '/var/www/esysta/develop'
+    docroot_owner: apache
+    docroot_group: dialog
+    docroot_mode: '2775'
+    ip: 77.74.238.72
+    port: 443
+    ssl: true
+    ssl_cert: /etc/pki/tls/certs/wildcard.pixelpark.net-cert.pem
+    ssl_chain: /etc/pki/tls/certs/wildcard.pixelpark.net-cert.pem
+    ssl_key: /etc/pki/tls/private/wildcard.pixelpark.net-key.pem
+    directories:
+      - directory_root:
+        provider: directory
+        path: '/var/www/esysta/develop'
+        options:
+          - FollowSymLinks
+          - MultiViews
+        allow_override:
+          - All
+    wsgi_daemon_process: mitarbeiter-develop
+    wsgi_daemon_process_options:
+      processes: 2
+      threads: 15
+      display-name: "%%{BLUBB}{GROUP}"
+      maximum-requests: 10000
+      python-path: "/var/lib/python-venv/esysta/lib/python2.7/site-packages:/var/www/esysta/develop/lib"
+    wsgi_process_group: mitarbeiter-develop
+    wsgi_script_aliases:
+      '/': '/var/www/esysta/develop/lib/support/wsgi.py'
+    aliases:
+      - alias: '/media'
+        path: '/var/lib/python-venv/esysta/lib/python2.7/site-packages/django/contrib/admin/static/'
+      - alias: '/site-media'
+        path: '/var/www/esysta/develop/media'
+      - alias: '/site-video'
+        path: '/var/www/esysta/develop/site-video'
+  mitarbeiter-master:
+    servername: mitarbeiter-master-esysta-com.pixelpark.net
+    docroot: '/var/www/esysta/master'
+    docroot_owner: apache
+    docroot_group: dialog
+    docroot_mode: '2775'
+    ip: 77.74.238.72
+    port: 443
+    ssl: true
+    ssl_cert: /etc/pki/tls/certs/wildcard.pixelpark.net-cert.pem
+    ssl_chain: /etc/pki/tls/certs/wildcard.pixelpark.net-cert.pem
+    ssl_key: /etc/pki/tls/private/wildcard.pixelpark.net-key.pem
+    directories:
+      - directory_root:
+        provider: directory
+        path: '/var/www/esysta/master'
+        options:
+          - FollowSymLinks
+          - MultiViews
+        allow_override:
+          - All
+    wsgi_daemon_process: mitarbeiter-master
+    wsgi_daemon_process_options:
+      processes: 2
+      threads: 15
+      display-name: "%%{BLUBB}{GROUP}"
+      maximum-requests: 10000
+      python-path: "/var/lib/python-venv/esysta/lib/python2.7/site-packages:/var/www/esysta/master/lib"
+    wsgi_process_group: mitarbeiter-master
+    wsgi_script_aliases:
+      '/': '/var/www/esysta/master/lib/support/wsgi.py'
+    aliases:
+      - alias: '/media'
+        path: '/var/lib/python-venv/esysta/lib/python2.7/site-packages/django/contrib/admin/static/'
+      - alias: '/site-media'
+        path: '/var/www/esysta/master/media'
+      - alias: '/site-video'
+        path: '/var/www/esysta/master/site-video'
+  mitarbeiter-sandbox:
+    servername: mitarbeiter-sandbox-esysta-com.pixelpark.net
+    docroot: '/var/www/esysta/sandbox'
+    docroot_owner: apache
+    docroot_group: dialog
+    docroot_mode: '2775'
+    ip: 77.74.238.72
+    port: 443
+    ssl: true
+    ssl_cert: /etc/pki/tls/certs/wildcard.pixelpark.net-cert.pem
+    ssl_chain: /etc/pki/tls/certs/wildcard.pixelpark.net-cert.pem
+    ssl_key: /etc/pki/tls/private/wildcard.pixelpark.net-key.pem
+    directories:
+      - directory_root:
+        provider: directory
+        path: '/var/www/esysta/sandbox'
+        options:
+          - FollowSymLinks
+          - MultiViews
+        allow_override:
+          - All
+    wsgi_daemon_process: mitarbeiter-sandbox
+    wsgi_daemon_process_options:
+      processes: 2
+      threads: 15
+      display-name: "%%{BLUBB}{GROUP}"
+      maximum-requests: 10000
+      python-path: "/var/lib/python-venv/esysta/lib/python2.7/site-packages:/var/www/esysta/sandbox/lib"
+    wsgi_process_group: mitarbeiter-sandbox
+    wsgi_script_aliases:
+      '/': '/var/www/esysta/sandbox/lib/support/wsgi.py'
+    aliases:
+      - alias: '/media'
+        path: '/var/lib/python-venv/esysta/lib/python2.7/site-packages/django/contrib/admin/static/'
+      - alias: '/site-media'
+        path: '/var/www/esysta/sandbox/media'
+      - alias: '/site-video'
+        path: '/var/www/esysta/sandbox/site-video'
diff --git a/customer/emperra/www-tmp-emperra-com.pixelpark.net.yaml b/customer/emperra/www-tmp-emperra-com.pixelpark.net.yaml
new file mode 100644 (file)
index 0000000..4c3c2b5
--- /dev/null
@@ -0,0 +1,2 @@
+---
+site::role: base
diff --git a/customer/fbb-web/dev-web01-berlin-airport-de.pixelpark.net.yaml b/customer/fbb-web/dev-web01-berlin-airport-de.pixelpark.net.yaml
new file mode 100644 (file)
index 0000000..3a88a6c
--- /dev/null
@@ -0,0 +1,7 @@
+---
+site::role: base
+site::additional_classes:
+  - site::profile::nginx_php_fpm_server
+  - site::profile::mysql_server
+  - logstash
+
diff --git a/customer/fbb-web/development.yaml b/customer/fbb-web/development.yaml
new file mode 100644 (file)
index 0000000..39c03aa
--- /dev/null
@@ -0,0 +1,323 @@
+---
+accounts::users:
+  konrad.tadesse:
+    apply: true
+    sudo: false
+  thomas.bussmeyer:
+    apply: true
+    sudo: false
+  stephan.vits:
+    apply: true
+    sudo: false
+  andreas.pinto-koehler:
+    apply: true
+    sudo: false
+  deploy.vogel:
+    apply: true
+    sudo: false
+    group: 'nginx'
+    shell: "bash"
+
+mysql::server::root_password: ENC[PKCS7,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]
+site::profile::mysql_server::databases:
+  wordpress:
+    user: wordpress
+    password: Ahth6La0quie
+  ber-hub:
+    user: ber-hub
+    password: phoNai9peecu
+
+repo::remi_php55: true
+
+php::fpm::pools:
+  www:
+    user: nginx
+    group: nginx
+
+php::extensions:
+  gd: {}
+  xml: {}
+  mysqlnd: {}
+  imagick:
+    provider: pecl
+  memcache:
+    provider: pecl
+
+php::settings:
+  Date/date.timezone: 'Europe/Berlin'
+  PHP/upload_max_filesize: '32M'
+  PHP/post_max_size: '32M'
+  PHP/max_execution_time: 240
+  PHP/memory_limit: '128M'
+  PHP/expose_php: 'Off'
+
+# because we have pecl packages we must install dev packages
+php::dev: true
+php::pear: true
+
+site::profile::nginx_php_fpm_server::upstream:
+  'phpfpm':
+    ensure: present
+    members:
+      - 'localhost:9000'
+
+site::profile::nginx_php_fpm_server::vhosts:
+  dev-berhub-berlin-airport-de:
+    www_root: '/srv/www/dev-berhub-berlin-airport-de'
+    index_files: 
+      - 'index.php'
+      - 'index.html'
+      - 'index.htm'
+    server_name: 
+      - 'dev-berhub-berlin-airport-de.pixelpark.net'
+      - 'dev01-berhub-berlin-airport-de.pixelpark.net'
+      - 'dev02-berhub-berlin-airport-de.pixelpark.net'
+    rewrite_rules:
+      - '/wp-admin$ $scheme://$host$uri/ permanent'
+      - '/files/$ /index.php last'
+    rewrite_to_https: true
+    ssl: true
+    ssl_cert: '/etc/ssl/certs/wildcard.pixelpark.net-cert.pem'
+    ssl_key: '/etc/ssl/certs/wildcard.pixelpark.net-cert.pem'
+    client_max_body_size: '32M'
+    listen_port: 80
+    auth_basic: 'Server'
+    auth_basic_user_file: '/etc/nginx/.htpasswd'
+    access_log: '/var/log/nginx/berhub-access_log'
+    error_log: '/var/log/nginx/berhub-error_log'
+    format_log: 'combined'
+    owner: 'deploy.vogel'
+    group: 'nginx'
+    mode: '0640'
+    try_files:
+      - '$uri'
+      - '%uri/'
+      - '/index.php?$args'
+    autoindex: 'on'
+  dev-blog-berlin-airport-de:
+    www_root: '/srv/www/dev-blog-berlin-airport-de'
+    index_files: 
+      - 'index.php'
+      - 'index.html'
+      - 'index.htm'
+    server_name: 
+      - 'dev-blog-berlin-airport-de.pixelpark.net'
+      - 'dev-www-blog-berlin-airport-de.pixelpark.net'
+      - 'dev01-blog-berlin-airport-de.pixelpark.net'
+      - 'dev02-blog-berlin-airport-de.pixelpark.net'
+    rewrite_rules:
+      - '/wp-admin$ $scheme://$host$uri/ permanent'
+      - '/files/$ /index.php last'
+    ssl: true
+    ssl_cert: '/etc/ssl/certs/wildcard.pixelpark.net-cert.pem'
+    ssl_key: '/etc/ssl/certs/wildcard.pixelpark.net-cert.pem'
+    client_max_body_size: '32M'
+    listen_port: 80
+    auth_basic: 'Server'
+    auth_basic_user_file: '/etc/nginx/.htpasswd'
+    access_log: '/var/log/nginx/blog-access_log'
+    error_log: '/var/log/nginx/blog-error_log'
+    format_log: 'combined'
+    owner: 'deploy.vogel'
+    group: 'nginx'
+    mode: '0640'
+    try_files:
+      - '$uri'
+      - '%uri/'
+      - '/index.php?$args'
+    autoindex: 'on'
+  dev-wifi-berlin-airport-de:
+    www_root: '/srv/www/dev-wifi-berlin-airport-de'
+    index_files: 
+#      - 'index.php'
+      - 'index.html'
+#      - 'index.htm'
+    server_name: 
+      - 'dev-wifi-berlin-airport-de.pixelpark.net'
+      - 'dev01-wifi-berlin-airport-de.pixelpark.net'
+      - 'dev02-wifi-berlin-airport-de.pixelpark.net'
+#    rewrite_rules:
+#      - '/wp-admin$ $scheme://$host$uri/ permanent'
+#      - '/files/$ /index.php last'
+    ssl: true
+    ssl_cert: '/etc/ssl/certs/wildcard.pixelpark.net-cert.pem'
+    ssl_key: '/etc/ssl/certs/wildcard.pixelpark.net-cert.pem'
+    client_max_body_size: '32M'
+    listen_port: 80
+    auth_basic: 'Server'
+    auth_basic_user_file: '/etc/nginx/.htpasswd'
+    access_log: '/var/log/nginx/wifi-access_log'
+    error_log: '/var/log/nginx/wifi-error_log'
+    format_log: 'combined'
+    owner: 'deploy.vogel'
+    group: 'nginx'
+    mode: '0640'
+#    try_files:
+#      - '$uri'
+#      - '%uri/'
+#      - '/index.php?$args'
+    autoindex: 'on'
+
+site::profile::nginx_php_fpm_server::location:
+  'favicon.ico_berhub':
+    www_root: '/srv/www/dev-berhub-berlin-airport-de'
+    vhost: dev-berhub-berlin-airport-de
+    location: '/favicon.ico'
+    ssl: true
+    index_files:
+      - 'index.php'
+    location_custom_cfg:
+      access_log: 'off'
+      log_not_found: 'off'
+  'robots.txt_berhub':
+    www_root: '/srv/www/dev-berhub-berlin-airport-de'
+    vhost: dev-berhub-berlin-airport-de
+    location: '/robots.txt'
+    ssl: true
+    index_files:
+      - 'index.php'
+    location_custom_cfg:
+      access_log: 'off'
+      log_not_found: 'off'
+      allow: 'all'
+  'hidden-files_berhub':
+    www_root: '/srv/www/dev-berhub-berlin-airport-de'
+    vhost: dev-berhub-berlin-airport-de
+    index_files:
+      - 'index.php'
+    location: '~ /\.'
+    ssl: true
+    location_custom_cfg:
+      access_log: 'off'
+      log_not_found: 'off'
+      deny: 'all'
+  'images_berhub':
+    www_root: '/srv/www/dev-berhub-berlin-airport-de'
+    vhost: dev-berhub-berlin-airport-de
+    location: '~* ^.+\.(jpg|jpeg|gif|png|ico|)$'
+    ssl: true
+    index_files:
+      - 'index.php'
+    location_custom_cfg:
+      access_log: 'off'
+      log_not_found: 'off'
+      expires: 'max'
+  'files_berhub':
+    www_root: '/srv/www/dev-berhub-berlin-airport-de'
+    vhost: dev-berhub-berlin-airport-de
+    location: '~* ^.+\.(ogg|ogv|svg|svgz|eot|otf|woff|mp4|ttf|rss|atom|jpg|jpeg|gif|png|ico|zip|tgz|gz|rar|bz2|doc|xls|exe|ppt|tar|mid|midi|wav|bmp|rtf)$'
+    ssl: true
+    index_files:
+      - 'index.php'
+    location_custom_cfg:
+      log_not_found: 'off'
+      expires: 'max'
+  'all-files_berhub':
+    www_root: '/srv/www/dev-berhub-berlin-airport-de'
+    vhost: dev-berhub-berlin-airport-de
+    location: '~ \*$'
+    ssl: true
+    index_files:
+      - 'index.php'
+    try_files:
+      - '$uri =404'
+  'php-files_berhub':
+    www_root: '/srv/www/dev-berhub-berlin-airport-de'
+    vhost: dev-berhub-berlin-airport-de
+    location: '~ \.php$'
+    ssl: true
+    index_files:
+      - 'index.php'
+    try_files:
+      - '$uri =404'
+    include:
+      - '/etc/nginx/fastcgi.conf'
+    fastcgi_param:
+      SCRIPT_FILENAME: '$document_root$fastcgi_script_name'
+    location_cfg_append:
+      fastcgi_read_timeout: '3600s'
+      fastcgi_buffer_size: '128k'
+      fastcgi_buffers: '4 128k'
+      fastcgi_pass: '127.0.0.1:9000'
+      fastcgi_index: 'index.php'
+  'favicon.ico_blog':
+    www_root: '/srv/www/dev-blog-berlin-airport-de'
+    vhost: dev-blog-berlin-airport-de
+    location: '/favicon.ico'
+    ssl: true
+    index_files:
+      - 'index.php'
+    location_custom_cfg:
+      access_log: 'off'
+      log_not_found: 'off'
+  'robots.txt_blog':
+    www_root: '/srv/www/dev-blog-berlin-airport-de'
+    vhost: dev-blog-berlin-airport-de
+    location: '/robots.txt'
+    ssl: true
+    index_files:
+      - 'index.php'
+    location_custom_cfg:
+      access_log: 'off'
+      log_not_found: 'off'
+      allow: 'all'
+  'hidden-files_blog':
+    www_root: '/srv/www/dev-blog-berlin-airport-de'
+    vhost: dev-blog-berlin-airport-de
+    index_files:
+      - 'index.php'
+    location: '~ /\.'
+    ssl: true
+    location_custom_cfg:
+      access_log: 'off'
+      log_not_found: 'off'
+      deny: 'all'
+  'images_blog':
+    www_root: '/srv/www/dev-blog-berlin-airport-de'
+    vhost: dev-blog-berlin-airport-de
+    location: '~* ^.+\.(jpg|jpeg|gif|png|ico|)$'
+    ssl: true
+    index_files:
+      - 'index.php'
+    location_custom_cfg:
+      access_log: 'off'
+      log_not_found: 'off'
+      expires: 'max'
+  'files_blog':
+    www_root: '/srv/www/dev-blog-berlin-airport-de'
+    vhost: dev-blog-berlin-airport-de
+    location: '~* ^.+\.(ogg|ogv|svg|svgz|eot|otf|woff|mp4|ttf|rss|atom|jpg|jpeg|gif|png|ico|zip|tgz|gz|rar|bz2|doc|xls|exe|ppt|tar|mid|midi|wav|bmp|rtf)$'
+    ssl: true
+    index_files:
+      - 'index.php'
+    location_custom_cfg:
+      log_not_found: 'off'
+      expires: 'max'
+  'all-files_blog':
+    www_root: '/srv/www/dev-blog-berlin-airport-de'
+    vhost: dev-blog-berlin-airport-de
+    location: '~ \*$'
+    ssl: true
+    index_files:
+      - 'index.php'
+    try_files:
+      - '$uri =404'
+  'php-files_blog':
+    www_root: '/srv/www/dev-blog-berlin-airport-de'
+    vhost: dev-blog-berlin-airport-de
+    location: '~ \.php$'
+    ssl: true
+    index_files:
+      - 'index.php'
+    try_files:
+      - '$uri =404'
+    include:
+      - '/etc/nginx/fastcgi.conf'
+    fastcgi_param:
+      SCRIPT_FILENAME: '$document_root$fastcgi_script_name'
+    location_cfg_append:
+      fastcgi_read_timeout: '3600s'
+      fastcgi_buffer_size: '128k'
+      fastcgi_buffers: '4 128k'
+      fastcgi_pass: '127.0.0.1:9000'
+      fastcgi_index: 'index.php'
diff --git a/customer/fbb-web/production.yaml b/customer/fbb-web/production.yaml
new file mode 100644 (file)
index 0000000..a410432
--- /dev/null
@@ -0,0 +1,604 @@
+---
+accounts::users:
+  konrad.tadesse:
+    apply: true
+    sudo: false
+  thomas.bussmeyer:
+    apply: true
+    sudo: false
+  stephan.vits:
+    apply: true
+    sudo: false
+  andreas.pinto-koehler:
+    apply: true
+    sudo: false
+  deploy.vogel:
+    apply: true
+    sudo: false
+    group: 'nginx'
+    shell: "bash"
+    keys:
+      jenkins:
+        key: "AAAAB3NzaC1yc2EAAAADAQABAAABAQCcA9sDPUizm9LRPYsSQSkkXRlGfhkZcCeQ8XDTbvHLjLlQdJznx3ezpxtmIgKLzMb3Hd3YNB+CAjD//iIDgJkwxNU2qGjm4vJT0WjQ2dwbPyVgN+Ik1nBhqWC2gD5UnDIVULYP5WUkgPPP1if64Q5fnfD9aTkUNOYJ4u9Th7As97e48S+/Z8vqw9EDcr3ZC+OzU7ezU65SHH4mpC1MvLW4EG0DU+omYDuMBusRA9SPx9uAebmoVVqZ23YmK5h9gh8Nc/Av5r6yfYKtkFt6CliGc7qZj56ONfHnP79CgVIlJ5NIHU2s27tTJmoDOHOkJZ11TuQp4HbuMAUAWHi6Aie7"
+      unison:
+        key: "AAAAB3NzaC1yc2EAAAADAQABAAABAQDO33Riv0a0//OSJQJwRyU+yN80SH4AvwdLXKD2NH7Lrnfpq4XXzqOSrRiEApciUc+AsjCpZJzVl89L38718M3+pcGQ7dttnjiYGsyLgwOLwZWv951ZynSNfLROGfyk7CJr1EYk4oKBpAPNLUqMqQRsf0oP+b1xacs+QSyIN5KjLkDF7vEpHVroImzGA/X8JqlOzsllNwNvxvXPB8GUKURPHhDA8MRLgKgNDXYpqEzxe0FKv3QXa+FA/P6WqWM2ECAIVbOG+GP0EJmTGKLkjmN4ew6lh7j++nNUHTW894eZBrAVP2nja1fS4zoGOl68XS8HVA/4KZlE5gEZs/ylU++R"
+  samir.djulancic:
+    apply: true
+    sudo: false
+  beate.hauss:
+    apply: true
+    sudo: false
+  steffen.wiegand:
+    apply: true
+    sudo: false
+
+mysql::server::root_password: ENC[PKCS7,MIIBeQYJKoZIhvcNAQcDoIIBajCCAWYCAQAxggEhMIIBHQIBADAFMAACAQEwDQYJKoZIhvcNAQEBBQAEggEArKBt0vpxz9bU6KkgLOzJOgycMijRe/b02cKe+3k8HtjTOs7R2FYGBv1IxPCDi/C3m3jukt/+2M89RmK7eBC6Wv9DqKbPMWOhNIDbDqcgUJMhEh5CNGRodArFLHiJWz4on7YCNl+W9noJbFNyctOzGXJCawpTE0XXpX5+jy0/iMx4xhFtBfVrYXbqcZiK/O8/jMnU2tvu9sO3fpZG8uLEVnhL7+gJxtSciqgUP+39ZQySoIlYjsm9ASvsLCiKCdNkktGKM3jNMIE1E8OLS7DFOKCMVgyRr/A6LQ1N3sbbOBLZcG8SdDRUuct9UXY0EqVtrqDDw0lr0zRs0Ew3/UDsmTA8BgkqhkiG9w0BBwEwHQYJYIZIAWUDBAEqBBA+JSSCdmOK9eNsL1Bz4aAQgBDOYi39RkZrZipluMr1YNQA]
+site::profile::mysql_server::databases:
+  wordpress:
+    user: wordpress
+    password: ENC[PKCS7,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]
+  ber-hub:
+    user: ber-hub
+    password: ENC[PKCS7,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]
+
+repo::remi_php55: true
+
+php::fpm::pools:
+  www:
+    user: nginx
+    group: nginx
+
+php::extensions:
+  gd: {}
+  xml: {}
+  mysqlnd: {}
+  imagick:
+    provider: pecl
+  memcache:
+    provider: pecl
+
+php::settings:
+  Date/date.timezone: 'Europe/Berlin'
+  PHP/upload_max_filesize: '32M'
+  PHP/post_max_size: '32M'
+  PHP/max_execution_time: 240
+  PHP/memory_limit: '128M'
+  PHP/expose_php: 'Off'
+
+# because we have pecl packages we must install dev packages
+php::dev: true
+php::pear: true
+
+site::profile::nginx_php_fpm_server::upstream:
+  'phpfpm':
+    ensure: present
+    members:
+      - 'localhost:9000'
+
+site::profile::nginx_php_fpm_server::vhosts:
+  berhub-berlin-airport-de:
+    www_root: '/srv/www/berhub-berlin-airport-de'
+    index_files: 
+      - 'index.php'
+      - 'index.html'
+      - 'index.htm'
+    server_name: 
+      - 'www-berhub-berlin-airport-de.pixelpark.net'
+      - 'www01-berhub-berlin-airport-de.pixelpark.net'
+      - 'www02-berhub-berlin-airport-de.pixelpark.net'
+      - 'roadmap.berlin-airport.de'
+      - 'roadmap01.berlin-airport.de'
+      - 'roadmap02.berlin-airport.de'
+    rewrite_rules:
+      - '^/wp-admin$ $scheme://$host$uri/index.php permanent'
+      - '/files/$ /index.php last'
+      - '^/wp-admin/$ $scheme://$host/wp-admin/index.php permanent'
+    client_max_body_size: '32M'
+    listen_port: 80
+    access_log: '/var/log/nginx/berhub-access_log'
+    error_log: '/var/log/nginx/berhub-error_log'
+    format_log: 'combined'
+    owner: 'deploy.vogel'
+    group: 'nginx'
+    mode: '0640'
+    try_files:
+      - '$uri'
+      - '%uri/'
+      - '/index.php?$args'
+    autoindex: 'on'
+  berhub-berlin-airport-de_ssl:
+    www_root: '/srv/www/berhub-berlin-airport-de'
+    index_files:
+      - 'index.php'
+      - 'index.html'
+      - 'index.htm'
+    server_name:
+      - 'www-berhub-berlin-airport-de.pixelpark.net'
+      - 'www01-berhub-berlin-airport-de.pixelpark.net'
+      - 'www02-berhub-berlin-airport-de.pixelpark.net'
+      - 'roadmap.berlin-airport.de'
+      - 'roadmap01.berlin-airport.de'
+      - 'roadmap02.berlin-airport.de'
+    rewrite_rules:
+      - '^/wp-admin$ $scheme://$host$uri/index.php permanent'
+      - '/files/$ /index.php last'
+      - '^/wp-admin/$ $scheme://$host/wp-admin/index.php permanent'
+    client_max_body_size: '32M'
+    listen_port: 443
+    ssl_port: 444
+#    auth_basic: 'Server'
+#    auth_basic_user_file: '/etc/nginx/.htpasswd'
+    access_log: '/var/log/nginx/berhub-access_log'
+    error_log: '/var/log/nginx/berhub-error_log'
+    format_log: 'combined'
+    owner: 'deploy.vogel'
+    group: 'nginx'
+    mode: '0640'
+    try_files:
+      - '$uri'
+      - '%uri/'
+      - '/index.php?$args'
+    autoindex: 'on'
+  blog-berlin-airport-de:
+    www_root: '/srv/www/blog-berlin-airport-de'
+    index_files:
+      - 'index.php'
+      - 'index.html'
+      - 'index.htm'
+    server_name:
+      - 'blog-berlin-airport-de.pixelpark.net'
+      - 'www-blog-berlin-airport-de.pixelpark.net'
+      - 'blog02-berlin-airport-de.pixelpark.net'
+      - 'blog01-berlin-airport-de.pixelpark.net'
+      - 'blog.berlin-airport.de'
+      - 'blog01.berlin-airport.de'
+      - 'blog02.berlin-airport.de'
+    rewrite_rules:
+      - '^/wp-admin$ $scheme://$host$uri/index.php permanent'
+      - '/files/$ /index.php last'
+      - '^/wp-admin/$ $scheme://$host/wp-admin/index.php permanent'
+    client_max_body_size: '32M'
+    listen_port: 80
+    auth_basic: 'Server'
+    auth_basic_user_file: '/etc/nginx/.htpasswd'
+    access_log: '/var/log/nginx/blog-access_log'
+    error_log: '/var/log/nginx/blog-error_log'
+    format_log: 'combined'
+    owner: 'deploy.vogel'
+    group: 'nginx'
+    mode: '0640'
+    try_files:
+      - '$uri'
+      - '%uri/'
+      - '/index.php?$args'
+    autoindex: 'on'
+  blog-berlin-airport-de_ssl:
+    www_root: '/srv/www/blog-berlin-airport-de'
+    index_files:
+      - 'index.php'
+      - 'index.html'
+      - 'index.htm'
+    server_name:
+      - 'blog-berlin-airport-de.pixelpark.net'
+      - 'www-blog-berlin-airport-de.pixelpark.net'
+      - 'blog01-berlin-airport-de.pixelpark.net'
+      - 'blog02-berlin-airport-de.pixelpark.net'
+      - 'blog.berlin-airport.de'
+      - 'blog01.berlin-airport.de'
+      - 'blog02.berlin-airport.de'
+    rewrite_rules:
+      - '^/wp-admin$ $scheme://$host$uri/index.php permanent'
+      - '/files/$ /index.php last'
+      - '^/wp-admin/$ $scheme://$host/wp-admin/index.php permanent'
+    client_max_body_size: '32M'
+    listen_port: 81
+    auth_basic: 'Server'
+    auth_basic_user_file: '/etc/nginx/.htpasswd'
+    access_log: '/var/log/nginx/blog-access_log'
+    error_log: '/var/log/nginx/blog-error_log'
+    format_log: 'combined'
+    owner: 'deploy.vogel'
+    group: 'nginx'
+    mode: '0640'
+    try_files:
+      - '$uri'
+      - '%uri/'
+      - '/index.php?$args'
+    autoindex: 'on'
+  wifi-berlin-airport-de:
+    www_root: '/srv/www/wifi-berlin-airport-de'
+    index_files:
+#      - 'index.php'
+      - 'index.html'
+#      - 'index.htm'
+    server_name:
+      - 'wifi-berlin-airport-de.pixelpark.net'
+      - 'www-wifi-berlin-airport-de.pixelpark.net'
+      - 'wifi01-berlin-airport-de.pixelpark.net'
+      - 'www-wifi01-berlin-airport-de.pixelpark.net'
+      - 'www-wifi02-berlin-airport-de.pixelpark.net'
+      - 'wifi02-berlin-airport-de.pixelpark.net'
+      - 'wifi.berlin-airport.de'
+      - 'wifi01.berlin-airport.de'
+      - 'wifi02.berlin-airport.de'
+#    rewrite_rules:
+#      - '/wp-admin$ $scheme://$host$uri/ permanent'
+#      - '/files/$ /index.php last'
+    client_max_body_size: '32M'
+    listen_port: 80
+#    auth_basic: 'Server'
+#    auth_basic_user_file: '/etc/nginx/.htpasswd'
+    access_log: '/var/log/nginx/wifi-access_log'
+    error_log: '/var/log/nginx/wifi-error_log'
+    format_log: 'combined'
+    owner: 'deploy.vogel'
+    group: 'nginx'
+    mode: '0640'
+#    try_files:
+#      - '$uri'
+#      - '%uri/'
+#      - '/index.php?$args'
+    autoindex: 'on'
+  wifi-berlin-airport-de_ssl:
+    www_root: '/srv/www/wifi-berlin-airport-de'
+    index_files:
+#      - 'index.php'
+      - 'index.html'
+#      - 'index.htm'
+    server_name:
+      - 'wifi-berlin-airport-de.pixelpark.net'
+      - 'www-wifi-berlin-airport-de.pixelpark.net'
+      - 'wifi01-berlin-airport-de.pixelpark.net'
+      - 'www-wifi01-berlin-airport-de.pixelpark.net'
+      - 'www-wifi02-berlin-airport-de.pixelpark.net'
+      - 'wifi02-berlin-airport-de.pixelpark.net'
+      - 'wifi.berlin-airport.de'
+      - 'wifi01.berlin-airport.de'
+      - 'wifi02.berlin-airport.de'
+#    rewrite_rules:
+#      - '/wp-admin$ $scheme://$host$uri/ permanent'
+#      - '/files/$ /index.php last'
+    client_max_body_size: '32M'
+    listen_port: 81
+#    auth_basic: 'Server'
+#    auth_basic_user_file: '/etc/nginx/.htpasswd'
+    access_log: '/var/log/nginx/wifi-access_log'
+    error_log: '/var/log/nginx/wifi-error_log'
+    format_log: 'combined'
+    owner: 'deploy.vogel'
+    group: 'nginx'
+    mode: '0640'
+#    try_files:
+#      - '$uri'
+#      - '%uri/'
+#      - '/index.php?$args'
+    autoindex: 'on'
+
+site::profile::nginx_php_fpm_server::location:
+  'favicon.ico_berhub':
+    www_root: '/srv/www/berhub-berlin-airport-de'
+    vhost: berhub-berlin-airport-de
+    location: '/favicon.ico'
+    ensure: present
+    index_files:
+      - 'index.php'
+    location_custom_cfg:
+      access_log: 'off'
+      log_not_found: 'off'
+  'robots.txt_berhub':
+    www_root: '/srv/www/berhub-berlin-airport-de'
+    vhost: berhub-berlin-airport-de
+    location: '/robots.txt'
+    ensure: present
+    index_files:
+      - 'index.php'
+    location_custom_cfg:
+      access_log: 'off'
+      log_not_found: 'off'
+      allow: 'all'
+  'hidden-files_berhub':
+    www_root: '/srv/www/berhub-berlin-airport-de'
+    vhost: berhub-berlin-airport-de
+    ensure: present
+    index_files:
+      - 'index.php'
+    location: '~ /\.'
+    location_custom_cfg:
+      access_log: 'off'
+      log_not_found: 'off'
+      deny: 'all'
+  'images_berhub':
+    www_root: '/srv/www/berhub-berlin-airport-de'
+    vhost: berhub-berlin-airport-de
+    location: '~* "^.+\.(jpg|jpeg|gif|png|ico|)$"'
+    ensure: present
+    index_files:
+      - 'index.php'
+    location_custom_cfg:
+      access_log: 'off'
+      log_not_found: 'off'
+      expires: 'max'
+  'files_berhub':
+    www_root: '/srv/www/berhub-berlin-airport-de'
+    vhost: berhub-berlin-airport-de
+    location: '~* "^.+\.(ogg|ogv|svg|svgz|eot|otf|woff|mp4|ttf|rss|atom|jpg|jpeg|gif|png|ico|zip|tgz|gz|rar|bz2|doc|xls|exe|ppt|tar|mid|midi|wav|bmp|rtf)$"'
+    ensure: present
+    index_files:
+      - 'index.php'
+    location_custom_cfg:
+      log_not_found: 'off'
+      expires: 'max'
+  'all-files_berhub':
+    www_root: '/srv/www/berhub-berlin-airport-de'
+    vhost: berhub-berlin-airport-de
+    location: '~ "\*$"'
+    ensure: present
+    index_files:
+      - 'index.php'
+    try_files:
+      - '$uri =404'
+  'php-files_berhub':
+    www_root: '/srv/www/berhub-berlin-airport-de'
+    vhost: berhub-berlin-airport-de
+    location: '~ "\.php$"'
+    ensure: present
+    index_files:
+      - 'index.php'
+    try_files:
+      - '$uri =404'
+    include:
+      - '/etc/nginx/fastcgi.conf'
+    fastcgi_param:
+      SCRIPT_FILENAME: '$document_root$fastcgi_script_name'
+    location_cfg_append:
+      fastcgi_read_timeout: '3600s'
+      fastcgi_buffer_size: '128k'
+      fastcgi_buffers: '4 128k'
+      fastcgi_pass: '127.0.0.1:9000'
+      fastcgi_index: 'index.php'
+  'favicon.ico_berhub_ssl':
+    www_root: '/srv/www/berhub-berlin-airport-de'
+    vhost: berhub-berlin-airport-de_ssl
+    location: '/favicon.ico'
+    ensure: present
+    index_files:
+      - 'index.php'
+    location_custom_cfg:
+      access_log: 'off'
+      log_not_found: 'off'
+  'robots.txt_berhub_ssl':
+    www_root: '/srv/www/berhub-berlin-airport-de'
+    vhost: berhub-berlin-airport-de_ssl
+    location: '/robots.txt'
+    ensure: present
+    index_files:
+      - 'index.php'
+    location_custom_cfg:
+      access_log: 'off'
+      log_not_found: 'off'
+      allow: 'all'
+  'hidden-files_berhub_ssl':
+    www_root: '/srv/www/berhub-berlin-airport-de'
+    vhost: berhub-berlin-airport-de_ssl
+    ensure: present
+    index_files:
+      - 'index.php'
+    location: '~ /\.'
+    location_custom_cfg:
+      access_log: 'off'
+      log_not_found: 'off'
+      deny: 'all'
+  'images_berhub_ssl':
+    www_root: '/srv/www/berhub-berlin-airport-de'
+    vhost: berhub-berlin-airport-de_ssl
+    location: '~* "^.+\.(jpg|jpeg|gif|png|ico|)$"'
+    ensure: present
+    index_files:
+      - 'index.php'
+    try_files:
+      - '$uri'
+      - '%uri/'
+      - '/index.php'
+  'files_berhub_ssl':
+    www_root: '/srv/www/berhub-berlin-airport-de'
+    vhost: berhub-berlin-airport-de_ssl
+    location: '~* "^.+\.(ogg|ogv|svg|svgz|eot|otf|woff|mp4|ttf|rss|atom|jpg|jpeg|gif|png|ico|zip|tgz|gz|rar|bz2|doc|xls|exe|ppt|tar|mid|midi|wav|bmp|rtf)$"'
+    ensure: present
+    index_files:
+      - 'index.php'
+    location_custom_cfg:
+      access_log: 'off'
+      log_not_found: 'off'
+      expires: 'max'
+  'all-files_berhub_ssl':
+    www_root: '/srv/www/berhub-berlin-airport-de'
+    vhost: berhub-berlin-airport-de_ssl
+    location: '~ "\*$"'
+    ensure: present
+    index_files:
+      - 'index.php'
+    try_files:
+      - '$uri =404'
+  'php-files_berhub_ssl':
+    www_root: '/srv/www/berhub-berlin-airport-de'
+    vhost: berhub-berlin-airport-de_ssl
+    location: '~ "\.php$"'
+    ensure: present
+    index_files:
+      - 'index.php'
+    try_files:
+      - '$uri =404'
+    include:
+      - '/etc/nginx/fastcgi.conf'
+    fastcgi_param:
+      SCRIPT_FILENAME: '$document_root$fastcgi_script_name'
+    location_cfg_append:
+      fastcgi_read_timeout: '3600s'
+      fastcgi_buffer_size: '128k'
+      fastcgi_buffers: '4 128k'
+      fastcgi_pass: '127.0.0.1:9000'
+      fastcgi_index: 'index.php'
+  'favicon.ico_blog':
+    www_root: '/srv/www/blog-berlin-airport-de'
+    vhost: blog-berlin-airport-de
+    location: '/favicon.ico'
+    ensure: present
+    index_files:
+      - 'index.php'
+    location_custom_cfg:
+      access_log: 'off'
+      log_not_found: 'off'
+  'robots.txt_blog':
+    www_root: '/srv/www/blog-berlin-airport-de'
+    vhost: blog-berlin-airport-de
+    location: '/robots.txt'
+    ensure: present
+    index_files:
+      - 'index.php'
+    location_custom_cfg:
+      access_log: 'off'
+      log_not_found: 'off'
+      allow: 'all'
+  'hidden-files_blog':
+    www_root: '/srv/www/blog-berlin-airport-de'
+    vhost: blog-berlin-airport-de
+    ensure: present
+    index_files:
+      - 'index.php'
+    location: '~ /\.'
+    location_custom_cfg:
+      access_log: 'off'
+      log_not_found: 'off'
+      deny: 'all'
+  'images_blog':
+    www_root: '/srv/www/blog-berlin-airport-de'
+    vhost: blog-berlin-airport-de
+    location: '~* "^.+\.(jpg|jpeg|gif|png|ico|)$"'
+    ensure: present
+    index_files:
+      - 'index.php'
+    location_custom_cfg:
+      access_log: 'off'
+      log_not_found: 'off'
+      expires: 'max'
+  'files_blog':
+    www_root: '/srv/www/blog-berlin-airport-de'
+    vhost: blog-berlin-airport-de
+    location: '~* "^.+\.(ogg|ogv|svg|svgz|eot|otf|woff|mp4|ttf|rss|atom|jpg|jpeg|gif|png|ico|zip|tgz|gz|rar|bz2|doc|xls|exe|ppt|tar|mid|midi|wav|bmp|rtf)$"'
+    ensure: present
+    index_files:
+      - 'index.php'
+    location_custom_cfg:
+      log_not_found: 'off'
+      expires: 'max'
+  'all-files_blog':
+    www_root: '/srv/www/blog-berlin-airport-de'
+    vhost: blog-berlin-airport-de
+    location: '~ "\*$"'
+    ensure: present
+    index_files:
+      - 'index.php'
+    try_files:
+      - '$uri =404'
+  'php-files_blog':
+    www_root: '/srv/www/blog-berlin-airport-de'
+    vhost: blog-berlin-airport-de
+    location: '~ "\.php$"'
+    ensure: present
+    index_files:
+      - 'index.php'
+    try_files:
+      - '$uri =404'
+    include:
+      - '/etc/nginx/fastcgi.conf'
+    fastcgi_param:
+      SCRIPT_FILENAME: '$document_root$fastcgi_script_name'
+    location_cfg_append:
+      fastcgi_read_timeout: '3600s'
+      fastcgi_buffer_size: '128k'
+      fastcgi_buffers: '4 128k'
+      fastcgi_pass: '127.0.0.1:9000'
+      fastcgi_index: 'index.php'
+  'favicon.ico_blog_ssl':
+    www_root: '/srv/www/blog-berlin-airport-de'
+    vhost: blog-berlin-airport-de_ssl
+    location: '/favicon.ico'
+    ensure: present
+    index_files:
+      - 'index.php'
+    location_custom_cfg:
+      access_log: 'off'
+      log_not_found: 'off'
+  'robots.txt_blog_ssl':
+    www_root: '/srv/www/blog-berlin-airport-de'
+    vhost: blog-berlin-airport-de_ssl
+    location: '/robots.txt'
+    ensure: present
+    index_files:
+      - 'index.php'
+    location_custom_cfg:
+      access_log: 'off'
+      log_not_found: 'off'
+      allow: 'all'
+  'hidden-files_blog_ssl':
+    www_root: '/srv/www/blog-berlin-airport-de'
+    vhost: blog-berlin-airport-de_ssl
+    ensure: present
+    index_files:
+      - 'index.php'
+    location: '~ /\.'
+    location_custom_cfg:
+      access_log: 'off'
+      log_not_found: 'off'
+      deny: 'all'
+  'images_blog_ssl':
+    www_root: '/srv/www/blog-berlin-airport-de'
+    vhost: blog-berlin-airport-de_ssl
+    location: '~* "^.+\.(jpg|jpeg|gif|png|ico|)$"'
+    ensure: present
+    index_files:
+      - 'index.php'
+    try_files:
+      - '$uri'
+      - '%uri/'
+      - '/index.php'
+  'files_blog_ssl':
+    www_root: '/srv/www/blog-berlin-airport-de'
+    vhost: blog-berlin-airport-de_ssl
+    location: '~* "^.+\.(ogg|ogv|svg|svgz|eot|otf|woff|mp4|ttf|rss|atom|jpg|jpeg|gif|png|ico|zip|tgz|gz|rar|bz2|doc|xls|exe|ppt|tar|mid|midi|wav|bmp|rtf)$"'
+    ensure: present
+    index_files:
+      - 'index.php'
+    location_custom_cfg:
+      access_log: 'off'
+      log_not_found: 'off'
+      expires: 'max'
+  'all-files_blog_ssl':
+    www_root: '/srv/www/blog-berlin-airport-de'
+    vhost: blog-berlin-airport-de_ssl
+    location: '~ "\*$"'
+    ensure: present
+    index_files:
+      - 'index.php'
+    try_files:
+      - '$uri =404'
+  'php-files_blog_ssl':
+    www_root: '/srv/www/blog-berlin-airport-de'
+    vhost: blog-berlin-airport-de_ssl
+    location: '~ "\.php$"'
+    ensure: present
+    index_files:
+      - 'index.php'
+    try_files:
+      - '$uri =404'
+    include:
+      - '/etc/nginx/fastcgi.conf'
+    fastcgi_param:
+      SCRIPT_FILENAME: '$document_root$fastcgi_script_name'
+    location_cfg_append:
+      fastcgi_read_timeout: '3600s'
+      fastcgi_buffer_size: '128k'
+      fastcgi_buffers: '4 128k'
+      fastcgi_pass: '127.0.0.1:9000'
+      fastcgi_index: 'index.php'
+
diff --git a/customer/fbb-web/test-web01-berlin-airport-de.pixelpark.net.yaml b/customer/fbb-web/test-web01-berlin-airport-de.pixelpark.net.yaml
new file mode 100644 (file)
index 0000000..dc17dd5
--- /dev/null
@@ -0,0 +1,33 @@
+---
+site::role: base
+site::additional_classes:
+  - site::profile::nginx_php_fpm_server
+  - memcached
+  - site::profile::mysql_server
+  - site::profile::monitoring::mysql
+  - zabbix::agent
+
+mysql::server::override_options:
+  'mysqld':
+    server-id: '1'
+    auto_increment_increment: '2'
+    auto_increment_offset: '2'
+    log-bin: '/var/lib/mysql/test-web01-ber-bin'
+    binlog-format: 'MIXED'
+    binlog-ignore-db: 'performance_schema, information_schema'
+    expire-logs-days: '7'
+    bind-address: '93.188.107.91'
+
+site::profile::nginx_php_fpm_server::location:
+  'wp-admin':
+    www_root: '/srv/www/blog-berlin-airport-de'
+    vhost: tst-blog-berlin-airport-de
+    location: '/wp-admin/'
+    location_deny:
+      - 'all'
+  'wp-admin_ssl':
+    www_root: '/srv/www/blog-berlin-airport-de'
+    vhost: tst-blog-berlin-airport-de_ssl
+    location: '/wp-admin/'
+    location_deny:
+      - 'all'
diff --git a/customer/fbb-web/test-web02-berlin-airport-de.pixelpark.net.yaml b/customer/fbb-web/test-web02-berlin-airport-de.pixelpark.net.yaml
new file mode 100644 (file)
index 0000000..5ada723
--- /dev/null
@@ -0,0 +1,33 @@
+---
+site::role: base
+site::additional_classes:
+  - site::profile::nginx_php_fpm_server
+  - memcached
+  - site::profile::mysql_server
+  - site::profile::monitoring::mysql
+  - zabbix::agent
+
+mysql::server::override_options:
+  'mysqld':
+    server-id: '2'
+    auto_increment_increment: '2'
+    auto_increment_offset: '2'
+    log-bin: '/var/lib/mysql/test-web02-ber-bin'
+    binlog-format: 'MIXED'
+    binlog-ignore-db: 'performance_schema, information_schema'
+    expire-logs-days: '7'
+    bind-address: '93.188.107.95'
+
+site::profile::nginx_php_fpm_server::location:
+  'wp-admin':
+    www_root: '/srv/www/tst-berhub-berlin-airport-de'
+    vhost: tst-berhub-berlin-airport-de
+    location: '/wp-admin/'
+    location_deny:
+      - 'all'
+  'wp-admin_ssl':
+    www_root: '/srv/www/tst-berhub-berlin-airport-de'
+    vhost: tst-berhub-berlin-airport-de_ssl
+    location: '/wp-admin/'
+    location_deny:
+      - 'all'
diff --git a/customer/fbb-web/test.yaml b/customer/fbb-web/test.yaml
new file mode 100644 (file)
index 0000000..a0dbc00
--- /dev/null
@@ -0,0 +1,601 @@
+---
+accounts::users:
+  konrad.tadesse:
+    apply: true
+    sudo: false
+  thomas.bussmeyer:
+    apply: true
+    sudo: false
+  stephan.vits:
+    apply: true
+    sudo: false
+  andreas.pinto-koehler:
+    apply: true
+    sudo: false
+  deploy.vogel:
+    apply: true
+    sudo: false
+    group: 'nginx'
+    shell: "bash"
+    keys:
+      jenkins:
+        key: "AAAAB3NzaC1yc2EAAAADAQABAAABAQCcA9sDPUizm9LRPYsSQSkkXRlGfhkZcCeQ8XDTbvHLjLlQdJznx3ezpxtmIgKLzMb3Hd3YNB+CAjD//iIDgJkwxNU2qGjm4vJT0WjQ2dwbPyVgN+Ik1nBhqWC2gD5UnDIVULYP5WUkgPPP1if64Q5fnfD9aTkUNOYJ4u9Th7As97e48S+/Z8vqw9EDcr3ZC+OzU7ezU65SHH4mpC1MvLW4EG0DU+omYDuMBusRA9SPx9uAebmoVVqZ23YmK5h9gh8Nc/Av5r6yfYKtkFt6CliGc7qZj56ONfHnP79CgVIlJ5NIHU2s27tTJmoDOHOkJZ11TuQp4HbuMAUAWHi6Aie7"
+      unison:
+        key: "AAAAB3NzaC1yc2EAAAADAQABAAABAQDO33Riv0a0//OSJQJwRyU+yN80SH4AvwdLXKD2NH7Lrnfpq4XXzqOSrRiEApciUc+AsjCpZJzVl89L38718M3+pcGQ7dttnjiYGsyLgwOLwZWv951ZynSNfLROGfyk7CJr1EYk4oKBpAPNLUqMqQRsf0oP+b1xacs+QSyIN5KjLkDF7vEpHVroImzGA/X8JqlOzsllNwNvxvXPB8GUKURPHhDA8MRLgKgNDXYpqEzxe0FKv3QXa+FA/P6WqWM2ECAIVbOG+GP0EJmTGKLkjmN4ew6lh7j++nNUHTW894eZBrAVP2nja1fS4zoGOl68XS8HVA/4KZlE5gEZs/ylU++R"
+  beate.hauss:
+    apply: true
+    sudo: false
+  samir.djulancic:
+    apply: true
+    sudo: false
+  steffen.wiegand:
+    apply: true
+    sudo: false
+
+mysql::server::root_password: ENC[PKCS7,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]
+site::profile::mysql_server::databases:
+  wordpress:
+    user: wordpress
+    password: ENC[PKCS7,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]
+  ber-hub:
+    user: ber-hub
+    password: ENC[PKCS7,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]
+
+repo::remi_php55: true
+
+php::fpm::pools:
+  www:
+    user: nginx
+    group: nginx
+
+php::extensions:
+  gd: {}
+  xml: {}
+  mysqlnd: {}
+  imagick:
+    provider: pecl
+  memcache:
+    provider: pecl
+
+php::settings:
+  Date/date.timezone: 'Europe/Berlin'
+  PHP/upload_max_filesize: '32M'
+  PHP/post_max_size: '32M'
+  PHP/max_execution_time: 240
+  PHP/memory_limit: '128M'
+  PHP/expose_php: 'Off'
+
+# because we have pecl packages we must install dev packages
+php::dev: true
+php::pear: true
+
+#memcached::max_memory: 256
+#memcached::listen_ip: '127.0.0.1'
+
+site::profile::nginx_php_fpm_server::upstream:
+  'phpfpm':
+    ensure: present
+    members:
+      - 'localhost:9000'
+
+site::profile::nginx_php_fpm_server::vhosts:
+  tst-berhub-berlin-airport-de:
+    ensure: present
+    www_root: '/srv/www/tst-berhub-berlin-airport-de'
+    index_files: 
+      - 'index.php'
+      - 'index.html'
+      - 'index.htm'
+    server_name: 
+      - 'tst-berhub-berlin-airport-de.pixelpark.net'
+      - 'tst01-berhub-berlin-airport-de.pixelpark.net'
+      - 'tst02-berhub-berlin-airport-de.pixelpark.net'
+      - 'tst-roadmap.berlin-airport.de'
+      - 'tst-roadmap01.berlin-airport.de'
+      - 'tst roadmap02.berlin-airport.de'
+    rewrite_rules:
+      - '^/wp-admin$ $scheme://$host$uri/index.php permanent'
+      - '/files/$ /index.php last'
+      - '^/wp-admin/$ $scheme://$host/wp-admin/index.php permanent'
+# Wichtig damit auch die Uploadeinstellungen der php.ini greifen
+    client_max_body_size: '32M'
+    listen_port: 80
+#    listen_ip: 93.188.107.30
+#    location_allow:
+#    location_deny:
+    auth_basic: 'Server'
+    auth_basic_user_file: '/etc/nginx/.htpasswd'
+    access_log: '/var/log/nginx/tst-berhub-access_log'
+    error_log: '/var/log/nginx/tst-berhub-error_log'
+    format_log: 'combined'
+    owner: 'deploy.vogel'
+    group: 'nginx'
+    mode: '0640'
+#    vhost_cfg_prepend:
+    try_files:
+      - '$uri'
+      - '%uri/'
+      - '/index.php?$args'
+    autoindex: 'on'
+  tst-berhub-berlin-airport-de_ssl:
+    ensure: present
+    www_root: '/srv/www/tst-berhub-berlin-airport-de'
+    index_files:
+      - 'index.php'
+      - 'index.html'
+      - 'index.htm'
+    server_name:
+      - 'tst-berhub-berlin-airport-de.pixelpark.net'
+      - 'tst01-berhub-berlin-airport-de.pixelpark.net'
+      - 'tst02-berhub-berlin-airport-de.pixelpark.net'
+      - 'tst-roadmap.berlin-airport.de'
+      - 'tst-roadmap01.berlin-airport.de'
+      - 'tst roadmap02.berlin-airport.de'
+    rewrite_rules:
+      - '^/wp-admin$ $scheme://$host$uri/ permanent'
+      - '/files/$ /index.php last'
+      - '^/wp-admin/$ $scheme://$host/wp-admin/index.php permanent'
+# Wichtig damit auch die Uploadeinstellungen der php.ini greifen
+    client_max_body_size: '32M'
+    listen_port: 81
+#    listen_ip: 93.188.107.30
+#    location_allow:
+#    location_deny:
+    auth_basic: 'Server'
+    auth_basic_user_file: '/etc/nginx/.htpasswd'
+    access_log: '/var/log/nginx/tst-berhub-access_log'
+    error_log: '/var/log/nginx/tst-berhub-error_log'
+    format_log: 'combined'
+    owner: 'deploy.vogel'
+    group: 'nginx'
+    mode: '0640'
+#    vhost_cfg_prepend:
+    try_files:
+      - '$uri'
+      - '%uri/'
+      - '/index.php?$args'
+    autoindex: 'on'
+  tst-blog-berlin-airport-de:
+    www_root: '/srv/www/tst-blog-berlin-airport-de'
+    index_files:
+      - 'index.php'
+      - 'index.html'
+      - 'index.htm'
+    server_name:
+      - 'tst-blog-berlin-airport-de.pixelpark.net'
+      - 'tst-www-blog-berlin-airport-de.pixelpark.net'
+      - 'tst01-blog-berlin-airport-de.pixelpark.net'
+      - 'tst02-blog-berlin-airport-de.pixelpark.net'
+    rewrite_rules:
+      - '^/wp-admin$ $scheme://$host$uri/index.php permanent'
+      - '/files/$ /index.php last'
+      - '^/wp-admin/$ $scheme://$host/wp-admin/index.php permanent'
+    client_max_body_size: '32M'
+    listen_port: 80
+    auth_basic: 'Server'
+    auth_basic_user_file: '/etc/nginx/.htpasswd'
+    access_log: '/var/log/nginx/blog-access_log'
+    error_log: '/var/log/nginx/blog-error_log'
+    format_log: 'combined'
+    owner: 'deploy.vogel'
+    group: 'nginx'
+    mode: '0640'
+    try_files:
+      - '$uri'
+      - '%uri/'
+      - '/index.php?$args'
+    autoindex: 'on'
+  tst-blog-berlin-airport-de_ssl:
+    www_root: '/srv/www/tst-blog-berlin-airport-de'
+    index_files:
+      - 'index.php'
+      - 'index.html'
+      - 'index.htm'
+    server_name:
+      - 'tst-blog-berlin-airport-de.pixelpark.net'
+      - 'tst-www-blog-berlin-airport-de.pixelpark.net'
+      - 'tst01-blog-berlin-airport-de.pixelpark.net'
+      - 'tst02-blog-berlin-airport-de.pixelpark.net'
+    rewrite_rules:
+      - '^/wp-admin$ $scheme://$host$uri/index.php permanent'
+      - '/files/$ /index.php last'
+      - '^/wp-admin/$ $scheme://$host/wp-admin/index.php permanent'
+    client_max_body_size: '32M'
+    listen_port: 81
+    auth_basic: 'Server'
+    auth_basic_user_file: '/etc/nginx/.htpasswd'
+    access_log: '/var/log/nginx/blog-access_log'
+    error_log: '/var/log/nginx/blog-error_log'
+    format_log: 'combined'
+    owner: 'deploy.vogel'
+    group: 'nginx'
+    mode: '0640'
+    try_files:
+      - '$uri'
+      - '%uri/'
+      - '/index.php?$args'
+    autoindex: 'on'
+  tst-wifi-berlin-airport-de:
+    www_root: '/srv/www/tst-wifi-berlin-airport-de'
+    index_files:
+#      - 'index.php'
+      - 'index.html'
+#      - 'index.htm'
+    server_name:
+      - 'tst-wifi-berlin-airport-de.pixelpark.net'
+      - 'tst01-wifi-berlin-airport-de.pixelpark.net'
+      - 'tst02-wifi-berlin-airport-de.pixelpark.net'
+#    rewrite_rules:
+#      - '/wp-admin$ $scheme://$host$uri/ permanent'
+#      - '/files/$ /index.php last'
+    client_max_body_size: '32M'
+    listen_port: 80
+    auth_basic: 'Server'
+    auth_basic_user_file: '/etc/nginx/.htpasswd'
+    access_log: '/var/log/nginx/wifi-access_log'
+    error_log: '/var/log/nginx/wifi-error_log'
+    format_log: 'combined'
+    owner: 'deploy.vogel'
+    group: 'nginx'
+    mode: '0640'
+#    try_files:
+#      - '$uri'
+#      - '%uri/'
+#      - '/index.php?$args'
+    autoindex: 'on'
+  tst-wifi-berlin-airport-de_ssl:
+    www_root: '/srv/www/tst-wifi-berlin-airport-de'
+    index_files:
+#      - 'index.php'
+      - 'index.html'
+#      - 'index.htm'
+    server_name:
+      - 'tst-wifi-berlin-airport-de.pixelpark.net'
+      - 'tst01-wifi-berlin-airport-de.pixelpark.net'
+      - 'tst02-wifi-berlin-airport-de.pixelpark.net'
+#    rewrite_rules:
+#      - '/wp-admin$ $scheme://$host$uri/ permanent'
+#      - '/files/$ /index.php last'
+    client_max_body_size: '32M'
+    listen_port: 81
+    auth_basic: 'Server'
+    auth_basic_user_file: '/etc/nginx/.htpasswd'
+    access_log: '/var/log/nginx/wifi-access_log'
+    error_log: '/var/log/nginx/wifi-error_log'
+    format_log: 'combined'
+    owner: 'deploy.vogel'
+    group: 'nginx'
+    mode: '0640'
+#    try_files:
+#      - '$uri'
+#      - '%uri/'
+#      - '/index.php?$args'
+    autoindex: 'on'
+
+site::profile::nginx_php_fpm_server::location:
+  'favicon.ico_berhub':
+    www_root: '/srv/www/tst-berhub-berlin-airport-de'
+    vhost: tst-berhub-berlin-airport-de
+    location: '/favicon.ico'
+    ensure: present
+    index_files:
+      - 'index.php'
+    location_custom_cfg:
+      access_log: 'off'
+      log_not_found: 'off'
+  'robots.txt_berhub':
+    www_root: '/srv/www/tst-berhub-berlin-airport-de'
+    vhost: tst-berhub-berlin-airport-de
+    location: '/robots.txt'
+    ensure: present
+    index_files:
+      - 'index.php'
+    location_custom_cfg:
+      access_log: 'off'
+      log_not_found: 'off'
+      allow: 'all'
+  'hidden-files_berhub':
+    www_root: '/srv/www/tst-berhub-berlin-airport-de'
+    vhost: tst-berhub-berlin-airport-de
+    ensure: present
+    index_files:
+      - 'index.php'
+    location: '~ /\.'
+    location_custom_cfg:
+      access_log: 'off'
+      log_not_found: 'off'
+      deny: 'all'
+  'images_berhub':
+    www_root: '/srv/www/tst-berhub-berlin-airport-de'
+    vhost: tst-berhub-berlin-airport-de
+    location: '~* "^.+\.(jpg|jpeg|gif|png|ico|)$"'
+    ensure: present
+    index_files:
+      - 'index.php'
+    location_custom_cfg:
+      access_log: 'off'
+      log_not_found: 'off'
+      expires: 'max'
+  'files_berhub':
+    www_root: '/srv/www/tst-berhub-berlin-airport-de'
+    vhost: tst-berhub-berlin-airport-de
+    location: '~* "^.+\.(ogg|ogv|svg|svgz|eot|otf|woff|mp4|ttf|rss|atom|jpg|jpeg|gif|png|ico|zip|tgz|gz|rar|bz2|doc|xls|exe|ppt|tar|mid|midi|wav|bmp|rtf)$"'
+    ensure: present
+    index_files:
+      - 'index.php'
+    location_custom_cfg:
+      log_not_found: 'off'
+      expires: 'max'
+  'all-files_berhub':
+    www_root: '/srv/www/tst-berhub-berlin-airport-de'
+    vhost: tst-berhub-berlin-airport-de
+    location: '~ "\*$"'
+    ensure: present
+    index_files:
+      - 'index.php'
+    try_files:
+      - '$uri =404'
+  'php-files_berhub':
+    www_root: '/srv/www/tst-berhub-berlin-airport-de'
+    vhost: tst-berhub-berlin-airport-de
+    location: '~ "\.php$"'
+    ensure: present
+    index_files:
+      - 'index.php'
+    try_files:
+      - '$uri =404'
+    include:
+      - '/etc/nginx/fastcgi.conf'
+    fastcgi_param:
+      SCRIPT_FILENAME: '$document_root$fastcgi_script_name'
+    location_cfg_append:
+      fastcgi_read_timeout: '3600s'
+      fastcgi_buffer_size: '128k'
+      fastcgi_buffers: '4 128k'
+      fastcgi_pass: '127.0.0.1:9000'
+      fastcgi_index: 'index.php'
+  'favicon.ico_berhub_ssl':
+    www_root: '/srv/www/tst-berhub-berlin-airport-de'
+    vhost: tst-berhub-berlin-airport-de_ssl
+    location: '/favicon.ico'
+    ensure: present
+    index_files:
+      - 'index.php'
+    location_custom_cfg:
+      access_log: 'off'
+      log_not_found: 'off'
+  'robots.txt_berhub_ssl':
+    www_root: '/srv/www/tst-berhub-berlin-airport-de'
+    vhost: tst-berhub-berlin-airport-de_ssl
+    location: '/robots.txt'
+    ensure: present
+    index_files:
+      - 'index.php'
+    location_custom_cfg:
+      access_log: 'off'
+      log_not_found: 'off'
+      allow: 'all'
+  'hidden-files_berhub_ssl':
+    www_root: '/srv/www/tst-berhub-berlin-airport-de'
+    vhost: tst-berhub-berlin-airport-de_ssl
+    ensure: present
+    index_files:
+      - 'index.php'
+    location: '~ /\.'
+    location_custom_cfg:
+      access_log: 'off'
+      log_not_found: 'off'
+      deny: 'all'
+  'images_berhub_ssl':
+    www_root: '/srv/www/tst-berhub-berlin-airport-de'
+    vhost: tst-berhub-berlin-airport-de_ssl
+    location: '~* "^.+\.(jpg|jpeg|gif|png|ico|)$"'
+    ensure: present
+    index_files:
+      - 'index.php'
+    try_files:
+      - '$uri'
+      - '%uri/'
+      - '/index.php'
+  'files_berhub_ssl':
+    www_root: '/srv/www/tst-berhub-berlin-airport-de'
+    vhost: tst-berhub-berlin-airport-de_ssl
+    location: '~* "^.+\.(ogg|ogv|svg|svgz|eot|otf|woff|mp4|ttf|rss|atom|jpg|jpeg|gif|png|ico|zip|tgz|gz|rar|bz2|doc|xls|exe|ppt|tar|mid|midi|wav|bmp|rtf)$"'
+    ensure: present
+    index_files:
+      - 'index.php'
+    location_custom_cfg:
+      access_log: 'off'
+      log_not_found: 'off'
+      expires: 'max'
+  'all-files_berhub_ssl':
+    www_root: '/srv/www/tst-berhub-berlin-airport-de'
+    vhost: tst-berhub-berlin-airport-de_ssl
+    location: '~ "\*$"'
+    ensure: present
+    index_files:
+      - 'index.php'
+    try_files:
+      - '$uri =404'
+  'php-files_berhub_ssl':
+    www_root: '/srv/www/tst-berhub-berlin-airport-de'
+    vhost: tst-berhub-berlin-airport-de_ssl
+    location: '~ "\.php$"'
+    ensure: present
+    index_files:
+      - 'index.php'
+    try_files:
+      - '$uri =404'
+    include:
+      - '/etc/nginx/fastcgi.conf'
+    fastcgi_param:
+      SCRIPT_FILENAME: '$document_root$fastcgi_script_name'
+    location_cfg_append:
+      fastcgi_read_timeout: '3600s'
+      fastcgi_buffer_size: '128k'
+      fastcgi_buffers: '4 128k'
+      fastcgi_pass: '127.0.0.1:9000'
+      fastcgi_index: 'index.php'
+  'favicon.ico_blog':
+    www_root: '/srv/www/tst-blog-berlin-airport-de'
+    vhost: tst-blog-berlin-airport-de
+    location: '/favicon.ico'
+    ensure: present
+    index_files:
+      - 'index.php'
+    location_custom_cfg:
+      access_log: 'off'
+      log_not_found: 'off'
+  'robots.txt_blog':
+    www_root: '/srv/www/tst-blog-berlin-airport-de'
+    vhost: tst-blog-berlin-airport-de
+    location: '/robots.txt'
+    ensure: present
+    index_files:
+      - 'index.php'
+    location_custom_cfg:
+      access_log: 'off'
+      log_not_found: 'off'
+      allow: 'all'
+  'hidden-files_blog':
+    www_root: '/srv/www/tst-blog-berlin-airport-de'
+    vhost: tst-blog-berlin-airport-de
+    ensure: present
+    index_files:
+      - 'index.php'
+    location: '~ /\.'
+    location_custom_cfg:
+      access_log: 'off'
+      log_not_found: 'off'
+      deny: 'all'
+  'images_blog':
+    www_root: '/srv/www/tst-blog-berlin-airport-de'
+    vhost: tst-blog-berlin-airport-de
+    location: '~* "^.+\.(jpg|jpeg|gif|png|ico|)$"'
+    ensure: present
+    index_files:
+      - 'index.php'
+    location_custom_cfg:
+      access_log: 'off'
+      log_not_found: 'off'
+      expires: 'max'
+  'files_blog':
+    www_root: '/srv/www/tst-blog-berlin-airport-de'
+    vhost: tst-blog-berlin-airport-de
+    location: '~* "^.+\.(ogg|ogv|svg|svgz|eot|otf|woff|mp4|ttf|rss|atom|jpg|jpeg|gif|png|ico|zip|tgz|gz|rar|bz2|doc|xls|exe|ppt|tar|mid|midi|wav|bmp|rtf)$"'
+    ensure: present
+    index_files:
+      - 'index.php'
+    location_custom_cfg:
+      log_not_found: 'off'
+      expires: 'max'
+  'all-files_blog':
+    www_root: '/srv/www/tst-blog-berlin-airport-de'
+    vhost: tst-blog-berlin-airport-de
+    location: '~ "\*$"'
+    ensure: present
+    index_files:
+      - 'index.php'
+    try_files:
+      - '$uri =404'
+  'php-files_blog':
+    www_root: '/srv/www/tst-blog-berlin-airport-de'
+    vhost: tst-blog-berlin-airport-de
+    location: '~ "\.php$"'
+    ensure: present
+    index_files:
+      - 'index.php'
+    try_files:
+      - '$uri =404'
+    include:
+      - '/etc/nginx/fastcgi.conf'
+    fastcgi_param:
+      SCRIPT_FILENAME: '$document_root$fastcgi_script_name'
+    location_cfg_append:
+      fastcgi_read_timeout: '3600s'
+      fastcgi_buffer_size: '128k'
+      fastcgi_buffers: '4 128k'
+      fastcgi_pass: '127.0.0.1:9000'
+      fastcgi_index: 'index.php'
+  'favicon.ico_blog_ssl':
+    www_root: '/srv/www/tst-blog-berlin-airport-de'
+    vhost: tst-blog-berlin-airport-de_ssl
+    location: '/favicon.ico'
+    ensure: present
+    index_files:
+      - 'index.php'
+    location_custom_cfg:
+      access_log: 'off'
+      log_not_found: 'off'
+  'robots.txt_blog_ssl':
+    www_root: '/srv/www/tst-blog-berlin-airport-de'
+    vhost: tst-blog-berlin-airport-de_ssl
+    location: '/robots.txt'
+    ensure: present
+    index_files:
+      - 'index.php'
+    location_custom_cfg:
+      access_log: 'off'
+      log_not_found: 'off'
+      allow: 'all'
+  'hidden-files_blog_ssl':
+    www_root: '/srv/www/tst-blog-berlin-airport-de'
+    vhost: tst-blog-berlin-airport-de_ssl
+    ensure: present
+    index_files:
+      - 'index.php'
+    location: '~ /\.'
+    location_custom_cfg:
+      access_log: 'off'
+      log_not_found: 'off'
+      deny: 'all'
+  'images_blog_ssl':
+    www_root: '/srv/www/tst-blog-berlin-airport-de'
+    vhost: tst-blog-berlin-airport-de_ssl
+    location: '~* "^.+\.(jpg|jpeg|gif|png|ico|)$"'
+    ensure: present
+    index_files:
+      - 'index.php'
+    try_files:
+      - '$uri'
+      - '%uri/'
+      - '/index.php'
+  'files_blog_ssl':
+    www_root: '/srv/www/tst-blog-berlin-airport-de'
+    vhost: tst-blog-berlin-airport-de_ssl
+    location: '~* "^.+\.(ogg|ogv|svg|svgz|eot|otf|woff|mp4|ttf|rss|atom|jpg|jpeg|gif|png|ico|zip|tgz|gz|rar|bz2|doc|xls|exe|ppt|tar|mid|midi|wav|bmp|rtf)$"'
+    ensure: present
+    index_files:
+      - 'index.php'
+    location_custom_cfg:
+      access_log: 'off'
+      log_not_found: 'off'
+      expires: 'max'
+  'all-files_blog_ssl':
+    www_root: '/srv/www/tst-blog-berlin-airport-de'
+    vhost: tst-blog-berlin-airport-de_ssl
+    location: '~ "\*$"'
+    ensure: present
+    index_files:
+      - 'index.php'
+    try_files:
+      - '$uri =404'
+  'php-files_blog_ssl':
+    www_root: '/srv/www/tst-blog-berlin-airport-de'
+    vhost: tst-blog-berlin-airport-de_ssl
+    location: '~ "\.php$"'
+    ensure: present
+    index_files:
+      - 'index.php'
+    try_files:
+      - '$uri =404'
+    include:
+      - '/etc/nginx/fastcgi.conf'
+    fastcgi_param:
+      SCRIPT_FILENAME: '$document_root$fastcgi_script_name'
+    location_cfg_append:
+      fastcgi_read_timeout: '3600s'
+      fastcgi_buffer_size: '128k'
+      fastcgi_buffers: '4 128k'
+      fastcgi_pass: '127.0.0.1:9000'
+      fastcgi_index: 'index.php'
diff --git a/customer/fbb-web/web01-berlin-airport-de.pixelpark.net.yaml b/customer/fbb-web/web01-berlin-airport-de.pixelpark.net.yaml
new file mode 100644 (file)
index 0000000..4d25ce7
--- /dev/null
@@ -0,0 +1,20 @@
+---
+site::role: base
+site::additional_classes:
+  - site::profile::nginx_php_fpm_server
+  - site::profile::monitoring::mysql
+  - site::profile::mysql_server
+  - memcached
+  - logstash
+  - zabbix::agent
+
+mysql::server::override_options:
+  'mysqld':
+    server-id: '1'
+    auto_increment_increment: '2'
+    auto_increment_offset: '2'
+    log-bin: '/var/lib/mysql/web01-ber-bin'
+    binlog-format: 'MIXED'
+    binlog-ignore-db: 'performance_schema, information_schema'
+    expire-logs-days: '7'
+    bind-address: '93.188.107.30'
diff --git a/customer/fbb-web/web02-berlin-airport-de.pixelpark.net.yaml b/customer/fbb-web/web02-berlin-airport-de.pixelpark.net.yaml
new file mode 100644 (file)
index 0000000..2ee36d6
--- /dev/null
@@ -0,0 +1,34 @@
+---
+site::role: base
+site::additional_classes:
+  - site::profile::nginx_php_fpm_server
+  - site::profile::monitoring::mysql
+  - site::profile::mysql_server
+  - memcached
+  - logstash
+  - zabbix::agent
+
+mysql::server::override_options:
+  'mysqld':
+    server-id: '2'
+    auto_increment_increment: '2'
+    auto_increment_offset: '2'
+    log-bin: '/var/lib/mysql/web02-ber-bin'
+    binlog-format: 'MIXED'
+    binlog-ignore-db: 'performance_schema, information_schema'
+    expire-logs-days: '7'
+    bind-address: '93.188.107.35'
+
+site::profile::nginx_php_fpm_server::location:
+  'wp-admin':
+    www_root: '/srv/www/berhub-berlin-airport-de'
+    vhost: berhub-berlin-airport-de
+    location: '/wp-admin/'
+    location_deny:
+      - 'all'
+  'wp-admin_ssl':
+    www_root: '/srv/www/berhub-berlin-airport-de'
+    vhost: berhub-berlin-airport-de_ssl
+    location: '/wp-admin/'
+    location_deny:
+      - 'all'
diff --git a/customer/fbb/dev-www-berlin-airport-de.pixelpark.net.yaml b/customer/fbb/dev-www-berlin-airport-de.pixelpark.net.yaml
new file mode 100644 (file)
index 0000000..3a0f3af
--- /dev/null
@@ -0,0 +1,6 @@
+---
+site::additional_classes:
+  - accounts
+  - airport_web_app
+  - unitb_mobile_website
+
diff --git a/customer/fbb/dev-www-berlin-airport-de.yaml b/customer/fbb/dev-www-berlin-airport-de.yaml
new file mode 100644 (file)
index 0000000..c263f78
--- /dev/null
@@ -0,0 +1,7 @@
+---
+site::additional_classes:
+  - accounts
+  - airport_web_app
+  - pp_mcollective
+  - unitb_mobile_website
+
diff --git a/customer/fbb/development.yaml b/customer/fbb/development.yaml
new file mode 100644 (file)
index 0000000..b92c01c
--- /dev/null
@@ -0,0 +1,54 @@
+---
+accounts::users:
+  harry.teuber:
+    apply: true
+    sudo: true
+  ivan.prikhodko:
+    apply: true
+    sudo: true
+  samuel.bufe:
+    apply: true
+    sudo: true
+  oliver.broad:
+    apply: true
+    sudo: false
+  m_scholze:
+    apply: true
+    sudo: true
+  deploy.vogel:
+    apply: true
+    sudo: true
+
+#airport_web_app::params::packagename: "pixelpark_fbb-dev"
+#airport_web_app::params::target: "/www/apps/fbb-dev"
+#airport_web_app::params::inifile: "/www/apps/fbb-dev/config.ini"
+#airport_web_app::params::docroot: "/www/htdocs/dev-ws01-berlin-airport-de.pixelpark.net/docs/webservices"
+#airport_web_app::params::config_params:
+#  - database.host=127.0.0.1
+#  - database.username=mobile_apps
+#  - database.password="TttGcAWJyvHA#&$kLuAD"
+#  - database.dbname=mobile_apps_backend
+#  - cache.general.dir=/www/tmp/
+#  - content.directory=/www/htdocs/dev-ws01-berlin-airport-de.pixelpark.net/docs/app/content/
+#  - airline_data.file=/www/htdocs/dev-www01-berlin-airport-de.pixelpark.net/docs/_airlines/index.php
+#  - poi_cms_export.file=/www/htdocs/dev-ws01-berlin-airport-de.pixelpark.net/docs/poiExport/index.php
+#  - ws_base_url=dev-ws01-berlin-airport-de.pixelpark.net
+#  - push.testmode = false
+#  - push.flyamo = false
+#  - dev.pxp = false
+#  - passbook.log_location = /www/htdocs/dev-ws01-berlin-airport-de.pixelpark.net/docs/app/DOWNLOAD/passes/log
+#  - passbook.store_location = /www/htdocs/dev-ws01-berlin-airport-de.pixelpark.net/docs/app/DOWNLOAD/passes
+#  - passbook.email_to = harry.teuber@pixelpark.com
+#  - special.json_path = /www/htdocs/dev-ws01-berlin-airport-de.pixelpark.net/docs/app/pushSpecial
+#  - special.json_file = 10_pushSpecial.json  
+unitb_mobile_website::database_host: "77.74.236.244"
+unitb_mobile_website::packages:
+  pixelpark_fbb_datenpool:
+    version: 'latest'
+  pixelpark_fbb_hosting:
+    version: 'latest'
+  pixelpark_fbb_mobilewebsite:
+    version: 'latest'   
+unitb_mobile_website::application_env: testing
+unitb_mobile_website::provider: zypper
+unitb_mobile_website::docroot: '/www/htdocs/dev-wsmobile01-berlin-airport-de.pixelpark.net/docs'
diff --git a/customer/fbb/fish.pixelpark.net.yaml b/customer/fbb/fish.pixelpark.net.yaml
new file mode 100644 (file)
index 0000000..879304d
--- /dev/null
@@ -0,0 +1,7 @@
+---
+site::additional_classes:
+  - accounts
+#  - airport_web_app
+  - pp_mcollective
+  - unitb_mobile_website
+
diff --git a/customer/fbb/gaia.pixelpark.net.yaml b/customer/fbb/gaia.pixelpark.net.yaml
new file mode 100644 (file)
index 0000000..6800059
--- /dev/null
@@ -0,0 +1,42 @@
+---
+site::additional_classes:
+  - accounts
+  - airport_web_app
+# Mcollective wird nicht installiert,
+# da die Deployments immer manuell durchgefuehrt werden und die Installation unsere Umgebung mit einer zusaetzlichen RubyVersion unschoen macht 
+#  - pp_mcollective
+  - unitb_mobile_website
+
+# wunscheinstellung ueber Loadbalancer
+#unitb_mobile_website::database_host: "77.74.236.227"
+# gefordert für die Umstellung von Flughafen
+unitb_mobile_website::database_host: "127.0.0.1"
+airport_web_app::params::config_params:
+# wunscheinstellung ueber Loadbalancer
+  - database.host=77.74.236.227
+# gefordert für die Umstellung von Flughafen, aufgrund von Problemen wieder auf VIP
+#  - database.host=127.0.0.1
+  - database.username=mobile_apps
+  - database.password=ENC[PKCS7,MIIBiQYJKoZIhvcNAQcDoIIBejCCAXYCAQAxggEhMIIBHQIBADAFMAACAQEwDQYJKoZIhvcNAQEBBQAEggEAlWmrZsUhR90UwJOb0zWcbI1SHxkPojlz/VPVCtuf+sowioTEos8d0pPknbdKfwox5Yw8R2PqQEt1HRwzXGIpgqmR9Zb2SS6jHqIT2HupcmMrifKnn67OCZW5li9GgjPYQ3ZQN79vRUkk4N662oghaBXWxG27f082FGqj5qgegnZIInAVwNIh95KeRL2V81OjJNYM72X8VT3Ce/n7/uz0Wb376EJGpp4+46oZM4vxNqXVLcxmVR392tmc3diVSmkvX9xd+lGCt3STDVduSWlAnNK9Sz+d5W1kk3BBtBw8QFNvCTJz5+6zQSO3Kpkh5pCD6i8yRSKI7AD1jAvmdbZF2jBMBgkqhkiG9w0BBwEwHQYJYIZIAWUDBAEqBBAruj03OSbCHzvfZK4K7KUEgCBIBLYNhtTTJlrYOIBsvTAP7xQ2CWtSxzcNQXW1mUkKWw==]
+  - database.dbname=mobile_apps_backend
+  - cache.general.dir=/www/tmp/
+  - content.directory=/www/htdocs/ws.berlin-airport.de/docs/app/content/
+  - airline_data.file=/www/data/fiona/app/online/docs/_airlines/index.php
+  - poi_cms_export.file=/www/data/fiona/app/online/docs/poiExport/index.php
+  - ws_base_url=ws.berlin-airport.de
+  - push.testmode = false
+  - push.flyamo = false
+  - dev.pxp = false
+  - passbook.log_location = /www/htdocs/ws.berlin-airport.de/logs
+  - passbook.store_location = /www/htdocs/ws.berlin-airport.de/docs/app/passes
+  - passbook.email_to = andre.staats@publicispixelpark.de
+  - special.json_path = /www/htdocs/ws.berlin-airport.de/docs/app/pushSpecial
+  - special.json_file = 10_pushSpecial.json
+
+sudo::configs:
+  web:
+    priority: "10"
+    content: |
+      Defaults:web       logfile=/home/web/sudo.log
+      Cmnd_Alias VARNISH = /usr/sbin/varnishadm -S /etc/varnish/secret -T77.74.236.234\:8888 url.purge .
+      web ALL=(ALL)  NOPASSWD:VARNISH
\ No newline at end of file
diff --git a/customer/fbb/moneta.pixelpark.net.yaml b/customer/fbb/moneta.pixelpark.net.yaml
new file mode 100644 (file)
index 0000000..0c85794
--- /dev/null
@@ -0,0 +1,47 @@
+---
+site::additional_classes:
+  - accounts
+  - airport_web_app
+# Mcollective wird nicht installiert,
+# da die Deployments immer manuell durchgefuehrt werden und die Installation unsere Umgebung mit einer zusaetzlichen RubyVersion unschoen macht 
+#  - pp_mcollective
+  - unitb_mobile_website
+
+# wunscheinstellung ueber Loadbalancer
+#unitb_mobile_website::database_host: "77.74.236.227"
+# gefordert für die Umstellung von Flughafen
+unitb_mobile_website::database_host: "127.0.0.1"
+airport_web_app::params::config_params:
+# wunscheinstellung ueber Loadbalancer
+  - database.host=77.74.236.227
+# gefordert für die Umstellung von Flughafen, aufgrund von Problemen wieder auf VIP
+#  - database.host=127.0.0.1
+  - database.username=mobile_apps
+  - database.password=ENC[PKCS7,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]
+  - database.dbname=mobile_apps_backend
+  - cache.general.dir=/www/tmp/
+  - content.directory=/www/htdocs/ws.berlin-airport.de/docs/app/content/
+  - airline_data.file=/www/data/fiona/app/online/docs/_airlines/index.php
+  - poi_cms_export.file=/www/data/fiona/app/online/docs/poiExport/index.php
+  - ws_base_url=ws.berlin-airport.de
+  - push.testmode = false
+  - push.flyamo = false
+  - dev.pxp = false
+  - passbook.log_location = /www/htdocs/ws.berlin-airport.de/logs
+  - passbook.store_location = /www/htdocs/ws.berlin-airport.de/docs/app/passes
+  - passbook.email_to = andre.staats@publicispixelpark.de
+  - special.json_path = /www/htdocs/ws.berlin-airport.de/docs/app/pushSpecial
+  - special.json_file = 10_pushSpecial.json
+
+accounts::users:
+  ivan.prikhodko:
+    apply: true
+    sudo: true
+
+sudo::configs:
+  web:
+    priority: "10"
+    content: |
+      Defaults:web       logfile=/home/web/sudo.log
+      Cmnd_Alias VARNISH = /usr/sbin/varnishadm -S /etc/varnish/secret -T77.74.236.232\:8888 url.purge .
+      web ALL=(ALL)  NOPASSWD:VARNISH
\ No newline at end of file
diff --git a/customer/fbb/production.yaml b/customer/fbb/production.yaml
new file mode 100644 (file)
index 0000000..922700a
--- /dev/null
@@ -0,0 +1,56 @@
+---
+accounts::users:
+  oliver.broad:
+    apply: true
+    sudo: false
+  harry.teuber:
+    apply: true
+    sudo: false
+  beate.hauss:
+    apply: true
+    sudo: false
+  samir.djulanjic:
+    apply: true
+    sudo: false
+  steffen.wiegand:
+    apply: true
+    sudo: false
+  frank.grunwald:
+    apply: true
+    sudo: false
+  robert.tulke:
+    apply: true
+    sudo: false
+
+unitb_mobile_website::packages:
+  pixelpark_fbb_datenpool:
+    version: '1-38'
+  pixelpark_fbb_hosting:
+    version: '1-102'
+  pixelpark_fbb_mobilewebsite:
+    version: '1-38'   
+unitb_mobile_website::application_env: production
+unitb_mobile_website::provider: zypper
+unitb_mobile_website::docroot: '/www/htdocs/wsmobile.berlin-airport.de/docs'
+airport_web_app::params::packagename: "pixelpark_fbb"
+airport_web_app::params::inifile: "/www/apps/fbb/config.ini"
+airport_web_app::params::docroot: "/www/htdocs/ws.berlin-airport.de/docs/webservices"
+airport_web_app::params::version: 409-1
+airport_web_app::params::config_params:
+  - database.host=77.74.236.236
+  - database.username=mobile_apps
+  - database.password=ENC[PKCS7,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]
+  - database.dbname=mobile_apps_backend
+  - cache.general.dir=/www/tmp/
+  - content.directory=/www/htdocs/ws.berlin-airport.de/docs/app/content/
+  - airline_data.file=/www/data/fiona/app/online/docs/_airlines/index.php
+  - poi_cms_export.file=/www/data/fiona/app/online/docs/poiExport/index.php
+  - ws_base_url=ws.berlin-airport.de
+  - push.testmode = false
+  - push.flyamo = false
+  - dev.pxp = false
+  - passbook.log_location = /www/htdocs/ws.berlin-airport.de/logs
+  - passbook.store_location = /www/htdocs/ws.berlin-airport.de/docs/passes
+  - passbook.email_to = andre.staats@publicispixelpark.de    
+  - special.json_path = /www/htdocs/ws.berlin-airport.de/docs/app/pushSpecial
+  - special.json_file = 10_pushSpecial.json
diff --git a/customer/fbb/test-www01-berlin-airport-de.pixelpark.net.yaml b/customer/fbb/test-www01-berlin-airport-de.pixelpark.net.yaml
new file mode 100644 (file)
index 0000000..6667b5f
--- /dev/null
@@ -0,0 +1,9 @@
+---
+site::additional_classes:
+  - accounts
+#  - airport_web_app
+  - pp_mcollective
+  - unitb_mobile_website
+
+unitb_mobile_website::database_host: "77.74.236.244"
+unitb_mobile_website::mailform_dbhost: "77.74.236.244"
\ No newline at end of file
diff --git a/customer/fbb/test-www02-berlin-airport-de.pixelpark.net.yaml b/customer/fbb/test-www02-berlin-airport-de.pixelpark.net.yaml
new file mode 100644 (file)
index 0000000..9ee971e
--- /dev/null
@@ -0,0 +1,9 @@
+---
+site::additional_classes:
+  - accounts
+#  - airport_web_app
+  - pp_mcollective
+  - unitb_mobile_website
+
+unitb_mobile_website::database_host: "77.74.236.245"
+unitb_mobile_website::mailform_dbhost: "77.74.236.245"
\ No newline at end of file
diff --git a/customer/fbb/test.yaml b/customer/fbb/test.yaml
new file mode 100644 (file)
index 0000000..93ebf0e
--- /dev/null
@@ -0,0 +1,80 @@
+---
+accounts::users:
+  harry.teuber:
+    apply: true
+    sudo: true
+  ivo.hanke:
+    apply: true
+    sudo: false
+  oliver.broad:
+    apply: true
+    sudo: false
+  beate.hauss:
+    apply: true
+    sudo: false
+  samir.djulanjic:
+    apply: true
+    sudo: false
+  steffen.wiegand:
+    apply: true
+    sudo: false
+  frank.grunwald:
+    apply: true
+    sudo: false
+  robert.tulke:
+    apply: true
+    sudo: false
+  m_scholze:
+    apply: true
+    sudo: true
+  deploy.vogel:
+    apply: true
+    sudo: true
+
+airport_web_app::params::packagename: "pixelpark_fbb"
+airport_web_app::params::inifile: "/www/apps/fbb/config.ini"
+airport_web_app::params::docroot: "/www/htdocs/tstws.berlin-airport.de/docs/webservices"
+airport_web_app::params::version: "latest"
+airport_web_app::params::config_params:
+  - database.host=77.74.236.251
+  - database.username=mobile_apps
+  - database.password=ENC[PKCS7,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]
+  - database.dbname=mobile_apps_backend
+  - cache.general.dir=/www/tmp/
+  - content.directory=/www/htdocs/tstws.berlin-airport.de/docs/app/content/
+  - airline_data.file=/www/data/fiona/app/online/docs/_airlines/index.php
+  - poi_cms_export.file=/www/data/fiona/app/online/docs/poiExport/index.php
+  - ws_base_url=tstws.berlin-airport.de
+  - push.testmode = false
+  - push.flyamo = false
+  - dev.pxp = false
+  - passbook.log_location = /www/htdocs/tstws.berlin-airport.de/logs
+  - passbook.store_location = /www/htdocs/tstws.berlin-airport.de/docs/app/passes  
+  - passbook.email_to = andre.staats@publicispixelpark.de  
+  - special.json_path = /www/htdocs/tstws.berlin-airport.de/docs/app/pushSpecial
+  - special.json_file = 10_pushSpecial.json
+unitb_mobile_website::packages:
+  pixelpark_fbb_datenpool:
+    version: 'latest'
+  pixelpark_fbb_hosting:
+    version: 'latest'
+  pixelpark_fbb_mobilewebsite:
+    version: 'latest'   
+unitb_mobile_website::application_env: testing
+unitb_mobile_website::provider: zypper
+unitb_mobile_website::docroot: '/www/htdocs/tstwsmobile.berlin-airport.de/docs'
+
+unitb_mobile_website::database_username: "entgelt"
+unitb_mobile_website::database_password_prd: ENC[PKCS7,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]
+unitb_mobile_website::database_password_tep: ENC[PKCS7,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]
+unitb_mobile_website::database_dbname: "entgelte"
+
+unitb_mobile_website::mailform_dbusername: "ber"
+unitb_mobile_website::mailform_dbpasswd_prd: ENC[PKCS7,MIIBeQYJKoZIhvcNAQcDoIIBajCCAWYCAQAxggEhMIIBHQIBADAFMAACAQEwDQYJKoZIhvcNAQEBBQAEggEAFcH+bcoaMCSfxcVeULVHkNP2+HL44QLJjFHwl/kUAKNhhZghiWxvhhnCU6sebpZPisg6LU+asPLGQjXufvXgCNRA6MUPqXjGG0rLp3mZQcyqGE1HxW1R8VWgeRDtWm2j0MOb9w2TQ3f1oJ+BZepoz4B3HbZeDH4sZjtUXSJOJPBdanwr3R3jczfrAeTHyckNDePGpCAtqBOxqzP/AKa15PzZUhAyctTHXY3anu3NQIUkVAoeYBP+dKp5U2pKXvFCRo7s7m5TwhMpnFtVB0/B8mLZ6A6prKmi6P4VOWFL0mpdjcRASlfYDG13xBzSW7jMFiXM+XR7ogbiQ6Ln8lbZbjA8BgkqhkiG9w0BBwEwHQYJYIZIAWUDBAEqBBCgZ70JFnWlyU0EX/V7QvShgBC/mS9oYp4QQqgSOKBgQXLb]
+unitb_mobile_website::mailform_dbpasswd_tep: ENC[PKCS7,MIIBeQYJKoZIhvcNAQcDoIIBajCCAWYCAQAxggEhMIIBHQIBADAFMAACAQEwDQYJKoZIhvcNAQEBBQAEggEAjITItEvFsXnOtjXZmXCcUNVrWLhIrllsE+aKz+0d0XrgftKvjVSAM1QQJFAloerAY2C+Fs33s2iJtDPmaLWRzpxh7troPWX1HrmfhxoqsrqKohhgvFP/ybK6mHjjVh5H4L//eoeYYkbIQecEb/m5dGnrzjgVLeKkbnAdYRlrno7+AmoErOuHJ7ohGCJ2fNWDALJ8DSJz6UnXn15nMJwb/cIwgYzeXZpCttv5M6AJChYoktswEAnC4pAZGnWbBzEXes/MlKUA54AMiSJx3F47LSAtAuLyRuWsXYELaEpMabUCqrZhqixQL8LN/QptWysqHLX1YT0JMUSQ+GhJ4TmZEzA8BgkqhkiG9w0BBwEwHQYJYIZIAWUDBAEqBBCTXizH+eCytC62xg+qIpLHgBBwy9X6AL3ddWugMksAg7tr]
+unitb_mobile_website::mailform_dbname: "website"
+
+unitb_mobile_website::flugplanAlt_dbusername: "bbf-fp-ausgabe"
+unitb_mobile_website::flugplanAlt_dbpwd_prd: ENC[PKCS7,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]
+unitb_mobile_website::flugplanAlt_dbpwd_tep: ENC[PKCS7,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]
+unitb_mobile_website::flugplanAlt_dbname: "flugplan_alt"
diff --git a/customer/gebrauchtwagen/dev.gebrauchtwagen.de.yaml b/customer/gebrauchtwagen/dev.gebrauchtwagen.de.yaml
new file mode 100644 (file)
index 0000000..1b768a8
--- /dev/null
@@ -0,0 +1,3 @@
+---
+site::additional_classes:
+  - accounts
diff --git a/customer/gebrauchtwagen/job-host01.gebrauchtwagen.de.yaml b/customer/gebrauchtwagen/job-host01.gebrauchtwagen.de.yaml
new file mode 100644 (file)
index 0000000..1b768a8
--- /dev/null
@@ -0,0 +1,3 @@
+---
+site::additional_classes:
+  - accounts
diff --git a/customer/gebrauchtwagen/job-host02.gebrauchtwagen.de.yaml b/customer/gebrauchtwagen/job-host02.gebrauchtwagen.de.yaml
new file mode 100644 (file)
index 0000000..1b768a8
--- /dev/null
@@ -0,0 +1,3 @@
+---
+site::additional_classes:
+  - accounts
diff --git a/customer/gebrauchtwagen/job-host03.gebrauchtwagen.de.yaml b/customer/gebrauchtwagen/job-host03.gebrauchtwagen.de.yaml
new file mode 100644 (file)
index 0000000..1b768a8
--- /dev/null
@@ -0,0 +1,3 @@
+---
+site::additional_classes:
+  - accounts
diff --git a/customer/gebrauchtwagen/job01.gebrauchtwagen.de.yaml b/customer/gebrauchtwagen/job01.gebrauchtwagen.de.yaml
new file mode 100644 (file)
index 0000000..1e566d5
--- /dev/null
@@ -0,0 +1,6 @@
+---
+site::additional_classes:
+  - accounts
+accounts::users:
+  m_scholze:
+    apply: true
diff --git a/customer/gebrauchtwagen/test-gw-admin01.gebrauchtwagen.de.yaml b/customer/gebrauchtwagen/test-gw-admin01.gebrauchtwagen.de.yaml
new file mode 100644 (file)
index 0000000..95556d9
--- /dev/null
@@ -0,0 +1,8 @@
+---
+site::additional_classes:
+  - repo
+
+accounts::users:
+  harry.teuber:
+    apply: true
+    sudo: true
\ No newline at end of file
diff --git a/customer/gebrauchtwagen/test.gebrauchtwagen.de.yaml b/customer/gebrauchtwagen/test.gebrauchtwagen.de.yaml
new file mode 100644 (file)
index 0000000..eabe824
--- /dev/null
@@ -0,0 +1,3 @@
+---
+site::additional_classes:
+  - accounts
\ No newline at end of file
diff --git a/customer/gebrauchtwagen/test.yaml b/customer/gebrauchtwagen/test.yaml
new file mode 100644 (file)
index 0000000..b8b458b
--- /dev/null
@@ -0,0 +1,7 @@
+---
+accounts::users:
+  m_scholze:
+    apply: true
+    sudo: true
+
+
diff --git a/customer/gebrauchtwagen/www01.gebrauchtwagen.de.yaml b/customer/gebrauchtwagen/www01.gebrauchtwagen.de.yaml
new file mode 100644 (file)
index 0000000..72ca9cb
--- /dev/null
@@ -0,0 +1,16 @@
+---
+site::additional_classes:
+  - accounts
+logstash::files:
+  syslog:
+    path:
+      - "etc/motd"
+      - "etc/schnuffi"
+  zpache:
+    path:
+      - "/www/logs/httpd"
+logstash::filter:
+  - "syslog_sun"
+accounts::users:
+  m_scholze:
+    apply: true
diff --git a/customer/gebrauchtwagen/www02.gebrauchtwagen.de.yaml b/customer/gebrauchtwagen/www02.gebrauchtwagen.de.yaml
new file mode 100644 (file)
index 0000000..1e566d5
--- /dev/null
@@ -0,0 +1,6 @@
+---
+site::additional_classes:
+  - accounts
+accounts::users:
+  m_scholze:
+    apply: true
diff --git a/customer/gebrauchtwagen/www03.gebrauchtwagen.de.yaml b/customer/gebrauchtwagen/www03.gebrauchtwagen.de.yaml
new file mode 100644 (file)
index 0000000..1e566d5
--- /dev/null
@@ -0,0 +1,6 @@
+---
+site::additional_classes:
+  - accounts
+accounts::users:
+  m_scholze:
+    apply: true
diff --git a/customer/gebrauchtwagen/www07.gebrauchtwagen.de.yaml b/customer/gebrauchtwagen/www07.gebrauchtwagen.de.yaml
new file mode 100644 (file)
index 0000000..1b768a8
--- /dev/null
@@ -0,0 +1,3 @@
+---
+site::additional_classes:
+  - accounts
diff --git a/customer/gebrauchtwagen/zonehost01.gebrauchtwagen.de.yaml b/customer/gebrauchtwagen/zonehost01.gebrauchtwagen.de.yaml
new file mode 100644 (file)
index 0000000..4c3c2b5
--- /dev/null
@@ -0,0 +1,2 @@
+---
+site::role: base
diff --git a/customer/gebrauchtwagen/zonehost02.gebrauchtwagen.de.yaml b/customer/gebrauchtwagen/zonehost02.gebrauchtwagen.de.yaml
new file mode 100644 (file)
index 0000000..4c3c2b5
--- /dev/null
@@ -0,0 +1,2 @@
+---
+site::role: base
diff --git a/customer/gebrauchtwagen/zonehost03.gebrauchtwagen.de.yaml b/customer/gebrauchtwagen/zonehost03.gebrauchtwagen.de.yaml
new file mode 100644 (file)
index 0000000..eabe824
--- /dev/null
@@ -0,0 +1,3 @@
+---
+site::additional_classes:
+  - accounts
\ No newline at end of file
diff --git a/customer/georgfischer/common.yaml b/customer/georgfischer/common.yaml
new file mode 100644 (file)
index 0000000..a7be3fa
--- /dev/null
@@ -0,0 +1,13 @@
+---
+site::additional_classes:
+  - logstash
+logstash::generic_resource:
+  adobe_aem_error:
+    resource: file
+    order: 10 # Input
+    parameters:
+      path: '/www/apps/*/crx-quickstart/logs/error.log'
+      type: aem-server
+      tags: 
+        - "%{customer}"
+        - "%{environment}"
\ No newline at end of file
diff --git a/customer/gf/gf-zonehost01.pixelpark.net.yaml b/customer/gf/gf-zonehost01.pixelpark.net.yaml
new file mode 100644 (file)
index 0000000..4c3c2b5
--- /dev/null
@@ -0,0 +1,2 @@
+---
+site::role: base
diff --git a/customer/gf/gf-zonehost02.pixelpark.net.yaml b/customer/gf/gf-zonehost02.pixelpark.net.yaml
new file mode 100644 (file)
index 0000000..4c3c2b5
--- /dev/null
@@ -0,0 +1,2 @@
+---
+site::role: base
diff --git a/customer/joml/common.yaml b/customer/joml/common.yaml
new file mode 100644 (file)
index 0000000..17701bc
--- /dev/null
@@ -0,0 +1,15 @@
+---
+
+apache::default_vhost: false
+apache::mpm_module: worker
+
+accounts::users:
+  service.typo3:
+    apply: true
+    group: apache
+
+php::fpm::pools:
+  www:
+    ensure: absent
+
+repo::remi_php56: true
diff --git a/customer/joml/production.yaml b/customer/joml/production.yaml
new file mode 100644 (file)
index 0000000..20e5963
--- /dev/null
@@ -0,0 +1,65 @@
+---
+site::role: base
+site::additional_classes:
+  - site::profile::typo3
+  - site::profile::mysql_server
+
+mysql::server::root_password: ENC[PKCS7,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]
+site::profile::mysql_server::databases:
+  thejobofmylife:
+    user: thejobofmylife
+    password: ENC[PKCS7,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]
+
+php::extensions:
+  gd: {}
+  opcache: {}
+  mysqlnd: {}
+  soap: {}
+  suhosin:
+    settings: 
+      suhosin.request.max_varname_length: 200
+      suhosin.post.max_name_length: 200
+      suhosin.get.max_name_length: 200
+      suhosin.get.max_value_length: 2000
+      suhosin.executor.include.whitelist: 'phar,vfs'
+  mbstring: {}
+
+site::profile::typo3::projects:
+  thejobofmylife:
+    version: '6.2.16'
+    site_path: '/srv/www/thejobofmylife'
+    db_pass: ENC[PKCS7,MIIBiQYJKoZIhvcNAQcDoIIBejCCAXYCAQAxggEhMIIBHQIBADAFMAACAQEwDQYJKoZIhvcNAQEBBQAEggEAjkX3DcL0OKI2UbB7NDSW+EUsdTrCNB+/dvs+WobV4M/FLX5LF1DzZ0gwxhMr3n7Ar5Ja3oPt1e1sLv3x/nmNKsiTaxszaM7rDckgf4e1FCmCe9kUi0ZpSHWCV0hzrRpwlUltbTNoZ1KBR19dG07eb0/BmrhBzg4IFZWiYI2Y+PsxCsD2E03b20QTKHfCS/YXVTU5w4M4rgyaQSv5mdRK+sU5LZgvwzDS/sx1SBbsvj094GCkQi4ouh/RzfymT3Qe2gzcso74U8/kCp+cHM97RULWgMoTXNZS5bIUQPK75I0MK5WD+APUcp5dq4KVWq1FRW0HODpDYNrhjBdkuOsbWzBMBgkqhkiG9w0BBwEwHQYJYIZIAWUDBAEqBBAFBYHaLHG9BLKrG/Pjy7LsgCBkMJX2HbLHzchcB0T7f5ywCvj5zvN9KVQd8LaSqcWtYw==]
+    db_user: thejobofmylife
+    db_name: thejobofmylife
+    servername: www.thejobofmylife.de
+    serveraliases:
+    # Servernamen mit Variationen
+      - thejobofmylife.de
+      - ausbildungsinteressierte.thejobofmylife.de
+      - projekttraegerundunternehmen.thejobofmylife.de
+      - www.ausbildungsinteressierte.thejobofmylife.de
+      - www.projekttraegerundunternehmen.thejobofmylife.de
+    # Pixelpark Servernames
+      - web-thejobofmylife-de.pixelpark.net
+      - ausbildungsinteressierte-web-thejobofmylife-de.pixelpark.net
+      - projekttraegerundunternehmen-web-thejobofmylife-de.pixelpark.net
+    ssl_cert: '/etc/pki/tls/certs/www.thejobofmylife.de-cert.pem'
+    ssl_key: '/etc/pki/tls/private/www.thejobofmylife.de-key.pem'
+    ssl_chain: '/etc/pki/tls/certs/www.thejobofmylife.de-cert.pem'
+    directories: 
+      - location1:
+        provider: location
+        path: '/typo3/'
+        auth_type: Digest
+        auth_name: joml
+        auth_digest_provider: file
+        auth_digest_algorithm: MD5
+        auth_user_file: '/etc/httpd/htdigest'
+        auth_require: 'valid-user'
+      - location2:
+        provider: location
+        path: '/typo3/sysext'
+    user: service.typo3
+    mode: '2775'
+    php_admin_value:
+      always_populate_raw_post_data: -1
\ No newline at end of file
diff --git a/customer/joml/test.yaml b/customer/joml/test.yaml
new file mode 100644 (file)
index 0000000..ea03cae
--- /dev/null
@@ -0,0 +1,71 @@
+---
+site::role: base
+site::additional_classes:
+  - site::profile::typo3
+  - site::profile::mysql_server
+
+accounts::users:
+  heiko.hardt:
+    apply: true
+    sudo: true
+  tim.jungebluth:
+    apply: true
+
+mysql::server::root_password: ENC[PKCS7,MIIBiQYJKoZIhvcNAQcDoIIBejCCAXYCAQAxggEhMIIBHQIBADAFMAACAQEwDQYJKoZIhvcNAQEBBQAEggEAWXudurV/DQ/dBvIf5d2KZnVUKNEsiL0ORsQd2AXvdIpKwjyDk5cStt3YjhbQRDD45wT8xmUJUkYps69IIucCQU8u80q9L+A/Q0Eu1qxfjW6/v5WouUvBNl1A7SDVqxvF0SzaPYIsWoz+tdAVuuJ5J1gMRTNppuN/VweuxEaK6xPGGZt6Lem1v9qYvLxCcle5Fzrfc3jNsWO0tX+oOg83yNvJidL+vKqOX76QHHD9MxjJ2jvYrrOy8EZaBnum3MZAZG9Cy775a+Z2vrizd6XsqtEgPOpZTw6xvpA2sPm3xCscTE8CXQpgMLLp8ewOv4au7Od8RkKDy0mQRRW3djCdVjBMBgkqhkiG9w0BBwEwHQYJYIZIAWUDBAEqBBD5ireaKVSiwZBJCD14ALfTgCB0yRhM+vYNpOr4PCb5Y/JNZiEaNTmTjZVAE5DUgLY3+A==]
+site::profile::mysql_server::databases:
+  thejobofmylife:
+    user: thejobofmylife
+    password: ENC[PKCS7,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]
+
+php::extensions:
+  gd: {}
+  opcache: {}
+  mysqlnd: {}
+  soap: {}
+  suhosin:
+    settings: 
+      suhosin.request.max_varname_length: 200
+      suhosin.post.max_name_length: 200
+      suhosin.get.max_name_length: 200
+      suhosin.get.max_value_length: 2000
+      suhosin.executor.include.whitelist: 'phar,vfs'
+  mbstring: {}
+  pecl-memcache: {}
+  xdebug:
+    provider: pecl
+    settings:
+      xdebug.max_nesting_level: 400
+    zend: true
+
+php::dev: true
+php::pear: true
+
+site::profile::typo3::projects:
+  thejobofmylife:
+    version: '6.2.16'
+    site_path: '/srv/www/thejobofmylife'
+    db_pass: ENC[PKCS7,MIIBiQYJKoZIhvcNAQcDoIIBejCCAXYCAQAxggEhMIIBHQIBADAFMAACAQEwDQYJKoZIhvcNAQEBBQAEggEApIUJfbIFRX/HBubaUhhdk2C/PitAwHbmDtGYLmwDWytGweltBCa6HL38FdslfRWk2oA75FqXg15XI9yooSNouzfM2J3Dr1aKOzCdJ79UUGqYnZLdCYhFpDJCG8SbuLszC2/ZLzElk9uUcIAgAqeV8u2PdJW7T8HIuTRgOk28akR2zDHqWspkkJhlAHcqacqr4iPwVyeubzRFe6zn0zd58mGugN80gd6LH7CJ6pM67bWoO+4pOUf9eYjQzfhwixgihc1H8PM2ez/8MCD6R93GipFF2de1uCwq567v/a5999qcLHFt3NDc6Dm2LjNZbvFhXA/yie+yaBhGc+wTd+cwQTBMBgkqhkiG9w0BBwEwHQYJYIZIAWUDBAEqBBBlAc72xkf86b7E9lx7MCBsgCC0C6lojLVon8PCMmrXmubObCpgqnAhGm26ExlJBVcd+A==]
+    db_user: thejobofmylife
+    db_name: thejobofmylife
+    servername: test-web-thejobofmylife-de.pixelpark.net
+    serveraliases:
+      - test-ausbildungsinteressierte-web-thejobofmylife-de.pixelpark.net
+      - test-projekttraegerundunternehmen-web-thejobofmylife-de.pixelpark.net
+      - test-extranet-web-thejobofmylife-de.pixelpark.net
+    ssl_cert: '/etc/pki/tls/certs/wildcard.pixelpark.net-cert.pem'
+    ssl_key: '/etc/pki/tls/private/wildcard.pixelpark.net-key.pem'
+    ssl_chain: '/etc/pki/tls/certs/wildcard.pixelpark.net-cert.pem'
+    directories: 
+      - location1:
+        provider: location
+        path: '/'
+        auth_type: Digest
+        auth_name: joml
+        auth_digest_provider: file
+        auth_digest_algorithm: MD5
+        auth_user_file: '/etc/httpd/htdigest'
+        auth_require: 'valid-user'
+    user: service.typo3
+    mode: '2775'
+    php_admin_value:
+      always_populate_raw_post_data: -1
diff --git a/customer/lbs/dev-red02-lbs-de.pixelpark.net.yaml b/customer/lbs/dev-red02-lbs-de.pixelpark.net.yaml
new file mode 100644 (file)
index 0000000..4a74ff3
--- /dev/null
@@ -0,0 +1,31 @@
+---
+site::role: base
+site::additional_classes:
+  - sudo::configs
+
+accounts::params::use_www_tree: false
+
+sudo::configs:
+  "FS5-sudo":
+    priority: 20
+    content: "%fs5 ALL=(ALL) NOPASSWD: /usr/bin/systemctl * fs5.service"
+
+accounts::users:
+  dominic.radtke:
+    apply: true
+    group: "fs5"
+  stephan.kopf:
+    apply: true
+    group: "fs5"
+  florian.schade:
+    apply: true
+    group: "fs5"
+  ines.jaehnichen:
+    apply: true
+    group: "fs5"
+  annika.wenzel:
+    apply: true
+    group: "fs5"
+  matthias.otto:
+    apply: true
+    group: "fs5"
diff --git a/customer/lbs/dev-www02-lbs-de.pixelpark.net.yaml b/customer/lbs/dev-www02-lbs-de.pixelpark.net.yaml
new file mode 100644 (file)
index 0000000..5eb2c29
--- /dev/null
@@ -0,0 +1,49 @@
+---
+site::role: base
+site::additional_classes:
+  - sudo::configs
+site::additional_packages:
+  python-httplib2: {}
+
+accounts::params::use_www_tree: false
+
+sudo::configs:
+  "FS5-sudo":
+    priority: 20
+    content: "%fs5 ALL=(ALL) NOPASSWD: /usr/bin/systemctl * tomcat.service"
+
+accounts::users:
+  dominic.radtke:
+    apply: true
+    group: "tomcat"
+    groups:
+      - "fs5"
+  stephan.kopf:
+    apply: true
+    group: "tomcat"
+    groups:
+      - "fs5"
+  florian.schade:
+    apply: true
+    group: "tomcat"
+    groups:
+      - "fs5"
+  ines.jaehnichen:
+    apply: true
+    group: "tomcat"
+    groups:
+      - "fs5"
+  annika.wenzel:
+    apply: true
+    group: "fs5"
+  matthias.otto:
+    apply: true
+    group: "tomcat"
+    groups:
+      - "fs5"
+  deploy.vogel:
+    apply: true
+    sudo: true
+    group: "tomcat"
+    groups:
+      - "fs5"
\ No newline at end of file
diff --git a/customer/linde/author01-linde-com.pixelpark.net.yaml b/customer/linde/author01-linde-com.pixelpark.net.yaml
new file mode 100644 (file)
index 0000000..c032ed0
--- /dev/null
@@ -0,0 +1,8 @@
+---
+site::role: base
+site::additional_classes:
+  - site::profile::apache
+  - logstash
+accounts::users:
+  muhammad.naveed:
+    apply: true
diff --git a/customer/linde/production.yaml b/customer/linde/production.yaml
new file mode 100644 (file)
index 0000000..72df174
--- /dev/null
@@ -0,0 +1,53 @@
+---
+logstash::generic_resource:
+  adobe_aem_error:
+    resource: file
+    order: 10 # Input
+    parameters:
+      path: '/opt/aem/*/crx-quickstart/logs/error.log'
+      type: aem-server
+      tags: 
+        - "%{customer}"
+        - "%{environment}"
+
+apache::mpm_module: worker
+apache::default_vhost: false
+apache::purge_configs: false
+
+# Old Data
+site::profile::apache_server::vhosts:
+  dispatcher:
+    docroot: '/var/www/html/cache'
+    servername: author01-linde-com
+    docroot_owner: apache
+    docroot_group: apache
+    port: 80
+  dispatcher_ssl:
+    docroot: '/var/www/html/cache'
+    servername: author01-linde-com
+    docroot_owner: apache
+    docroot_group: apache
+    port: 443
+    ssl: true
+    ssl_cert: '/etc/pki/tls/certs/wildcard.pixelpark.net-cert.pem'
+    ssl_key: '/etc/pki/tls/private/wildcard.pixelpark.net-key.pem'
+    ssl_ca: '/etc/pki/tls/certs/wildcard.pixelpark.net-cert.pem'
+
+# New Data
+site::profile::apache::vhosts:
+  dispatcher:
+    docroot: '/var/www/html/cache'
+    servername: author01-linde-com
+    docroot_owner: apache
+    docroot_group: apache
+    port: 80
+  dispatcher_ssl:
+    docroot: '/var/www/html/cache'
+    servername: author01-linde-com
+    docroot_owner: apache
+    docroot_group: apache
+    port: 443
+    ssl: true
+    ssl_cert: '/etc/pki/tls/certs/wildcard.pixelpark.net-cert.pem'
+    ssl_key: '/etc/pki/tls/private/wildcard.pixelpark.net-key.pem'
+    ssl_ca: '/etc/pki/tls/certs/wildcard.pixelpark.net-cert.pem'
diff --git a/customer/linde/test-author01-linde-com.pixelpark.net.yaml b/customer/linde/test-author01-linde-com.pixelpark.net.yaml
new file mode 100644 (file)
index 0000000..c032ed0
--- /dev/null
@@ -0,0 +1,8 @@
+---
+site::role: base
+site::additional_classes:
+  - site::profile::apache
+  - logstash
+accounts::users:
+  muhammad.naveed:
+    apply: true
diff --git a/customer/linde/test.yaml b/customer/linde/test.yaml
new file mode 100644 (file)
index 0000000..723c758
--- /dev/null
@@ -0,0 +1,35 @@
+---
+logstash::generic_resource:
+  adobe_aem_error:
+    resource: file
+    order: 10 # Input
+    parameters:
+      path: '/opt/aem/*/crx-quickstart/logs/error.log'
+      type: aem-server
+      tags: 
+        - "%{customer}"
+        - "%{environment}"
+
+apache::mpm_module: worker
+apache::default_vhost: false
+apache::purge_configs: false
+
+
+# New Data
+site::profile::apache::vhosts:
+  dispatcher:
+    docroot: '/var/www/html/cache'
+    servername: test-author01-linde-com
+    docroot_owner: apache
+    docroot_group: apache
+    port: 80
+  dispatcher_ssl:
+    docroot: '/var/www/html/cache'
+    servername: test-author01-linde-com
+    docroot_owner: apache
+    docroot_group: apache
+    port: 443
+    ssl: true
+    ssl_cert: '/etc/pki/tls/certs/wildcard.pixelpark.net-cert.pem'
+    ssl_key: '/etc/pki/tls/private/wildcard.pixelpark.net-key.pem'
+    ssl_ca: '/etc/pki/tls/certs/wildcard.pixelpark.net-cert.pem'
\ No newline at end of file
diff --git a/customer/live-cloud/alekto.cloud.pixelpark.internal.yaml b/customer/live-cloud/alekto.cloud.pixelpark.internal.yaml
new file mode 100644 (file)
index 0000000..b183cb7
--- /dev/null
@@ -0,0 +1,35 @@
+---
+site::role: base
+site::additional_classes:
+  - nova::compute::libvirt
+  - nova::network::neutron
+  - nova::compute::neutron
+  - site::profile::mcollective::common
+  - neutron::config
+  - nova
+  - nova::compute
+  - nova::config
+  - neutron::agents::ovs
+  - hosts
+  - nova::migration::libvirt
+  - logstash
+  - neutron
+
+hosts::hosts:
+  10.10.130.32:
+    aliases: alekto-data.cloud.pixelpark.internal
+    interface_up: true
+    interface_device: "bond1:data"
+    interface_netmask: "255.255.255.0"
+neutron::agents::ovs::local_ip: 10.10.130.32
+
+pacemaker::stonith::disable: false
+pacemaker::corosync::cluster_name: 'nova-cluster01'
+pacemaker::corosync::cluster_members:
+    - alekto.cloud.pixelpark.internal
+    - heracles.cloud.pixelpark.internal
+    - konsos.cloud.pixelpark.internal
+
+xymon::modules:
+  - 'cloud-new'
+  - 'ovs-tun'
diff --git a/customer/live-cloud/atropos.cloud.pixelpark.internal.yaml b/customer/live-cloud/atropos.cloud.pixelpark.internal.yaml
new file mode 100644 (file)
index 0000000..4e9d5d1
--- /dev/null
@@ -0,0 +1,6 @@
+---
+site::role: base
+xymon::modules:
+  - 'ceph-health'
+  - 'ipmi'
+  - 'top'
\ No newline at end of file
diff --git a/customer/live-cloud/badb.cloud.pixelpark.internal.yaml b/customer/live-cloud/badb.cloud.pixelpark.internal.yaml
new file mode 100644 (file)
index 0000000..344a805
--- /dev/null
@@ -0,0 +1,14 @@
+---
+site::role: base
+site::additional_classes:
+  - site::profile::mcollective::common
+
+
+pacemaker::corosync::cluster_name: 'storagegw-cluster-cloud-icehouse'
+pacemaker::corosync::cluster_members:
+  - oger.cloud.pixelpark.internal
+  - badb.cloud.pixelpark.internal
+  
+xymon::modules:
+  - 'cloud-new'
+    
\ No newline at end of file
diff --git a/customer/live-cloud/beowulf.cloud.pixelpark.internal.yaml b/customer/live-cloud/beowulf.cloud.pixelpark.internal.yaml
new file mode 100644 (file)
index 0000000..5879866
--- /dev/null
@@ -0,0 +1,186 @@
+---
+site::role: base
+site::additional_classes:
+  - galera
+  - nova::conductor
+  - nova::config
+  - heat::api_cloudwatch
+  - nova::api
+  - rabbitmq
+  - xymon::check::haproxy
+  - heat::api
+  - keystone::config
+  - cinder::ceilometer
+  - glance
+  - heat::engine
+  - nova::consoleauth
+  - heat::api_cfn
+  - nova
+  - cinder::volume::rbd
+  - nova::pacemaker
+  - glance::pacemaker
+  - keystone
+  - glance::db::mysql
+  - neutron::server
+  - pp_haproxy
+  - heat::config
+  - neutron::pacemaker
+  - xymon::check::rabbitmq
+  - glance::backend::rbd
+  - nova::network::neutron
+  - neutron::server::notifications
+  - nova::quota
+  - glance::api
+  - cinder::glance
+  - cinder::pacemaker_api
+  - heat
+  - cinder::volume
+  - heat::db::mysql
+  - glance::client
+  - cinder::scheduler
+  - cinder::db::mysql
+  - nova::scheduler
+  - keystone::pacemaker
+  - logstash
+  - heat::pacemaker
+  - nova::cert
+  - cinder::pacemaker
+  - neutron::config
+  - glance::notify::rabbitmq
+  - keystone::db::mysql
+  - nova::vncproxy
+  - nova::db::mysql
+  - pp_python::pip
+  - cinder::backup
+  - hosts
+  - neutron::quota
+  - horizon
+  - neutron
+  - cinder
+  - neutron::plugins::ovs
+  - cinder::config
+  - glance::registry
+  - cinder::api
+  - neutron::db::mysql
+
+hosts::hosts:
+  192.168.88.104:
+    interface_up: true
+    interface_device: "bond0:rabbit01"
+    interface_netmask: "255.255.254.0"
+  192.168.88.107:
+    interface_up: true
+    interface_device: "bond0:galera01"
+    interface_netmask: "255.255.254.0"
+  192.168.88.100:
+    interface_up: true
+    interface_device: "bond0:keys01"
+    interface_netmask: "255.255.254.0"
+  192.168.88.111:
+    interface_up: true
+    interface_device: "bond0:glance01"
+    interface_netmask: "255.255.254.0"
+  192.168.88.118:
+    interface_up: true
+    interface_device: "bond0:neut01"
+    interface_netmask: "255.255.254.0"
+  192.168.88.122:
+    interface_up: true
+    interface_device: "bond0:cinder01"
+    interface_netmask: "255.255.254.0"
+  192.168.88.126:
+    interface_up: true
+    interface_device: "bond0:nova01"
+    interface_netmask: "255.255.254.0"
+  192.168.88.130:
+    interface_up: true
+    interface_device: "bond0:hecfn01"
+    interface_netmask: "255.255.254.0"
+  192.168.88.134:
+    interface_up: true
+    interface_device: "bond0:heat01"
+    interface_netmask: "255.255.254.0"
+  192.168.88.138:
+    interface_up: true
+    interface_device: "bond0:heatcw01"
+    interface_netmask: "255.255.254.0"
+  192.168.88.115:
+    interface_up: true
+    interface_device: "bond0:hori01"
+    interface_netmask: "255.255.254.0"
+  192.168.88.142:
+    interface_up: true
+    interface_device: "bond0:ceilo01"
+    interface_netmask: "255.255.254.0"
+  192.168.88.146:
+    interface_up: true
+    interface_device: "bond0:trove01"
+    interface_netmask: "255.255.254.0"
+  192.168.88.150:
+    interface_up: true
+    interface_device: "bond0:mongod01"
+    interface_netmask: "255.255.254.0"
+    
+ntp::servers:
+  - "time01.pixelpark.com iburst"
+  - "time02.pixelpark.com iburst"
+  - "time03.pixelpark.com iburst"
+  
+rabbitmq::environment_variables:
+   RABBITMQ_NODE_IP_ADDRESS: 192.168.88.104
+   RABBITMQ_NODENAME: rabbit@rabbitmq01
+
+galera::local_ip: 192.168.88.107
+galera::bind_address: 192.168.88.107
+galera::haproxy_server_names: galera01
+
+keystone::public_bind_host: keystone01.cloud.pixelpark.internal
+keystone::admin_bind_host: keystone01.cloud.pixelpark.internal
+keystone::haproxy_server_names_admin: keystone01
+keystone::haproxy_server_names_public: keystone01
+
+neutron::server::bind_host: neutron01.cloud.pixelpark.internal
+neutron::server::haproxy_server_names: neutron-server01
+
+glance::api::bind_host: glance01.cloud.pixelpark.internal
+glance::api::haproxy_server_names: glance01
+glance::registry::bind_host: glance01.cloud.pixelpark.internal
+glance::registry::haproxy_server_names: glance01
+
+cinder::api::bind_host: cinder01.cloud.pixelpark.internal
+cinder::api::haproxy_server_names: cinder01
+
+heat::api::bind_host: 'heat01.cloud.pixelpark.internal'
+heat::api_cloudwatch::bind_host: 'heatcw01.cloud.pixelpark.internal'
+heat::api_cfn::bind_host: 'heatcfn01.cloud.pixelpark.internal'
+heat::api_cloudwatch::haproxy_server_names_heat_api_cloudwatch: heat01-api-cloudwatch
+heat::api_cfn::haproxy_server_names_heat_api_cfn: heat01-api-cfn
+heat::api::haproxy_server_names_heat_api: heat01-api
+
+nova::api::api_bind_address: nova01.cloud.pixelpark.internal
+nova::api::osapi_bind_address: nova01.cloud.pixelpark.internal
+nova::api::metadata_listen: nova01.cloud.pixelpark.internal
+nova::api::haproxy_server_names_ec2: nova01
+nova::api::haproxy_server_names_metadata: nova01
+nova::api::haproxy_server_names_osapi: nova01
+nova::vncproxy::host: nova01.cloud.pixelpark.internal
+nova::vncproxy::haproxy_server_names: nova01
+mongodb::globals::bind_ip: 
+  - 192.168.88.150
+  - 127.0.0.1
+
+#pacemaker::corosync::cluster_name: 'pcs-cluster-cloud-icehouse'
+#pacemaker::corosync::cluster_members:
+#  - beowulf.cloud.pixelpark.internal
+#  - necat.cloud.pixelpark.internal
+#  - mullo.cloud.pixelpark.internal
+
+horizon::bind_address: horizon01.cloud.pixelpark.internal
+httpd::webserver:
+  cloud.pixelpark.net:
+    listens:
+      - 192.168.88.115:80
+
+xymon::modules:
+  - 'cloud-new'
+  - 'hlogin'
diff --git a/customer/live-cloud/cloud_icehouse.yaml b/customer/live-cloud/cloud_icehouse.yaml
new file mode 100644 (file)
index 0000000..9d315d1
--- /dev/null
@@ -0,0 +1,1841 @@
+---
+accounts::users:
+  ivan.prikhodko:
+    apply: true
+    sudo: true
+
+hosts::hosts:
+# Hosts
+  192.168.88.13:
+    aliases:
+      - beowulf.cloud.pixelpark.internal
+      - control01.cloud.pixelpark.internal
+  192.168.88.14:
+    aliases:
+      - necat.cloud.pixelpark.internal
+      - control02.cloud.pixelpark.internal
+  192.168.88.15:
+    aliases:
+      - mullo.cloud.pixelpark.internal
+      - control03.cloud.pixelpark.internal
+  192.168.88.17:
+    aliases:
+      - badb.cloud.pixelpark.internal
+      - storagegw01.cloud.pixelpark.internal
+  192.168.88.18:
+    aliases:
+      - oger.cloud.pixelpark.internal
+      - storagegw02.cloud.pixelpark.internal
+  192.168.88.19:
+    aliases:
+      - furrina.cloud.pixelpark.internal
+      - network01.cloud.pixelpark.internal
+  192.168.88.20:
+    aliases:
+      - not.cloud.pixelpark.internal
+      - network02.cloud.pixelpark.internal
+  192.168.88.21:
+    aliases:
+      - moros.cloud.pixelpark.internal
+      - storage01.cloud.pixelpark.internal
+  192.168.88.22:
+    aliases:
+      - atropos.cloud.pixelpark.internal
+      - storage02.cloud.pixelpark.internal
+  192.168.88.23:
+    aliases:
+      - grazien.cloud.pixelpark.internal
+      - storage03.cloud.pixelpark.internal
+  192.168.88.24:
+    aliases:
+      - epana.cloud.pixelpark.internal
+      - storage04.cloud.pixelpark.internal
+  192.168.88.30:
+    aliases:
+      - frigg.cloud.pixelpark.internal
+      - compute01.cloud.pixelpark.internal
+  192.168.88.31:
+    aliases:
+      - pothos.cloud.pixelpark.internal
+      - compute02.cloud.pixelpark.internal
+  192.168.88.32:
+    aliases:
+      - alekto.cloud.pixelpark.internal
+      - compute03.cloud.pixelpark.internal
+  192.168.88.33:
+    aliases:
+      - konsos.cloud.pixelpark.internal
+      - compute04.cloud.pixelpark.internal
+  192.168.88.34:
+    aliases:
+      - heracles.cloud.pixelpark.internal
+      - compute05.cloud.pixelpark.internal
+
+# Services
+  192.168.88.100:
+    aliases:
+      - keystone01.cloud.pixelpark.internal
+  192.168.88.101:
+    aliases:
+      - keystone02.cloud.pixelpark.internal
+  192.168.88.102:
+    aliases:
+      - keystone03.cloud.pixelpark.internal
+  192.168.88.103:
+    aliases:
+      - keystone.cloud.pixelpark.internal
+
+  192.168.88.104:
+    aliases:
+      - rabbitmq01.cloud.pixelpark.internal
+  192.168.88.105:
+    aliases:
+      - rabbitmq02.cloud.pixelpark.internal
+  192.168.88.106:
+    aliases:
+      - rabbitmq03.cloud.pixelpark.internal
+
+  192.168.88.107:
+    aliases:
+      - galera01.cloud.pixelpark.internal
+  192.168.88.108:
+    aliases:
+      - galera02.cloud.pixelpark.internal
+  192.168.88.109:
+    aliases:
+      - galera03.cloud.pixelpark.internal
+  192.168.88.110:
+    aliases:
+      - mysql.cloud.pixelpark.internal
+
+  192.168.88.111:
+    aliases:
+      - glance01.cloud.pixelpark.internal
+  192.168.88.112:
+    aliases:
+      - glance02.cloud.pixelpark.internal
+  192.168.88.113:
+    aliases:
+      - glance03.cloud.pixelpark.internal
+  192.168.88.114:
+    aliases:
+      - glance.cloud.pixelpark.internal
+
+  192.168.88.115:
+    aliases:
+      - horizon01.cloud.pixelpark.internal
+  192.168.88.116:
+    aliases:
+      - horizon02.cloud.pixelpark.internal
+  192.168.88.117:
+    aliases:
+      - horizon03.cloud.pixelpark.internal
+
+  192.168.88.118:
+    aliases:
+      - neutron01.cloud.pixelpark.internal
+  192.168.88.119:
+    aliases:
+      - neutron02.cloud.pixelpark.internal
+  192.168.88.120:
+    aliases:
+      - neutron03.cloud.pixelpark.internal
+  192.168.88.121:
+    aliases:
+      - neutron.cloud.pixelpark.internal
+
+  192.168.88.122:
+    aliases:
+      - cinder01.cloud.pixelpark.internal
+  192.168.88.123:
+    aliases:
+      - cinder02.cloud.pixelpark.internal
+  192.168.88.124:
+    aliases:
+      - cinder03.cloud.pixelpark.internal
+  192.168.88.125:
+    aliases:
+      - cinder.cloud.pixelpark.internal
+
+  192.168.88.126:
+    aliases:
+      - nova01.cloud.pixelpark.internal
+  192.168.88.127:
+    aliases:
+      - nova02.cloud.pixelpark.internal
+  192.168.88.128:
+    aliases:
+      - nova03.cloud.pixelpark.internal
+  192.168.88.129:
+    aliases:
+      - nova.cloud.pixelpark.internal
+
+  192.168.88.130:
+    aliases:
+      - heatcfn01.cloud.pixelpark.internal
+  192.168.88.131:
+    aliases:
+      - heatcfn02.cloud.pixelpark.internal
+  192.168.88.132:
+    aliases:
+      - heatcfn03.cloud.pixelpark.internal
+  192.168.88.133:
+    aliases:
+      - heatcfn.cloud.pixelpark.internal
+
+  192.168.88.134:
+    aliases:
+      - heat01.cloud.pixelpark.internal
+  192.168.88.135:
+    aliases:
+      - heat02.cloud.pixelpark.internal
+  192.168.88.136:
+    aliases:
+      - heat03.cloud.pixelpark.internal
+  192.168.88.137:
+    aliases:
+      - heat.cloud.pixelpark.internal
+
+  192.168.88.138:
+    aliases:
+      - heatcw01.cloud.pixelpark.internal
+  192.168.88.139:
+    aliases:
+      - heatcw02.cloud.pixelpark.internal
+  192.168.88.140:
+    aliases:
+      - heatcw03.cloud.pixelpark.internal
+  192.168.88.141:
+    aliases:
+      - heatcw.cloud.pixelpark.internal
+
+  192.168.88.142:
+    aliases:
+      - ceilometer01.cloud.pixelpark.internal
+  192.168.88.143:
+    aliases:
+      - ceilometer02.cloud.pixelpark.internal
+  192.168.88.144:
+    aliases:
+      - ceilometer03.cloud.pixelpark.internal
+  192.168.88.145:
+    aliases:
+      - ceilometer.cloud.pixelpark.internal
+
+  192.168.88.146:
+    aliases:
+      - trove01.cloud.pixelpark.internal
+  192.168.88.147:
+    aliases:
+      - trove02.cloud.pixelpark.internal
+  192.168.88.148:
+    aliases:
+      - trove03.cloud.pixelpark.internal
+  192.168.88.149:
+    aliases:
+      - trove.cloud.pixelpark.internal
+
+  192.168.88.150:
+    aliases:
+      - mongod01.cloud.pixelpark.internal
+  192.168.88.151:
+    aliases:
+      - mongod02.cloud.pixelpark.internal
+  192.168.88.152:
+    aliases:
+      - mongod03.cloud.pixelpark.internal
+  192.168.88.153:
+    aliases:
+      - mongod.cloud.pixelpark.internal
+
+  93.188.109.11:
+    aliases:
+      - metadata.cloud.pixelpark.net
+  192.168.88.201:
+    aliases:
+      - network-cluster01.cloud.pixelpark.internal
+  172.16.88.14:
+    aliases:
+      - necat-cs.cloud.pixelpark.internal
+  172.16.88.25:
+    aliases:
+      - mullo-cs.cloud.pixelpark.internal
+
+repo::enable_pixel: true
+repo::enable_cloud: true
+
+ntp::servers:
+  - "control01.cloud.pixelpark.internal iburst"
+  - "control02.cloud.pixelpark.internal iburst"
+  - "control03.cloud.pixelpark.internal iburst"
+
+rabbitmq::erlang_cookie: FSXOFSBDAFOVLIUSZTRL
+# no special package source
+rabbitmq::package_source: ""
+rabbitmq::package_provider: yum
+rabbitmq::wipe_db_on_cookie_change: true
+rabbitmq::default_pass: rEVrsaeSKduY41Hh
+rabbitmq::config_cluster: true
+rabbitmq::cluster_nodes:
+  - rabbitmq01
+  - rabbitmq02
+  - rabbitmq03
+galera::galera_servers:
+#  - 192.168.88.107
+  - 192.168.88.108
+  - 192.168.88.109
+galera::galera_master: "necat.cloud.pixelpark.internal"
+galera::vendor_type: "mariadb_fedora"
+galera::configure_repo: false
+galera::root_password: "ha0HXets4Qbk"
+galera::haproxy_listening_service: live_mysql
+
+pp_haproxy::haproxy_listen:
+  live_mysql:
+    ports:
+      - '3306'
+    ipaddress: mysql.cloud.pixelpark.internal
+    mode: tcp
+    options:
+      option:
+        - tcpka
+        - mysql-check user haproxy
+      balance:
+        - roundrobin
+  live_glance-api:
+    ports:
+      - '9292'
+    ipaddress: glance.cloud.pixelpark.internal
+    mode: tcp
+    options:
+      option:
+        - tcpka
+      balance:
+        - roundrobin
+  live_glance-registry:
+    ports:
+      - '9191'
+    ipaddress: glance.cloud.pixelpark.internal
+    mode: tcp
+    options:
+      option:
+        - tcpka
+      balance:
+        - roundrobin
+  live_admin_page:
+    ipaddress: 0.0.0.0
+    ports:
+      - '8080'
+    mode: http
+    options:
+      stats:
+        - 'uri /'
+  live_keystone-public:
+    ports:
+      - '5000'
+    ipaddress: keystone.cloud.pixelpark.internal
+    mode: tcp
+    options:
+      option:
+        - tcpka
+      balance:
+        - roundrobin
+  live_keystone-admin:
+    ports:
+      - '35357'
+    ipaddress: keystone.cloud.pixelpark.internal
+    mode: tcp
+    options:
+      option:
+        - tcpka
+      balance:
+        - roundrobin
+  live_cinder:
+    ports:
+      - '8776'
+    ipaddress: cinder.cloud.pixelpark.internal
+    mode: tcp
+    options:
+      option:
+        - tcpka
+      balance:
+        - roundrobin
+  live_nova-osapi:
+    ports:
+      - '8774'
+    ipaddress: nova.cloud.pixelpark.internal
+    mode: tcp
+    options:
+      option:
+        - tcpka
+      balance:
+        - roundrobin
+  live_nova-metadata:
+    ports:
+      - '8775'
+    ipaddress: metadata.cloud.pixelpark.net
+    mode: tcp
+    options:
+      option:
+        - tcpka
+      balance:
+        - roundrobin
+  live_nova-ec2:
+    ports:
+      - '8773'
+    ipaddress: nova.cloud.pixelpark.internal
+    mode: tcp
+    options:
+      option:
+        - tcpka
+      balance:
+        - roundrobin
+  live_heat-api-cfn:
+    ports:
+      - '8000'
+    ipaddress: heatcfn.cloud.pixelpark.internal
+    mode: tcp
+    options:
+      option:
+        - tcpka
+      balance:
+        - roundrobin
+  live_heat-api-cloudwatch:
+    ports:
+      - '8003'
+    ipaddress: heatcw.cloud.pixelpark.internal
+    mode: tcp
+    options:
+      option:
+        - tcpka
+      balance:
+        - roundrobin
+  live_heat-api:
+    ports:
+      - '8004'
+    ipaddress: heat.cloud.pixelpark.internal
+    mode: tcp
+    options:
+      option:
+        - tcpka
+      balance:
+        - roundrobin
+  live_neutron-server:
+    ports:
+      - '9696'
+    ipaddress: neutron.cloud.pixelpark.internal
+    mode: tcp
+    options:
+      option:
+        - tcpka
+      balance:
+        - roundrobin
+  live_nova-novncproxy:
+    ports:
+      - '6080'
+    ipaddress: metadata.cloud.pixelpark.net
+    mode: tcp
+    options:
+      option:
+        - tcpka
+      balance:
+        - roundrobin
+
+pp_haproxy::ips:
+  keystone:
+    primitive_class: ocf
+    primitive_type: IPaddr2
+    provided_by: heartbeat
+    parameters:
+      ip: 192.168.88.103
+      cidr_netmask: '23'
+      iflabel: 'keystone'
+    operations:
+      monitor:
+        interval: 10s
+  mysql:
+    primitive_class: ocf
+    primitive_type: IPaddr2
+    provided_by: heartbeat
+    parameters:
+      ip: 192.168.88.110
+      cidr_netmask: '23'
+      iflabel: 'mysql'
+    operations:
+      monitor:
+        interval: 10s
+  glance:
+    primitive_class: ocf
+    primitive_type: IPaddr2
+    provided_by: heartbeat
+    parameters:
+      ip: 192.168.88.114
+      cidr_netmask: '23'
+      iflabel: 'glance'
+    operations:
+      monitor:
+        interval: 10s
+  neutron:
+    primitive_class: ocf
+    primitive_type: IPaddr2
+    provided_by: heartbeat
+    parameters:
+      ip: 192.168.88.121
+      cidr_netmask: '23'
+      iflabel: 'neutron'
+    operations:
+      monitor:
+        interval: 10s
+  cinder:
+    primitive_class: ocf
+    primitive_type: IPaddr2
+    provided_by: heartbeat
+    parameters:
+      ip: 192.168.88.125
+      cidr_netmask: '23'
+      iflabel: 'cinder'
+    operations:
+      monitor:
+        interval: 10s
+  nova:
+    primitive_class: ocf
+    primitive_type: IPaddr2
+    provided_by: heartbeat
+    parameters:
+      ip: 192.168.88.129
+      cidr_netmask: '23'
+      iflabel: 'nova'
+    operations:
+      monitor:
+        interval: 10s
+  heatcfn:
+    primitive_class: ocf
+    primitive_type: IPaddr2
+    provided_by: heartbeat
+    parameters:
+      ip: 192.168.88.133
+      cidr_netmask: '23'
+      iflabel: 'heatcfn'
+    operations:
+      monitor:
+        interval: 10s
+  heat:
+    primitive_class: ocf
+    primitive_type: IPaddr2
+    provided_by: heartbeat
+    parameters:
+      ip: 192.168.88.137
+      cidr_netmask: '23'
+      iflabel: 'heat'
+    operations:
+      monitor:
+        interval: 10s
+  heatcw:
+    primitive_class: ocf
+    primitive_type: IPaddr2
+    provided_by: heartbeat
+    parameters:
+      ip: 192.168.88.141
+      cidr_netmask: '23'
+      iflabel: 'heatcw'
+    operations:
+      monitor:
+        interval: 10s
+  ceilometer:
+    primitive_class: ocf
+    primitive_type: IPaddr2
+    provided_by: heartbeat
+    parameters:
+      ip: 192.168.88.145
+      cidr_netmask: '23'
+      iflabel: 'ceilo'
+    operations:
+      monitor:
+        interval: 10s
+  trove:
+    primitive_class: ocf
+    primitive_type: IPaddr2
+    provided_by: heartbeat
+    parameters:
+      ip: 192.168.88.149
+      cidr_netmask: '23'
+      iflabel: 'trove'
+    operations:
+      monitor:
+        interval: 10s
+  mongod:
+    primitive_class: ocf
+    primitive_type: IPaddr2
+    provided_by: heartbeat
+    parameters:
+      ip: 192.168.88.153
+      cidr_netmask: '23'
+      iflabel: 'mongod'
+    operations:
+      monitor:
+        interval: 10s
+  p_ip_metadata:
+    primitive_class: ocf
+    primitive_type: IPaddr2
+    provided_by: heartbeat
+    parameters:
+      ip: 93.188.109.11
+      cidr_netmask: '24'
+      nic: bond1.710
+      iflabel: 'mdata'
+    operations:
+      monitor:
+        interval: 10s
+  p_route_public_subnet:
+    primitive_class: ocf
+    primitive_type: Route
+    provided_by: heartbeat
+    parameters:
+      destination: "93.188.109.0/24"
+      device: "bond1.710"
+      table: "public"
+    operations:
+      monitor:
+        interval: 10s
+  p_route_public_net:
+    primitive_class: ocf
+    primitive_type: Route
+    provided_by: heartbeat
+    parameters:
+      destination: "0.0.0.0/0"
+      gateway: "93.188.109.1"
+      source: "93.188.109.11"
+      table: "public"
+    operations:
+      monitor:
+        interval: 10s
+
+keystone::package_ensure: 2014.1.3-68
+keystone::token_expiration: 86400
+keystone::db::mysql::host: mysql.cloud.pixelpark.internal
+keystone::db::mysql::password: Up370IOYMrAF3QXA
+keystone::db::mysql::dbname: keystone
+keystone::db::mysql::user: keystonedbadmin
+keystone::db::mysql::charset: utf8
+keystone::db::mysql::collate: utf8_unicode_ci
+keystone::db::mysql::allowed_hosts: '%'
+keystone::manage_service: false
+keystone::client::ensure: absent
+keystone::admin_token: "BgdzFyrXddraJKo0"
+keystone::compute_port: '8774'
+keystone::admin_port: '35357'
+keystone::public_port: '5000'
+keystone::verbose: true
+keystone::debug: true
+keystone::log_file: keystone.log
+keystone::catalog_type: sql
+keystone::sql_connection: "mysql://keystonedbadmin:Up370IOYMrAF3QXA@mysql.cloud.pixelpark.internal/keystone"
+keystone::token_provider: keystone.token.providers.uuid.Provider
+keystone::token_driver: keystone.token.backends.sql.Token
+keystone::public_endpoint: http://keystone.cloud.pixelpark.internal:%(public_port)s/
+keystone::admin_endpoint: http://keystone.cloud.pixelpark.internal:%(admin_port)s/
+keystone::rabbit_hosts:
+  - rabbitmq01.cloud.pixelpark.internal:5672
+  - rabbitmq02.cloud.pixelpark.internal:5672
+  - rabbitmq03.cloud.pixelpark.internal:5672
+keystone::rabbit_userid: guest
+keystone::rabbit_password: rEVrsaeSKduY41Hh
+keystone::haproxy_listening_service_admin: live_keystone-admin
+keystone::haproxy_listening_service_public: live_keystone-public
+keystone::config::keystone_config:
+  DEFAULT/tcp_keepalive:
+    value: true
+  DEFAULT/tcp_keepidle:
+    value: 600
+  DEFAULT/rabbit_max_retries:
+    value: 10
+  DEFAULT/rpc_backend:
+    value: rabbit
+  DEFAULT/keystone_ec2_url:
+    value: "http://keystone.cloud.pixelpark.internal:5000/v2.0/ec2tokens"
+  DEFAULT/keystone_ec2_insecure:
+    value: true
+  DEFAULT/fatal_deprecations:
+    value: false
+  DEFAULT/policy_file:
+    value: /opt/openstack/keystone/etc/policy.json
+  DEFAULT/use_stderr:
+    value: false
+  database/use_db_reconnect:
+    value: true
+  ec2/driver:
+    value: keystone.contrib.ec2.backends.kvs.Ec2
+  endpoint_filter/driver:
+    value: keystone.contrib.endpoint_filter.backends.sql.EndpointFilter
+  endpoint_filter/return_all_endpoints_if_no_filter:
+    value: true
+  paste_deploy/config_file:
+    value: /opt/openstack/keystone/etc/keystone-paste.ini
+keystone::pacemaker::primitives:
+  keystone_service:
+    primitive_class: 'systemd'
+    primitive_type: 'keystone'
+    operations:
+      monitor:
+        interval: 10s
+      start:
+        interval: '0'
+        timeout: 60s
+      stop:
+        interval: '0'
+        timeout: 60s
+# Neutron
+neutron::package_ensure: 2014.1.3-90
+neutron::verbose: true
+neutron::debug: true
+#neutron::core_plugin: neutron.plugins.ml2.plugin.Ml2Plugin
+neutron::core_plugin: neutron.plugins.openvswitch.ovs_neutron_plugin.OVSNeutronPluginV2
+#neutron::service_plugins:
+#  - router
+#  - firewall
+#  - lbaas
+#  - vpnaas
+#  - metering
+neutron::auth_strategy: 'keystone'
+neutron::dhcp_lease_duration: 86400
+neutron::root_helper: 'sudo /opt/openstack/neutron/bin/neutron-rootwrap /opt/openstack/neutron/etc/rootwrap.conf'
+neutron::control_exchange: neutron
+neutron::rpc_backend: neutron.openstack.common.rpc.impl_kombu
+neutron::rabbit_password: rEVrsaeSKduY41Hh
+neutron::rabbit_hosts:
+  - rabbitmq01.cloud.pixelpark.internal:5672
+  - rabbitmq02.cloud.pixelpark.internal:5672
+  - rabbitmq03.cloud.pixelpark.internal:5672
+neutron::rabbit_user: guest
+neutron::rabbit_virtual_host: '/'
+#neutron::log_file: 'server.log'
+neutron::log_dir: '/var/log/neutron'
+neutron::quota_network: 1
+neutron::quota_subnet: 1
+neutron::quota_port: -1
+neutron::quota_router: 1
+neutron::quota_floatingip: 15
+neutron::quota_security_group: -1,
+neutron::quota_security_group_rule: -1
+neutron::neutron_config:
+  DEFAULT/use_stderr:
+    value: false
+  DEFAULT/policy_file:
+    value: /opt/openstack/neutron/etc/policy.json
+neutron::config::server_config:
+  DEFAULT/lock_path:
+    value: '$state_path/lock'
+  DEFAULT/api_paste_config:
+    value: '/opt/openstack/neutron/etc/api-paste.ini'
+  DEFAULT/notification_driver:
+    value: 'neutron.openstack.common.notifier.rpc_notifier'
+  DEFAULT/notification_topics:
+    value: notifications
+  DEFAULT/loadbalancer_pool_scheduler_driver:
+    value: neutron.services.loadbalancer.agent_scheduler.ChanceScheduler
+  DEFAULT/network_auto_schedule:
+    value: true
+  DEFAULT/use_stderr:
+    value: false
+  DEFAULT/policy_file:
+    value: '/opt/openstack/neutron/etc/policy.json'
+
+neutron::server::manage_service: false
+neutron::server::bind_port: '9696'
+neutron::server::bind_host: network-cluster01.cloud.pixelpark.internal
+neutron::server::auth_password: J9F3akdagtZ1oPTC
+neutron::server::auth_type: keystone
+neutron::server::auth_host: 'keystone.cloud.pixelpark.internal'
+neutron::server::auth_port: '35357'
+neutron::server::auth_tenant: service
+neutron::server::auth_user: neutron
+neutron::server::auth_protocol: http
+neutron::server::database_connection: 'mysql://neutrondbadmin:n3qX0Un6K5RIYAiJ@mysql.cloud.pixelpark.internal/neutron'
+# TODO: folgenden parameter beachten
+neutron::server::sync_db: false
+neutron::server::haproxy_listening_service: live_neutron-server
+neutron::server::notifications::notify_nova_on_port_status_changes: true
+neutron::server::notifications::notify_nova_on_port_data_changes: true
+neutron::server::notifications::nova_url: 'http://nova.cloud.pixelpark.internal:8774/v2'
+neutron::server::notifications::nova_admin_auth_url: 'http://keystone.cloud.pixelpark.internal:35357/v2.0'
+neutron::server::notifications::nova_admin_username: nova
+neutron::server::notifications::nova_admin_tenant_name: service
+neutron::server::notifications::nova_admin_password: J9F3akdagtZ1oPTC
+neutron::server::notifications::nova_region_name: regionone
+neutron::server::notifications::nova_admin_tenant_id: 2030be3e9816467ba45e288e357b64b5
+neutron::db::mysql::password: n3qX0Un6K5RIYAiJ
+neutron::db::mysql::dbname: neutron
+neutron::db::mysql::user: neutrondbadmin
+neutron::db::mysql::host: mysql.cloud.pixelpark.internal
+neutron::db::mysql::allowed_hosts: '%'
+neutron::db::mysql::charset: utf8
+neutron::db::mysql::collate: utf8_unicode_ci
+neutron::pacemaker::primitives:
+  neutron-server:
+    primitive_class: 'systemd'
+    primitive_type: 'neutron-server'
+    operations:
+      monitor:
+        interval: 10s
+      start:
+        interval: '0'
+        timeout: 60s
+      stop:
+        interval: '0'
+        timeout: 60s
+# Neutron DHCP Agent
+neutron::agents::dhcp::manage_service: false
+neutron::agents::dhcp::enabled: false
+neutron::agents::dhcp::debug: true
+neutron::agents::dhcp::interface_driver: 'neutron.agent.linux.interface.OVSInterfaceDriver'
+neutron::agents::dhcp::dhcp_driver: 'neutron.agent.linux.dhcp.Dnsmasq'
+neutron::agents::dhcp::root_helper: 'sudo /opt/openstack/neutron/bin/neutron-rootwrap /opt/openstack/neutron/etc/neutron/rootwrap.conf'
+neutron::agents::dhcp::use_namespaces: true
+neutron::agents::dhcp::dnsmasq_config_file: '/opt/openstack/neutron/etc/dnsmasq-neutron.conf'
+neutron::agents::dhcp::dhcp_delete_namespaces: true
+neutron::agents::dhcp::enable_isolated_metadata: false
+neutron::agents::dhcp::manage_service: false
+neutron::config::dhcp_agent_config:
+  DEFAULT/ovs_integration_bridge:
+    value: br-int
+  DEFAULT/ovs_use_veth:
+    value: true
+  DEFAULT/dhcp_domain:
+    value: cloud.pixelpark.internal
+  keystone_authtoken/auth_host:
+    value: keystone.cloud.pixelpark.internal
+  keystone_authtoken/admin_tenant_name:
+    value: service
+  keystone_authtoken/admin_user:
+    value: neutron
+  keystone_authtoken/admin_password:
+    value: J9F3akdagtZ1oPTC
+
+# Neutron L3 Agent
+neutron::agents::l3::manage_service: false
+neutron::agents::l3::enabled: false
+neutron::agents::l3::debug: true
+neutron::agents::l3::external_network_bridge: br-ex
+neutron::agents::l3::use_namespaces: true
+neutron::agents::l3::interface_driver: 'neutron.agent.linux.interface.OVSInterfaceDriver'
+neutron::agents::l3::router_id: '0e326534-0471-4fe3-85dd-e4fb47723762'
+neutron::agents::l3::gateway_external_network_id: '6bee1b10-8718-4c14-9e51-bdee2a405cae'
+neutron::agents::l3::send_arp_for_ha: 0
+neutron::agents::l3::manage_service: false
+neutron::config::l3_agent_config:
+  DEFAULT/ovs_use_veth:
+    value: true
+  keystone_authtoken/auth_host:
+    value: keystone.cloud.pixelpark.internal
+  keystone_authtoken/admin_tenant_name:
+    value: service
+  keystone_authtoken/admin_user:
+    value: neutron
+  keystone_authtoken/admin_password:
+    value: J9F3akdagtZ1oPTC
+  DEFAULT/host:
+    value: network-cluster01.cloud.pixelpark.internal
+
+# Neutron lbaas Agent
+neutron::agents::lbaas::manage_service: false
+neutron::agents::lbaas::enabled: false
+neutron::agents::lbaas::debug: true
+neutron::agents::lbaas::interface_driver: 'neutron.agent.linux.interface.OVSInterfaceDriver'
+neutron::agents::lbaas::device_driver: 'neutron.services.loadbalancer.drivers.haproxy.namespace_driver.HaproxyNSDriver'
+neutron::agents::lbaas::manage_haproxy_package: false
+neutron::config::lbaas_agent_config:
+  DEFAULT/ovs_use_veth:
+    value: true
+  keystone_authtoken/auth_host:
+    value: keystone.cloud.pixelpark.internal
+  keystone_authtoken/admin_tenant_name:
+    value: service
+  keystone_authtoken/admin_user:
+    value: neutron
+  keystone_authtoken/admin_password:
+    value: J9F3akdagtZ1oPTC
+# Neutron ML Plugin
+neutron::plugins::ml2::enable_security_group: true
+neutron::plugins::ml2::type_drivers:
+  - gre
+neutron::plugins::ml2::tenant_network_types:
+  - gre
+neutron::plugins::ml2::mechanism_drivers:
+  - openvswitch
+neutron::plugins::ml2::tunnel_id_ranges:
+  - '1:1000'
+neutron::plugins::enable_security_group: true
+
+# Neutron Metadata Agent
+neutron::agents::metadata::manage_service: false
+neutron::agents::metadata::enabled: false
+neutron::agents::metadata::auth_password: J9F3akdagtZ1oPTC
+neutron::agents::metadata::shared_secret: bohd3HaeTu5Sex3I
+neutron::agents::metadata::debug: true
+neutron::agents::metadata::auth_tenant: service
+neutron::agents::metadata::auth_region: regionone
+neutron::agents::metadata::auth_url: 'http://keystone.cloud.pixelpark.internal:35357/v2.0'
+neutron::agents::metadata::metadata_ip: 93.188.109.11
+
+neutron::agents::metering::manage_service: false
+neutron::agents::metering::debug: true
+
+# Neutron OVS Agent
+neutron::agents::ovs::manage_service: false
+neutron::agents::ovs::enabled: false
+neutron::agents::ovs::tunnel_types:
+  - gre
+neutron::agents::ovs::enable_tunneling: true
+neutron::agents::ovs::neutron_plugin_ovs:
+  SECURITYGROUP/enable_security_group:
+    value: true
+neutron::plugins::ovs::neutron_plugin_ovs:
+  OVS/enable_tunneling:
+    value: true
+
+
+# Neutron OVS Plugin
+neutron::plugins::ovs::enable_tunneling: true
+neutron::plugins::ovs::tenant_network_type: gre
+
+#Neutron vpnaas Agent
+neutron::agents::vpnaas::manage_service: false
+neutron::agents::vpnaas::enabled: false
+
+# Neutron Pacemaker
+neutron::pacemaker::primitives:
+  neutron-server:
+    primitive_class: systemd
+    primitive_type: neutron-server
+    operations:
+      monitor:
+        interval: 10s
+        timeout: 30s
+      start:
+        interval: "0"
+        timeout: 60s
+      stop:
+        interval: "0"
+        timeout: 60s
+
+# Neutron Pacemaker fuer die Network Nodes
+neutron::pacemaker_agents::primitives:
+  neutron-dhcp-agent:
+    primitive_class: 'systemd'
+    primitive_type: 'neutron-dhcp-agent'
+    operations:
+      monitor:
+        interval: '10s'
+        timeout: '30s'
+      start:
+        interval: '0'
+        timeout: '60s'
+      stop:
+        interval: '0'
+        timeout: '60s'
+#  Disable Agent bis dieser auch funktioniert
+#  
+#  neutron-fwaas-agent:
+#    primitive_class: 'systemd'
+#    primitive_type: 'neutron-fwaas-agent'
+#    operations:
+#      monitor:
+#        interval: '10s'
+#        timeout: '30s'
+#      start:
+#        interval: '0'
+#        timeout: '60s'
+#      stop:
+#        interval: '0'
+#        timeout: '60s'
+  neutron-l3-agent:
+    primitive_class: 'systemd'
+    primitive_type: 'neutron-l3-agent'
+    operations:
+      monitor:
+        interval: '10s'
+        timeout: '30s'
+      start:
+        interval: '0'
+        timeout: '60s'
+      stop:
+        interval: '0'
+        timeout: '60s'
+  neutron-lbaas-agent:
+    primitive_class: 'systemd'
+    primitive_type: 'neutron-lbaas-agent'
+    operations:
+      monitor:
+        interval: '10s'
+        timeout: '30s'
+      start:
+        interval: '0'
+        timeout: '60s'
+      stop:
+        interval: '0'
+        timeout: '60s'
+  neutron-metadata-agent:
+    primitive_class: 'systemd'
+    primitive_type: 'neutron-metadata-agent'
+    operations:
+      monitor:
+        interval: '10s'
+        timeout: '30s'
+      start:
+        interval: '0'
+        timeout: '60s'
+      stop:
+        interval: '0'
+        timeout: '60s'
+  neutron-metering-agent:
+    primitive_class: 'systemd'
+    primitive_type: 'neutron-metering-agent'
+    operations:
+      monitor:
+        interval: '10s'
+        timeout: '30s'
+      start:
+        interval: '0'
+        timeout: '60s'
+      stop:
+        interval: '0'
+        timeout: '60s'
+  neutron-openvswitch-agent:
+    primitive_class: 'systemd'
+    primitive_type: 'neutron-openvswitch-agent'
+    operations:
+      monitor:
+        interval: '10s'
+        timeout: '30s'
+      start:
+        interval: '0'
+        timeout: '60s'
+      stop:
+        interval: '0'
+        timeout: '60s'
+  neutron-vpn-agent:
+    primitive_class: 'systemd'
+    primitive_type: 'neutron-vpn-agent'
+    operations:
+      monitor:
+        interval: '10s'
+        timeout: '30s'
+      start:
+        interval: '0'
+        timeout: '60s'
+      stop:
+        interval: '0'
+        timeout: '60s'
+neutron::pacemaker_agents::service_ips:
+  network-cluster01:
+    primitive_class: 'ocf'
+    primitive_type: 'IPaddr2'
+    provided_by: 'heartbeat'
+    parameters:
+      ip: '192.168.88.201'
+      cidr_netmask: '23'
+      iflabel: 'netcl01'
+    operations:
+      monitor: 
+        interval: '10s'
+  neutron-data-net:
+    primitive_class: 'ocf'
+    primitive_type: 'IPaddr2'
+    provided_by: 'heartbeat'
+    parameters:
+      ip: '10.10.130.11'
+      cidr_netmask: '24'
+      iflabel: 'data'
+      nic: 'bond1'
+    operations:
+      monitor: 
+        interval: '10s'
+  neutron-ext-net:
+    primitive_class: 'ocf'
+    primitive_type: 'IPaddr2'
+    provided_by: 'heartbeat'
+    parameters:
+      ip: '93.188.109.10'
+      cidr_netmask: '24'
+      nic: 'br-ex'
+    operations:
+      monitor: 
+        interval: '10s'
+
+# Heat
+heat::package_ensure: 2014.1.3-36
+heat::auth_uri: 'http://keystone.cloud.pixelpark.internal:35357/v2.0'
+heat::verbose: true
+heat::debug: true
+heat::keystone_host: keystone.cloud.pixelpark.internal
+heat::keystone_port: '35357'
+heat::keystone_protocol: http
+heat::keystone_user: heat
+heat::keystone_tenant: service
+heat::keystone_password: J9F3akdagtZ1oPTC
+heat::keystone_ec2_uri: 'http://ec2.cloud-test.pixelpark.internal:5000/v2.0/ec2tokens'
+heat::rpc_backend: 'heat.openstack.common.rpc.impl_kombu'
+heat::rabbit_hosts:
+  - rabbitmq01.cloud.pixelpark.internal:5672
+  - rabbitmq02.cloud.pixelpark.internal:5672
+  - rabbitmq03.cloud.pixelpark.internal:5672
+heat::rabbit_userid: guest
+heat::rabbit_password: rEVrsaeSKduY41Hh
+heat::rabbit_virtual_host: '/'
+heat::sql_connection: 'mysql://heatdbadmin:Dh340IOYKrND7KOA@mysql.cloud.pixelpark.internal/heat'
+heat::database_idle_timeout: 3600
+heat::api_cfn::bind_port: '8000'
+heat::api_cfn::manage_service: false
+heat::api_cfn::haproxy_listening_service_heat_api_cfn: live_heat-api-cfn
+heat::api_cloudwatch::bind_port: '8003'
+heat::api_cloudwatch::manage_service: false
+heat::api_cloudwatch::haproxy_listening_service_heat_api_cloudwatch: live_heat-api-cloudwatch
+heat::api::bind_port: '8004'
+heat::api::haproxy_listening_service_heat_api: live_heat-api
+heat::engine::auth_encryption_key: eiPhuu9Equooph0T
+heat::engine::manage_service: false
+heat::config::api_config:
+  DEFAULT/environment_dir:
+    value: '/opt/openstack/heat/etc/environment.d'
+  DEFAULT/use_stderr:
+    value: false
+  DEFAULT/notification_driver:
+    value: heat.openstack.common.notifier.rpc_notifier
+  DEFAULT/policy_file:
+    value: '/opt/openstack/heat/etc/policy.json'
+  DEFAULT/use_stderr:
+    value: false
+heat::db::mysql::password: Dh340IOYKrND7KOA
+heat::db::mysql::dbname: heat
+heat::db::mysql::user: heatdbadmin
+heat::db::mysql::host: mysql.cloud.pixelpark.internal
+heat::db::mysql::allowed_hosts: '%'
+heat::db::mysql::charset: utf8
+heat::db::mysql::collate: utf8_unicode_ci
+heat::pacemaker::primitives:
+  heat-api:
+    primitive_class: 'systemd'
+    primitive_type: 'heat-api'
+    operations:
+      monitor:
+        interval: 10s
+      start:
+        interval: '0'
+        timeout: 60s
+      stop:
+        interval: '0'
+        timeout: 60s
+  heat-engine:
+    primitive_class: 'systemd'
+    primitive_type: 'heat-engine'
+    operations:
+      monitor:
+        interval: 10s
+      start:
+        interval: '0'
+        timeout: 60s
+      stop:
+        interval: '0'
+        timeout: 60s
+  heat-api-cfn:
+    primitive_class: 'systemd'
+    primitive_type: 'heat-api-cfn'
+    operations:
+      monitor:
+        interval: 10s
+      start:
+        interval: '0'
+        timeout: 60s
+      stop:
+        interval: '0'
+        timeout: 60s
+  heat-api-cloudwatch:
+    primitive_class: 'systemd'
+    primitive_type: 'heat-api-cloudwatch'
+    operations:
+      monitor:
+        interval: 10s
+      start:
+        interval: '0'
+        timeout: 60s
+      stop:
+        interval: '0'
+        timeout: 60s
+# Glance
+glance::package_ensure: 2014.1.4-43
+# api config
+glance::api::keystone_password: J9F3akdagtZ1oPTC
+glance::api::manage_service: false
+glance::api::verbose: true
+glance::api::debug: true
+glance::api::bind_port: '9292'
+glance::api::backlog: 4096
+glance::api::log_file: '/var/log/glance/api.log'
+glance::api::log_dir: '/var/log/glance' # Kommt in der Konfig nicht vor
+glance::api::registry_host: glance.cloud.pixelpark.internal
+glance::api::registry_port: '9191'
+glance::api::auth_host: keystone.cloud.pixelpark.internal
+glance::api::auth_url: 'http://keystone.cloud.pixelpark.internal:35357/v2.0'
+glance::api::auth_port: '35357'
+glance::api::auth_uri: false # kommt nicht in der Konfig vor
+glance::api::auth_protocol: http
+glance::api::pipeline: keystone
+glance::api::keystone_tenant: service
+glance::api::keystone_user: glance
+glance::api::show_image_direct_url: false # kommt nicht in der Konfig vor
+glance::api::database_connection: 'mysql://glancedbadmin:Z2EJh]i5H9TywbKg@mysql.cloud.pixelpark.internal/glance'
+glance::api::database_idle_timeout: 3600 # kommt nicht in der Konfig vor
+glance::api::image_cache_dir: '/var/lib/glance/image-cache/'
+glance::api::haproxy_listening_service: live_glance-api
+
+glance::backend::rbd::rbd_store_user: glance
+glance::backend::rbd::rbd_store_ceph_conf: '/etc/ceph/ceph.conf'
+glance::backend::rbd::rbd_store_pool: images
+glance::backend::rbd::rbd_store_chunk_size: 8 # kommt nicht in der Konfig vor
+#glance::backend::swift::swift_store_user: 'jdoe:jdoe'
+#glance::backend::swift::swift_store_key: a86850deb2742ec3cb41518e26aa2d89
+#glance::backend::swift::swift_store_auth_address: '127.0.0.1:5000/v2.0/'
+#glance::backend::swift::swift_store_container: glance
+#glance::backend::swift::swift_store_auth_version: 2
+#glance::backend::swift::swift_store_create_container_on_put: false
+#glance::backend::swift::swift_store_large_object_size: 5120
+#glance::backend::swift::swift_store_large_object_chunk_size: 200
+glance::client::ensure: absent
+
+glance::notify::rabbitmq::rabbit_password: rEVrsaeSKduY41Hh
+glance::notify::rabbitmq::rabbit_userid: guest
+glance::notify::rabbitmq::rabbit_hosts:
+  - rabbitmq01.cloud.pixelpark.internal:5672
+  - rabbitmq02.cloud.pixelpark.internal:5672
+  - rabbitmq03.cloud.pixelpark.internal:5672
+glance::notify::rabbitmq::rabbit_virtual_host: '/'
+glance::notify::rabbitmq::rabbit_use_ssl: false
+glance::notify::rabbitmq::rabbit_notification_exchange: 'glance'
+glance::notify::rabbitmq::rabbit_notification_topic: 'notifications'
+glance::notify::rabbitmq::amqp_durable_queues: false
+
+glance::registry::keystone_password: J9F3akdagtZ1oPTC
+glance::registry::manage_service: false
+glance::registry::verbose: true
+glance::registry::debug: true
+glance::registry::bind_port: '9191'
+glance::registry::log_file: '/var/log/glance/registry.log'
+glance::registry::log_dir: '/var/log/glance'
+glance::registry::database_connection: 'mysql://glancedbadmin:Z2EJh]i5H9TywbKg@mysql.cloud.pixelpark.internal/glance'
+glance::registry::database_idle_timeout: 3600
+glance::registry::auth_type: keystone
+glance::registry::auth_host: keystone.cloud.pixelpark.internal
+glance::registry::auth_port: '35357'
+glance::registry::auth_protocol: http
+glance::registry::keystone_tenant: service
+glance::registry::keystone_user: glance
+glance::registry::pipeline: keystone
+glance::registry::haproxy_listening_service: live_glance-registry
+
+glance::db::mysql::host: mysql.cloud.pixelpark.internal
+glance::db::mysql::password: Z2EJh]i5H9TywbKg
+glance::db::mysql::dbname: glance
+glance::db::mysql::user: glancedbadmin
+glance::db::mysql::allowed_hosts: '%'
+glance::db::mysql::charset: utf8
+glance::db::mysql::collate: utf8_unicode_ci
+
+glance::config::api_config:
+  DEFAULT/auth_region:
+    value: regionone
+  DEFAULT/auth_strategy:
+    value: keystone
+  DEFAULT/disk_formats:
+    value: 'ami,ari,aki,vhd,vmdk,raw,qcow2,vdi,iso'
+  DEFAULT/container_formats:
+    value: 'ami,ari,aki,bare,ovf,ova,docker'
+  DEFAULT/allow_anonymous_access:
+    value: false
+  DEFAULT/admin_role:
+    value: admin
+  DEFAULT/delayed_delete:
+    value: false
+  DEFAULT/use_stderr:
+    value: false
+
+glance::config::registry_config:
+  DEFAULT/admin_role:
+    value: admin
+  DEFAULT/limit_param_default:
+    value: 25
+  DEFAULT/api_limit_max:
+    value: 1000
+  DEFAULT/backlog:
+    value: 4096
+  DEFAULT/use_stderr:
+    value: false
+
+glance::pacemaker::primitives:
+  glance-api:
+    primitive_class: 'systemd'
+    primitive_type: 'glance-api'
+    operations:
+      monitor:
+        interval: 10s
+      start:
+        interval: '0'
+        timeout: 60s
+      stop:
+        interval: '0'
+        timeout: 60s
+  glance-registry:
+    primitive_class: 'systemd'
+    primitive_type: 'glance-registry'
+    operations:
+      monitor:
+        interval: 10s
+      start:
+        interval: '0'
+        timeout: 60s
+      stop:
+        interval: '0'
+        timeout: 60s
+
+# Cinder
+cinder::package_ensure: 2014.2-1
+cinder::api::manage_service: false
+cinder::api::keystone_password: J9F3akdagtZ1oPTC
+cinder::api::keystone_tenant: service
+cinder::api::keystone_user: cinder
+cinder::api::keystone_auth_host: 'keystone.cloud.pixelpark.internal'
+cinder::api::keystone_auth_port: '35357'
+cinder::api::keystone_auth_protocol: http
+cinder::api::keystone_auth_uri: 'http://keystone.cloud.pixelpark.internal:5000/v2.0'
+cinder::api::service_port: '5000'
+cinder::api::haproxy_listening_service: 'live_cinder'
+
+cinder::config::cinder_config:
+  DEFAULT/policy_file:
+    value: '/opt/openstack/cinder/etc/policy.json'
+  DEFAULT/use_stderr:
+    value: false
+
+cinder::database_connection: 'mysql://cinderdbadmin:w3zLMOgtK32YkZqE@mysql.cloud.pixelpark.internal:3306/cinder'
+cinder::rpc_backend: 'cinder.openstack.common.rpc.impl_kombu'
+cinder::rabbit_hosts:
+  - 'rabbitmq01.cloud.pixelpark.internal:5672'
+  - 'rabbitmq02.cloud.pixelpark.internal:5672'
+  - 'rabbitmq03.cloud.pixelpark.internal:5672'
+cinder::rabbit_userid: guest
+cinder::rabbit_password: 'rEVrsaeSKduY41Hh'
+cinder::api_paste_config: '/opt/openstack/cinder/etc/api-paste.ini'
+cinder::log_dir: '/var/log/cinder'
+cinder::verbose: true
+cinder::debug: true
+cinder::scheduler::manage_service: false
+
+cinder::backend::rbd::rbd_pool: volumes
+cinder::backend::rbd::rbd_user: cinder
+
+cinder::db::mysql::password: w3zLMOgtK32YkZqE
+cinder::db::mysql::dbname: cinder
+cinder::db::mysql::user: cinderdbadmin
+cinder::db::mysql::host: mysql.cloud.pixelpark.internal
+cinder::db::mysql::allowed_hosts: '%'
+cinder::db::mysql::charset: utf8
+cinder::db::mysql::collate: utf8_unicode_ci
+
+cinder::glance::glance_api_servers:
+  - 'glance01.cloud.pixelpark.internal:9292'
+  - 'glance02.cloud.pixelpark.internal:9292'
+  - 'glance03.cloud.pixelpark.internal:9292'
+
+cinder::config:cinder_config: '/opt/openstack/cinder/etc/cinder.conf'
+cinder::config:cinder_config:api_paste_ini_config: '/opt/openstack/cinder/etc/api-paste.ini'
+
+cinder::quota::quota_volumes: 25
+cinder::quota::quota_snapshots: 25
+cinder::quota::quota_gigabytes: 300
+
+cinder::type_set::os_tenant_name: service
+cinder::type_set::os_username: cinder
+cinder::type_set::os_password: J9F3akdagtZ1oPTC
+cinder::type_set::os_auth_url: 'http://keystone.cloud.pixelpark.internal:5000/v2.0'
+
+cinder::volume::manage_service: false
+cinder::volume::rbd::rbd_pool: volumes
+cinder::volume::rbd::rbd_user: cinder
+cinder::volume::rbd::rbd_secret_uuid: '93f00b54-4d9d-a597-1c09-20fcd26e9d43'
+
+cinder::backup::manage_service: false
+cinder::backup::ceph::backup_ceph_user: cinder-backup
+
+
+cinder::pacemaker_api::primitives:
+  cinder-api:
+    primitive_class: 'systemd'
+    primitive_type: 'cinder-api'
+    operations:
+      monitor:
+        interval: 10s
+      start:
+        interval: '0'
+        timeout: 60s
+      stop:
+        interval: '0'
+        timeout: 60s
+cinder::pacemaker::primitives:
+  cinder-scheduler:
+    primitive_class: 'systemd'
+    primitive_type: 'cinder-scheduler'
+    operations:
+      monitor:
+        interval: 10s
+      start:
+        interval: '0'
+        timeout: 60s
+      stop:
+        interval: '0'
+        timeout: 60s
+  cinder-volume:
+    primitive_class: 'systemd'
+    primitive_type: 'cinder-volume'
+    operations:
+      monitor:
+        interval: 10s
+      start:
+        interval: '0'
+        timeout: 60s
+      stop:
+        interval: '0'
+        timeout: 60s
+  cinder-backup:
+    primitive_class: 'systemd'
+    primitive_type: 'cinder-backup'
+    operations:
+      monitor:
+        interval: 10s
+      start:
+        interval: '0'
+        timeout: 60s
+      stop:
+        interval: '0'
+        timeout: 60s
+
+nova::ensure_package: 2014.1.3-66
+nova::database_connection: 'mysql://novadbadmin:qbg1qGVODiKugy9l@mysql.cloud.pixelpark.internal/nova'
+nova::rabbit_hosts:
+  - 'rabbitmq01.cloud.pixelpark.internal'
+  - 'rabbitmq02.cloud.pixelpark.internal'
+  - 'rabbitmq03.cloud.pixelpark.internal'
+
+nova::rabbit_port: '5672'
+nova::memcached_servers:
+  - 'beowulf.cloud.pixelpark.internal'
+  - 'mullo.cloud.pixelpark.internal'
+  - 'necat.cloud.pixelpark.internal'
+nova::rabbit_password: 'rEVrsaeSKduY41Hh'
+nova::rabbit_userid: 'guest'
+nova::glance_api_servers: 'glance01.cloud.pixelpark.internal:9292,glance02.cloud.pixelpark.internal:9292,glance03.cloud.pixelpark.internal:9292'
+nova::verbose: true
+nova::log_dir: '/var/log/nova'
+nova::debug: true
+nova::rootwrap_config: '/opt/openstack/nova/etc/rootwrap.conf'
+nova::auth_strategy: keystone
+nova::config::nova_config:
+  DEFAULT/pybasedir:
+    value: '/opt/openstack/nova/lib/python2.7/site-packages'
+  DEFAULT/bindir:
+    value: '/opt/openstack/nova/bin'
+  DEFAULT/policy_file:
+    value: '/opt/openstack/nova/etc/policy.json'
+  DEFAULT/api_paste_config:
+    value: '/opt/openstack/nova/etc/api-paste.ini'
+  DEFAULT/enable_instance_password:
+    value: false
+  DEFAULT/allow_resize_to_same_host:
+    value: true
+  DEFAULT/allow_migrate_to_same_host:
+    value: true
+  DEFAULT/resume_guests_state_on_host_boot:
+    value: true
+  DEFAULT/reboot_timeout:
+    value: 300
+  DEFAULT/reserved_host_memory_mb:
+    value: 2048
+  DEFAULT/linuxnet_interface_driver:
+    value: 'nova.network.linux_net.LinuxOVSInterfaceDriver'
+  DEFAULT/use_stderr:
+    value: false
+  DEFAULT/vnc_keymap:
+    value: 'de'
+  DEFAULT/os_region_name:
+    value: regionone
+  DEFAULT/metadata_host:
+    value: metadata.cloud.pixelpark.net
+  keystone_authtoken/identity_uri:
+    value: "http://keystone.cloud.pixelpark.internal:35357/"
+  DEFAULT/novncproxy_base_url:
+    value: "http://93.188.109.11:6080/vnc_auto.html"
+
+nova::compute::enabled: true
+nova::compute::manage_service: false
+nova::compute::vncproxy_base_url: 'http://93.188.109.11:6081/console'
+nova::compute::libvirt::vncserver_listen: 0.0.0.0
+nova::compute::libvirt::remove_unused_base_images: false
+nova::compute::libvirt::libvirt_disk_cachemodes: 
+  - "network=writeback"
+nova::compute::instance_usage_audit: true
+nova::compute::rbd::libvirt_rbd_user: 'cinder'
+nova::compute::rbd::libvirt_rbd_secret_uuid: 93f00b54-4d9d-a597-1c09-20fcd26e9d43
+nova::compute::rbd::libvirt_images_rbd_pool: instances-dev
+nova::keystone::auth::password: J9F3akdagtZ1oPTC
+nova::keystone::auth::public_protocol: http
+nova::keystone::auth::public_address: keystone.cloud.pixelpark.internal
+nova::keystone::auth::compute_port: '5000'
+nova::keystone::auth::compute_version: 'v2.0'
+nova::api::auth_host: keystone.cloud.pixelpark.internal
+nova::api::auth_port: '35357'
+nova::api::auth_version: v2.0
+nova::api::admin_tenant_name: service
+nova::api::admin_user: nova
+nova::api::admin_password: J9F3akdagtZ1oPTC
+nova::api::haproxy_listening_service: 'live_nova-api'
+nova::api::neutron_metadata_proxy_shared_secret: bohd3HaeTu5Sex3I
+nova::api::haproxy_listening_service_ec2: live_nova-ec2
+nova::api::haproxy_listening_service_metadata: live_nova-metadata
+nova::api::haproxy_listening_service_osapi: live_nova-osapi
+nova::network::neutron::neutron_url: 'http://neutron.cloud.pixelpark.internal:9696'
+nova::network::neutron::neutron_admin_username: neutron
+nova::network::neutron::neutron_admin_password: J9F3akdagtZ1oPTC
+nova::network::neutron::neutron_admin_tenant_name: service
+nova::network::neutron::neutron_admin_auth_url: 'http://keystone.cloud.pixelpark.internal:35357/v2.0'
+nova::network::neutron::firewall_driver: nova.virt.libvirt.firewall.IptablesFirewallDriver
+nova::network::neutron::neutron_region_name: regionone
+nova::network::neutron::security_group_api: nova
+nova::network::flatdhcp::dhcp_domain: cloud.pixelpark.internal
+nova::scheduler::filter::cpu_allocation_ratio: 32.0
+nova::scheduler::filter::ram_allocation_ratio: 2.0
+nova::scheduler::manage_service: false
+nova::scheduler::enabled: true
+nova::client::ensure: absent
+nova::db::mysql::host: mysql.cloud.pixelpark.internal
+nova::db::mysql::user: novadbadmin
+nova::db::mysql::password: qbg1qGVODiKugy9l
+nova::db::mysql::allowed_hosts: '%'
+nova::vncproxy::manage_service: false
+nova::vncproxy::haproxy_listening_service: live_nova-novncproxy
+nova::consoleauth::manage_service: false
+nova::conductor::manage_service: false
+nova::cert::manage_service: false
+nova::pacemaker::primitives:
+  nova-api-ec2:
+    primitive_class: 'systemd'
+    primitive_type: 'nova-api-ec2'
+    operations:
+      monitor:
+        interval: 10s
+      start:
+        interval: '0'
+        timeout: 60s
+      stop:
+        interval: '0'
+        timeout: 60s
+  nova-api-metadata:
+    primitive_class: 'systemd'
+    primitive_type: 'nova-api-metadata'
+    operations:
+      monitor:
+        interval: 10s
+      start:
+        interval: '0'
+        timeout: 60s
+      stop:
+        interval: '0'
+        timeout: 60s
+  nova-api-os-compute:
+    primitive_class: 'systemd'
+    primitive_type: 'nova-api-os-compute'
+    operations:
+      monitor:
+        interval: 10s
+      start:
+        interval: '0'
+        timeout: 60s
+      stop:
+        interval: '0'
+        timeout: 60s
+  nova-cert:
+    primitive_class: 'systemd'
+    primitive_type: 'nova-cert'
+    operations:
+      monitor:
+        interval: 10s
+      start:
+        interval: '0'
+        timeout: 60s
+      stop:
+        interval: '0'
+        timeout: 60s
+  nova-conductor:
+    primitive_class: 'systemd'
+    primitive_type: 'nova-conductor'
+    operations:
+      monitor:
+        interval: 10s
+      start:
+        interval: '0'
+        timeout: 60s
+      stop:
+        interval: '0'
+        timeout: 60s
+  nova-consoleauth:
+    primitive_class: 'systemd'
+    primitive_type: 'nova-consoleauth'
+    operations:
+      monitor:
+        interval: 10s
+      start:
+        interval: '0'
+        timeout: 60s
+      stop:
+        interval: '0'
+        timeout: 60s
+  nova-console:
+    primitive_class: 'systemd'
+    primitive_type: 'nova-console'
+    operations:
+      monitor:
+        interval: 10s
+      start:
+        interval: '0'
+        timeout: 60s
+      stop:
+        interval: '0'
+        timeout: 60s
+  nova-novncproxy:
+    primitive_class: 'systemd'
+    primitive_type: 'nova-novncproxy'
+    operations:
+      monitor:
+        interval: 10s
+      start:
+        interval: '0'
+        timeout: 60s
+      stop:
+        interval: '0'
+        timeout: 60s
+  nova-scheduler:
+    primitive_class: 'systemd'
+    primitive_type: 'nova-scheduler'
+    operations:
+      monitor:
+        interval: 10s
+      start:
+        interval: '0'
+        timeout: 60s
+      stop:
+        interval: '0'
+        timeout: 60s
+nova::pacemaker_compute::primitives:
+  nova-compute:
+    primitive_class: 'systemd'
+    primitive_type: 'nova-compute'
+    operations:
+      monitor:
+        interval: 10s
+      start:
+        interval: '0'
+        timeout: 60s
+      stop:
+        interval: '0'
+        timeout: 60s
+
+mongodb::globals::manage_package_repo: false
+mongodb::globals::client_package_name: mongodb
+mongodb::globals::server_package_name: mongodb-server
+mongodb::globals::version: 2.4.6-1.fc20
+mongodb::replset: rsmain
+mongodb::replset::sets:
+  rsmain:
+    members:
+      - "mongod01.cloud.pixelpark.internal:27017"
+      - "mongod02.cloud.pixelpark.internal:27017"
+      - "mongod03.cloud.pixelpark.internal:27017"
+
+pacemaker::stonith::disable: true
+# Horizon
+horizon::package_ensure: 2014.1.4-44
+horizon::fqdn:
+  - cloud.pixelpark.net
+  - horizon01.cloud.pixelpark.internal
+  - horizon02.cloud.pixelpark.internal
+  - horizon03.cloud.pixelpark.internal
+horizon::secret_key: 'live'
+horizon::cache_server_ip: 127.0.0.1
+horizon::cache_server_port: '11211'
+horizon::horizon_app_links: false
+horizon::keystone_url: 'http://keystone.cloud.pixelpark.internal:5000/v2.0'
+horizon::keystone_default_role: Member
+horizon::openstack_endpoint_type: 'publicURL'
+horizon::django_debug: false
+horizon::api_result_limit: 1000
+horizon::log_level: DEBUG
+horizon::help_url: 'http://docs.openstack.org'
+horizon::configure_apache: true
+horizon::servername: cloud.pixelpark.net
+#  $listen_ssl              = false,
+#  $ssl_redirect            = true,
+#  $horizon_cert            = undef,
+#  $horizon_key             = undef,
+#  $horizon_ca              = undef,
+#  $file_upload_temp_dir    = '/tmp',
+
+#Corosync
+pacemaker::corosync::bind_address: 192.168.88.0
+pacemaker::corosync::multicast_address: 224.0.88.1
+
+httpd::webserver:
+  cloud.pixelpark.net:
+    modules:
+      - mpm_worker
+      - unixd
+      - access_compat
+      - filter
+      - authz_core
+      - authn_core
+    worker: true
+    manage_service: false
+    service_pacemaker: true
+
+xymon::modules:
+  - 'net2'
+  - 'ipmi'
+xymon::check::rabbitmq::members:
+  - 'rabbitmq01.cloud.pixelpark.internal:5672'
+  - 'rabbitmq02.cloud.pixelpark.internal:5672'
+  - 'rabbitmq03.cloud.pixelpark.internal:5672'
+xymon::check::rabbitmq::password: 'rEVrsaeSKduY41Hh'
+xymon::check::rabbitmq::user: 'guest'
+
+xymon::check::haproxy::members:
+  - beowulf.cloud.pixelpark.internal:8080
+  - necat.cloud.pixelpark.internal:8080
+  - mullo.cloud.pixelpark.internal:8080
+
+logstash::generic_resource:
+  cloud_nova:
+    resource: file
+    order: 10 # Input
+    parameters:
+      type: Nova
+      tags: 
+        - "%{customer}"
+        - "%{environment}"
+      path: /var/log/nova/*
+      sincedb_path: "/dev/null"
+  cloud_keystone:
+    resource: file
+    order: 10 # Input
+    parameters:
+      type: Keystone
+      tags: 
+        - "%{customer}"
+        - "%{environment}"
+      path: /var/log/keystone/*
+      sincedb_path: "/dev/null"
+  cloud_Glance:
+    resource: file
+    order: 10 # Input
+    parameters:
+      type: Glance
+      tags: 
+        - "%{customer}"
+        - "%{environment}"
+      path: /var/log/glance/*
+      sincedb_path: "/dev/null"
+  cloud_Mysql:
+    resource: file
+    order: 10 # Input
+    parameters:
+      type: Mysql
+      tags: 
+        - "%{customer}"
+        - "%{environment}"
+      path: /var/log/mysql/*
+      sincedb_path: "/dev/null"
+  cloud_RabbitMQ:
+    resource: file
+    order: 10 # Input
+    parameters:
+      type: RabbitMQ
+      tags: 
+        - "%{customer}"
+        - "%{environment}"
+      path: /var/log/rabbitmq/*
+      sincedb_path: "/dev/null"
+  cloud_Horizon:
+    resource: file
+    order: 10 # Input
+    parameters:
+      type: Horizon
+      tags: 
+        - "%{customer}"
+        - "%{environment}"
+      path: /var/log/horizon/*
+      sincedb_path: "/dev/null"
+  cloud_Cinder:
+    resource: file
+    order: 10 # Input
+    parameters:
+      type: Cinder
+      tags: 
+        - "%{customer}"
+        - "%{environment}"
+      path: /var/log/cinder/*
+      sincedb_path: "/dev/null"
+  cloud_Heat:
+    resource: file
+    order: 10 # Input
+    parameters:
+      type: Heat
+      tags: 
+        - "%{customer}"
+        - "%{environment}"
+      path: /var/log/heat/*
+      sincedb_path: "/dev/null"
+  cloud_Ceilometer:
+    resource: file
+    order: 10 # Input
+    parameters:
+      type: Ceilometer
+      tags: 
+        - "%{customer}"
+        - "%{environment}"
+      path: /var/log/ceilometer/*
+      sincedb_path: "/dev/null"
+  cloud_OpenVSwitch:
+    resource: file
+    order: 10 # Input
+    parameters:
+      type: OpenVSwitch
+      tags: 
+        - "%{customer}"
+        - "%{environment}"
+      path: /var/log/openvswitch/*
+      sincedb_path: "/dev/null"
+  cloud_Libvirt:
+    resource: file
+    order: 10 # Input
+    parameters:
+      type: Libvirt
+      tags: 
+        - "%{customer}"
+        - "%{environment}"
+      path: /var/log/Libvirt/*
+      sincedb_path: "/dev/null"
+  cloud_Ceph:
+    resource: file
+    order: 10 # Input
+    parameters:
+      type: Ceph
+      tags: 
+        - "%{customer}"
+        - "%{environment}"
+      path: /var/log/ceph/*
+      sincedb_path: "/dev/null"
diff --git a/customer/live-cloud/epana.cloud.pixelpark.internal.yaml b/customer/live-cloud/epana.cloud.pixelpark.internal.yaml
new file mode 100644 (file)
index 0000000..2ca1464
--- /dev/null
@@ -0,0 +1,6 @@
+---
+site::role: base
+xymon::modules:
+  - 'ceph-health'
+  - 'ipmi'
+  - 'top'
diff --git a/customer/live-cloud/frigg.cloud.pixelpark.internal.yaml b/customer/live-cloud/frigg.cloud.pixelpark.internal.yaml
new file mode 100644 (file)
index 0000000..269dded
--- /dev/null
@@ -0,0 +1,28 @@
+---
+site::role: base
+site::additional_classes:
+  - nova::compute::libvirt
+  - nova::network::neutron
+  - nova::compute::neutron
+  - nova::config
+  - nova::pacemaker_compute
+  - neutron::config
+  - nova
+  - nova::compute
+  - nova::compute::rbd
+  - neutron::agents::ovs
+  - hosts
+  - nova::migration::libvirt
+  - logstash
+  - neutron
+
+neutron::agents::ovs::local_ip: 10.10.130.30
+pacemaker::stonith::disable: false
+pacemaker::corosync::cluster_name: 'nova-dev-cluster01'
+pacemaker::corosync::cluster_members:
+    - frigg.cloud.pixelpark.internal
+    - pothos.cloud.pixelpark.internal
+
+xymon::modules:
+  - 'cloud-new'
+  - 'ovs-tun'
diff --git a/customer/live-cloud/furrina.cloud.pixelpark.internal.yaml b/customer/live-cloud/furrina.cloud.pixelpark.internal.yaml
new file mode 100644 (file)
index 0000000..7000e18
--- /dev/null
@@ -0,0 +1,33 @@
+---
+site::role: base
+site::additional_classes:
+  - neutron::agents::vpnaas
+  - neutron::agents::lbaas
+  - neutron::agents::metadata
+  - neutron::server::notifications
+  - neutron::agents::metering
+  - site::profile::mcollective::common
+  - neutron::agents::l3
+  - neutron::config
+  - neutron::pacemaker_agents
+  - neutron::agents::dhcp
+  - neutron::agents::ovs
+  - hosts
+  - neutron::user
+  - neutron::plugins::ovs
+  - logstash
+  - neutron
+
+neutron::agents::ovs::local_ip: 10.10.130.11
+neutron::plugins::ovs::neutron_plugin_ovs:
+  OVS/local_ip:
+    value: 10.10.130.11
+
+pacemaker::corosync::cluster_name: 'neutron-cluster-cloud-icehouse'
+pacemaker::corosync::cluster_members:
+  - furrina.cloud.pixelpark.internal
+  - not.cloud.pixelpark.internal
+
+xymon::modules:
+  - 'cloud-new'
+  - 'ovs-tun'
\ No newline at end of file
diff --git a/customer/live-cloud/grazien.cloud.pixelpark.internal.yaml b/customer/live-cloud/grazien.cloud.pixelpark.internal.yaml
new file mode 100644 (file)
index 0000000..4e9d5d1
--- /dev/null
@@ -0,0 +1,6 @@
+---
+site::role: base
+xymon::modules:
+  - 'ceph-health'
+  - 'ipmi'
+  - 'top'
\ No newline at end of file
diff --git a/customer/live-cloud/heracles.cloud.pixelpark.internal.yaml b/customer/live-cloud/heracles.cloud.pixelpark.internal.yaml
new file mode 100644 (file)
index 0000000..c37e001
--- /dev/null
@@ -0,0 +1,25 @@
+---
+site::role: base
+site::additional_classes:
+  - hosts
+  - logstash
+
+hosts::hosts:
+  10.10.130.34:
+    aliases: heracles-data.cloud.pixelpark.internal
+    interface_up: true
+    interface_device: "bond1:data"
+    interface_netmask: "255.255.255.0"
+neutron::agents::ovs::local_ip: 10.10.130.34
+
+pacemaker::stonith::disable: false
+pacemaker::corosync::cluster_name: 'nova-cluster01'
+pacemaker::corosync::cluster_members:
+    - alekto.cloud.pixelpark.internal
+    - heracles.cloud.pixelpark.internal
+    - konsos.cloud.pixelpark.internal
+
+
+xymon::modules:
+  - 'cloud-new'
+  - 'ovs-tun'
diff --git a/customer/live-cloud/konsos.cloud.pixelpark.internal.yaml b/customer/live-cloud/konsos.cloud.pixelpark.internal.yaml
new file mode 100644 (file)
index 0000000..250e691
--- /dev/null
@@ -0,0 +1,33 @@
+---
+site::additional_classes:
+  - nova
+  - nova::compute
+  - nova::compute::libvirt
+  - nova::compute::neutron
+  - nova::config
+  - nova::migration::libvirt
+  - nova::network::neutron
+  - logstash
+  - neutron
+  - neutron::agents::ovs
+  - neutron::config
+  - site::profile::mcollective::common
+
+hosts::hosts:
+  10.10.130.33:
+    aliases: konsos-data.cloud.pixelpark.internal
+    interface_up: true
+    interface_device: "bond1:data"
+    interface_netmask: "255.255.255.0"
+neutron::agents::ovs::local_ip: 10.10.130.33
+
+pacemaker::stonith::disable: false
+pacemaker::corosync::cluster_name: 'nova-cluster01'
+pacemaker::corosync::cluster_members:
+    - alekto.cloud.pixelpark.internal
+    - heracles.cloud.pixelpark.internal
+    - konsos.cloud.pixelpark.internal
+
+xymon::modules:
+  - 'cloud-new'
+  - 'ovs-tun'
diff --git a/customer/live-cloud/midir.cloud.pixelpark.internal.yaml b/customer/live-cloud/midir.cloud.pixelpark.internal.yaml
new file mode 100644 (file)
index 0000000..622c7f0
--- /dev/null
@@ -0,0 +1,6 @@
+---
+site::role: base
+accounts::users:
+  ivan.prikhodko:
+    apply: true
+    sudo: true
diff --git a/customer/live-cloud/moros.cloud.pixelpark.internal.yaml b/customer/live-cloud/moros.cloud.pixelpark.internal.yaml
new file mode 100644 (file)
index 0000000..4e9d5d1
--- /dev/null
@@ -0,0 +1,6 @@
+---
+site::role: base
+xymon::modules:
+  - 'ceph-health'
+  - 'ipmi'
+  - 'top'
\ No newline at end of file
diff --git a/customer/live-cloud/mullo.cloud.pixelpark.internal.yaml b/customer/live-cloud/mullo.cloud.pixelpark.internal.yaml
new file mode 100644 (file)
index 0000000..c1add12
--- /dev/null
@@ -0,0 +1,187 @@
+---
+site::role: base
+site::additional_classes:
+  - galera
+  - nova::conductor
+  - nova::config
+  - heat::api_cloudwatch
+  - nova::api
+  - rabbitmq
+  - xymon::check::haproxy
+  - heat::api
+  - keystone::config
+  - cinder::ceilometer
+  - glance
+  - heat::engine
+  - nova::consoleauth
+  - heat::api_cfn
+  - nova
+  - cinder::volume::rbd
+  - nova::pacemaker
+  - glance::pacemaker
+  - keystone
+  - glance::db::mysql
+  - neutron::server
+  - pp_haproxy
+  - heat::config
+  - neutron::pacemaker
+  - xymon::check::rabbitmq
+  - glance::backend::rbd
+  - nova::network::neutron
+  - neutron::server::notifications
+  - nova::quota
+  - glance::api
+  - cinder::glance
+  - cinder::pacemaker_api
+  - heat
+  - cinder::volume
+  - heat::db::mysql
+  - glance::client
+  - cinder::scheduler
+  - cinder::db::mysql
+  - nova::scheduler
+  - keystone::pacemaker
+  - logstash
+  - heat::pacemaker
+  - nova::cert
+  - cinder::pacemaker
+  - neutron::config
+  - glance::notify::rabbitmq
+  - keystone::db::mysql
+  - nova::vncproxy
+  - nova::db::mysql
+  - pp_python::pip
+  - cinder::backup
+  - hosts
+  - neutron::quota
+  - horizon
+  - neutron
+  - cinder
+  - neutron::plugins::ovs
+  - cinder::config
+  - glance::registry
+  - cinder::api
+  - neutron::db::mysql
+
+hosts::hosts:
+  192.168.88.106:
+    interface_up: true
+    interface_device: "bond0:rabbit03"
+    interface_netmask: "255.255.254.0"
+  192.168.88.109:
+    interface_up: true
+    interface_device: "bond0:galera03"
+    interface_netmask: "255.255.254.0"
+  192.168.88.102:
+    interface_up: true
+    interface_device: "bond0:keys03"
+    interface_netmask: "255.255.254.0"
+  192.168.88.113:
+    interface_up: true
+    interface_device: "bond0:glance03"
+    interface_netmask: "255.255.254.0"
+  192.168.88.120:
+    interface_up: true
+    interface_device: "bond0:neut03"
+    interface_netmask: "255.255.254.0"
+  192.168.88.124:
+    interface_up: true
+    interface_device: "bond0:cinder03"
+    interface_netmask: "255.255.254.0"
+  192.168.88.128:
+    interface_up: true
+    interface_device: "bond0:nova03"
+    interface_netmask: "255.255.254.0"
+  192.168.88.132:
+    interface_up: true
+    interface_device: "bond0:hecfn03"
+    interface_netmask: "255.255.254.0"
+  192.168.88.136:
+    interface_up: true
+    interface_device: "bond0:heat03"
+    interface_netmask: "255.255.254.0"
+  192.168.88.140:
+    interface_up: true
+    interface_device: "bond0:heatcw03"
+    interface_netmask: "255.255.254.0"
+  192.168.88.117:
+    interface_up: true
+    interface_device: "bond0:hori03"
+    interface_netmask: "255.255.254.0"
+  192.168.88.144:
+    interface_up: true
+    interface_device: "bond0:ceilo03"
+    interface_netmask: "255.255.254.0"
+  192.168.88.148:
+    interface_up: true
+    interface_device: "bond0:trove03"
+    interface_netmask: "255.255.254.0"
+  192.168.88.152:
+    interface_up: true
+    interface_device: "bond0:mongo03"
+    interface_netmask: "255.255.254.0"
+    
+ntp::servers:
+  - "time01.pixelpark.com iburst"
+  - "time02.pixelpark.com iburst"
+  - "time03.pixelpark.com iburst"
+  
+rabbitmq::environment_variables:
+   RABBITMQ_NODE_IP_ADDRESS: 192.168.88.106
+   RABBITMQ_NODENAME: rabbit@rabbitmq03
+
+galera::local_ip: 192.168.88.109
+galera::bind_address: 192.168.88.109
+galera::haproxy_server_names: galera03
+
+keystone::public_bind_host: keystone03.cloud.pixelpark.internal
+keystone::admin_bind_host: keystone03.cloud.pixelpark.internal
+keystone::haproxy_server_names_admin: keystone03
+keystone::haproxy_server_names_public: keystone03
+
+neutron::server::bind_host: neutron03.cloud.pixelpark.internal
+neutron::server::haproxy_server_names: neutron-server03
+
+glance::api::bind_host: glance03.cloud.pixelpark.internal
+glance::api::haproxy_server_names: glance03
+glance::registry::bind_host: glance03.cloud.pixelpark.internal
+glance::registry::haproxy_server_names: glance03
+
+cinder::api::bind_host: cinder03.cloud.pixelpark.internal
+cinder::api::haproxy_server_names: cinder03
+
+heat::api::bind_host: 'heat03.cloud.pixelpark.internal'
+heat::api_cloudwatch::bind_host: 'heatcw03.cloud.pixelpark.internal'
+heat::api_cfn::bind_host: 'heatcfn03.cloud.pixelpark.internal'
+heat::api_cloudwatch::haproxy_server_names_heat_api_cloudwatch: heat03-api-cloudwatch
+heat::api_cfn::haproxy_server_names_heat_api_cfn: heat03-api-cfn
+heat::api::haproxy_server_names_heat_api: heat03-api
+
+nova::api::api_bind_address: nova03.cloud.pixelpark.internal
+nova::api::osapi_bind_address: nova03.cloud.pixelpark.internal
+nova::api::metadata_listen: nova03.cloud.pixelpark.internal
+nova::api::haproxy_server_names_ec2: nova03
+nova::api::haproxy_server_names_metadata: nova03
+nova::api::haproxy_server_names_osapi: nova03
+nova::vncproxy::host: nova03.cloud.pixelpark.internal
+nova::vncproxy::haproxy_server_names: nova03
+mongodb::globals::bind_ip: 
+  - 192.168.88.152
+  - 127.0.0.1
+
+pacemaker::corosync::cluster_name: 'pcs-cluster-cloud-icehouse'
+pacemaker::corosync::multicast_address: 224.0.88.10
+pacemaker::corosync::cluster_members:
+#  - beowulf.cloud.pixelpark.internal
+  - necat.cloud.pixelpark.internal
+  - mullo.cloud.pixelpark.internal
+
+horizon::bind_address: horizon03.cloud.pixelpark.internal
+httpd::webserver:
+  cloud.pixelpark.net:
+    listens:
+      - 192.168.88.117:80
+
+xymon::modules:
+  - 'cloud-new'
+  - 'hlogin'
diff --git a/customer/live-cloud/necat.cloud.pixelpark.internal.yaml b/customer/live-cloud/necat.cloud.pixelpark.internal.yaml
new file mode 100644 (file)
index 0000000..e81e5f1
--- /dev/null
@@ -0,0 +1,134 @@
+---
+site::role: base
+site::additional_classes:
+  - site::profile::mcollective::common
+  - rabbitmq
+  - pp_python::pip
+  - hosts
+  - pp_haproxy
+  - xymon::check::rabbitmq
+  - logstash
+  - xymon::check::haproxy
+
+hosts::hosts:
+  192.168.88.105:
+    interface_up: true
+    interface_device: "bond0:rabbit02"
+    interface_netmask: "255.255.254.0"
+  192.168.88.108:
+    interface_up: true
+    interface_device: "bond0:galera02"
+    interface_netmask: "255.255.254.0"
+  192.168.88.101:
+    interface_up: true
+    interface_device: "bond0:keys02"
+    interface_netmask: "255.255.254.0"
+  192.168.88.112:
+    interface_up: true
+    interface_device: "bond0:glance02"
+    interface_netmask: "255.255.254.0"
+  192.168.88.119:
+    interface_up: true
+    interface_device: "bond0:neut02"
+    interface_netmask: "255.255.254.0"
+  192.168.88.123:
+    interface_up: true
+    interface_device: "bond0:cinder02"
+    interface_netmask: "255.255.254.0"
+  192.168.88.127:
+    interface_up: true
+    interface_device: "bond0:nova02"
+    interface_netmask: "255.255.254.0"
+  192.168.88.131:
+    interface_up: true
+    interface_device: "bond0:hecfn02"
+    interface_netmask: "255.255.254.0"
+  192.168.88.135:
+    interface_up: true
+    interface_device: "bond0:heat02"
+    interface_netmask: "255.255.254.0"
+  192.168.88.139:
+    interface_up: true
+    interface_device: "bond0:heatcw02"
+    interface_netmask: "255.255.254.0"
+  192.168.88.116:
+    interface_up: true
+    interface_device: "bond0:hori02"
+    interface_netmask: "255.255.254.0"
+  192.168.88.143:
+    interface_up: true
+    interface_device: "bond0:ceilo02"
+    interface_netmask: "255.255.254.0"
+  192.168.88.147:
+    interface_up: true
+    interface_device: "bond0:trove02"
+    interface_netmask: "255.255.254.0"
+  192.168.88.151:
+    interface_up: true
+    interface_device: "bond0:mongo02"
+    interface_netmask: "255.255.254.0"
+    
+ntp::servers:
+  - "time01.pixelpark.com iburst"
+  - "time02.pixelpark.com iburst"
+  - "time03.pixelpark.com iburst"
+  
+rabbitmq::environment_variables:
+   RABBITMQ_NODE_IP_ADDRESS: 192.168.88.105
+   RABBITMQ_NODENAME: rabbit@rabbitmq02
+
+galera::local_ip: 192.168.88.108
+galera::bind_address: 192.168.88.108
+galera::haproxy_server_names: galera02
+
+keystone::public_bind_host: keystone02.cloud.pixelpark.internal
+keystone::admin_bind_host: keystone02.cloud.pixelpark.internal
+keystone::haproxy_server_names_admin: keystone02
+keystone::haproxy_server_names_public: keystone02
+
+neutron::server::bind_host: neutron02.cloud.pixelpark.internal
+neutron::server::haproxy_server_names: neutron-server02
+
+glance::api::bind_host: glance02.cloud.pixelpark.internal
+glance::api::haproxy_server_names: glance02
+glance::registry::bind_host: glance02.cloud.pixelpark.internal
+glance::registry::haproxy_server_names: glance02
+
+cinder::api::bind_host: cinder02.cloud.pixelpark.internal
+cinder::api::haproxy_server_names: cinder02
+
+heat::api::bind_host: 'heat02.cloud.pixelpark.internal'
+heat::api_cloudwatch::bind_host: 'heatcw02.cloud.pixelpark.internal'
+heat::api_cfn::bind_host: 'heatcfn02.cloud.pixelpark.internal'
+heat::api_cloudwatch::haproxy_server_names_heat_api_cloudwatch: heat02-api-cloudwatch
+heat::api_cfn::haproxy_server_names_heat_api_cfn: heat02-api-cfn
+heat::api::haproxy_server_names_heat_api: heat02-api
+
+nova::api::api_bind_address: nova02.cloud.pixelpark.internal
+nova::api::osapi_bind_address: nova02.cloud.pixelpark.internal
+nova::api::metadata_listen: nova02.cloud.pixelpark.internal
+nova::api::haproxy_server_names_ec2: nova02
+nova::api::haproxy_server_names_metadata: nova02
+nova::api::haproxy_server_names_osapi: nova02
+nova::vncproxy::host: nova02.cloud.pixelpark.internal
+nova::vncproxy::haproxy_server_names: nova02
+mongodb::globals::bind_ip: 
+  - 192.168.88.151
+  - 127.0.0.1
+
+pacemaker::corosync::cluster_name: 'pcs-cluster-cloud-icehouse'
+pacemaker::corosync::multicast_address: 224.0.88.10
+pacemaker::corosync::cluster_members:
+#  - beowulf.cloud.pixelpark.internal
+  - necat.cloud.pixelpark.internal
+  - mullo.cloud.pixelpark.internal
+
+horizon::bind_address: horizon02.cloud.pixelpark.internal
+httpd::webserver:
+  cloud.pixelpark.net:
+    listens:
+      - 192.168.88.116:80
+
+xymon::modules:
+  - 'cloud-new'
+  - 'hlogin'
\ No newline at end of file
diff --git a/customer/live-cloud/not.cloud.pixelpark.internal.yaml b/customer/live-cloud/not.cloud.pixelpark.internal.yaml
new file mode 100644 (file)
index 0000000..4d3ef91
--- /dev/null
@@ -0,0 +1,32 @@
+---
+site::role: base
+site::additional_classes:
+  - neutron::agents::vpnaas
+  - neutron::agents::lbaas
+  - neutron::agents::metadata
+  - neutron::server::notifications
+  - neutron::agents::l3
+  - neutron::agents::dhcp
+  - neutron::config
+  - neutron::pacemaker_agents
+  - neutron::agents::ovs
+  - hosts
+  - neutron::user
+  - neutron
+  - neutron::plugins::ovs
+  - logstash
+  - neutron::agents::metering
+
+neutron::agents::ovs::local_ip: 10.10.130.11
+neutron::plugins::ovs::neutron_plugin_ovs:
+  OVS/local_ip:
+    value: 10.10.130.11
+
+pacemaker::corosync::cluster_name: 'neutron-cluster-cloud-icehouse'
+pacemaker::corosync::cluster_members:
+  - furrina.cloud.pixelpark.internal
+  - not.cloud.pixelpark.internal
+
+xymon::modules:
+  - 'cloud-new'
+  - 'ovs-tun'
\ No newline at end of file
diff --git a/customer/live-cloud/oger.cloud.pixelpark.internal.yaml b/customer/live-cloud/oger.cloud.pixelpark.internal.yaml
new file mode 100644 (file)
index 0000000..91cdf11
--- /dev/null
@@ -0,0 +1,15 @@
+---
+site::role: base
+site::additional_classes:
+  - site::profile::mcollective::common
+  - hosts
+  - logstash
+
+
+pacemaker::corosync::cluster_name: 'storagegw-cluster-cloud-icehouse'
+pacemaker::corosync::cluster_members:
+  - oger.cloud.pixelpark.internal
+#  - badb.cloud.pixelpark.internal
+
+xymon::modules:
+  - 'cloud-new'
\ No newline at end of file
diff --git a/customer/live-cloud/pothos.cloud.pixelpark.internal.yaml b/customer/live-cloud/pothos.cloud.pixelpark.internal.yaml
new file mode 100644 (file)
index 0000000..09e3cbc
--- /dev/null
@@ -0,0 +1,27 @@
+---
+site::role: base
+site::additional_classes:
+  - nova::compute::libvirt
+  - nova::network::neutron
+  - nova::compute::neutron
+  - nova::config
+  - neutron::config
+  - nova
+  - nova::compute
+  - nova::compute::rbd
+  - neutron::agents::ovs
+  - hosts
+  - nova::migration::libvirt
+  - logstash
+  - neutron
+
+neutron::agents::ovs::local_ip: 10.10.130.31
+pacemaker::stonith::disable: false
+pacemaker::corosync::cluster_name: 'nova-dev-cluster01'
+pacemaker::corosync::cluster_members:
+    - frigg.cloud.pixelpark.internal
+    - pothos.cloud.pixelpark.internal
+
+xymon::modules:
+  - 'cloud-new'
+  - 'ovs-tun'
diff --git a/customer/mbvd-quiz/common.yaml b/customer/mbvd-quiz/common.yaml
new file mode 100644 (file)
index 0000000..5c9af6e
--- /dev/null
@@ -0,0 +1,12 @@
+---
+site::role: base
+site::additional_classes:
+  - site::profile::apache_php
+repo::remi_php56: true
+php::extensions:
+  gd: {}
+  opcache: {}
+  mysqlnd: {}
+php::settings:
+  Date/date.timezone: Europe/Berlin
+  PHP/expose_php: 'Off'
\ No newline at end of file
diff --git a/customer/mbvd-quiz/stage-www-mbvd-quiz-onlinestore.pixelpark.net.yaml b/customer/mbvd-quiz/stage-www-mbvd-quiz-onlinestore.pixelpark.net.yaml
new file mode 100644 (file)
index 0000000..8097cb8
--- /dev/null
@@ -0,0 +1,41 @@
+---
+
+accounts::users:
+  peter.kreinz:
+    apply: true
+    group: "apache"
+
+site::profile::apache::htdigest:
+  server:
+    www: ENC[PKCS7,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]
+site::profile::apache::pp_vhosts:
+  mbvd-quiz-onlinestore:
+    docroot: /var/www/mbvd-quiz-onlinestore
+    docroot_owner: apache
+    docroot_group: apache
+    docroot_mode: '0775'
+    servername: stage-www-mbvd-quiz-onlinestore.pixelpark.net
+    custom_fragment: 'ProxyPassMatch ^/(.*\.php(/.*)?)$ fcgi://127.0.0.1:9000/var/www/mbvd-quiz-onlinestore/$1'
+    ssl: true
+    ssl_cert: /etc/pki/tls/certs/wildcard.pixelpark.net-cert.pem
+    ssl_chain: /etc/pki/tls/certs/wildcard.pixelpark.net-cert.pem
+    ssl_key: /etc/pki/tls/private/wildcard.pixelpark.net-key.pem
+    directories:
+      - directory_root:
+        provider: directory
+        path: /var/www/mbvd-quiz-onlinestore
+        options:
+          - FollowSymLinks
+          - MultiViews
+        allow_override:
+          - All
+      - location_root:
+        provider: location
+        path: '/'
+        auth_type: Digest
+        auth_name: server
+        auth_digest_provider: file
+        auth_digest_algorithm: MD5
+        auth_user_file: '/etc/httpd/htdigest'
+        auth_require: 'valid-user'
+
diff --git a/customer/mbvd-quiz/www-mbvd-quiz-onlinestore.pixelpark.net.yaml b/customer/mbvd-quiz/www-mbvd-quiz-onlinestore.pixelpark.net.yaml
new file mode 100644 (file)
index 0000000..855345f
--- /dev/null
@@ -0,0 +1,39 @@
+---
+accounts::users:
+  peter.kreinz:
+    apply: true
+    group: "apache"
+site::profile::apache::htdigest:
+  server:
+    www: ENC[PKCS7,MIIBeQYJKoZIhvcNAQcDoIIBajCCAWYCAQAxggEhMIIBHQIBADAFMAACAQEwDQYJKoZIhvcNAQEBBQAEggEAj8+nrSwS8JrmgM6sIK+21c81XtjWRlenHlyVUj/R/oGW4lxCPWNapkSRaQKng00bZSB39noVKAtQKJtbK2y1SLLxNMWpiAKUZHu2I8MN3yZea5q3vo06UNDo5QaHAuAif+2+75XKccmoAM9M2WLebc6760RcXAIR/3mDCZyE1ToKH2JiEKN2QOCKeazVjuQd8RqIHt7OlMF+Cik7dvfvZT3oAXzZ2gz0DYJbCnZ91oZnoDQon1o++NuK7D5AiptgGpOjN0a8r5UuKF1prO2XeyqqxP8CUGbkfsfd1F+UZI4w/cSMYmalOYVxsp7dCC+yupJzOxLVuDVJUJnWixjI3zA8BgkqhkiG9w0BBwEwHQYJYIZIAWUDBAEqBBAzn/eS6abKikhbPQnIVmhwgBBUWoSfMnAqGDuJTpA+SI4n]
+
+site::profile::apache::pp_vhosts:
+  mbvd-quiz-onlinestore:
+    docroot: /var/www/mbvd-quiz-onlinestore
+    docroot_owner: apache
+    docroot_group: apache
+    docroot_mode: '0775'
+    servername: www-mbvd-quiz-onlinestore.pixelpark.net
+    custom_fragment: 'ProxyPassMatch ^/(.*\.php(/.*)?)$ fcgi://127.0.0.1:9000/var/www/mbvd-quiz-onlinestore/$1'
+    ssl: true
+    ssl_cert: /etc/pki/tls/certs/wildcard.pixelpark.net-cert.pem
+    ssl_chain: /etc/pki/tls/certs/wildcard.pixelpark.net-cert.pem
+    ssl_key: /etc/pki/tls/private/wildcard.pixelpark.net-key.pem
+    directories:
+      - directory_root:
+        provider: directory
+        path: /var/www/mbvd-quiz-onlinestore
+        options:
+          - FollowSymLinks
+          - MultiViews
+        allow_override:
+          - All
+      - location_root:
+        provider: location
+        path: '/'
+        auth_type: Digest
+        auth_name: server
+        auth_digest_provider: file
+        auth_digest_algorithm: MD5
+        auth_user_file: '/etc/httpd/htdigest'
+        auth_require: 'valid-user'
\ No newline at end of file
diff --git a/customer/mbvd-service-and-smile/common.yaml b/customer/mbvd-service-and-smile/common.yaml
new file mode 100644 (file)
index 0000000..4b47645
--- /dev/null
@@ -0,0 +1,34 @@
+---
+site::role: base
+site::additional_classes:
+  - site::profile::drupal
+  - site::profile::mysql_server
+  - apache::mod::headers
+  - logstash
+
+apache::mpm_module: worker
+apache::default_vhost: false
+
+repo::remi_php56: true
+
+php::settings:
+  Date/date.timezone: Europe/Berlin
+  PHP/expose_php: 'Off'
+
+accounts::users:
+  konrad.tadesse:
+    apply: true
+    group: "apache"
+  andreas.pinto-koehler:
+    apply: true
+    group: "apache"
+  cristof.hoefler:
+    apply: true
+    group: "apache"
+  thomas.bussmeyer:
+    apply: true
+    group: "apache"   
+  deploy.vogel:
+    apply: true
+    sudo: true
+    group: "apache"
\ No newline at end of file
diff --git a/customer/mbvd-service-and-smile/dev-www-service-and-smile-de-mbvd.pixelpark.net.yaml b/customer/mbvd-service-and-smile/dev-www-service-and-smile-de-mbvd.pixelpark.net.yaml
new file mode 100644 (file)
index 0000000..4e303c6
--- /dev/null
@@ -0,0 +1,48 @@
+---
+mysql::server::root_password: ENC[PKCS7,MIIBiQYJKoZIhvcNAQcDoIIBejCCAXYCAQAxggEhMIIBHQIBADAFMAACAQEwDQYJKoZIhvcNAQEBBQAEggEApRXwQAcehi2MNN4V+RT/PWu2D5n3/PorAijDmEKy4fxWFkbosd/C2WZfwQhwaRRUcLpgzBl1/+13lmnY7NU35Aiy+TPAYsb/Uys5YBktPMfAerxk0zq9qn9t2grb7gf5OAhM0VH1m6xA9lXmcmCCm8tfnMdP7MxKGtvbsfH+R/ysXlnt7MTchZ+PH6gHQ9Gd9BzaUyh5weu5yqQONeQMwiFcH3K4g0Y7+2XXb90YVQuz7xtX5h8PcIk1lcRgonW5puFj858yadvbpMEH9/bhK7N4ck6RijuhboUiErF8xr5jCig1F1nKC3iERAUY+SqAax7Zl9v6cqQH8hcrJlECETBMBgkqhkiG9w0BBwEwHQYJYIZIAWUDBAEqBBAN8+g+Av97TCa6/lEmhDEkgCDTYun82S9m+8o8N1D0PJTZ2E22EgxyZL1N7C59DGNFFQ==]
+mysql::server::backup::backuppassword: ENC[PKCS7,MIIBiQYJKoZIhvcNAQcDoIIBejCCAXYCAQAxggEhMIIBHQIBADAFMAACAQEwDQYJKoZIhvcNAQEBBQAEggEANAPK8Xr9E70tFs2hwsplqIZzEc2v/GpEqTv8I/vk8elDzDfOX4e+P5efSB4lH35SHh17/aOhYGKxG4DVLqjDNsvnqrj1DuVWNGhlx64Zh7ApHqCdDDgMNdLi7kNJEsH03EBpvWaxrhUtHDEt53OnTCgvNuxrJGHxpYPU5wt/7afvhHz6s3djkE6VPSOj9zCGSNczVWUDKhla7u2hqMK+pxHCILXzxAZZGrzYDWu2Laf8bMw5+XIeR/pladLAU79nhnApKUR5DJfKrWu+5W9w9ETxW3y+BoAA0sX2vmGhRSyCXQbHJUy3tV15W7nTyeZT37n5TQs+g+vChIm061SCyjBMBgkqhkiG9w0BBwEwHQYJYIZIAWUDBAEqBBBzqxB1q8RX7mQKHaiuR/KKgCC9cgxhWLjcL9M+xqGA1gK5qaKRXuvy0KU1vB3O6tp88g==]
+site::profile::mysql_server::databases:
+  serviceandsmile:
+    user: serviceandsmile
+    password: ENC[PKCS7,MIIBiQYJKoZIhvcNAQcDoIIBejCCAXYCAQAxggEhMIIBHQIBADAFMAACAQEwDQYJKoZIhvcNAQEBBQAEggEAjdgobMbBiOH4P4YEi+qne+SlS0yaPxeXIhqazW34+xewHNG7e4M9MNP3eg2a4GxwOHfZ/edauQOErohf21x4nxI5xp66cU9sMs/77vUPfiD200RFdizLR0QJGOV8KGz7Kmmnqs7ZSgBJ3cMZqICX3Gtk8YWMD/ItC4HkG4FhcW9pDk4+ueheGFROu5UItJUhc4STYMxpodbSqF482SuJuCF3M0AUorzTB+tQPymxqZUEAx2AWEtbpT5WXpaZFabpdRrPQRPYNKQWwaOMLE8Un1ekpdnK0R91nwDJD0clOowFE/JupmSqpoRbkQ/fJA6+S/bzA/2qNJMDmsHHw1yiTjBMBgkqhkiG9w0BBwEwHQYJYIZIAWUDBAEqBBDtDCPrDf0ScworixPAUPOdgCDkGCamH4FYcwqZ7oPSY/Hne2BiK1ECliPc62uUfx45Tg==]
+
+site::profile::drupal::projects:
+  service-and-smile:
+    ip: 192.168.170.27
+    site_path: /srv/www/www-service-and-smile-de-mbvd.pixelpark.net
+    servername: dev-www-service-and-smile-de-mbvd.pixelpark.net
+    serveraliases:
+      - dev-www-service-and-smile-de
+    ssl_cert: '/etc/pki/tls/certs/wildcard.pixelpark.net-cert.pem'
+    ssl_chain: '/etc/pki/tls/certs/wildcard.pixelpark.net-cert.pem'
+    ssl_key: '/etc/pki/tls/private/wildcard.pixelpark.net-key.pem'
+    directories:
+      - directory_root:
+        provider: directory
+        path: '/srv/www/www-service-and-smile-de-mbvd.pixelpark.net'
+        options:
+          - FollowSymLinks
+          - MultiViews
+        allow_override:
+          - All
+        directoryindex: index.html index.php
+      - location1:
+        provider: location
+        path: '/'
+        auth_type: Digest
+        auth_name: server
+        auth_digest_provider: file
+        auth_digest_algorithm: MD5
+        auth_user_file: '/etc/httpd/htdigest'
+        auth_require: 'valid-user'
+        require:
+          - local
+
+php::settings:
+  Date/date.timezone: Europe/Berlin
+  PHP/expose_php: 'Off'
+  PHP/memory_limit: 128M
+php::cli::settings:
+  PHP/memory_limit: 128M
+php::extensions:
+  mysqlnd: {}
diff --git a/customer/mbvd-service-and-smile/test-www-service-and-smile-de-mbvd.pixelpark.net.yaml b/customer/mbvd-service-and-smile/test-www-service-and-smile-de-mbvd.pixelpark.net.yaml
new file mode 100644 (file)
index 0000000..24918a3
--- /dev/null
@@ -0,0 +1,48 @@
+---
+mysql::server::root_password: ENC[PKCS7,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]
+mysql::server::backup::backuppassword: ENC[PKCS7,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]
+site::profile::mysql_server::databases:
+  serviceandsmile:
+    user: serviceandsmile
+    password: ENC[PKCS7,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]
+
+site::profile::drupal::projects:
+  service-and-smile:
+    ip: 192.168.170.26
+    site_path: /srv/www/www-service-and-smile-de-mbvd.pixelpark.net
+    servername: test-www-service-and-smile-de-mbvd.pixelpark.net
+    serveraliases:
+      - test-www-service-and-smile-de
+    ssl_cert: '/etc/pki/tls/certs/wildcard.pixelpark.net-cert.pem'
+    ssl_chain: '/etc/pki/tls/certs/wildcard.pixelpark.net-cert.pem'
+    ssl_key: '/etc/pki/tls/private/wildcard.pixelpark.net-key.pem'
+    directories:
+      - directory_root:
+        provider: directory
+        path: '/srv/www/www-service-and-smile-de-mbvd.pixelpark.net'
+        options:
+          - FollowSymLinks
+          - MultiViews
+        allow_override:
+          - All
+        directoryindex: index.html index.php
+      - location1:
+        provider: location
+        path: '/'
+        auth_type: Digest
+        auth_name: server
+        auth_digest_provider: file
+        auth_digest_algorithm: MD5
+        auth_user_file: '/etc/httpd/htdigest'
+        auth_require: 'valid-user'
+        require:
+          - local
+
+php::settings:
+  Date/date.timezone: Europe/Berlin
+  PHP/expose_php: 'Off'
+  PHP/memory_limit: 128M
+php::cli::settings:
+  PHP/memory_limit: 128M
+php::extensions:
+  mysqlnd: {}
diff --git a/customer/mbvd-service-and-smile/www-service-and-smile-de-mbvd.pixelpark.net.yaml b/customer/mbvd-service-and-smile/www-service-and-smile-de-mbvd.pixelpark.net.yaml
new file mode 100644 (file)
index 0000000..4000015
--- /dev/null
@@ -0,0 +1,36 @@
+---
+mysql::server::root_password: ENC[PKCS7,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]
+mysql::server::backup::backuppassword: ENC[PKCS7,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]
+site::profile::mysql_server::databases:
+  serviceandsmile:
+    user: serviceandsmile
+    password: ENC[PKCS7,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]
+
+site::profile::drupal::projects:
+  service-and-smile:
+    ip: 192.168.170.25
+    site_path: /srv/www/www-service-and-smile-de-mbvd.pixelpark.net
+    servername: www-service-and-smile-de-mbvd.pixelpark.net
+    serveraliases:
+      - www-service-and-smile-de
+      - www.serviceandsmile.de
+    rewrites:
+      - alias:
+        comment: 'alle Aliase auf www.serviceandsmile.de'
+        rewrite_cond:
+          - '%%{ich-trickse}{HTTP_HOST} !^www\.serviceandsmile\.de$ [NC]'
+        rewrite_rule:
+          - '^(.*)$ http://www.serviceandsmile.de$1 [L,R=301]'
+    ssl_cert: '/etc/pki/tls/certs/wildcard.pixelpark.net-cert.pem'
+    ssl_chain: '/etc/pki/tls/certs/wildcard.pixelpark.net-cert.pem'
+    ssl_key: '/etc/pki/tls/private/wildcard.pixelpark.net-key.pem'
+    directories:
+      - directory_root:
+        provider: directory
+        path: '/srv/www/www-service-and-smile-de-mbvd.pixelpark.net'
+        options:
+          - FollowSymLinks
+          - MultiViews
+        allow_override:
+          - All
+        directoryindex: index.html index.php
diff --git a/customer/mbvd-static/www-mbvd-static.pixelpark.net.yaml b/customer/mbvd-static/www-mbvd-static.pixelpark.net.yaml
new file mode 100644 (file)
index 0000000..caa4538
--- /dev/null
@@ -0,0 +1,70 @@
+---
+site::role: base
+site::additional_classes:
+  - site::profile::apache_php
+  - apache::mod::headers
+  - git
+
+apache::mpm_module: event
+apache::default_vhost: false
+repo::remi_php56: true
+
+php::fpm::pools:
+  www:
+    listen: /var/run/php5-fpm-www.sock
+    listen_owner: 'apache'
+    listen_group: 'apache'
+    listen_mode: '0660'
+    user: apache
+    group: apache
+    pm: dynamic
+    pm_max_children: 4
+    pm_start_servers: 2
+    pm_min_spare_servers: 2
+    pm_max_spare_servers: 4
+    pm_max_requests: 10000
+    slowlog: "/var/log/php-fpm/www-slow.log"
+    pm_status_path: '/status'
+    ping_path: '/ping'
+    ping_response: 'pong'
+    request_terminate_timeout: '5m'
+    request_slowlog_timeout: '10s'
+    catch_workers_output: 'yes'
+
+site::profile::apache::htdigest:
+  server:
+    www: ENC[PKCS7,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]
+
+site::profile::apache::vhosts:
+  mercedes-benz-versicherung:
+    servername: www.mercedes-benz-versicherung.de
+    serveraliases:
+      - mercedes-benz-versicherung.de
+      - www-mercedes-benz-versicherung.pixelpark.net
+    docroot: '/srv/www/www-mercedes-benz-versicherung.pixelpark.net/build'
+    ip: 77.74.234.55
+    port: 80
+    directories:
+      - directory_root:
+        provider: directory
+        path: '/srv/www/www-mercedes-benz-versicherung.pixelpark.net'
+        addhandlers:
+          - { handler: "proxy:unix:/var/run/php5-fpm-www.sock|fcgi://./" , extensions: '.php' }
+        options:
+          - FollowSymLinks
+          - MultiViews
+        allow_override:
+          - All
+        directoryindex: index.html index.php
+      - location_php_fpm:
+        provider: location
+        path: '/status'
+        require: 
+          - 'ip 127.0.0.1 ::1 217.66.51.0/24'
+        sethandler: "proxy:unix:/var/run/php5-fpm-www.sock|fcgi://./"
+
+accounts::users:
+  deploy.vogel:
+    apply: true
+    sudo: true
+    group: "apache"
\ No newline at end of file
diff --git a/customer/mbvd-sternenlicht/common.yaml b/customer/mbvd-sternenlicht/common.yaml
new file mode 100644 (file)
index 0000000..4aee080
--- /dev/null
@@ -0,0 +1,27 @@
+---
+site::role: base
+site::additional_classes:
+  - site::profile::apache_php
+  - site::profile::mysql_server
+site::additional_packages:
+  composer: {}
+
+accounts::users:
+  christian.reich:
+    apply: true
+    sudo: true
+
+apache::mpm_module: event
+apache::default_vhost: false
+
+repo::remi_php56: true
+
+php::settings:
+  Date/date.timezone: Europe/Berlin
+  PHP/expose_php: 'Off'
+
+php::extensions:
+  pdo: {}
+  opcache: {}
+  mbstring: {}
+  mysqlnd: {}
\ No newline at end of file
diff --git a/customer/mbvd-sternenlicht/test-web-sternenlichtbotschaften-mercedes-benz-de.pixelpark.net.yaml b/customer/mbvd-sternenlicht/test-web-sternenlichtbotschaften-mercedes-benz-de.pixelpark.net.yaml
new file mode 100644 (file)
index 0000000..4bffd99
--- /dev/null
@@ -0,0 +1,42 @@
+---
+mysql::server::root_password: ENC[PKCS7,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]
+mysql::server::backup::backuppassword: ENC[PKCS7,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]
+site::profile::mysql_server::databases:
+  sternenlicht:
+    user: sternenlicht
+    password: ENC[PKCS7,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]
+site::profile::apache::htdigest:
+  server:
+    www: ENC[PKCS7,MIIBiQYJKoZIhvcNAQcDoIIBejCCAXYCAQAxggEhMIIBHQIBADAFMAACAQEwDQYJKoZIhvcNAQEBBQAEggEAqxxJ0t7BuZPFTpWUMOghSpxayK6UEGfitwtMEBxPVxivAvb9cNiKvkCyDDPHbTS0OUK+2rkyolGKzaJxklqSLrQn1YJeux6Fir5/9I4DFWQxMJhp6Lrpeexs9cSst0OTNKN28Ssbj6C0q1kyMkb9QcQVxYOu/KOPIdBPmzc2E8Q0CLYPWQ7bF/eAdXp5her1q12IKWpZtRSJTP8tp30JCm0eS2ee72fjchYUBdgH2ur9sxMftpqFrJwPSUFRinH7KX4jDDOVTB6KTRN1pe8f+OH+JqTZR7Mi2l0C/GhED+FfkHrTNwgHGQOypG49AgewOlMQia4p4codKcNPy0D3jzBMBgkqhkiG9w0BBwEwHQYJYIZIAWUDBAEqBBCqZtql2k2vwOaNnef83Bm2gCB1FXeYmmGzPANI0CJPOK3r9UoLqFMBEntrtx3Sqx8WYA==]
+
+site::profile::apache::pp_vhosts:
+  sternenlichtbotschaften:
+    port: 80
+    manage_docroot: false
+    docroot: /srv/www/sternenlichtbotschaften/public
+    servername: sternenlichtbotschaften.mercedes-benz.de
+    serveraliases:
+      - web-sternenlichtbotschaften-mercedes-benz-de.pixelpark.net
+    custom_fragment: 'ProxyPassMatch ^/(.*\.php(/.*)?)$ fcgi://127.0.0.1:9000/srv/www/sternenlichtbotschaften/public/$1'
+    ssl_cert: '/etc/pki/tls/certs/wildcard.pixelpark.net-cert.pem'
+    ssl_chain: '/etc/pki/tls/certs/wildcard.pixelpark.net-cert.pem'
+    ssl_key: '/etc/pki/tls/private/wildcard.pixelpark.net-key.pem'
+    directories:
+      - directory_root:
+        provider: directory
+        path: '/srv/www/sternenlichtbotschaften'
+        options:
+          - FollowSymLinks
+          - MultiViews
+        allow_override:
+          - All
+        directoryindex: index.php index.html
+      - location1:
+        provider: location
+        path: '/'
+        auth_type: Digest
+        auth_name: server
+        auth_digest_provider: file
+        auth_digest_algorithm: MD5
+        auth_user_file: '/etc/httpd/htdigest'
+        auth_require: 'valid-user'
\ No newline at end of file
diff --git a/customer/mbvd-sternenlicht/web-sternenlichtbotschaften-mercedes-benz-de.pixelpark.net.yaml b/customer/mbvd-sternenlicht/web-sternenlichtbotschaften-mercedes-benz-de.pixelpark.net.yaml
new file mode 100644 (file)
index 0000000..bfe1a7c
--- /dev/null
@@ -0,0 +1,32 @@
+---
+mysql::server::root_password: ENC[PKCS7,MIIBiQYJKoZIhvcNAQcDoIIBejCCAXYCAQAxggEhMIIBHQIBADAFMAACAQEwDQYJKoZIhvcNAQEBBQAEggEAbWZCakCf3p1MuOuKxYDjdyiAQDkt3TG5noIGaNPABv9zmNUIA2RCbYwgXXk5ZbOtdr68w2usLhKnnMkNT05fwdF72gMTeLRDdccttjEos3xC1o5lR/WU5C+JBHoSlltowsJbIvIrkbdPJ4gWAVE7bd2PqmbsM4qfBYWME542jOoOxVQLjBvdgqxobZ9Wds/5yWWPpUsl4E4kqrKI8hRdMeFOckXCe4L1355t9t0BJgqcjkL4XBOhm8p20tSK51Wp0ok4WCqOtSvfdM68Mb9rwE/7eR0n9GvpIjnzk+Xpg0OZiNpI38ybyWDileqC0T/8hPtYMSbl+A7eOVSY7ncixzBMBgkqhkiG9w0BBwEwHQYJYIZIAWUDBAEqBBBiY6ztcxgzKoWgJ2MSXUC1gCA+cUlqseuJiciMmKfguyZEyLb/S3mTikU6YeOfaZEXEg==]
+mysql::server::backup::backuppassword: ENC[PKCS7,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]
+site::profile::mysql_server::databases:
+  sternenlicht:
+    user: sternenlicht
+    password: ENC[PKCS7,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]
+
+site::profile::apache::pp_vhosts:
+  sternenlichtbotschaften:
+    manage_docroot: false
+    docroot: /srv/www/sternenlichtbotschaften/public
+    servername: sternenlichtbotschaften.mercedes-benz.de
+    serveraliases:
+      - web-sternenlichtbotschaften-mercedes-benz-de.pixelpark.net
+    custom_fragment: 'ProxyPassMatch ^/(.*\.php(/.*)?)$ fcgi://127.0.0.1:9000/srv/www/sternenlichtbotschaften/public/$1'
+    redirect_dest_non_ssl: 'https://sternenlichtbotschaften.mercedes-benz.de/'
+    redirect_status_non_ssl: 'permanent'
+    ssl: true
+    ssl_cert: '/etc/pki/tls/certs/sternenlichtbotschaften.mercedes-benz.de-cert.pem'
+    ssl_chain: '/etc/pki/tls/certs/sternenlichtbotschaften.mercedes-benz.de-cert.pem'
+    ssl_key: '/etc/pki/tls/private/sternenlichtbotschaften.mercedes-benz.de-key.pem'
+    directories:
+      - directory_root:
+        provider: directory
+        path: '/srv/www/sternenlichtbotschaften'
+        options:
+          - FollowSymLinks
+          - MultiViews
+        allow_override:
+          - All
+        directoryindex: index.php index.html
\ No newline at end of file
diff --git a/customer/mbvd-transporter-topdeal/common.yaml b/customer/mbvd-transporter-topdeal/common.yaml
new file mode 100644 (file)
index 0000000..81eeca9
--- /dev/null
@@ -0,0 +1,33 @@
+---
+site::role: base
+site::additional_classes:
+  - apache::mod::headers
+  - site::profile::ruby_passenger
+  - site::profile::mysql_server
+  - git
+
+accounts::users:
+  deploy.hamburg:
+    uid: 60201
+    shell: "bash"
+    apply: true
+    sudo: true
+    sudo_cmds:
+      - CHOWNTOPDEAL
+    keys:
+      key1:
+        key: "AAAAB3NzaC1yc2EAAAADAQABAAABAQDdaOjZvSaf/wtaS5F8bu4+gIUXha2DiRBZo2pLx79N5fUkBK1mha8IHfQ40iRJwQzr1cKRswEi3Qo8pGYOzNoPs9ugw+r07eMrwLGoNGIFTCv0SaukmtwM+9S1z7hxyy21TztQCAcmgKN4l8jvMKFKb/3Qm+UkroHAf5B+VhlGL/IZXnuSXlTHgKcnS2HtbXlzWRkWHgyjwxT6UmSO31Eyg1SRJ9mFdxwjZo5lyzbBP/gqAQqzxoZX7U4Ty2loO6hqNusf25Byn2qK3x+dQGZ9g/t1luW2oTFavWwY0PR/djyL1ndlgZ69jCAY3YYvHRvoD91gJjHA582hVg4IkCHx"
+      key2:
+        key: "AAAAB3NzaC1yc2EAAAADAQABAAABAQCx1a+GIaWp4/O1puvX9gYt5EMZcqNLyoxSU5sYNrIpuUYZ4mit2eVtsTbuE+gymXZ570v09sTI667p7I/cyoZ8HHsZ9x8yjDEDidKuRD7Sq+aqIdCcH3HLBZdEES8FvqyrcQNLbe4nPdqSrWievoR8VH6/wy7nhVb0A/UGID2XkZLVFJjlAfU22CxuererrCBASJo31ZkW/ScE1Lii2nBvs7PxL9+hyDnyP7fsVV/2fcy85c2reP3YO2jOTeVGnATPUNaL9KbonhxHr+SEWSvsE4tUlumxcqLa8wd/YQqrm0sO0GdqPEIfiUmhj24AltIxwmv/KnC8HODr7SQMyEsH"
+      key3:
+        key: "AAAAB3NzaC1yc2EAAAADAQABAAABAQC75zCFdjIkjdRV+1FuD9nO9a9UNAl0mnsMXLdHjC4U56+FUMPEcCIfn9AuV392fP/o0XXW5kevz7eyjuUitGLRCSsArxJ6G2wacm5KGf37k3Qmigts3CKG7t7kk1496z0Fq6UNfHQaQGCdhtAyt/eT0kthcU+x0p+pXAN6A+jId6EcEjtkp+CwaiqwU6sEYazJqDNmSeo2eYxN+ZN0xtLnopFYV4LCn378v+btdBFj3KY+qhYyOVqady6ZuVHqnKya03Xug+K80uaBlehTHD0dGbjFVLEKGsJqOyJZSgkZATfgcfUCQkWy+hy4wfC165k2FQx0A1+7BrNiPt7fQ6cH"
+      key4:
+        key: "AAAAB3NzaC1yc2EAAAADAQABAAABAQDIOt8MfbBxLSVZMrvWY3Yq24VMPbvx7I65Sdh8zqX2+QyJWv9vl9A6JMeXZbl20lXEmo0+q2HxxS/ZLq4v6ZyCdNCVIidTsYMo+w08+/QscWLwAv/rCMCdUOJnwpCAzr1DFMYJxRAEvy4AKppvsoYZ3KZkzKnmXbrN1267T+uKCyLhB/n+6rFVNc2Yso0OsUivg/Hcb2SWy9SUCpN85kubuQvLh4g8WmRGTB8CQtwYTA269KETZ86/gEErf8y2Sc9MwYEe91JW9hhnSVUKBDkEfxdU3Ctn3K5JHB49jq67spx1I0HDlB+M+u5TcIaU5gsPpgagY5NCIKGWgCmzANlZ"
+    comment: "Deployuser Hamburg"
+    group: topdeal
+
+sudo::configs:
+  cmd_alias:
+    priority: "05"
+    content: |
+      Cmnd_Alias CHOWNTOPDEAL = /bin/chown -R topdeal\:topdeal /var/www/transporter-topdeal
diff --git a/customer/mbvd-transporter-topdeal/test-www-mbvd-transporter-topdeal-de.pixelpark.net.yaml b/customer/mbvd-transporter-topdeal/test-www-mbvd-transporter-topdeal-de.pixelpark.net.yaml
new file mode 100644 (file)
index 0000000..277b028
--- /dev/null
@@ -0,0 +1,42 @@
+---
+mysql::server::root_password: ENC[PKCS7,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]
+mysql::server::backup::backuppassword: ENC[PKCS7,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]
+site::profile::mysql_server::databases:
+  topdeal:
+    user: topdeal
+    password: ENC[PKCS7,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]
+
+site::profile::apache::htdigest:
+  server:
+    www: ENC[PKCS7,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]
+
+site::profile::ruby_passenger::projects:
+  transporter-topdeal:
+    servername: test-www-mbvd-transporter-topdeal-de.pixelpark.net
+    ssl_cert: '/etc/pki/tls/certs/wildcard.pixelpark.net-cert.pem'
+    ssl_key: '/etc/pki/tls/private/wildcard.pixelpark.net-key.pem'
+    ssl_chain: '/etc/pki/tls/certs/wildcard.pixelpark.net-cert.pem'
+    passenger_user: topdeal
+    passenger_app_env: stage
+    # for capistrano deployment
+    approot: /var/www/transporter-topdeal/current
+    manage_approot: false
+    directories:
+      - directory_root:
+        provider: directory
+        path: '/var/www/transporter-topdeal/current/public'
+        options:
+          - FollowSymLinks
+          - MultiViews
+        allow_override:
+          - All
+        directoryindex: index.php index.html
+      - location1:
+        provider: location
+        path: '/'
+        auth_type: Digest
+        auth_name: server
+        auth_digest_provider: file
+        auth_digest_algorithm: MD5
+        auth_user_file: '/etc/httpd/htdigest'
+        auth_require: 'valid-user'
diff --git a/customer/mbvd-transporter-topdeal/www-mbvd-transporter-topdeal-de.pixelpark.net.yaml b/customer/mbvd-transporter-topdeal/www-mbvd-transporter-topdeal-de.pixelpark.net.yaml
new file mode 100644 (file)
index 0000000..dbc161a
--- /dev/null
@@ -0,0 +1,32 @@
+---
+mysql::server::root_password: ENC[PKCS7,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]
+mysql::server::backup::backuppassword: ENC[PKCS7,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]
+site::profile::mysql_server::databases:
+  topdeal:
+    user: topdeal
+    password: ENC[PKCS7,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]
+
+site::profile::ruby_passenger::projects:
+  transporter-topdeal:
+    servername: www.transporter-topdeal.de
+    serveraliases:
+      - transporter-topdeal.de
+      - www-mbvd-transporter-topdeal-de.pixelpark.net
+    ssl_cert: '/etc/pki/tls/certs/wildcard.pixelpark.net-cert.pem'
+    ssl_key: '/etc/pki/tls/private/wildcard.pixelpark.net-key.pem'
+    ssl_chain: '/etc/pki/tls/certs/wildcard.pixelpark.net-cert.pem'
+    passenger_user: topdeal
+    passenger_app_env: live
+    # for capistrano deployment
+    approot: /var/www/transporter-topdeal/current
+    manage_approot: false
+    directories:
+      - directory_root:
+        provider: directory
+        path: '/var/www/transporter-topdeal/current/public'
+        options:
+          - FollowSymLinks
+          - MultiViews
+        allow_override:
+          - None
+        directoryindex: index.html
diff --git a/customer/mbvd/aktion-mercedes-benz-de.pixelpark.net.yaml b/customer/mbvd/aktion-mercedes-benz-de.pixelpark.net.yaml
new file mode 100644 (file)
index 0000000..4c3c2b5
--- /dev/null
@@ -0,0 +1,2 @@
+---
+site::role: base
diff --git a/customer/mbvd/db-mb.pixelpark.net.yaml b/customer/mbvd/db-mb.pixelpark.net.yaml
new file mode 100644 (file)
index 0000000..fc6c7ac
--- /dev/null
@@ -0,0 +1,17 @@
+---
+site::role: base
+site::additional_classes:
+  - site::profile::mysql_server
+  - logstash
+
+mysql::server::override_options:
+  mysqld:
+    bind-address: 0.0.0.0
+
+mysql::server::root_password: ENC[PKCS7,MIIBiQYJKoZIhvcNAQcDoIIBejCCAXYCAQAxggEhMIIBHQIBADAFMAACAQEwDQYJKoZIhvcNAQEBBQAEggEACqntXBpJsjoXINeIPuZfETvU5RLLqCUCLkWXddHtNptAO1BAUIp846T1WuRHDTiEhoZSSNZy9B8GInpzkz/q5FH9R+NrLGkwaN0aonvkCFGb4H007hSe1MuvXmTOYSmBinTH5uu6sxZCP4vxAC/vCFCKVXrz5sgx3KEylYDdAAHryz743yy93CBF+SkuAH4vqV5JJlRrxLosHaBe3BFZHjp+r/uKy25NgK332lbV0pTRqbSzrBBxllCE64fTkp00WOCG6tcPUXH1rpt/3F45tEoyM61s9nb/aMZDC9m+agBssgcuBhPWc0y9K/UxD50K2Ey55gRffo7aHymYfZN4lDBMBgkqhkiG9w0BBwEwHQYJYIZIAWUDBAEqBBCFAbDFES5ZARfmRlySUBrsgCAVe0jjFFrLKfmKWGwcDMk/y9o7+24as5LIKxuJyljHgQ==]
+mysql::server::backup::backuppassword: ENC[PKCS7,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]
+site::profile::mysql_server::databases:
+  quiz_onlinestore:
+    user: quiz_onlinestore
+    password: ENC[PKCS7,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]
+    host: 77.74.234.67
diff --git a/customer/mbvd/int-db-mb.pixelpark.net.yaml b/customer/mbvd/int-db-mb.pixelpark.net.yaml
new file mode 100644 (file)
index 0000000..24507a1
--- /dev/null
@@ -0,0 +1,17 @@
+---
+site::role: base
+site::additional_classes:
+  - site::profile::mysql_server
+  - logstash
+
+mysql::server::override_options:
+  mysqld:
+    bind-address: 0.0.0.0
+
+mysql::server::root_password: ENC[PKCS7,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]
+mysql::server::backup::backuppassword: ENC[PKCS7,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]
+site::profile::mysql_server::databases:
+  quiz_onlinestore:
+    user: quiz_onlinestore
+    password: ENC[PKCS7,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]
+    host: 77.74.234.68
\ No newline at end of file
diff --git a/customer/mbvd/int-odt-daimler-com.pixelpark.net.yaml b/customer/mbvd/int-odt-daimler-com.pixelpark.net.yaml
new file mode 100644 (file)
index 0000000..b9d0343
--- /dev/null
@@ -0,0 +1,93 @@
+---
+site::role: base
+site::additional_classes:
+  - site::profile::mongodb_server
+  - site::profile::apache
+  - apache::mod::proxy_ajp
+  - logstash
+
+logstash::filter:
+  - openemm
+
+logstash::generic_resource:
+  openemm-core:
+    resource: file
+    order: 10 # Input
+    parameters:
+      path: '/home/openemm/logs/openemm/openemm_core.log'
+      type: EMM-INT-Core
+      tags:
+        - "%{customer}"
+        - "%{tier}"
+  openemm-data:
+    resource: file
+    order: 10 # Input
+    parameters:
+      path: '/home/openemm/logs/openemm/openemm_data.log'
+      type: EMM-INT-Webservice
+      tags:
+        - "%{customer}"
+        - "%{tier}"
+
+mongodb::globals::manage_package_repo: true
+mongodb::globals::version: 2.6.10-1
+mongodb::globals::bind_ip: 0.0.0.0
+mongodb::globals::repo_location: 'http://repo.pixelpark.com/Linux/yum/mongodb/7/RPMS/'
+mongodb::server::auth: false
+mongodb::server::dbpath: '/srv/mongodb'
+site::profile::mongodb_server::databases:
+  admin:
+    user: admin
+    password: ENC[PKCS7,MIIBeQYJKoZIhvcNAQcDoIIBajCCAWYCAQAxggEhMIIBHQIBADAFMAACAQEwDQYJKoZIhvcNAQEBBQAEggEArc0xBD1X+zcFnkBanU2stIBUHBs3LbuhHSG9fN1IuSvozye0Yg+sA/kgcF+ULDYm9vZRF+u1kNcxaMVR0LiUPYSa2W0n5Db1tSTgqoQuGK+2bfpXdWCCfBXwcmXPkpdeeyeEB+yXsW1OYQBAL1pmvPSz3TzyF/2jpqgPAiicSp1xsAdmsOk7gkUUEms9LExcoi4zp8tTzBnhP5Q6XG12ZeHrEz9djanXBf0O2aWyVZM5DQQLKm9Pl574HfuwnvUCJJhsVy8W8WgciYJgFaCLTupogx7it31bGMHXbogA5BMt0CdW2t8MazPuVWvT0NOFHLaCaZm/vo3qz+XAlCSvJTA8BgkqhkiG9w0BBwEwHQYJYIZIAWUDBAEqBBDgOagHmNQtdRhR3xktAup+gBDABSJBFGOrv1XhCAmlQJ6J]
+    roles: root
+  handraising:
+    user: handraising
+    password: ENC[PKCS7,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]
+    roles: readWrite
+
+accounts::users:
+  christian.heggemann:
+    apply: true
+    sudo: true
+  annika.wenzel:
+    apply: true
+    sudo: true
+  deploy.vogel:
+    apply: true
+    sudo: true
+  samuel.bufe:
+    apply: true
+    sudo: true
+
+apache::default_vhost: false
+apache::mpm_module: worker
+
+site::profile::apache::vhosts:
+  int-odt-daimler-com:
+    docroot: /srv/www/int-odt-daimler-com
+    servername: int-odt-daimler-com.pixelpark.net
+    port: 80
+    ip: 93.188.107.227
+    docroot_owner: root
+    docroot_group: root
+    proxy_preserve_host: On
+    proxy_pass:
+      - { path: /server-status, url: '!' }
+      - { path: /server-info, url: '!' }
+      - { path: /, url: 'ajp://localhost:8009/' }
+  int-odt-daimler-com_ssl:
+    docroot: /srv/www/int-odt-daimler-com
+    servername: int-odt-daimler-com.pixelpark.net
+    port: 443
+    ssl: true
+    ssl_cert: '/etc/pki/tls/certs/wildcard.pixelpark.net-cert.pem'
+    ssl_key: '/etc/pki/tls/private/wildcard.pixelpark.net-key.pem'
+    ssl_ca: '/etc/pki/tls/certs/wildcard.pixelpark.net-cert.pem'
+    ip: 93.188.107.227
+    docroot_owner: root
+    docroot_group: root
+    proxy_preserve_host: On
+    proxy_pass:
+      - { path: /server-status, url: '!' }
+      - { path: /server-info, url: '!' }
+      - { path: /, url: 'ajp://localhost:8009/' }
diff --git a/customer/mbvd/odt02-daimler-com.pixelpark.net.yaml b/customer/mbvd/odt02-daimler-com.pixelpark.net.yaml
new file mode 100644 (file)
index 0000000..74a0e7e
--- /dev/null
@@ -0,0 +1,62 @@
+---
+site::role: base
+site::additional_classes:
+  - site::profile::mongodb_server
+  - mongodb::globals
+  - site::profile::apache
+  - apache::mod::proxy_ajp
+
+mongodb::globals::manage_package_repo: true
+mongodb::globals::version: 3.0.6-1.el7
+mongodb::globals::bind_ip: 0.0.0.0
+mongodb::globals::repo_location: 'https://repo.pixelpark.com/Linux/yum/mongodb/7/RPMS/'
+mongodb::server::auth: false
+mongodb::server::dbpath: '/srv/mongodb'
+site::profile::mongodb_server::databases:
+  admin:
+    user: admin
+    password: ENC[PKCS7,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]
+    roles: root
+  handraising:
+    user: handraising
+    password: ENC[PKCS7,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]
+    roles: dbAdmin
+
+accounts::users:
+  christian.heggemann:
+    apply: true
+  annika.wenzel:
+    apply: true
+
+apache::default_vhost: false
+apache::mpm_module: worker
+
+site::profile::apache::vhosts:
+  odt.daimler.com:
+    docroot: /srv/www/odt.daimler.com
+    servername: odt.daimler.com
+    port: 80
+    ip: 93.188.107.216
+    docroot_owner: root
+    docroot_group: root
+    proxy_preserve_host: On
+    proxy_pass:
+      - { path: /server-status, url: '!' }
+      - { path: /server-info, url: '!' }
+      - { path: /, url: 'ajp://localhost:8009/' }
+  odt.daimler.com_ssl:
+    docroot: /srv/www/odt.daimler.com
+    servername: odt.daimler.com
+    port: 443
+    ssl: true
+    ssl_cert: '/etc/pki/tls/certs/wildcard.pixelpark.net-cert.pem'
+    ssl_key: '/etc/pki/tls/private/wildcard.pixelpark.net-key.pem'
+    ssl_ca: '/etc/pki/tls/certs/wildcard.pixelpark.net-cert.pem'
+    ip: 93.188.107.216
+    docroot_owner: root
+    docroot_group: root
+    proxy_preserve_host: On
+    proxy_pass:
+      - { path: /server-status, url: '!' }
+      - { path: /server-info, url: '!' }
+      - { path: /, url: 'ajp://localhost:8009/' }
diff --git a/customer/mbvd/servicevorteilskarte02-mercedes-benz-de.pixelpark.net.yaml b/customer/mbvd/servicevorteilskarte02-mercedes-benz-de.pixelpark.net.yaml
new file mode 100644 (file)
index 0000000..9069a96
--- /dev/null
@@ -0,0 +1,45 @@
+---
+site::role: symfony
+site::additional_classes:
+  - logstash
+  - apache::mod::headers
+
+accounts::users:
+  jonas.willingstorfer:
+    apply: true
+    sudo: false
+
+mysql::server::root_password: ENC[PKCS7,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]
+mysql::server::backup::backuppassword: ENC[PKCS7,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]
+site::profile::mysql_server::databases:
+  svk:
+    user: svk
+    password: ENC[PKCS7,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]
+
+repo::remi_php55: true
+
+apache::mpm_module: event
+apache::default_vhost: false
+
+site::profile::symfony::projects:
+  'servicevorteilskarte':
+    servername: servicevorteilskarte-mercedes-benz-de.pixelpark.net
+    group: pixel
+    docroot: '/srv/www/servicevorteilskarte/web'
+    ssl_cert: '/etc/pki/tls/certs/wildcard.pixelpark.net-cert.pem'
+    ssl_key: '/etc/pki/tls/private/wildcard.pixelpark.net-cert.pem'
+    ssl_chain: '/etc/pki/tls/certs/wildcard.pixelpark.net-cert.pem'
+
+php::settings:
+  Date/date.timezone: Europe/Berlin
+  PHP/expose_php: 'Off'
+
+php::fpm::pools:
+  www:
+    ensure: absent
+
+php::extensions:
+  mysqlnd: {}
+  xml: {}
+  mbstring: {}
+  opcache: {}
diff --git a/customer/mbvd/stage-classicpartner-suche-mercedes-benz-de.pixelpark.net.yaml b/customer/mbvd/stage-classicpartner-suche-mercedes-benz-de.pixelpark.net.yaml
new file mode 100644 (file)
index 0000000..4c3c2b5
--- /dev/null
@@ -0,0 +1,2 @@
+---
+site::role: base
diff --git a/customer/mbvd/stage-servicevorteilskarte02-mercedes-benz-de.pixelpark.net.yaml b/customer/mbvd/stage-servicevorteilskarte02-mercedes-benz-de.pixelpark.net.yaml
new file mode 100644 (file)
index 0000000..33a3b1a
--- /dev/null
@@ -0,0 +1,44 @@
+---
+accounts::users:
+  jonas.willingstorfer:
+    apply: true
+    sudo: false
+
+site::role: symfony
+site::additional_classes:
+  - logstash
+
+repo::remi_php55: true
+
+mysql::server::root_password: ENC[PKCS7,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]
+mysql::server::backup::backuppassword: ENC[PKCS7,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]
+site::profile::mysql_server::databases:
+  svk:
+    user: svk
+    password: ENC[PKCS7,MIIBiQYJKoZIhvcNAQcDoIIBejCCAXYCAQAxggEhMIIBHQIBADAFMAACAQEwDQYJKoZIhvcNAQEBBQAEggEAV6JPyBZGxsapqIyAolQ19On8500q5AwbMTEtUTs+TFUvOk+mpPWNND9q6PxRN2cImwqzTt7X+WPcnvuqdjxEtKmoB3FelzLm5DJMmMAuhPy2N7lJcfs3a6NBi9zxoshNoqVG23qMJ8TgKq4UZHncL12hgj+d7KmavJ6PuJzFVJmEI+/yaCOcw1vklUD35VainLLWtpFdc2aquhMn0SQDtw1SqskAaieKdh9r3Bp7HLFYyjZNznW9czFM0ejJnPD8AdMM1Xsvfldb6yZlO1EJUE0ersk7sU7mufZsaEHfZeubGFvsmQ3K6p+5ZX5YSD10CB3iKYmEgahYcfPSbrjyHTBMBgkqhkiG9w0BBwEwHQYJYIZIAWUDBAEqBBDRt0zgkJruNQ8lxaYZ/U9UgCBin26TiINwsWswMdKe0Tj4d0+yRfw6Wp3bfCFgMirY8Q==]
+
+apache::mpm_module: event
+apache::default_vhost: false
+
+site::profile::symfony::projects:
+  'servicevorteilskarte':
+    servername: stage-servicevorteilskarte-mercedes-benz-de.pixelpark.net
+    group: pixel
+    docroot: '/srv/www/servicevorteilskarte/web'
+    ssl_cert: '/etc/pki/tls/certs/wildcard.pixelpark.net-cert.pem'
+    ssl_key: '/etc/pki/tls/private/wildcard.pixelpark.net-cert.pem'
+    ssl_chain: '/etc/pki/tls/certs/wildcard.pixelpark.net-cert.pem'
+
+php::settings:
+  Date/date.timezone: Europe/Berlin
+  PHP/expose_php: 'Off'
+
+php::fpm::pools:
+  www:
+    ensure: absent
+
+php::extensions:
+  mysqlnd: {}
+  xml: {}
+  mbstring: {}
+  opcache: {}
diff --git a/customer/mbvd/web01-prototyp-mbvd-de.pixelpark.net.yaml b/customer/mbvd/web01-prototyp-mbvd-de.pixelpark.net.yaml
new file mode 100644 (file)
index 0000000..6170bd4
--- /dev/null
@@ -0,0 +1,85 @@
+---
+site::role: base
+site::additional_classes:
+  - nodejs
+  - logstash
+  - site::profile::apache
+  
+accounts::users:
+  erik.wendt:
+    apply: true
+    sudo: true
+  annika.wenzel:
+    apply: true
+    sudo: true
+  deploy.vogel:
+    apply: true
+    sudo: true
+    group: apache
+
+apache::default_vhost: false
+apache::mpm_module: worker
+
+site::profile::apache::vhosts:
+  prototyp-mbvd-de:
+    docroot: /srv/www/prototyp-mbvd-de
+    servername: web01-prototyp-mbvd-de.pixelpark.net
+    port: 80
+    ip: 77.74.238.22
+    docroot_owner: deploy.vogel
+    docroot_group: root
+    docroot_mode: '0755'
+    directories:
+      - directory_root:
+        provider: directory
+        path: '/srv/www/prototyp-mbvd-de'
+        options:
+          - FollowSymLinks
+          - MultiViews
+        allow_override:
+          - All
+      - location_root:
+        provider: location
+        path: '/'
+        auth_type: Digest
+        auth_name: pixelrealm
+        auth_digest_provider: file
+        auth_digest_algorithm: MD5
+        auth_user_file: '/etc/httpd/htdigest'
+        auth_require: 'valid-user'
+        # www : xIgfMKOWpzgCAKR3
+    proxy_pass:
+      - { path: /, url: 'http://%{fqdn}:3000/' }
+
+  prototyp-mbvd-de_ssl:
+    docroot: /srv/www/prototyp-mbvd-de
+    servername: web01-prototyp-mbvd-de.pixelpark.net
+    port: 443
+    ssl: true
+    ssl_cert: '/etc/pki/tls/certs/wildcard.pixelpark.net-cert.pem'
+    ssl_key: '/etc/pki/tls/private/wildcard.pixelpark.net-key.pem'
+    ssl_ca: '/etc/pki/tls/certs/wildcard.pixelpark.net-cert.pem'
+    ip: 77.74.238.22
+    docroot_owner: root
+    docroot_group: root
+    directories:
+      - directory_root:
+        provider: directory
+        path: '/srv/www/prototyp-mbvd-de'
+        options:
+          - FollowSymLinks
+          - MultiViews
+        allow_override:
+          - All
+      - location_root:
+        provider: location
+        path: '/'
+        auth_type: Digest
+        auth_name: pixelrealm
+        auth_digest_provider: file
+        auth_digest_algorithm: MD5
+        auth_user_file: '/etc/httpd/htdigest'
+        auth_require: 'valid-user'
+        # www : xIgfMKOWpzgCAKR3
+    proxy_pass:
+      - { path: /, url: 'http://%{fqdn}:3000/' }
\ No newline at end of file
diff --git a/customer/mbvd/www-mb-kampagnen-de.pixelpark.net.yaml b/customer/mbvd/www-mb-kampagnen-de.pixelpark.net.yaml
new file mode 100644 (file)
index 0000000..067fbe1
--- /dev/null
@@ -0,0 +1,50 @@
+---
+site::additional_classes:
+  - accounts
+
+accounts::users:
+  deploy.vogel:
+    uid: 60115
+    apply: true
+    group: httpd
+  marcel.gast:
+    apply: true
+  florian.schade:
+    apply: true
+  dennis.klein:
+    apply: true
+  harry.teuber:
+    apply: true
+  m_scholze:
+    apply: true
+  dirk-peter.krause:
+    apply: true
+  marcel.rettkowski:
+    apply: true
+  sten.friedrich:
+    apply: true
+  tim.schroeder:
+    uid: 30010
+    apply: true
+  sandra.streimelweger:
+    apply: true
+  christian.melsa:
+    apply: true
+  anne.gudurat:
+    apply: true
+  katrin.otto:
+    apply: true
+  franzisca.beier:
+    apply: true
+  franziska.jahnke:
+    apply: true
+  claudia.schlichting:
+    apply: true
+  rene.berger:
+    apply: true
+  leo.noack:
+    apply: true
+  marie.kopplin:
+    apply: true
+  stefan.goerlitz:
+    apply: true
\ No newline at end of file
diff --git a/customer/medperts-com/db01-medperts-com.pixelpark.net.yaml b/customer/medperts-com/db01-medperts-com.pixelpark.net.yaml
new file mode 100644 (file)
index 0000000..31e2ee1
--- /dev/null
@@ -0,0 +1,13 @@
+---
+site::role: base_for_old_systems
+site::additional_classes:
+  - accounts
+#  - pp_postgresql::replication
+#  - pp_postgresql::backup
+#  - pp_postgresql
+#  - www_tree
+#  - xymon::check::postgresql
+#  - liferay::database::postgresql
+#  - liferay::database::postgresql::jackrabbit
+
+postgresql::server::listen_addresses: 93.188.106.28
\ No newline at end of file
diff --git a/customer/medperts-com/db02-medperts-com.pixelpark.net.yaml b/customer/medperts-com/db02-medperts-com.pixelpark.net.yaml
new file mode 100644 (file)
index 0000000..afb6dc8
--- /dev/null
@@ -0,0 +1,10 @@
+---
+site::role: base_for_old_systems
+site::additional_classes:
+  - accounts
+#  - xymon::check::postgresql
+#  - pp_postgresql::replication
+#  - pp_postgresql
+
+postgresql::server::listen_addresses: 93.188.106.38
+postgresql::server::needs_initdb: false
diff --git a/customer/medperts-com/dev-medperts-com.pixelpark.com.yaml b/customer/medperts-com/dev-medperts-com.pixelpark.com.yaml
new file mode 100644 (file)
index 0000000..7f9efa8
--- /dev/null
@@ -0,0 +1,26 @@
+---
+site::role: base
+site::additional_classes:
+  - nutch::indexer::solr
+  - liferay::app_server::tomcat
+  - solr::app_server::tomcat
+#  - pp_postgresql
+  - tomcat2
+  - liferay::config
+#  - liferay::database::postgresql
+  - httpd
+  - liferay::indexer::solr
+  - liferay::config::solr
+  - liferay
+  - pp_mcollective
+  - liferay::webserver::apache
+  - liferay::deploy
+  - nutch
+  - nutch::job::cron
+  - solr::config
+  - solr
+  - logstash
+#  - liferay::database::postgresql::jackrabbit
+#  - pp_postgresql::backup
+  - liferay::config::jackrabbit
+
diff --git a/customer/medperts-com/development.yaml b/customer/medperts-com/development.yaml
new file mode 100644 (file)
index 0000000..78d173d
--- /dev/null
@@ -0,0 +1,225 @@
+---
+accounts::users:
+  m_scholze:
+    apply: true
+    sudo: true
+  kim.kunc:
+    apply: true
+    sudo: true
+  florian.schade:
+    apply: true
+    sudo: true
+  annika.wenzel:
+    apply: true
+    sudo: true
+  ivan.prikhodko:
+    apply: true
+    sudo: true
+
+liferay::app_server::tomcat::site_name: 'dev-medperts-com.pixelpark.com'
+liferay::app_server::tomcat::bind_host: '77.74.232.90'
+liferay::app_server::tomcat::shutdown_port: 8005
+liferay::app_server::tomcat::jmx_enabled: true
+liferay::app_server::tomcat::jmx_authenticate: false
+liferay::app_server::tomcat::jmx_ssl: false
+liferay::app_server::tomcat::jmx_registry_port: 8050
+liferay::app_server::tomcat::jmx_server_port: 8051
+liferay::app_server::tomcat::jmx_ip: 77.74.232.90
+#liferay::app_server::tomcat::log4j_properties:
+#  prop1:
+#    setting: log4j.appender.CATALINA.File
+#    value: /www/logs/tomcat/liferay/tomcat-only.log
+#  prop2:
+#    setting: log4j.appender.PORTAL.file
+#    value: /www/logs/tomcat/liferay/portal.log
+liferay::app_server::tomcat::version_conf_opts:
+  - '-Dlog4j.configuration=file:/www/data/liferay/config/log4j.xml'
+liferay::webserver::apache::host_servername: dev-medperts-com.pixelpark.com
+liferay::webserver::apache::proxy_pass:
+  - { path: /, url: 'ajp://%{fqdn}:8080/' }
+liferay::webserver::apache::headers:
+  - 'add Access-Control-Allow-Origin "*"'
+liferay::webserver::apache::ssl: true
+liferay::webserver::apache::ssl_cert: /www/conf/certs/wildcard.pixelpark.com-cert.pem
+liferay::webserver::apache::ssl_key: /www/conf/certs/wildcard.pixelpark.com-cert.pem
+liferay::webserver::apache::ssl_ca: /www/conf/certs/wildcard.pixelpark.com-cert.pem
+liferay::webserver::apache::headers:
+  - "add X-UA-Compatible IE=Edge"
+liferay::config::ext_portal_properties:
+  passwords.encryption.algorithm:
+    value: 'PBKDF2WithHmacSHA1/160/128000'
+  jdbc.default.driverClassName:
+    value: org.postgresql.Driver
+  jdbc.default.url:
+    value: jdbc:postgresql://dev-medperts-com.pixelpark.com:5432/medperts_com_liferay
+  jdbc.default.username:
+    value: medperts_com
+  jdbc.default.password:
+    value: ENC[PKCS7,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]
+
+httpd::webserver:
+  dev-medperts-com.pixelpark.com:
+    modules:
+      - proxy_ajp
+    listens:
+      - 0.0.0.0:80
+      - 0.0.0.0:443
+    extendedStatus: true
+      
+postgresql::server::listen_addresses: "*"
+postgresql::server::ipv4acls:
+  - "host medperts_com_liferay medperts_com 77.74.232.90/32 md5" # BBraun Dev Netz
+  - "host medperts_com_liferay medperts_com 217.66.51.0/24 md5"  # Admin Netz
+  - "host medperts_com_liferay medperts_com 217.66.50.0/24 md5"  # Entwickler Netz
+  - "host medperts_com_liferay medperts_com 217.66.56.0/24 md5"  # VPN Netz
+  - "host medperts_com_jackrabbit medperts_com_jr 77.74.232.90/32 md5" # BBraun Dev Netz
+  - "host medperts_com_jackrabbit medperts_com_jr 217.66.51.0/24 md5"  # Admin Netz
+  - "host medperts_com_jackrabbit medperts_com_jr 217.66.50.0/24 md5"  # Entwickler Netz
+  - "host medperts_com_jackrabbit medperts_com_jr 217.66.56.0/24 md5"  # VPN Netz
+
+liferay::database::postgresql::password: ENC[PKCS7,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]
+liferay::database::postgresql::dbname: medperts_com_liferay
+liferay::database::postgresql::user: medperts_com
+liferay::database::postgresql::jackrabbit::password: ENC[PKCS7,MIIBiQYJKoZIhvcNAQcDoIIBejCCAXYCAQAxggEhMIIBHQIBADAFMAACAQEwDQYJKoZIhvcNAQEBBQAEggEAMFuiHuAeiFSchxnBz4357FfL8Xys2ZE4ycHGPa4sRo0+ImYR5vThBlUdFMfmfZXARTOlJPvd+joAul+S1i1vj6jPDOTtzdFc7uQxjG6r2mq1uhPMT6Qg5k+j0z95BMCrPwMzmLkhP80k3TzZSmfKBJejrveHurOhtfd5ljjjb2eUT+rBnTosMH5TmIWQPJCCt47Euq4d4G9sHYH9uWs439dv2PGGdcdtbXKJfv5d/8e7WTlNirhLW7GcF25JvHvXl/BE3qT9NFyXBD2UGCqfDao9ol4h644Z5FMXCtMgrNMMedyDqFcXXVfSnsENu7LIhvzRjzckjfStxx5j8H4t2TBMBgkqhkiG9w0BBwEwHQYJYIZIAWUDBAEqBBCtdsYk83lHbjSZk97iCMQXgCASm4stHTzhTZg3hVEKtDtAXPlEHW0q2yX4iOFPavC2Zg==]
+liferay::database::postgresql::jackrabbit::user: medperts_com_jr
+liferay::database::postgresql::jackrabbit::dbname: medperts_com_jackrabbit
+
+
+liferay::config::jackrabbit::database_connection: jdbc:postgresql://dev-medperts-com.pixelpark.com:5432/medperts_com_jackrabbit
+liferay::config::jackrabbit::password: ENC[PKCS7,MIIBiQYJKoZIhvcNAQcDoIIBejCCAXYCAQAxggEhMIIBHQIBADAFMAACAQEwDQYJKoZIhvcNAQEBBQAEggEAMFuiHuAeiFSchxnBz4357FfL8Xys2ZE4ycHGPa4sRo0+ImYR5vThBlUdFMfmfZXARTOlJPvd+joAul+S1i1vj6jPDOTtzdFc7uQxjG6r2mq1uhPMT6Qg5k+j0z95BMCrPwMzmLkhP80k3TzZSmfKBJejrveHurOhtfd5ljjjb2eUT+rBnTosMH5TmIWQPJCCt47Euq4d4G9sHYH9uWs439dv2PGGdcdtbXKJfv5d/8e7WTlNirhLW7GcF25JvHvXl/BE3qT9NFyXBD2UGCqfDao9ol4h644Z5FMXCtMgrNMMedyDqFcXXVfSnsENu7LIhvzRjzckjfStxx5j8H4t2TBMBgkqhkiG9w0BBwEwHQYJYIZIAWUDBAEqBBCtdsYk83lHbjSZk97iCMQXgCASm4stHTzhTZg3hVEKtDtAXPlEHW0q2yX4iOFPavC2Zg==]
+liferay::config::jackrabbit::user: medperts_com_jr
+
+
+liferay::config::solr::solr_url: "http://dev-medperts-com.pixelpark.com:8983/solr/liferay-core"
+
+liferay::deploy::package_names_hot:
+  - PP-medperts-war-dev
+liferay::deploy::package_names_cold:
+  - PP-medperts-conf-dev
+  - PP-medperts-lr-conf-dev
+  - PP-medperts-lib-dev
+liferay::deploy::version_hot: latest
+liferay::deploy::version_cold: latest
+liferay::deploy::cleanup_commands:
+  - '/usr/bin/find /www/tmp -user liferay -exec rm -rf {} \;'
+  - '/usr/bin/rm -rf /www/sites/liferay_webapps/medperts-com-*'
+  - '/usr/bin/rm -rf /www/conf/tomcat/liferay/work/Catalina'
+liferay::deploy::ini_setting:
+  email:
+    path: '/www/data/liferay/config/portal.properties'
+    setting: 'registration.activation.admin.email'
+    value: 'bettina.hartlich@pixelpark.com'
+    section: ''
+  doccheck.loginid:
+    path: '/www/data/liferay/config/portal.properties'
+    setting: 'doccheck.loginid'
+    value: '2000000006699'
+    section: ''
+  doccheck.cipherkey:
+    path: '/www/data/liferay/config/portal.properties'
+    setting: 'doccheck.cipherkey'
+    value: ENC[PKCS7,MIIBmQYJKoZIhvcNAQcDoIIBijCCAYYCAQAxggEhMIIBHQIBADAFMAACAQEwDQYJKoZIhvcNAQEBBQAEggEAttCmejsRm+74Az3PHZ5IK03rvWf2QOcd6tDjTtVx3TTuvoeSH5/x67N4+CLx7qkCyAv4aIZLK8wlWS72O5DruPRKdA8t5ONTiRsjux5r/2ewcgzUEU4SnGqX73KM93JXHS2Ymxf2d2eobng/IPUpibJvZFDpfUHnJ179hrEuAk8fxnP07m9nLdi1sqp1LfrQsH8Tph/Sjvyz8hgEcG3W6FVd7BKyOw9Tyhi/JAm+qyHRaBzH4gN/tF8NCBvK1SWPGo8L9uiQj23bzcL0jcLVljlrjIGa4mvY1xKPzzdkLsrTYUfo++P3m0WwXI3W4FBnixS3eywmcdcKcA65WsJz7TBcBgkqhkiG9w0BBwEwHQYJYIZIAWUDBAEqBBCM6mWfc/3XgHMdFJ1yl6RDgDD+8XVtdLl+2lpjbWoQYAQOh9MQ79OsAoMRo20TDofIrk2dUxjrhIuxALroIA3s/gs=]
+    section: ''
+
+liferay::indexer::solr::schema_source: /www/data/solr/pp-config/schema.xml
+liferay::indexer::solr::opt_package: PP-medperts-solr-conf-dev
+liferay::indexer::solr::opt_package_version: latest
+liferay::indexer::solr::version: 4.10.2
+
+solr::app_server::tomcat::shutdown_port: 8006
+solr::app_server::tomcat::site_name: 'dev-medperts-com.pixelpark.com'
+solr::app_server::tomcat::libs:
+  jcl-over-slf4j-1.7.6:
+    instance: solr
+    source: /www/apps/solr/example/lib/ext/jcl-over-slf4j-1.7.6.jar
+  jul-to-slf4j-1.7.6:
+    instance: solr
+    source: /www/apps/solr/example/lib/ext/jul-to-slf4j-1.7.6.jar
+  log4j-1.2.17:
+    instance: solr
+    source: /www/apps/solr/example/lib/ext/log4j-1.2.17.jar
+  slf4j-api-1.7.6:
+    instance: solr
+    source: /www/apps/solr/example/lib/ext/slf4j-api-1.7.6.jar
+  slf4j-log4j12-1.7.6:
+    instance: solr
+    source: /www/apps/solr/example/lib/ext/slf4j-log4j12-1.7.6.jar
+    
+postgresql::globals::validcon_script_path: "/www/tmp/valid_postgres_connection.sh"
+postgresql::globals::version: "9.3"
+
+pp_postgresql::backup::deleteAfterXDays: 20
+
+xymon::modules:
+  - 'net2'
+
+logstash::filter:
+  - tomcat
+logstash::drop_grokparsefailure: false
+
+logstash::generic_resource:
+  medperts_tomcat_liferay:
+    resource: file
+    order: 10 # Input
+    parameters:
+      path: /www/logs/tomcat/liferay/tomcat.out
+      type: tomcat
+      tags: 
+        - "%{customer}"
+        - "%{environment}"
+      codec:
+        type: multiline
+        what: previous
+        pattern: '(^\d+\serror)|(^.+Exception: .+)|(^\s+at .+)|(^\s+... \d+ more)|(^\s*Caused by:.+)'
+  medperts_dev_output:
+    condition: "if [loglevel] =='ERROR'"
+    resource: exec
+    order: 75 # output
+    parameters:
+      command: "/usr/sfw/bin/wget --post-data 'message=%%{ich-trickse}{message}' http://medperts-com-monitor.pixelpark.com/healthmonitor/DEV/addLogMessage/ -O /dev/null"
+      
+      
+nutch::seed_urls:
+  - 'http://www.awmf.org/leitlinien/leitlinien-suche/ll-ergebnis/liste/ll-seite/10/ll-erg/10.html?tx_szleitlinien_pi2[status]='
+nutch::regex_url_filter_rules:
+  - '-^(file|ftp|mailto):'
+  - '-\.(gif|GIF|jpg|JPG|png|PNG|ico|ICO|css|CSS|sit|SIT|eps|EPS|wmf|WMF|zip|ZIP|ppt|PPT|mpg|MPG|xls|XLS|gz|GZ|rpm|RPM|tgz|TGZ|mov|MOV|exe|EXE|jpeg|JPEG|bmp|BMP|js|JS)$'
+  - '-.*(/[^/]+)/[^/]+\1/[^/]+\1/'
+  - '+^http://([a-z0-9]*\.)*awmf.org/'
+  - '-.'
+nutch::job::cron::java_home: /www/apps/jdk7
+nutch::job::cron::curl: /usr/bin/curl
+nutch::job::cron::addtional_actions:
+  - '/usr/bin/curl -k "https://dev-medperts-com.pixelpark.com/medperts-com-reindexer/reindex_trigger?key=A8XFAxqOKHoPLkxDjN4T"'
+
+nutch::indexer::solr::version: '4.10.2'
+nutch::indexer::solr::custom_solrconfig_fragment: |
+  <requestHandler name="/guideline" class="solr.SearchHandler" >
+    <lst name="defaults">
+     <str name="defType">dismax</str>
+     <str name="fq">id:http*pdf</str>
+     <str name="qf">title^0.0 content^5.5</str>
+     <str name="pf">title^0.0 content^5.5</str>
+     <float name="tie">0.01</float>
+     <str name="q.alt">*:*</str>
+     <str name="hl.fl">title, content</str>
+     <str name="hl.fragmenter">regex</str>
+     <str name="mm">5&lt;90%</str>
+    </lst>
+  </requestHandler>
+
+liferay::indexer::solr::custom_solrconfig_fragment: |
+  <requestHandler name="/guideline" class="solr.SearchHandler" >
+    <lst name="defaults">
+     <str name="defType">dismax</str>
+     <str name="fq">portletId:GUIDELINE</str>
+     <str name="qf">title^2.0 content^1.0</str>
+     <str name="pf">title^2.0 content^1.0</str>
+     <float name="tie">0.01</float>
+     <str name="q.alt">*:*</str>
+     <str name="hl">true</str>
+     <str name="hl.fl">content</str>
+     <str name="hl.fragmenter">regex</str>
+     <str name="mm">2&lt;50%</str>
+    </lst>
+  </requestHandler>
diff --git a/customer/medperts-com/production.yaml b/customer/medperts-com/production.yaml
new file mode 100644 (file)
index 0000000..68fd4d0
--- /dev/null
@@ -0,0 +1,318 @@
+---
+accounts::users:
+  m_scholze:
+    apply: true
+    sudo: true
+  florian.schade:
+    apply: true
+
+liferay::app_server::tomcat::site_name: 'www.medperts.com'
+liferay::app_server::tomcat::shutdown_port: 8005
+#liferay::app_server::tomcat::log4j_properties:
+#  prop1:
+#    setting: log4j.appender.CATALINA.File
+#    value: /www/logs/tomcat/liferay/tomcat-only.log
+#  prop2:
+#    setting: log4j.appender.PORTAL.file
+#    value: /www/logs/tomcat/liferay/portal.log
+liferay::app_server::tomcat::version_conf_opts:
+  - '-Dlog4j.configuration=file:/www/data/liferay/config/log4j.xml'
+liferay::app_server::tomcat::max_heap: "3072m"
+liferay::app_server::tomcat::min_heap: "3072m"
+liferay::app_server::tomcat::min_perm: 512m
+liferay::app_server::tomcat::max_perm: 512m
+liferay::app_server::tomcat::jmx_enabled: true
+liferay::app_server::tomcat::jmx_authenticate: false
+liferay::app_server::tomcat::jmx_ssl: false
+liferay::app_server::tomcat::jmx_registry_port: 8050
+liferay::app_server::tomcat::jmx_server_port: 8051
+liferay::app_server::tomcat::enable_cluster: false
+liferay::webserver::apache::host_servername: www.medperts.com
+liferay::webserver::apache::custom_log_format: ls_apache_json_lb
+liferay::webserver::apache::enable_logstash: true
+liferay::webserver::apache::proxy_pass:
+  - { path: /google0d80a96f0ccd12a9.html, url: '!' }
+  - { path: /, url: 'ajp://%{fqdn}:8080/' }
+liferay::webserver::apache::headers:
+  - "unset Liferay-Portal"
+  - 'add Access-Control-Allow-Origin "*"'
+
+liferay::config::ext_portal_properties:
+  passwords.encryption.algorithm:
+    value: 'SHA'
+  jdbc.default.driverClassName:
+    value: org.postgresql.Driver
+  jdbc.default.url:
+    value: jdbc:postgresql://db01-medperts-com.pixelpark.net:5432/medperts_com_liferay
+  jdbc.default.username:
+    value: medperts_com
+  jdbc.default.password:
+    value: ENC[PKCS7,MIIBiQYJKoZIhvcNAQcDoIIBejCCAXYCAQAxggEhMIIBHQIBADAFMAACAQEwDQYJKoZIhvcNAQEBBQAEggEAif7R1gLtcadpF657kamDExZEE4tW1cAio5SNLgIUMQ11u554FfJNSA3mAzvTkZcFO1l9SyD5yDqOdjjC+4aWkUSSBNcCaxBeF9rbi7ZF5mHBPh7S6lcCjXjcC86y4hF+oiYURdAKIMUMXsYtHm7MEEGKUj8thfhHQ52dLRIgejS7QH+/KUzXmr5RXE2QqUthFGQryMqVls66bZPDYB0N5dERSlW1K2m3v9PMqi6bf+WNxsIa9R8ybOl6duKhTjr61bnHBhxPfSBvmI0ljzChHnkGGwDXjJv1muFRMMCwDo4yKAcV8oisQ2eyKD2NhwpB9wtZxR/6NvP48eVqvKa97zBMBgkqhkiG9w0BBwEwHQYJYIZIAWUDBAEqBBBVAx9BkEwK1e65uTFo9TCygCCX8ySz/RoMnE7VTF+rGEz9ZekvrYrydelPJf+Wxo69YQ==]
+  jdbc.default.maxPoolSize:
+    value: 20
+  jdbc.read.driverClassName:
+    value: org.postgresql.Driver
+  jdbc.read.url:
+    value: jdbc:postgresql://db02-medperts-com.pixelpark.net:5432/medperts_com_liferay
+  jdbc.read.username:
+    value: medperts_com
+  jdbc.read.password:
+    value: ENC[PKCS7,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]
+  jdbc.read.maxPoolSize:
+    value: 20
+  jdbc.write.driverClassName:
+    value: org.postgresql.Driver
+  jdbc.write.url:
+    value: jdbc:postgresql://db01-medperts-com.pixelpark.net:5432/medperts_com_liferay
+  jdbc.write.username:
+    value: medperts_com
+  jdbc.write.password:
+    value: ENC[PKCS7,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]
+  jdbc.write.maxPoolSize:
+    value: 20
+  spring.configs:
+    # Original
+  # value: 'META-INF/base-spring.xml,META-INF/hibernate-spring.xml,META-INF/infrastructure-spring.xml,META-INF/management-spring.xml,META-INF/util-spring.xml,META-INF/jpa-spring.xml,META-INF/executor-spring.xml,META-INF/audit-spring.xml,META-INF/cluster-spring.xml,META-INF/editor-spring.xml,META-INF/jcr-spring.xml,META-INF/ldap-spring.xml,META-INF/messaging-core-spring.xml,META-INF/messaging-misc-spring.xml,META-INF/mobile-device-spring.xml,META-INF/notifications-spring.xml,META-INF/poller-spring.xml,META-INF/rules-spring.xml,META-INF/scheduler-spring.xml,META-INF/search-spring.xml,META-INF/workflow-spring.xml,META-INF/counter-spring.xml,META-INF/mail-spring.xml,META-INF/portal-spring.xml,META-INF/portlet-container-spring.xml,META-INF/staging-spring.xml,META-INF/virtual-layouts-spring.xml,META-INF/monitoring-spring.xml,classpath*:META-INF/ext-spring.xml'
+    # Read/Write-Database
+    value: 'META-INF/base-spring.xml,META-INF/hibernate-spring.xml,META-INF/infrastructure-spring.xml,META-INF/management-spring.xml,META-INF/util-spring.xml,META-INF/jpa-spring.xml,META-INF/executor-spring.xml,META-INF/audit-spring.xml,META-INF/cluster-spring.xml,META-INF/editor-spring.xml,META-INF/jcr-spring.xml,META-INF/ldap-spring.xml,META-INF/messaging-core-spring.xml,META-INF/messaging-misc-spring.xml,META-INF/mobile-device-spring.xml,META-INF/notifications-spring.xml,META-INF/poller-spring.xml,META-INF/rules-spring.xml,META-INF/scheduler-spring.xml,META-INF/search-spring.xml,META-INF/workflow-spring.xml,META-INF/counter-spring.xml,META-INF/mail-spring.xml,META-INF/portal-spring.xml,META-INF/portlet-container-spring.xml,META-INF/staging-spring.xml,META-INF/virtual-layouts-spring.xml,META-INF/monitoring-spring.xml,META-INF/dynamic-data-source-spring.xml,classpath*:META-INF/ext-spring.xml'
+
+httpd::webserver:
+  www.medperts.com:
+    modules:
+      - proxy_ajp
+      - auth_digest
+      - authn_file
+    htpasswd:
+      - webaccess|Limitierung|Lglwm2014
+    extendedStatus: true
+      
+postgresql::server::ipv4acls:
+  - "host medperts_com_liferay medperts_com 93.188.106.0/25 md5" # BBraun Live Netz
+  - "host medperts_com_liferay medperts_com 217.66.51.0/24 md5" # Admin Netz
+  - "host medperts_com_liferay medperts_com 217.66.50.0/24 md5" # Entwickler Netz
+  - "host medperts_com_liferay medperts_com 217.66.56.0/24 md5" # VPN Netz
+  - "host medperts_com_jackrabbit medperts_com_jr 93.188.106.0/25 md5" # BBraun Live Netz
+  - "host medperts_com_jackrabbit medperts_com_jr 217.66.51.0/24 md5" # Admin Netz
+  - "host medperts_com_jackrabbit medperts_com_jr 217.66.50.0/24 md5" # Entwickler Netz
+  - "host medperts_com_jackrabbit medperts_com_jr 217.66.56.0/24 md5" # VPN Netz
+  - "host replication replication 93.188.106.0/25 trust"
+  - "host postgres xymon 93.188.106.0/25 trust"
+
+pp_postgresql::replication::master_server: db01-medperts-com.pixelpark.net
+pp_postgresql::replication::repl_user: replication
+pp_postgresql::replication::repl_password: ENC[PKCS7,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]
+# Debug logging
+#pp_postgresql::log_statement: all
+#pp_postgresql::log_destination: csvlog
+
+liferay::database::postgresql::password: ENC[PKCS7,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]
+liferay::database::postgresql::dbname: medperts_com_liferay
+liferay::database::postgresql::user: medperts_com
+liferay::database::postgresql::jackrabbit::password: ENC[PKCS7,MIIBiQYJKoZIhvcNAQcDoIIBejCCAXYCAQAxggEhMIIBHQIBADAFMAACAQEwDQYJKoZIhvcNAQEBBQAEggEAahtmr/1sElGkfYwu0iwQPTKszCKpwG+/U/GUr6h5CPwsvUN0VflgjU2esE8w+ErQn//YXVi5zolSI/Juhu9iTtmzNuPVD9bspXHHaC5HTvbB0NLuNtaepZKfYNG7zypWSThPPEeZX/oK0LE6LHDWlF1TJTg2+NRZpv2St9uE3r4+Az4393RlkfSq7woAe70YYZllfQy0LDgrfxRcwpb53nSsweuVPeKfkSibFKJQfOySTz/1km6Ci7d9Rx3+QSODLsOOvezfBRdVpTtmkdDm71OZfFLBJKdBXqzIJLyXH4t8lZ423KTR7aZQHzFB45MKBZSNpj5fGFxEBXU8wAM/3zBMBgkqhkiG9w0BBwEwHQYJYIZIAWUDBAEqBBAKwRGUt2JT7/WXzCmMNWBigCA9RVtLgpAj/kfVitjjpX3lfulQ0TILp0IPUPAGKjs4rg==]
+liferay::database::postgresql::jackrabbit::user: medperts_com_jr
+liferay::database::postgresql::jackrabbit::dbname: medperts_com_jackrabbit
+
+
+liferay::config::jackrabbit::database_connection: jdbc:postgresql://db01-medperts-com.pixelpark.net:5432/medperts_com_jackrabbit
+liferay::config::jackrabbit::password: ENC[PKCS7,MIIBiQYJKoZIhvcNAQcDoIIBejCCAXYCAQAxggEhMIIBHQIBADAFMAACAQEwDQYJKoZIhvcNAQEBBQAEggEAahtmr/1sElGkfYwu0iwQPTKszCKpwG+/U/GUr6h5CPwsvUN0VflgjU2esE8w+ErQn//YXVi5zolSI/Juhu9iTtmzNuPVD9bspXHHaC5HTvbB0NLuNtaepZKfYNG7zypWSThPPEeZX/oK0LE6LHDWlF1TJTg2+NRZpv2St9uE3r4+Az4393RlkfSq7woAe70YYZllfQy0LDgrfxRcwpb53nSsweuVPeKfkSibFKJQfOySTz/1km6Ci7d9Rx3+QSODLsOOvezfBRdVpTtmkdDm71OZfFLBJKdBXqzIJLyXH4t8lZ423KTR7aZQHzFB45MKBZSNpj5fGFxEBXU8wAM/3zBMBgkqhkiG9w0BBwEwHQYJYIZIAWUDBAEqBBAKwRGUt2JT7/WXzCmMNWBigCA9RVtLgpAj/kfVitjjpX3lfulQ0TILp0IPUPAGKjs4rg==]
+liferay::config::jackrabbit::user: medperts_com_jr
+liferay::config::jackrabbit::cluster: true
+
+liferay::config::solr::solr_url: "http://search-medperts-com.pixelpark.net:8983/solr/liferay-core"
+
+liferay::deploy::package_names_hot:
+  - PP-medperts-war
+liferay::deploy::package_names_cold:
+  - PP-medperts-conf
+  - PP-medperts-lr-conf
+  - PP-medperts-lib
+liferay::deploy::version_hot: present
+liferay::deploy::version_cold: present
+liferay::deploy::cleanup_commands:
+  - '/usr/bin/find /www/tmp -user liferay -exec rm -rf {} \;'
+  - '/usr/bin/rm -rf /www/sites/liferay_webapps/medperts-com-*'
+  - '/usr/bin/rm -rf /www/conf/tomcat/liferay/work/Catalina'
+liferay::deploy::ini_setting:
+  email:
+    path: '/www/data/liferay/config/portal.properties'
+    setting: 'registration.activation.admin.email'
+    value: 'redaktion.medperts@pixelpark.com'
+    section: ''
+  doccheck.loginid:
+    path: '/www/data/liferay/config/portal.properties'
+    setting: 'doccheck.loginid'
+    value: '2000000006814'
+    section: ''
+  doccheck.cipherkey:
+    path: '/www/data/liferay/config/portal.properties'
+    setting: 'doccheck.cipherkey'
+    value: ENC[PKCS7,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]
+    section: ''
+  piwik.site.id:
+    path: '/www/data/liferay/config/portal.properties'
+    setting: piwik.site.id
+    value: 6
+    section: ''
+  solr.search.guidelines.url:
+    path: '/www/data/liferay/config/portal.properties'
+    setting: 'solr.search.guidelines.url'
+    value: 'http\://search-medperts-com.pixelpark.net:8983/solr/guideline-core'
+    section: ''
+  solr.search.liferay.url:
+    path: '/www/data/liferay/config/portal.properties'
+    setting: 'solr.search.liferay.url'
+    value: 'http\://search-medperts-com.pixelpark.net:8983/solr/liferay-core'
+    section: ''
+  solr.search.liferay.master.url:
+    path: '/www/data/liferay/config/portal.properties'
+    setting: 'solr.search.liferay.master.url'
+    value: 'http\://search-medperts-com.pixelpark.net:8983/solr/liferay-core'
+    section: ''
+  aesculap.ws.url:
+    path: '/www/data/liferay/config/portal.properties'
+    setting: 'aesculap.ws.url'
+    value: 'https://admin.aesculap-academy.com/medpertsRest/allacademyevents'
+    section: ''
+
+liferay::indexer::solr::schema_source: /www/data/solr/pp-config/schema.xml
+liferay::indexer::solr::opt_package: PP-medperts-solr-conf
+liferay::indexer::solr::opt_package_version: present
+liferay::indexer::solr::version: 4.10.2
+
+solr::app_server::tomcat::enable_zookeeper: true
+solr::app_server::tomcat::shards: 1
+solr::app_server::tomcat::zookeeper_name: liferay_zoo_medperts_com
+solr::app_server::tomcat::zookeeper_conf_dir: liferay-core
+solr::app_server::tomcat::shutdown_port: 8006
+solr::app_server::tomcat::site_name: 'search-medperts-com.pixelpark.net'
+solr::app_server::tomcat::zookeeper_bind_port: 9983
+solr::app_server::tomcat::zookeeper_hosts:
+  - "search01-medperts-com.pixelpark.net:9983"
+  - "search02-medperts-com.pixelpark.net:9983"
+  - "search03-medperts-com.pixelpark.net:9983"
+solr::app_server::tomcat::libs:
+  jcl-over-slf4j-1.7.6:
+    instance: solr
+    source: /www/apps/solr/example/lib/ext/jcl-over-slf4j-1.7.6.jar
+  jul-to-slf4j-1.7.6:
+    instance: solr
+    source: /www/apps/solr/example/lib/ext/jul-to-slf4j-1.7.6.jar
+  log4j-1.2.17:
+    instance: solr
+    source: /www/apps/solr/example/lib/ext/log4j-1.2.17.jar
+  slf4j-api-1.7.6:
+    instance: solr
+    source: /www/apps/solr/example/lib/ext/slf4j-api-1.7.6.jar
+  slf4j-log4j12-1.7.6:
+    instance: solr
+    source: /www/apps/solr/example/lib/ext/slf4j-log4j12-1.7.6.jar
+
+
+xymon::modules:
+  - net2
+xymon::check::solr::members:
+  - "search01-medperts-com.pixelpark.net:8983"
+  - "search02-medperts-com.pixelpark.net:8983"
+  - "search03-medperts-com.pixelpark.net:8983"
+xymon::check::solr::diff_crit: 1000
+xymon::check::postgresql::master: db01-medperts-com.pixelpark.net
+xymon::check::postgresql::slaves:
+  - db02-medperts-com.pixelpark.net
+xymon::check::postgresql::psql: '/www/apps/postgres/bin/64/psql'
+
+logstash::drop_grokparsefailure: false
+logstash::filter:
+  - exclude_lb
+#  - tomcat
+logstash::output: []
+logstash::generic_resource:
+  medperts_tomcat_liferay:
+    resource: file
+    order: 10 # Input
+    parameters:
+      path: /www/logs/tomcat/liferay/tomcat.out
+      type: tomcat
+      tags: 
+        - "%{customer}"
+        - "%{environment}"
+      codec:
+        type: multiline
+        what: previous
+        pattern: '(^\d+\serror)|(^.+Exception: .+)|(^\s+at .+)|(^\s+... \d+ more)|(^\s*Caused by:.+)'
+  medperts_tomcat_filter:
+    resource: grok
+    order: 40
+    condition: "if [type] == 'tomcat'"
+    parameters:
+      match:
+       - "message"
+       - "\\[%%{ich-trickse}{DATESTAMP:logdate}%%{ich-trickse}{SPACE}\\]%%{ich-trickse}{SPACE}\\[%%{ich-trickse}{LOGLEVEL:loglevel}%%{ich-trickse}{SPACE}\\]%%{ich-trickse}{SPACE}\\[%%{ich-trickse}{DATA:thread}\\] \\[%%{ich-trickse}{DATA:class}\\] - %%{ich-trickse}{GREEDYDATA:restmessage}"
+  medperts_date:
+    resource: date
+    order: 42 # Filter after grok
+    condition: "if [type] == 'tomcat'"
+    parameters:
+      match:
+        - "logdate"
+        - "dd.MM.YYYY HH:mm:ss"
+      timezone: Europe/Berlin
+  medperts_export_redis:
+    resource: redis
+    condition: "if \"_grokparsefailure\" not in [tags]"
+    order: 71
+    parameters:
+      host:
+        - "93.188.104.30"
+        - "93.188.104.31"
+      key: logstash
+      data_type: list
+      shuffle_hosts: "true"
+
+postgresql::globals::validcon_script_path: "/www/tmp/valid_postgres_connection.sh"
+postgresql::globals::version: "9.3"
+
+nutch::seed_urls:
+  - 'http://www.awmf.org/leitlinien/leitlinien-suche/ll-ergebnis/liste/ll-seite/10/ll-erg/10.html?tx_szleitlinien_pi2[status]='
+nutch::regex_url_filter_rules:
+  - '-^(file|ftp|mailto):'
+  - '-\.(gif|GIF|jpg|JPG|png|PNG|ico|ICO|css|CSS|sit|SIT|eps|EPS|wmf|WMF|zip|ZIP|ppt|PPT|mpg|MPG|xls|XLS|gz|GZ|rpm|RPM|tgz|TGZ|mov|MOV|exe|EXE|jpeg|JPEG|bmp|BMP|js|JS)$'
+  - '-.*(/[^/]+)/[^/]+\1/[^/]+\1/'
+  - '+^http://([a-z0-9]*\.)*awmf.org/'
+  - '-.'
+nutch::job::cron::java_home: /www/apps/jdk7
+nutch::job::cron::curl: /usr/bin/curl
+nutch::job::cron::nutch_solr_core: 'http://search-medperts-com.pixelpark.net:8983/solr/guideline-core'
+nutch::job::cron::addtional_actions:
+  - '/usr/bin/curl -k "https://www.medperts.com/medperts-com-reindexer/reindex_trigger?key=A8XFAxqOKHoPLkxDjN4T"'
+
+nutch::indexer::solr::version: '4.10.2'
+nutch::indexer::solr::custom_solrconfig_fragment: |
+  <requestHandler name="/guideline" class="solr.SearchHandler" >
+    <lst name="defaults">
+     <str name="defType">dismax</str>
+     <str name="fq">id:http*pdf</str>
+     <str name="qf">title^0.0 content^5.5</str>
+     <str name="pf">title^0.0 content^5.5</str>
+     <float name="tie">0.01</float>
+     <str name="q.alt">*:*</str>
+     <str name="hl.fl">title, content</str>
+     <str name="hl.fragmenter">regex</str>
+     <str name="mm">5&lt;90%</str>
+    </lst>
+  </requestHandler>
+
+liferay::indexer::solr::custom_solrconfig_fragment: |
+  <requestHandler name="/guideline" class="solr.SearchHandler" >
+    <lst name="defaults">
+     <str name="defType">dismax</str>
+     <str name="fq">portletId:GUIDELINE</str>
+     <str name="qf">title^2.0 content^1.0</str>
+     <str name="pf">title^2.0 content^1.0</str>
+     <float name="tie">0.01</float>
+     <str name="q.alt">*:*</str>
+     <str name="hl">true</str>
+     <str name="hl.fl">content</str>
+     <str name="hl.fragmenter">regex</str>
+     <str name="mm">2&lt;50%</str>
+    </lst>
+  </requestHandler>
diff --git a/customer/medperts-com/search03-medperts-com.pixelpark.net.yaml b/customer/medperts-com/search03-medperts-com.pixelpark.net.yaml
new file mode 100644 (file)
index 0000000..dda1e52
--- /dev/null
@@ -0,0 +1,14 @@
+---
+site::role: base
+site::additional_classes:
+  - nutch::indexer::solr
+  - solr::app_server::tomcat
+  - xymon::check::solr
+  - www_tree
+  - tomcat2
+  - solr::config
+  - solr
+  - liferay::indexer::solr
+
+solr::app_server::tomcat::bind_host: 93.188.106.42
+solr::app_server::tomcat::zookeeper_bind_host: search03-medperts-com.pixelpark.net
diff --git a/customer/medperts-com/test-db01-medperts-com.pixelpark.net.yaml b/customer/medperts-com/test-db01-medperts-com.pixelpark.net.yaml
new file mode 100644 (file)
index 0000000..6b08936
--- /dev/null
@@ -0,0 +1,13 @@
+---
+site::role: base_for_old_systems
+site::additional_classes:
+  - accounts
+#  - pp_postgresql::replication
+#  - pp_postgresql::backup
+#  - pp_postgresql
+#  - www_tree
+#  - xymon::check::postgresql
+#  - liferay::database::postgresql
+#  - liferay::database::postgresql::jackrabbit
+
+postgresql::server::listen_addresses: 93.188.106.186
\ No newline at end of file
diff --git a/customer/medperts-com/test-db02-medperts-com.pixelpark.net.yaml b/customer/medperts-com/test-db02-medperts-com.pixelpark.net.yaml
new file mode 100644 (file)
index 0000000..9f336d7
--- /dev/null
@@ -0,0 +1,10 @@
+---
+site::role: base_for_old_systems
+site::additional_classes:
+  - accounts
+#  - xymon::check::postgresql
+#  - pp_postgresql::replication
+#  - pp_postgresql
+
+postgresql::server::listen_addresses: 93.188.106.187
+postgresql::server::needs_initdb: false
diff --git a/customer/medperts-com/test-www01-medperts-com.pixelpark.net.yaml b/customer/medperts-com/test-www01-medperts-com.pixelpark.net.yaml
new file mode 100644 (file)
index 0000000..522ada6
--- /dev/null
@@ -0,0 +1,52 @@
+---
+site::role: base
+site::additional_classes:
+  - liferay::webserver::apache
+  - logstash
+  - liferay::deploy
+  - nutch
+  - httpd
+  - nutch::indexer::solr
+  - liferay::app_server::tomcat
+  - liferay::config::jackrabbit
+  - liferay
+  - solr::app_server::tomcat
+  - xymon::check::solr
+  - tomcat2
+  - nutch::job::cron
+  - solr::config
+  - liferay::config
+  - solr
+  - liferay::indexer::solr
+  - pp_mcollective
+  - liferay::config::solr
+
+solr::app_server::tomcat::enable_zookeeper: true
+solr::app_server::tomcat::shards: 1
+solr::app_server::tomcat::zookeeper_name: liferay_zoo_medperts_com
+solr::app_server::tomcat::zookeeper_conf_dir: liferay-core
+
+liferay::config::ext_portal_properties:
+  scheduler.enabled:
+    value: false
+
+
+httpd::webserver:
+  test-www-medperts-com.pixelpark.net:
+    listens:
+      - 93.188.106.159:80
+      - 93.188.106.159:443
+
+liferay::app_server::tomcat::bind_host: 93.188.106.159
+liferay::app_server::tomcat::jmx_ip: 93.188.106.159
+liferay::app_server::tomcat::jvm_route: 1pxUK5
+solr::app_server::tomcat::bind_host: 93.188.106.159
+
+
+logstash::generic_resource:
+  medperts_test01_output:
+    condition: "if [loglevel] =='ERROR'"
+    resource: exec
+    order: 75 # output
+    parameters:
+      command: "/usr/sfw/bin/wget --post-data 'message=%%{ich-trickse}{message}' http://medperts-com-monitor.pixelpark.com/healthmonitor/TEST_1/addLogMessage/ -O /dev/null"
\ No newline at end of file
diff --git a/customer/medperts-com/test-www02-medperts-com.pixelpark.net.yaml b/customer/medperts-com/test-www02-medperts-com.pixelpark.net.yaml
new file mode 100644 (file)
index 0000000..1e046d9
--- /dev/null
@@ -0,0 +1,39 @@
+---
+site::role: base
+site::additional_classes:
+  - nutch::indexer::solr
+  - logstash
+  - liferay::deploy
+  - liferay::webserver::apache
+  - httpd
+  - liferay::app_server::tomcat
+  - liferay::config::jackrabbit
+  - liferay
+  - solr::app_server::tomcat
+  - xymon::check::solr
+  - tomcat2
+  - solr::config
+  - liferay::config
+  - solr
+  - liferay::indexer::solr
+  - pp_mcollective
+  - liferay::config::solr
+
+httpd::webserver:
+  test-www-medperts-com.pixelpark.net:
+    listens:
+      - 93.188.106.169:80
+      - 93.188.106.169:443
+
+liferay::app_server::tomcat::bind_host: 93.188.106.169
+liferay::app_server::tomcat::jmx_ip: 93.188.106.169
+liferay::app_server::tomcat::jvm_route: wu2llU
+solr::app_server::tomcat::bind_host: 93.188.106.169
+
+logstash::generic_resource:
+  medperts_test02_output:
+    condition: "if [loglevel] =='ERROR'"
+    resource: exec
+    order: 75 # output
+    parameters:
+      command: "/usr/sfw/bin/wget --post-data 'message=%%{ich-trickse}{message}' http://medperts-com-monitor.pixelpark.com/healthmonitor/TEST_2/addLogMessage/ -O /dev/null"
\ No newline at end of file
diff --git a/customer/medperts-com/test.yaml b/customer/medperts-com/test.yaml
new file mode 100644 (file)
index 0000000..b00d036
--- /dev/null
@@ -0,0 +1,297 @@
+---
+accounts::users:
+  m_scholze:
+    apply: true
+    sudo: true
+  florian.schade:
+    apply: true
+    sudo: true
+  annika.wenzel:
+    apply: true
+    sudo: true
+
+liferay::app_server::tomcat::site_name: 'test-www-medperts-com.pixelpark.net'
+liferay::app_server::tomcat::shutdown_port: 8005
+#liferay::app_server::tomcat::log4j_properties:
+#  prop1:
+#    setting: log4j.appender.CATALINA.File
+#    value: /www/logs/tomcat/liferay/tomcat-only.log
+#  prop2:
+#    setting: log4j.appender.PORTAL.file
+#    value: /www/logs/tomcat/liferay/portal.log
+liferay::app_server::tomcat::version_conf_opts:
+  - '-Dlog4j.configuration=file:/www/data/liferay/config/log4j.xml'
+
+liferay::app_server::tomcat::jmx_enabled: true
+liferay::app_server::tomcat::jmx_authenticate: false
+liferay::app_server::tomcat::jmx_ssl: false
+liferay::app_server::tomcat::jmx_registry_port: 8050
+liferay::app_server::tomcat::jmx_server_port: 8051
+liferay::app_server::tomcat::enable_cluster: true
+liferay::app_server::tomcat::min_perm: 512m
+liferay::app_server::tomcat::max_perm: 512m
+liferay::webserver::apache::host_servername: test-www-medperts-com.pixelpark.net
+liferay::webserver::apache::custom_log_format: ls_apache_json_lb
+liferay::webserver::apache::enable_logstash: true
+liferay::webserver::apache::proxy_pass:
+  - { path: /, url: 'ajp://%{fqdn}:8080/' }
+liferay::webserver::apache::headers:
+  - 'add Access-Control-Allow-Origin "*"'
+# HtAccess for Webserver - Begin
+liferay::webserver::apache::directories:
+  - location1:
+    provider: location
+    path: '/'
+    auth_type: Digest
+    auth_name: Limitierung
+    auth_digest_provider: file
+    auth_digest_algorithm: MD5
+    auth_user_file: '/www/conf/httpd/test-www-medperts-com.pixelpark.net/htpasswd'
+    auth_require: 'valid-user'
+    allow: 
+      - 'from 93.188.106.250'
+      - 'from 93.188.106.251'
+    custom_fragment: 'Satisfy Any'
+  - location2:
+    provider: location
+    path: '/delegate'
+  - location3:
+    provider: location
+    path: '/documents'
+  - location4:
+    provider: location
+    path: '/image'
+  - location5:
+    provider: location
+    path: '/medperts-com-reindexer'
+
+# HtAccess for Webserver - End
+liferay::config::ext_portal_properties:
+  passwords.encryption.algorithm:
+    value: SHA
+  jdbc.default.driverClassName:
+    value: org.postgresql.Driver
+  jdbc.default.url:
+    value: jdbc:postgresql://test-db01-medperts-com.pixelpark.net:5432/medperts_com_liferay
+  jdbc.default.username:
+    value: medperts_com
+  jdbc.default.password:
+    value: ENC[PKCS7,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]
+  jdbc.default.maxPoolSize:
+    value: 20
+  jdbc.read.driverClassName:
+    value: org.postgresql.Driver
+  jdbc.read.url:
+    value: jdbc:postgresql://test-db02-medperts-com.pixelpark.net:5432/medperts_com_liferay
+  jdbc.read.username:
+    value: medperts_com
+  jdbc.read.password:
+    value: ENC[PKCS7,MIIBiQYJKoZIhvcNAQcDoIIBejCCAXYCAQAxggEhMIIBHQIBADAFMAACAQEwDQYJKoZIhvcNAQEBBQAEggEAZXnE0XOI6w6oy7fwZqM/36oKvDBhMo8JqMG+AHMUx+eSroHcbMI4FxXd7LYtovxU3nVX5V3Ub/ouGxRRs562MypTbpC+Vi6IUe5NELLTjrqFFH9hDUR0egjRU/MszNo9DgDGHLuCZNP+rInpbgwRn0aKjhD00gloXyIIGeF1CQC+eJetLmYjkGEMoqUGesKwoIKxfCweH+IUZaXWDNMRVCNUP/uHj778GJGi5pBYF+zUbt251joYKV6uSQFXj47G8ELgH9woQ7s7vs6Iwt2v6CSjharRfI3cqEz7LVPG7ao5pCp3fXB7KLX8rI26glR8x4K/leZV4gxY0fGZdfKA6zBMBgkqhkiG9w0BBwEwHQYJYIZIAWUDBAEqBBDU2KQub1xCrftspaRGHzKYgCCqpY8btPwT9OkuVawF4bs//zeTC7vy4Hqm9Bzc1XzmUA==]
+  jdbc.read.maxPoolSize:
+    value: 20
+  jdbc.write.driverClassName:
+    value: org.postgresql.Driver
+  jdbc.write.url:
+    value: jdbc:postgresql://test-db01-medperts-com.pixelpark.net:5432/medperts_com_liferay
+  jdbc.write.username:
+    value: medperts_com
+  jdbc.write.password:
+    value: ENC[PKCS7,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]
+  jdbc.write.maxPoolSize:
+    value: 20
+  spring.configs:
+    # Original
+  # value: 'META-INF/base-spring.xml,META-INF/hibernate-spring.xml,META-INF/infrastructure-spring.xml,META-INF/management-spring.xml,META-INF/util-spring.xml,META-INF/jpa-spring.xml,META-INF/executor-spring.xml,META-INF/audit-spring.xml,META-INF/cluster-spring.xml,META-INF/editor-spring.xml,META-INF/jcr-spring.xml,META-INF/ldap-spring.xml,META-INF/messaging-core-spring.xml,META-INF/messaging-misc-spring.xml,META-INF/mobile-device-spring.xml,META-INF/notifications-spring.xml,META-INF/poller-spring.xml,META-INF/rules-spring.xml,META-INF/scheduler-spring.xml,META-INF/search-spring.xml,META-INF/workflow-spring.xml,META-INF/counter-spring.xml,META-INF/mail-spring.xml,META-INF/portal-spring.xml,META-INF/portlet-container-spring.xml,META-INF/staging-spring.xml,META-INF/virtual-layouts-spring.xml,META-INF/monitoring-spring.xml,classpath*:META-INF/ext-spring.xml'
+    # Read/Write-Database
+    value: 'META-INF/base-spring.xml,META-INF/hibernate-spring.xml,META-INF/infrastructure-spring.xml,META-INF/management-spring.xml,META-INF/util-spring.xml,META-INF/jpa-spring.xml,META-INF/executor-spring.xml,META-INF/audit-spring.xml,META-INF/cluster-spring.xml,META-INF/editor-spring.xml,META-INF/jcr-spring.xml,META-INF/ldap-spring.xml,META-INF/messaging-core-spring.xml,META-INF/messaging-misc-spring.xml,META-INF/mobile-device-spring.xml,META-INF/notifications-spring.xml,META-INF/poller-spring.xml,META-INF/rules-spring.xml,META-INF/scheduler-spring.xml,META-INF/search-spring.xml,META-INF/workflow-spring.xml,META-INF/counter-spring.xml,META-INF/mail-spring.xml,META-INF/portal-spring.xml,META-INF/portlet-container-spring.xml,META-INF/staging-spring.xml,META-INF/virtual-layouts-spring.xml,META-INF/monitoring-spring.xml,META-INF/dynamic-data-source-spring.xml,classpath*:META-INF/ext-spring.xml'
+
+httpd::webserver:
+  test-www-medperts-com.pixelpark.net:
+    modules:
+      - proxy_ajp
+      - auth_digest
+      - authn_file
+    htpasswd:
+      - webaccess|Limitierung|Lglwm2014
+    extendedStatus: true
+      
+postgresql::server::ipv4acls:
+  - "host medperts_com_liferay medperts_com 93.188.106.128/25 md5" # BBraun Test Netz
+  - "host medperts_com_liferay medperts_com 217.66.51.0/24 md5" # Admin Netz
+  - "host medperts_com_liferay medperts_com 217.66.50.0/24 md5" # Entwickler Netz
+  - "host medperts_com_liferay medperts_com 217.66.56.0/24 md5" # VPN Netz
+  - "host medperts_com_jackrabbit medperts_com_jr 93.188.106.128/25 md5" # BBraun Test Netz
+  - "host medperts_com_jackrabbit medperts_com_jr 217.66.51.0/24 md5" # Admin Netz
+  - "host medperts_com_jackrabbit medperts_com_jr 217.66.50.0/24 md5" # Entwickler Netz
+  - "host medperts_com_jackrabbit medperts_com_jr 217.66.56.0/24 md5" # VPN Netz
+  - "host replication replication 93.188.106.128/25 trust"
+  - "host postgres xymon 93.188.106.128/25 trust"
+
+pp_postgresql::replication::master_server: test-db01-medperts-com.pixelpark.net
+pp_postgresql::replication::repl_user: replication
+pp_postgresql::replication::repl_password: ENC[PKCS7,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]
+# Debug logging
+#pp_postgresql::log_statement: all
+#pp_postgresql::log_destination: csvlog
+
+liferay::database::postgresql::password: ENC[PKCS7,MIIBiQYJKoZIhvcNAQcDoIIBejCCAXYCAQAxggEhMIIBHQIBADAFMAACAQEwDQYJKoZIhvcNAQEBBQAEggEAZXnE0XOI6w6oy7fwZqM/36oKvDBhMo8JqMG+AHMUx+eSroHcbMI4FxXd7LYtovxU3nVX5V3Ub/ouGxRRs562MypTbpC+Vi6IUe5NELLTjrqFFH9hDUR0egjRU/MszNo9DgDGHLuCZNP+rInpbgwRn0aKjhD00gloXyIIGeF1CQC+eJetLmYjkGEMoqUGesKwoIKxfCweH+IUZaXWDNMRVCNUP/uHj778GJGi5pBYF+zUbt251joYKV6uSQFXj47G8ELgH9woQ7s7vs6Iwt2v6CSjharRfI3cqEz7LVPG7ao5pCp3fXB7KLX8rI26glR8x4K/leZV4gxY0fGZdfKA6zBMBgkqhkiG9w0BBwEwHQYJYIZIAWUDBAEqBBDU2KQub1xCrftspaRGHzKYgCCqpY8btPwT9OkuVawF4bs//zeTC7vy4Hqm9Bzc1XzmUA==]
+liferay::database::postgresql::dbname: medperts_com_liferay
+liferay::database::postgresql::user: medperts_com
+liferay::database::postgresql::jackrabbit::password: ENC[PKCS7,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]
+liferay::database::postgresql::jackrabbit::user: medperts_com_jr
+liferay::database::postgresql::jackrabbit::dbname: medperts_com_jackrabbit
+
+
+liferay::config::jackrabbit::database_connection: jdbc:postgresql://test-db01-medperts-com.pixelpark.net:5432/medperts_com_jackrabbit
+liferay::config::jackrabbit::password: ENC[PKCS7,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]
+liferay::config::jackrabbit::user: medperts_com_jr
+liferay::config::jackrabbit::cluster: true
+
+liferay::config::solr::solr_url: "http://test-search-medperts-com.pixelpark.net:8983/solr/liferay-core"
+
+liferay::deploy::package_names_hot:
+  - PP-medperts-war
+liferay::deploy::package_names_cold:
+  - PP-medperts-conf
+  - PP-medperts-lr-conf
+  - PP-medperts-lib
+liferay::deploy::version_hot: latest
+liferay::deploy::version_cold: latest
+liferay::deploy::cleanup_commands:
+  - '/usr/bin/find /www/tmp -user liferay -exec rm -rf {} \;'
+  - '/usr/bin/rm -rf /www/sites/liferay_webapps/medperts-com-*'
+  - '/usr/bin/rm -rf /www/conf/tomcat/liferay/work/Catalina'
+liferay::deploy::ini_setting:
+  email:
+    path: '/www/data/liferay/config/portal.properties'
+    setting: 'registration.activation.admin.email'
+    value: 'bettina.hartlich@pixelpark.com'
+    section: ''
+  doccheck.loginid:
+    path: '/www/data/liferay/config/portal.properties'
+    setting: 'doccheck.loginid'
+    value: '2000000006700'
+    section: ''
+  doccheck.cipherkey:
+    path: '/www/data/liferay/config/portal.properties'
+    setting: 'doccheck.cipherkey'
+    value: ENC[PKCS7,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]
+    section: ''
+  solr.search.guidelines.url:
+    path: '/www/data/liferay/config/portal.properties'
+    setting: 'solr.search.guidelines.url'
+    value: 'http\://test-search-medperts-com.pixelpark.net:8983/solr/guideline-core'
+    section: ''
+  solr.search.liferay.url:
+    path: '/www/data/liferay/config/portal.properties'
+    setting: 'solr.search.liferay.url'
+    value: 'http\://test-search-medperts-com.pixelpark.net:8983/solr/liferay-core'
+    section: ''
+  solr.search.liferay.master.url:
+    path: '/www/data/liferay/config/portal.properties'
+    setting: 'solr.search.liferay.master.url'
+    value: 'http\://test-search-medperts-com.pixelpark.net:8983/solr/liferay-core'
+    section: ''
+
+liferay::indexer::solr::schema_source: /www/data/solr/pp-config/schema.xml
+liferay::indexer::solr::opt_package: PP-medperts-solr-conf
+liferay::indexer::solr::opt_package_version: latest
+liferay::indexer::solr::version: 4.10.2
+
+solr::app_server::tomcat::shutdown_port: 8006
+solr::app_server::tomcat::site_name: 'test-www-medperts-com.pixelpark.net'
+solr::app_server::tomcat::zookeeper_hosts:
+  - "test-www01-medperts-com.pixelpark.net:9983"
+solr::app_server::tomcat::libs:
+  jcl-over-slf4j-1.7.6:
+    instance: solr
+    source: /www/apps/solr/example/lib/ext/jcl-over-slf4j-1.7.6.jar
+  jul-to-slf4j-1.7.6:
+    instance: solr
+    source: /www/apps/solr/example/lib/ext/jul-to-slf4j-1.7.6.jar
+  log4j-1.2.17:
+    instance: solr
+    source: /www/apps/solr/example/lib/ext/log4j-1.2.17.jar
+  slf4j-api-1.7.6:
+    instance: solr
+    source: /www/apps/solr/example/lib/ext/slf4j-api-1.7.6.jar
+  slf4j-log4j12-1.7.6:
+    instance: solr
+    source: /www/apps/solr/example/lib/ext/slf4j-log4j12-1.7.6.jar
+
+xymon::modules:
+  - net2
+xymon::check::solr::members:
+  - "test-www01-medperts-com.pixelpark.net:8983"
+  - "test-www02-medperts-com.pixelpark.net:8983"
+xymon::check::postgresql::master: test-db01-medperts-com.pixelpark.net
+xymon::check::postgresql::slaves:
+  - test-db02-medperts-com.pixelpark.net
+xymon::check::postgresql::psql: '/www/apps/postgres/bin/64/psql'
+
+logstash::filter:
+  - exclude_lb
+  - tomcat
+logstash::generic_resource:
+  medperts_tomcat_liferay:
+    resource: file
+    order: 10 # Input
+    parameters:
+      path: /www/logs/tomcat/liferay/tomcat.out
+      type: tomcat
+      tags: 
+        - "%{customer}"
+        - "%{environment}"
+      codec:
+        type: multiline
+        what: previous
+        pattern: '(^\d+\serror)|(^.+Exception: .+)|(^\s+at .+)|(^\s+... \d+ more)|(^\s*Caused by:.+)'
+
+postgresql::globals::validcon_script_path: "/www/tmp/valid_postgres_connection.sh"
+postgresql::globals::version: "9.3"
+
+nutch::seed_urls:
+  - 'http://www.awmf.org/leitlinien/leitlinien-suche/ll-ergebnis/liste/ll-seite/10/ll-erg/10.html?tx_szleitlinien_pi2[status]='
+nutch::regex_url_filter_rules:
+  - '-^(file|ftp|mailto):'
+  - '-\.(gif|GIF|jpg|JPG|png|PNG|ico|ICO|css|CSS|sit|SIT|eps|EPS|wmf|WMF|zip|ZIP|ppt|PPT|mpg|MPG|xls|XLS|gz|GZ|rpm|RPM|tgz|TGZ|mov|MOV|exe|EXE|jpeg|JPEG|bmp|BMP|js|JS)$'
+  - '-.*(/[^/]+)/[^/]+\1/[^/]+\1/'
+  - '+^http://([a-z0-9]*\.)*awmf.org/'
+  - '-.'
+nutch::job::cron::java_home: /www/apps/jdk7
+nutch::job::cron::curl: /usr/bin/curl
+nutch::job::cron::nutch_solr_core: 'http://test-search-medperts-com.pixelpark.net:8983/solr/guideline-core'
+nutch::job::cron::addtional_actions:
+  - '/usr/bin/curl -k "https://test-www-medperts-com.pixelpark.net/medperts-com-reindexer/reindex_trigger?key=A8XFAxqOKHoPLkxDjN4T"'
+
+nutch::indexer::solr::version: '4.10.2'
+nutch::indexer::solr::custom_solrconfig_fragment: |
+  <requestHandler name="/guideline" class="solr.SearchHandler" >
+    <lst name="defaults">
+     <str name="defType">dismax</str>
+     <str name="fq">id:http*pdf</str>
+     <str name="qf">title^0.0 content^5.5</str>
+     <str name="pf">title^0.0 content^5.5</str>
+     <float name="tie">0.01</float>
+     <str name="q.alt">*:*</str>
+     <str name="hl.fl">title, content</str>
+     <str name="hl.fragmenter">regex</str>
+     <str name="mm">5&lt;90%</str>
+    </lst>
+  </requestHandler>
+
+liferay::indexer::solr::custom_solrconfig_fragment: |
+  <requestHandler name="/guideline" class="solr.SearchHandler" >
+    <lst name="defaults">
+     <str name="defType">dismax</str>
+     <str name="fq">portletId:GUIDELINE</str>
+     <str name="qf">title^2.0 content^1.0</str>
+     <str name="pf">title^2.0 content^1.0</str>
+     <float name="tie">0.01</float>
+     <str name="q.alt">*:*</str>
+     <str name="hl">true</str>
+     <str name="hl.fl">content</str>
+     <str name="hl.fragmenter">regex</str>
+     <str name="mm">2&lt;50%</str>
+    </lst>
+  </requestHandler>
diff --git a/customer/medperts-com/www01-medperts-com.pixelpark.net.yaml b/customer/medperts-com/www01-medperts-com.pixelpark.net.yaml
new file mode 100644 (file)
index 0000000..0798bfb
--- /dev/null
@@ -0,0 +1,46 @@
+---
+site::role: base
+site::additional_classes:
+  - liferay::webserver::apache
+  - logstash
+  - liferay::deploy
+  - nutch
+  - httpd
+  - nutch::indexer::solr
+  - liferay::app_server::tomcat
+  - liferay::config::jackrabbit
+  - liferay
+  - solr::app_server::tomcat
+  - xymon::check::solr
+  - tomcat2
+  - nutch::job::cron
+  - solr::config
+  - liferay::config
+  - solr
+  - liferay::indexer::solr
+  - liferay::config::solr
+
+liferay::config::ext_portal_properties:
+  scheduler.enabled:
+    value: false
+
+
+httpd::webserver:
+  www.medperts.com:
+    listens:
+      - 93.188.106.27:80
+      - 93.188.106.27:443
+
+liferay::app_server::tomcat::bind_host: 93.188.106.27
+liferay::app_server::tomcat::jmx_ip: 93.188.106.27
+liferay::app_server::tomcat::jvm_route: EpF9sC
+solr::app_server::tomcat::bind_host: 93.188.106.27
+solr::app_server::tomcat::zookeeper_bind_host: search01-medperts-com.pixelpark.net
+
+#logstash::generic_resource:
+#  medperts_live01_output:
+#    condition: "if [loglevel] =='ERROR'"
+#    resource: exec
+#    order: 75 # output
+#    parameters:
+#      command: "/usr/sfw/bin/wget --post-data 'message=%%{ich-trickse}{message}' http://medperts-com-monitor.pixelpark.com/healthmonitor/LIVE_1/addLogMessage/ -O /dev/null"
\ No newline at end of file
diff --git a/customer/medperts-com/www02-medperts-com.pixelpark.net.yaml b/customer/medperts-com/www02-medperts-com.pixelpark.net.yaml
new file mode 100644 (file)
index 0000000..3a8eabc
--- /dev/null
@@ -0,0 +1,46 @@
+---
+site::role: base
+site::additional_classes:
+  - nutch::indexer::solr
+  - logstash
+  - liferay::deploy
+  - httpd
+  - liferay::app_server::tomcat
+  - liferay::config::jackrabbit
+  - liferay
+  - solr::app_server::tomcat
+  - xymon::check::solr
+  - tomcat2
+  - solr::config
+  - liferay::config
+  - solr
+  - liferay::indexer::solr
+  - liferay::webserver::apache
+  - liferay::config::solr
+
+httpd::webserver:
+  www.medperts.com:
+    listens:
+      - 93.188.106.37:80
+      - 93.188.106.37:443
+
+liferay::app_server::tomcat::bind_host: 93.188.106.37
+liferay::app_server::tomcat::jmx_ip: 93.188.106.37
+liferay::app_server::tomcat::jvm_route: KKO38w
+solr::app_server::tomcat::bind_host: 93.188.106.37
+solr::app_server::tomcat::zookeeper_bind_host: search02-medperts-com.pixelpark.net
+
+#logstash::generic_resource:
+#  medperts_live02_output:
+#    condition: "if [loglevel] =='ERROR'"
+#    resource: exec
+#    order: 75 # output
+#    parameters:
+#      command: "/usr/sfw/bin/wget --post-data 'message=%%{ich-trickse}{message}' http://medperts-com-monitor.pixelpark.com/healthmonitor/LIVE_2/addLogMessage/ -O /dev/null"
+#logstash::generic_resource:
+#  medperts_export_stdout:
+#    resource: file
+#    order: 72
+#    condition: "if [type] == 'tomcat'"
+#    parameters:
+#      path: /www/logs/logstash/logstash.log
\ No newline at end of file
diff --git a/customer/mtb/author01-mtb.pixelpark.com.yaml b/customer/mtb/author01-mtb.pixelpark.com.yaml
new file mode 100644 (file)
index 0000000..7ac350d
--- /dev/null
@@ -0,0 +1,5 @@
+---
+site::additional_classes:
+  - repo
+  - logstash
+
diff --git a/customer/mtb/author02-mtb.pixelpark.com.yaml b/customer/mtb/author02-mtb.pixelpark.com.yaml
new file mode 100644 (file)
index 0000000..7ac350d
--- /dev/null
@@ -0,0 +1,5 @@
+---
+site::additional_classes:
+  - repo
+  - logstash
+
diff --git a/customer/mtb/dev-author01-mtb.pixelpark.com.yaml b/customer/mtb/dev-author01-mtb.pixelpark.com.yaml
new file mode 100644 (file)
index 0000000..7ac350d
--- /dev/null
@@ -0,0 +1,5 @@
+---
+site::additional_classes:
+  - repo
+  - logstash
+
diff --git a/customer/mtb/dev-author02-mtb.pixelpark.com.yaml b/customer/mtb/dev-author02-mtb.pixelpark.com.yaml
new file mode 100644 (file)
index 0000000..7ac350d
--- /dev/null
@@ -0,0 +1,5 @@
+---
+site::additional_classes:
+  - repo
+  - logstash
+
diff --git a/customer/mtb/development.yaml b/customer/mtb/development.yaml
new file mode 100644 (file)
index 0000000..5081003
--- /dev/null
@@ -0,0 +1,11 @@
+---
+logstash::generic_resource:
+  adobe_aem_error:
+    resource: file
+    order: 10 # Input
+    parameters:
+      path: '/www/apps/*/crx-quickstart/logs/error.log'
+      type: aem-server
+      tags: 
+        - "%{customer}"
+        - "%{environment}"
diff --git a/customer/mtb/int-author01-mtb.pixelpark.com.yaml b/customer/mtb/int-author01-mtb.pixelpark.com.yaml
new file mode 100644 (file)
index 0000000..7ac350d
--- /dev/null
@@ -0,0 +1,5 @@
+---
+site::additional_classes:
+  - repo
+  - logstash
+
diff --git a/customer/mtb/int-author02-mtb.pixelpark.com.yaml b/customer/mtb/int-author02-mtb.pixelpark.com.yaml
new file mode 100644 (file)
index 0000000..7ac350d
--- /dev/null
@@ -0,0 +1,5 @@
+---
+site::additional_classes:
+  - repo
+  - logstash
+
diff --git a/customer/mtb/production.yaml b/customer/mtb/production.yaml
new file mode 100644 (file)
index 0000000..5081003
--- /dev/null
@@ -0,0 +1,11 @@
+---
+logstash::generic_resource:
+  adobe_aem_error:
+    resource: file
+    order: 10 # Input
+    parameters:
+      path: '/www/apps/*/crx-quickstart/logs/error.log'
+      type: aem-server
+      tags: 
+        - "%{customer}"
+        - "%{environment}"
diff --git a/customer/mtb/test.yaml b/customer/mtb/test.yaml
new file mode 100644 (file)
index 0000000..5081003
--- /dev/null
@@ -0,0 +1,11 @@
+---
+logstash::generic_resource:
+  adobe_aem_error:
+    resource: file
+    order: 10 # Input
+    parameters:
+      path: '/www/apps/*/crx-quickstart/logs/error.log'
+      type: aem-server
+      tags: 
+        - "%{customer}"
+        - "%{environment}"
diff --git a/customer/pfizer-schlaganfall/development.yaml b/customer/pfizer-schlaganfall/development.yaml
new file mode 100644 (file)
index 0000000..daadc48
--- /dev/null
@@ -0,0 +1,15 @@
+---
+accounts::users:
+  stephan.vits:
+    apply: true
+    sudo: true
+  thomas.bussmeyer:
+    apply: true
+    sudo: true
+  romy.pohl:
+    apply: true
+    sudo: true
+  martin.pfeiffer:
+    apply: true
+    sudo: true
+    ssh_type: dsa
diff --git a/customer/pfizer-schlaganfall/production.yaml b/customer/pfizer-schlaganfall/production.yaml
new file mode 100644 (file)
index 0000000..ffd5ad8
--- /dev/null
@@ -0,0 +1,9 @@
+---
+accounts::users:
+  stephan.vits:
+    apply: true
+  thomas.bussmeyer:
+    apply: true
+  martin.pfeiffer:
+    apply: true
+    ssh_type: dsa
\ No newline at end of file
diff --git a/customer/pfizer-schlaganfall/www-schlaganfall-verhindern-de.pixelpark.net.yaml b/customer/pfizer-schlaganfall/www-schlaganfall-verhindern-de.pixelpark.net.yaml
new file mode 100644 (file)
index 0000000..4c3c2b5
--- /dev/null
@@ -0,0 +1,2 @@
+---
+site::role: base
diff --git a/customer/pfizer/dev-web01-pfizer-de.pixelpark.net.yaml b/customer/pfizer/dev-web01-pfizer-de.pixelpark.net.yaml
new file mode 100644 (file)
index 0000000..4d2fd0e
--- /dev/null
@@ -0,0 +1,1030 @@
+---
+site::role: base
+site::additional_classes:
+  - apache::mod::headers
+  - site::profile::drupal
+  - site::profile::typo3
+  - site::profile::mysql_server
+  - logstash
+
+apache::mpm_module: worker
+
+accounts::users:
+  stephan.vits:
+    apply: true
+    sudo: true
+    groups: apache
+  thomas.bussmeyer:
+    apply: true
+    sudo: true 
+    groups: apache
+  nikolai.potapov:
+    apply: true
+    sudo: true
+    groups: apache
+  andreas.pinto-koehler:
+    apply: true
+    sudo: true
+    groups: apache
+  deploy.vogel:
+    apply: true
+    sudo: true
+    group: apache
+  service.typo3:
+    apply: true
+    sudo: true
+    group: apache
+  konrad.tadesse:
+    apply: true
+    sudo: true
+    groups: apache
+    
+# TODO: Abwarten auf Ticket: https://jira.pixelpark.com/jira/browse/PPPUPPET-202
+#  csv_upload:
+#    uid: 25113
+#    apply: true
+#    comment: "CSV-Upload-User-from-Pfizer"
+#    sudo: false
+#    group: sftpgroup
+#    password: ENC[PKCS7,MIIBeQYJKoZIhvcNAQcDoIIBajCCAWYCAQAxggEhMIIBHQIBADAFMAACAQEwDQYJKoZIhvcNAQEBBQAEggEAZjprKA9BDrGcfkKwTe8ygEzAA/iY5FyS3y8Txz6sfMhAOFWogiDLgejAfBQ+eEw3r0s5YzM/lC7wiSDdj52RB/6J5GyHWb3NBjOH4/Yz0ZOClAzCPH+hmuLhbaEZGxxPsbTS1asX3LTKrJKhXpWQniW+7KlW/3M23R9UeJG+NOseexIc05YaoMHNre2fsNO1kd0Yoqpe5e4QpXyS4uhLfY2UHfxqoqOpoq/9kap/DS8Ztyje7z7uebNQmh++gTFyo+eWdki+If/wzp8E46dBl5RN85v4d8YntMOx+gEA372sLGDMkTvlPGvOGDHXu1KucIzAkOPN4m3Kxnkv85+GgjA8BgkqhkiG9w0BBwEwHQYJYIZIAWUDBAEqBBBjEEpShEGrw6K/IxkIL5JQgBCktXY/CiIR0X6WbV0gw30X]
+
+repo::remi_php55: true
+
+php::settings:
+  Date/date.timezone: Europe/Berlin
+  PHP/upload_max_filesize: 100M
+  PHP/post_max_size: 100M
+  PHP/max_execution_time: '240'
+  PHP/memory_limit: '512M'
+  PHP/expose_php: 'Off'
+  Session/session.cookie_secure: 1
+  Session/session.cookie_httponly: 1
+  PHP/cgi.fix_pathinfo: 0
+
+php::extensions:
+  gd: {}
+  opcache: {}
+  mysqlnd: {}
+  soap: {}
+  mbstring: {}
+  pecl-imagick: {}
+  pecl-uploadprogress: {}
+  pecl-memcache: {}
+  pecl-apcu: {}
+  pecl-xslcache: {}
+
+mysql::server::backup::backuppassword: ENC[PKCS7,MIIBiQYJKoZIhvcNAQcDoIIBejCCAXYCAQAxggEhMIIBHQIBADAFMAACAQEwDQYJKoZIhvcNAQEBBQAEggEAHq/Ho0RC22KW05ZEHrIdJFF7awVvuygOldGcp7CiqQnmQRTqYcqc6rBSy5vnzL5/z1GMbyu0SL10yX7pBvHRmXEjDBGgeMVEUo4yntkxkZZ1nnHKlA1BerLQR7uzIXvd64c3CXHF8ng6yrNW1/AdPvSWykHzUpzv3KAhi84BUsIyJ80wudPG4iHoy1nAOtD6pFpIxt0opJv9OhQ4uVnWvZFE+1IC3T+0d1JENwOpQUhdt6W/hG1JZCHnMSbvfV7ATSK8r3bbh9q1m3uo+ce5oBE3iovP633hWnRkYZEAFp60mn27Anm+TbsrkudR3CHIvq3tqupnrVuH6NW8NOxqLjBMBgkqhkiG9w0BBwEwHQYJYIZIAWUDBAEqBBCy4k1gyLnmzhqgJnbIUHCvgCDoXc8SIH4lue/wHmk36DKYiJWgl4dAHqR/9KK9whY0nA==]
+mysql::server::root_password: ENC[PKCS7,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]
+
+site::profile::mysql_server::databases:
+  typo3_dev02:
+    user: typo3_dev02
+    password: 'XGEb_F_Gvqqb'
+  drupalbi:
+    user: drupalbi
+    password: '#gaKz_wlV5uS'
+  bcmatters:
+    user: bcmatters
+    password: '3oPtYj7DRORiq4uv'
+  pftogetherprogram:
+    user: pftogether
+    password: 3oPtYj7DRORiq4uv
+
+# dev-bi.pfizer.de
+site::profile::drupal::manage_php: false
+site::profile::drupal::projects:
+  dev-bi.pfizer.de:
+    #ip: 217.66.55.100
+    site_path: /srv/www/dev-bi.pfizer.de
+    servername: dev-bi.pfizer.de
+    serveraliases:
+      - dev02-bi-pfizer-de.pixelpark.net
+      - dev-bi-pfizer-de.pixelpark.net
+    ssl: true
+    ssl_cert: /etc/pki/tls/certs/wildcard.pixelpark.net-cert.pem
+    ssl_chain: /etc/pki/tls/certs/wildcard.pixelpark.net-cert.pem
+    ssl_key: /etc/pki/tls/private/wildcard.pixelpark.net-key.pem
+    #ssl_cipher              ALL:!ADH:RC4+RSA:+HIGH:+MEDIUM:-LOW:-SSLv2:-EXP
+    #SetEnvIf User-Agent         ".*MSIE.*" nokeepalive ssl-unclean-shutdown downgrade-1.0 force-response-1.0
+    directories:
+      - directory_root:
+        provider: directory
+        path: '/srv/www/dev-bi.pfizer.de'
+        options:
+          - FollowSymLinks
+          - MultiViews
+        allow_override:
+          - All
+      - location_root:
+        provider: location
+        path: '/'
+        auth_type: Digest
+        auth_name: pixelrealm
+        auth_digest_provider: file
+        auth_digest_algorithm: MD5
+        auth_user_file: '/etc/httpd/htdigest'
+        auth_require: 'valid-user'
+        require:
+          - 'ip 217.66.55 217.66.50 217.66.51 217.66.48.130 168.224.160 10.121.101 204.114.176 204.114.216 148.168.40 202.32.173 204.114.248 168.224.1 168.224.160 148.168.127 204.114.196 193.235.226 212.58.14 204.114.199 155.94.99 155.94.78 155.94.62 218.213.241 155.94.70 155.94.110 222.73.72 155.94.119 155.94.55 68.58.141.20 174.137.32.22 15.213.17 85.183.14'
+    rewrites:
+      - alias:
+        comment: 'Alles auf https umleiten'
+        rewrite_cond:
+          - '%%{ich-trickse}{HTTPS} !=on'
+        rewrite_rule:
+# Auskommentieren der richtigen Rewrite
+#          - ^(.*)$  https://dev-bi.pfizer.de$1  [R=301,L]
+          - ^(.*)$  https://dev02-bi-pfizer-de.pixelpark.net$1  [R=303,L]
+  dev-pfizer-together-programm-de:
+    site_path: /srv/www/dev-together.pfizer.de
+    servername: dev-pfizer-together-programm-de.pixelpark.net
+    ssl: true
+    ssl_cert: /etc/pki/tls/certs/wildcard.pixelpark.net-cert.pem
+    ssl_chain: /etc/pki/tls/certs/wildcard.pixelpark.net-cert.pem
+    ssl_key: /etc/pki/tls/private/wildcard.pixelpark.net-key.pem
+    directories:
+      - directory_root:
+        provider: directory
+        path: '/srv/www/dev-together.pfizer.de'
+        options:
+          - FollowSymLinks
+          - MultiViews
+        allow_override:
+          - All
+
+# dev-www.pfizer.de
+site::profile::typo3::projects:
+  dev-www.pfizer.de:
+    site_path: /srv/www/dev-www.pfizer.de
+    use_symlink: true
+    version: '6.2.15'
+    db_pass: 'XGEb_F_Gvqqb'
+    db_user: typo3_dev02
+    db_name: typo3_dev02
+    servername: dev-www-pfizer-de.pixelpark.net
+    serveraliases:
+      - dev-web01-pfizer-de.pixelpark.net
+      - dev-www-pfizermed-de.pixelpark.net
+      - dev-www-pain-detect-de.pixelpark.net
+      - dev-www-meet-pfizer-de.pixelpark.net
+      - dev-www-ueberaktive-blase-de.pixelpark.net
+      - dev-www-rauchfrei-durchstarten-de.pixelpark.net
+      - dev-www-monatsring-de.pixelpark.net
+      - dev-www-sab-simplex-de.pixelpark.net
+      - dev-www-lyrica-de.pixelpark.net
+      - dev-www2-pfizer-de.pixelpark.net
+      - dev-www2-pfizermed-de.pixelpark.net
+      - dev-www2-ueberaktive-blase-de.pixelpark.net
+      - dev-www2-monatsring-de.pixelpark.net
+      - dev-www2-pain-detect-de.pixelpark.net
+      - dev-www2-meet-pfizer-de.pixelpark.net
+      - dev-www2-sab-simplex-de.pixelpark.net
+      - dev-www2-rauchfrei-durchstarten-de.pixelpark.net
+      - dev-www2-lyrica-de.pixelpark.net
+    ssl: true
+    ssl_cert: /etc/pki/tls/certs/wildcard.pixelpark.net-cert.pem
+    ssl_chain: /etc/pki/tls/certs/wildcard.pixelpark.net-cert.pem
+    ssl_key: /etc/pki/tls/private/wildcard.pixelpark.net-key.pem
+    directories:
+      - location_root:
+        provider: location
+        path: '/'
+        auth_type: Digest
+        auth_name: pixelrealm
+        auth_digest_provider: file
+        auth_digest_algorithm: MD5
+        auth_user_file: '/etc/httpd/htdigest'
+        auth_require: 'valid-user'
+        require:
+          - 'ip 217.66.55 217.66.50 217.66.51 217.66.48.130 168.224.160 10.121.101 204.114.176 204.114.216 148.168.40 202.32.173 204.114.248 168.224.1 168.224.160 148.168.127 204.114.196 193.235.226 212.58.14 204.114.199 155.94.99 155.94.78 155.94.62 218.213.241 155.94.70 155.94.110 222.73.72 155.94.119 155.94.55 68.58.141.20 174.137.32.22 15.213.17 85.183.14'
+    user: apache
+    mode: '2770'
+    rewrites:
+      - pfizermed_rw2:
+        comment: 'Rewrites fuer Pfizermed'
+        rewrite_cond:
+          - '%%{ich-trickse}{HTTP_HOST} ^(dev-www-pfizermed-de.pixelpark.net)$'
+        rewrite_rule:
+          - ^/broschueren/inspra-scriptum-cardiologicum.htm$ https://dev-www-pfizermed-de.pixelpark.net/index.php?id=7689 [R=301,L]
+      - pfizermed_rw3:
+        comment: 'Rewrites fuer Pfizermed'
+        rewrite_cond:
+          - '%%{ich-trickse}{HTTP_HOST} ^(dev-www-pfizermed-de.pixelpark.net)$'
+        rewrite_rule:
+          - ^/produktprofile/lyrica.htm$ https://dev-www-pfizermed-de.pixelpark.net/medikamente/medikamente-a-bis-z/lyrica-r-hartkapseln.htm [R=301,L]
+      - pfizermed_rw4:
+        comment: 'Rewrites fuer Pfizermed'
+        rewrite_cond:
+          - '%%{ich-trickse}{HTTP_HOST} ^(dev-www-pfizermed-de.pixelpark.net)$'
+        rewrite_rule:
+          - ^/produktprofile/lyrica-loesung.htm$ https://dev-www-pfizermed-de.pixelpark.net/medikamente/medikamente-a-bis-z/lyrica-r-loesung.htm [R=301,L]
+      - pfizermed_rw5:
+        comment: 'Rewrites fuer Pfizermed'
+        rewrite_cond:
+          - '%%{ich-trickse}{HTTP_HOST} ^(dev-www-pfizermed-de.pixelpark.net)$'
+        rewrite_rule:
+          - ^/die-dermatom-karte.htm$ https://dev-www-pfizermed-de.pixelpark.net/index.php?id=7693 [R=301,L]
+      - pfizermed_rw6:
+        comment: 'Rewrites fuer Pfizermed'
+        rewrite_cond:
+          - '%%{ich-trickse}{HTTP_HOST} ^(dev-www-pfizermed-de.pixelpark.net)$'
+        rewrite_rule:
+          - ^/handhabung-lyrica-loesung/news/0.htm$ https://dev-www-pfizermed-de.pixelpark.net/index.php?id=6636 [R=301,L]
+      - pfizermed_rw7:
+        comment: 'Rewrites fuer Pfizermed'
+        rewrite_cond:
+          - '%%{ich-trickse}{HTTP_HOST} ^(dev-www-pfizermed-de.pixelpark.net)$'
+        rewrite_rule:
+          - ^/videos/neuropathischer-schmerz-patientenvideo/video/0.htm$ https://dev-www-pfizermed-de.pixelpark.net/index.php?id=7735 [R=301,L]
+      - pfizermed_rw8:
+        comment: 'Rewrites fuer Pfizermed'
+        rewrite_cond:
+          - '%%{ich-trickse}{HTTP_HOST} ^(dev-www-pfizermed-de.pixelpark.net)$'
+        rewrite_rule:
+          - ^/fortbildungen/generalisierte-angststoerung-expertenvortraege-im-video.htm$ https://dev-www-pfizermed-de.pixelpark.net/index.php?id=7643 [R=301,L]
+      - pfizermed_rw9:
+        comment: 'Rewrites fuer Pfizermed'
+        rewrite_cond:
+          - '%%{ich-trickse}{HTTP_HOST} ^(dev-www-pfizermed-de.pixelpark.net)$'
+        rewrite_rule:
+          - ^/videos/was-ihnen-eliquisr-bieten-kann.htm$ https://dev-www-pfizermed-de.pixelpark.net/index.php?id=7736 [R=301,L]
+      - pfizermed_rw10:
+        comment: 'Rewrites fuer Pfizermed'
+        rewrite_cond:
+          - '%%{ich-trickse}{HTTP_HOST} ^(dev-www-pfizermed-de.pixelpark.net)$'
+        rewrite_rule:
+          - ^/produktseiten/toviaz/toviazr-ergebnisse-der-sofia-studie.htm?WT.mc_id=400599&WT.ban=1&?dl=bc6f1b4dc7f4af667df763bdbe04a7be https://dev-www-pfizermed-de.pixelpark.net/toviaz_sofia_studie.htm?dl=25f2422239bacd8903d355da10781238 [R=301,L]
+      - pfizermed_rw11:
+        comment: 'Rewrites fuer Pfizermed'
+        rewrite_cond:
+          - '%%{ich-trickse}{HTTP_HOST} ^(dev-www-pfizermed-de.pixelpark.net)$'
+        rewrite_rule:
+          - ^/produktseiten/toviaz/toviazr-sofia-studie-im-video-podcast.htm$ https://dev-www-pfizermed-de.pixelpark.net/index.php?id=7699 [R=301,L]
+      - pfizermed_rw12:
+        comment: 'Rewrites fuer Pfizermed'
+        rewrite_cond:
+          - '%%{ich-trickse}{HTTP_HOST} ^(dev-www-pfizermed-de.pixelpark.net)$'
+        rewrite_rule:
+          - ^/virtueller-ad/kontaktformular-virtueller-ad.htm$ https://dev-www-pfizermed-de.pixelpark.net/index.php?id=7704 [R=301,L]
+      - pfizermed_rw13:
+        comment: 'Rewrites fuer Pfizermed'
+        rewrite_cond:
+          - '%%{ich-trickse}{HTTP_HOST} ^(dev-www-pfizermed-de.pixelpark.net)$'
+        rewrite_rule:
+          - ^/fortbildungen/service-zum-fortbildungsprogramm.htm$ https://dev-www-pfizermed-de.pixelpark.net/index.php?id=7708 [R=301,L]
+      - pfizermed_rw14:
+        comment: 'Rewrites fuer Pfizermed'
+        rewrite_cond:
+          - '%%{ich-trickse}{HTTP_HOST} ^(dev-www-pfizermed-de.pixelpark.net)$'
+        rewrite_rule:
+          - ^/fileadmin/pfizer.de/documents/gi/(.*).pdf$ https://%{SERVER_NAME}/fileadmin/produktdatenbank/pdf/$1.pdf [R=301,L,QSA]
+      - pfizermed_rw15:
+        comment: 'Rewrites fuer Pfizermed'
+        rewrite_cond:
+          - '%%{ich-trickse}{HTTP_HOST} ^(dev-www-pfizermed-de.pixelpark.net)$'
+        rewrite_rule:
+          - ^/fileadmin/pfizer.de/documents/fi/(.*).pdf$ https://%{SERVER_NAME}/fileadmin/produktdatenbank/pdf/$1.pdf [R=301,L,QSA]
+      - pfizermed_rw16:
+        comment: 'Rewrites fuer Pfizermed'
+        rewrite_cond:
+          - '%%{ich-trickse}{HTTP_HOST} ^(dev-www-pfizermed-de.pixelpark.net)$'
+          - '%%{ich-trickse}{REQUEST_URI} ^/produktprofile/lyrica.htm$'
+          - '%%{ich-trickse}{QUERY_STRING} ^dl=8d105f114b13635c44237041a5e1f095$'
+        rewrite_rule:
+          - ^(.*)$ https://dev-www-pfizermed-de.pixelpark.net/medikamente/medikamente-a-bis-z/lyrica-r-hartkapseln.htm?dl=043d16a68cbc1087ae53eed9dff81739 [R=301,L]
+      - pfizermed_rw17:
+        comment: 'Rewrites fuer Pfizermed'
+        rewrite_cond:
+          - '%%{ich-trickse}{HTTP_HOST} ^(dev-www-pfizermed-de.pixelpark.net)$'
+          - '%%{ich-trickse}{REQUEST_URI} ^/produktprofile/lyrica-loesung.htm$'
+          - '%%{ich-trickse}{QUERY_STRING} ^dl=dcd7ae728fe0772139c1e1473716481f$'
+        rewrite_rule:
+          - ^(.*)$ https://dev-www-pfizermed-de.pixelpark.net/medikamente/medikamente-a-bis-z/lyrica-r-loesung.htm?dl=abe8a878b57e323abd07c543d0b51ccc [R=301,L]
+      - pfizermed_rw18:
+        comment: 'Rewrites fuer Pfizermed'
+        rewrite_cond:
+          - '%%{ich-trickse}{HTTP_HOST} ^(dev-www-pfizermed-de.pixelpark.net)$'
+          - '%%{ich-trickse}{REQUEST_URI} ^/die-dermatom-karte.htm$'
+          - '%%{ich-trickse}{QUERY_STRING} ^dl=43201239bc9ef70f6912dafa9a85b46d$'
+        rewrite_rule:
+          - ^(.*)$ https://dev-www-pfizermed-de.pixelpark.net/dermatom_karte.htm?dl=6a937294b4b10c36821d6c2460d024a5 [R=301,L]
+      - pfizermed_rw19:
+        comment: 'Rewrites fuer Pfizermed'
+        rewrite_cond:
+          - '%%{ich-trickse}{HTTP_HOST} ^(dev-www-pfizermed-de.pixelpark.net)$'
+          - '%%{ich-trickse}{REQUEST_URI} ^/handhabung-lyrica-loesung/news/0.htm$'
+          - '%%{ich-trickse}{QUERY_STRING} ^dl=a88d682c81bb22b0fed558376aa29e91$'
+        rewrite_rule:
+          - ^(.*)$ https://dev-www-pfizermed-de.pixelpark.net/lyrica_edetailing?dl=5940052744918c5d8c78d2b2d960675b [R=301,L]
+      - pfizermed_rw20:
+        comment: 'Rewrites fuer Pfizermed'
+        rewrite_cond:
+          - '%%{ich-trickse}{HTTP_HOST} ^(dev-www-pfizermed-de.pixelpark.net)$'
+          - '%%{ich-trickse}{REQUEST_URI} ^/downloads/lyrica-ppt-extra-sonderdruck.htm$'
+          - '%%{ich-trickse}{QUERY_STRING} ^dl=4f82556463a49a9e9dbc3545481dd299$'
+        rewrite_rule:
+          - ^(.*)$ https://dev-www-pfizermed-de.pixelpark.net/lyrica_sonderdruck_ppt_extra.htm?dl=9bed39730d34b08691b38525479c8a27 [R=301,L]
+      - pfizermed_rw21:
+        comment: 'Rewrites fuer Pfizermed'
+        rewrite_cond:
+          - '%%{ich-trickse}{HTTP_HOST} ^(dev-www-pfizermed-de.pixelpark.net)$'
+          - '%%{ich-trickse}{REQUEST_URI} ^/videos/neuropathischer-schmerz-patientenvideo/video/0.htm$'
+          - '%%{ich-trickse}{QUERY_STRING} ^dl=d6a9696fd84e5f7df8f3249d74d7f2dd$'
+        rewrite_rule:
+          - ^(.*)$ https://dev-www-pfizermed-de.pixelpark.net/neuropatischer_schmerz_patientenvideo.htm?dl=68da218e298706dee34024a3548baae3 [R=301,L]
+      - pfizermed_rw22:
+        comment: 'Rewrites fuer Pfizermed'
+        rewrite_cond:
+          - '%%{ich-trickse}{HTTP_HOST} ^(dev-www-pfizermed-de.pixelpark.net)$'
+          - '%%{ich-trickse}{REQUEST_URI} ^/fortbildungen/generalisierte-angststoerung-expertenvortraege-im-video.htm$'
+          - '%%{ich-trickse}{QUERY_STRING} ^dl=5996a02b175b0f233bcb885fa30d6b56$'
+        rewrite_rule:
+          - ^(.*)$ https://dev-www-pfizermed-de.pixelpark.net/generalisierte_angststoerung_expertenvortraege.htm?dl=498d9ffda73262b42a414722b5889048 [R=301,L]
+      - pfizermed_rw23:
+        comment: 'Rewrites fuer Pfizermed'
+        rewrite_cond:
+          - '%%{ich-trickse}{HTTP_HOST} ^(dev-www-pfizermed-de.pixelpark.net)$'
+          - '%%{ich-trickse}{REQUEST_URI} ^/videos/was-ihnen-eliquisr-bieten-kann/video/0.htm$'
+          - '%%{ich-trickse}{QUERY_STRING} ^dl=3a513f27f38f3d3b48db006c71b56dea$'
+        rewrite_rule:
+          - ^(.*)$ https://dev-www-pfizermed-de.pixelpark.net/was_ihnen_eliquis_bieten_kann.htm?dl=18dbe987148a7641d1522a8fca07ce74 [R=301,L]
+      - pfizermed_rw24:
+        comment: 'Rewrites fuer Pfizermed'
+        rewrite_cond:
+          - '%%{ich-trickse}{HTTP_HOST} ^(dev-www-pfizermed-de.pixelpark.net)$'
+          - '%%{ich-trickse}{REQUEST_URI} ^/virtueller-ad.htm$'
+          - '%%{ich-trickse}{QUERY_STRING} ^dl=f8ce79a8b2c71eaa48d48bc4d69957d9$'
+        rewrite_rule:
+          - ^(.*)$ https://dev-www-pfizermed-de.pixelpark.net/der_virtuelle_aussendienst.htm?dl=7d302c8dda851aa5780d12b22a9973c8 [R=301,L]
+      - pfizer_rw1:
+        comment: 'Rewrites fuer Pfizer'
+        rewrite_cond:
+          - '%%{ich-trickse}{HTTP_HOST} ^(dev-www-pfizer-de.pixelpark.net)$'
+          - '%%{ich-trickse}{REQUEST_URI} ^(/?)$'
+          - '%%{ich-trickse}{QUERY_STRING} ^id=2940$'
+        rewrite_rule:
+          - ^(.*)$ https://dev-www-pfizer-de.pixelpark.net/? [R=301,L]
+      - pfizer_rw2:
+        comment: 'Rewrites fuer Pfizer'
+        rewrite_cond:
+          - '%%{ich-trickse}{HTTP_HOST} ^dev-www-pfizer-de.pixelpark.net$'
+          - '%%{ich-trickse}{REQUEST_URI} ^/seite-empfehlen$ [OR]'
+          - '%%{ich-trickse}{REQUEST_URI} ^/seite-empfehlen.htm$ [OR]'
+          - '%%{ich-trickse}{REQUEST_URI} ^/nc/seite-empfehlen$ [OR]'
+          - '%%{ich-trickse}{REQUEST_URI} ^/nc/seite-empfehlen.htm$ [OR]'
+          - '%%{ich-trickse}{REQUEST_URI} ^/forschung$ [OR]'
+          - '%%{ich-trickse}{REQUEST_URI} ^/forschung.htm$ [OR]'
+          - '%%{ich-trickse}{REQUEST_URI} ^/nc/forschung$ [OR]'
+          - '%%{ich-trickse}{REQUEST_URI} ^/nc/forschung.htm$'
+        rewrite_rule:
+          - ^(.*)$ https://dev-www-pfizer-de.pixelpark.net/ [R=301,L]
+      - pfizer_rw3:
+        comment: 'Rewrites fuer Pfizer'
+        rewrite_cond:
+          - '%%{ich-trickse}{HTTP_HOST} ^dev-www-pfizer-de.pixelpark.net$'
+          - '%%{ich-trickse}{REQUEST_URI} ^/nc/gesundheit$ [OR]'
+          - '%%{ich-trickse}{REQUEST_URI} ^/nc/gesundheit.htm$ [OR]'
+          - '%%{ich-trickse}{REQUEST_URI} ^/patienten$ [OR]'
+          - '%%{ich-trickse}{REQUEST_URI} ^/patienten.htm$ [OR]'
+          - '%%{ich-trickse}{REQUEST_URI} ^/nc/patienten$ [OR]'
+          - '%%{ich-trickse}{REQUEST_URI} ^/nc/patienten.htm$'
+        rewrite_rule:
+          - ^(.*)$ https://dev-www-pfizer-de.pixelpark.net/gesundheit [R=301,L]
+      - pfizer_rw4:
+        comment: 'Rewrites fuer Pfizer'
+        rewrite_cond:
+          - '%%{ich-trickse}{HTTP_HOST} ^dev-www-pfizer-de.pixelpark.net$'
+          - '%%{ich-trickse}{REQUEST_URI} ^/unternehmen$ [OR]'
+          - '%%{ich-trickse}{REQUEST_URI} ^/unternehmen.htm$ [OR]'
+          - '%%{ich-trickse}{REQUEST_URI} ^/nc/unternehmen$ [OR]'
+          - '%%{ich-trickse}{REQUEST_URI} ^/nc/unternehmen.htm$'
+        rewrite_rule:
+          - ^(.*)$ https://dev-www-pfizer-de.pixelpark.net/ueber-pfizer [R=301,L]
+      - pfizer_rw5:
+        comment: 'Rewrites fuer Pfizer'
+        rewrite_cond:
+          - '%%{ich-trickse}{HTTP_HOST} ^dev-www-pfizer-de.pixelpark.net$'
+          - '%%{ich-trickse}{REQUEST_URI} ^/medien$ [OR]'
+          - '%%{ich-trickse}{REQUEST_URI} ^/medien.htm$ [OR]'
+          - '%%{ich-trickse}{REQUEST_URI} ^/nc/medien$ [OR]'
+          - '%%{ich-trickse}{REQUEST_URI} ^/nc/medien.htm$'
+        rewrite_rule:
+          - ^(.*)$ https://dev-www-pfizer-de.pixelpark.net/presse/meldungen [R=301,L]
+      - pfizer_rw6:
+        comment: 'Rewrites fuer Pfizer'
+        rewrite_cond:
+          - '%%{ich-trickse}{HTTP_HOST} ^dev-www-pfizer-de.pixelpark.net$'
+          - '%%{ich-trickse}{REQUEST_URI} ^/medikamente$ [OR]'
+          - '%%{ich-trickse}{REQUEST_URI} ^/medikamente.htm$ [OR]'
+          - '%%{ich-trickse}{REQUEST_URI} ^/nc/medikamente$ [OR]'
+          - '%%{ich-trickse}{REQUEST_URI} ^/nc/medikamente.htm$'
+        rewrite_rule:
+          - ^(.*)$ https://dev-www-pfizer-de.pixelpark.net/medikamente-produkte [R=301,L]
+      - pfizer_rw7:
+        comment: 'Rewrites fuer Pfizer'
+        rewrite_cond:
+          - '%%{ich-trickse}{HTTP_HOST} ^dev-www-pfizer-de.pixelpark.net$'
+          - '%%{ich-trickse}{REQUEST_URI} ^/nebenwirkungen-melden$ [OR]'
+          - '%%{ich-trickse}{REQUEST_URI} ^/nebenwirkungen-melden.htm$ [OR]'
+          - '%%{ich-trickse}{REQUEST_URI} ^/nc/nebenwirkungen-melden$ [OR]'
+          - '%%{ich-trickse}{REQUEST_URI} ^/nc/nebenwirkungen-melden.htm$'
+        rewrite_rule:
+          - ^(.*)$ https://dev-www-pfizer-de.pixelpark.net/nc/footer/nebenwirkungen-melden [R=301,L]
+      - pfizer_rw8:
+        comment: 'Rewrites fuer Pfizer'
+        rewrite_cond:
+          - '%%{ich-trickse}{HTTP_HOST} ^dev-www-pfizer-de.pixelpark.net$'
+          - '%%{ich-trickse}{REQUEST_URI} ^/agb$ [OR]'
+          - '%%{ich-trickse}{REQUEST_URI} ^/agb.htm$'
+        rewrite_rule:
+          - ^(.*)$ https://dev-www-pfizer-de.pixelpark.net/footer/agb [R=301,L]
+      - pfizer_rw9:
+        comment: 'Rewrites fuer Pfizer'
+        rewrite_cond:
+          - '%%{ich-trickse}{HTTP_HOST} ^dev-www-pfizer-de.pixelpark.net$'
+          - '%%{ich-trickse}{REQUEST_URI} ^/einkauf-de$ [OR]'
+          - '%%{ich-trickse}{REQUEST_URI} ^/einkauf-de.htm$'
+        rewrite_rule:
+          - ^(.*)$ https://dev-www-pfizer-de.pixelpark.net/footer/agb/einkauf-en [R=301,L]
+      - pfizer_rw10:
+        comment: 'Rewrites fuer Pfizer'
+        rewrite_cond:
+          - '%%{ich-trickse}{HTTP_HOST} ^dev-www-pfizer-de.pixelpark.net$'
+          - '%%{ich-trickse}{REQUEST_URI} ^/engagement$ [OR]'
+          - '%%{ich-trickse}{REQUEST_URI} ^/engagement.htm$'
+        rewrite_rule:
+          - ^(.*)$ https://dev-www-pfizer-de.pixelpark.net/ueber-pfizer/engagement [R=301,L]
+      - pfizer_rw11:
+        comment: 'Rewrites fuer Pfizer'
+        rewrite_cond:
+          - '%%{ich-trickse}{HTTP_HOST} ^dev-www-pfizer-de.pixelpark.net$'
+          - '%%{ich-trickse}{REQUEST_URI} ^/gesundheit-alt/der-virtuelle-beipackzettel$ [OR]'
+          - '%%{ich-trickse}{REQUEST_URI} ^/gesundheit-alt/der-virtuelle-beipackzettel.htm$'
+        rewrite_rule:
+          - ^(.*)$ https://dev-www-pfizer-de.pixelpark.net/services/beipackzettel-verstehen [R=301,L]
+      - pfizer_rw12:
+        comment: 'Rewrites fuer Pfizer'
+        rewrite_cond:
+          - '%%{ich-trickse}{HTTP_HOST} ^dev-www-pfizer-de.pixelpark.net$'
+          - '%%{ich-trickse}{REQUEST_URI} ^/impressum$ [OR]'
+          - '%%{ich-trickse}{REQUEST_URI} ^/impressum.htm$'
+        rewrite_rule:
+          - ^(.*)$ https://dev-www-pfizer-de.pixelpark.net/footer/impressum [R=301,L]
+      - pfizer_rw13:
+        comment: 'Rewrites fuer Pfizer'
+        rewrite_cond:
+          - '%%{ich-trickse}{HTTP_HOST} ^dev-www-pfizer-de.pixelpark.net$'
+          - '%%{ich-trickse}{REQUEST_URI} ^/kontakt$ [OR]'
+          - '%%{ich-trickse}{REQUEST_URI} ^/kontakt.htm$'
+        rewrite_rule:
+          - ^(.*)$ https://dev-www-pfizer-de.pixelpark.net/footer/kontakt [R=301,L]
+      - pfizer_rw14:
+        comment: 'Rewrites fuer Pfizer'
+        rewrite_cond:
+          - '%%{ich-trickse}{HTTP_HOST} ^dev-www-pfizer-de.pixelpark.net$'
+          - '%%{ich-trickse}{REQUEST_URI} ^/nutzungsbedingungen$ [OR]'
+          - '%%{ich-trickse}{REQUEST_URI} ^/nutzungsbedingungen.htm$'
+        rewrite_rule:
+          - ^(.*)$ https://dev-www-pfizer-de.pixelpark.net/footer/nutzungsbedingungen [R=301,L]
+      - pfizer_rw15:
+        comment: 'Rewrites fuer Pfizer'
+        rewrite_cond:
+          - '%%{ich-trickse}{HTTP_HOST} ^dev-www-pfizer-de.pixelpark.net$'
+          - '%%{ich-trickse}{REQUEST_URI} ^/pflichtangaben$ [OR]'
+          - '%%{ich-trickse}{REQUEST_URI} ^/pflichtangaben.htm$'
+        rewrite_rule:
+          - ^(.*)$ https://dev-www-pfizer-de.pixelpark.net/footer/pflichtangaben [R=301,L]
+      - pfizer_rw16:
+        comment: 'Rewrites fuer Pfizer'
+        rewrite_cond:
+          - '%%{ich-trickse}{HTTP_HOST} ^dev-www-pfizer-de.pixelpark.net$'
+          - '%%{ich-trickse}{REQUEST_URI} ^/sitemap$ [OR]'
+          - '%%{ich-trickse}{REQUEST_URI} ^/sitemap.htm$'
+        rewrite_rule:
+          - ^(.*)$ https://dev-www-pfizer-de.pixelpark.net/footer/sitemap [R=301,L]
+      - pfizer_rw17:
+        comment: 'Rewrites fuer Pfizer'
+        rewrite_cond:
+          - '%%{ich-trickse}{HTTP_HOST} ^dev-www-pfizer-de.pixelpark.net$'
+          - '%%{ich-trickse}{REQUEST_URI} ^/verkauf-de$ [OR]'
+          - '%%{ich-trickse}{REQUEST_URI} ^/verkauf-de.htm$'
+        rewrite_rule:
+          - ^(.*)$ https://dev-www-pfizer-de.pixelpark.net/footer/agb/verkauf-de [R=301,L]
+      - PFIZ-1760:
+        comment: https://jira.pixelpark.com/jira/browse/PFIZ-1760
+        rewrite_rule:
+          - ^/medizinische-anfragen.htm$ https://dev-www-pfizer-de.pixelpark.net/footer/medizinische-anfragen.htm [R=301,L]
+      - PFIZ-1770:
+        comment: https://jira.pixelpark.com/jira/browse/PFIZ-1770
+        rewrite_rule:
+          - ^/fileadmin/pfizer.de/documents/gi/ https://dev-www-pfizer-de.pixelpark.net/medikamente-produkte.htm [R=301,L]
+      - PFIZ-1837:
+        comment: https://jira.pixelpark.com/jira/browse/PFIZ-1837
+        rewrite_cond:
+          - '%%{ich-trickse}{HTTPS} !=on'
+        rewrite_rule:
+          - ^(.*)$ https://%%{ich-trickse}{HTTP_HOST}$1 [R=301,L]
+#      - pfizer_rw18:
+#        comment: 'https://jira.pixelpark.com/jira/browse/PFIZ-2511'
+#        rewrite_rule:
+#          - ^/services/aelter-werden.htm https://dev-www-pfizer-de.pixelpark.net/services.htm [L,R=301]
+#      - pfizer_rw19:
+#        comment: 'https://jira.pixelpark.com/jira/browse/PFIZ-2511'
+#        rewrite_rule:
+#          - ^/services/arzneimittelfaelschung.htm https://dev-www-pfizer-de.pixelpark.net/services.htm [L,R=301]
+#      - pfizer_rw20:
+#        comment: 'https://jira.pixelpark.com/jira/browse/PFIZ-2511'
+#        rewrite_rule:
+#          - ^/services/beipackzettel-verstehen.htm https://dev-www-pfizer-de.pixelpark.net/services.htm [L,R=301]
+#      - pfizer_rw21:
+#        comment: 'https://jira.pixelpark.com/jira/browse/PFIZ-2511'
+#        rewrite_rule:
+#          - ^/services/erektionsstoerungen.htm https://dev-www-pfizer-de.pixelpark.net/services.htm [L,R=301]
+#      - pfizer_rw22:
+#        comment: 'https://jira.pixelpark.com/jira/browse/PFIZ-2511'
+#        rewrite_rule:
+#          - ^/services/haemophilie.htm https://dev-www-pfizer-de.pixelpark.net/services.htm [L,R=301]
+#      - pfizer_rw23:
+#        comment: 'https://jira.pixelpark.com/jira/browse/PFIZ-2511'
+#        rewrite_rule:
+#          - ^/services/ich-beim-arzt.htm https://dev-www-pfizer-de.pixelpark.net/services.htm [L,R=301]
+#      - pfizer_rw24:
+#        comment: 'https://jira.pixelpark.com/jira/browse/PFIZ-2511'
+#        rewrite_rule:
+#          - ^/services/impfungen.htm https://dev-www-pfizer-de.pixelpark.net/services.htm [L,R=301]
+#      - pfizer_rw25:
+#        comment: 'https://jira.pixelpark.com/jira/browse/PFIZ-2511'
+#        rewrite_rule:
+#          - ^/services/klinische-studien.htm https://dev-www-pfizer-de.pixelpark.net/services.htm [L,R=301]
+#      - pfizer_rw26:
+#        comment: 'https://jira.pixelpark.com/jira/browse/PFIZ-2511'
+#        rewrite_rule:
+#          - ^/services/personalisierte-krebsmedizin.htm https://dev-www-pfizer-de.pixelpark.net/services.htm [L,R=301]
+#      - pfizer_rw27:
+#        comment: 'https://jira.pixelpark.com/jira/browse/PFIZ-2511'
+#        rewrite_rule:
+#          - ^/services/rheuma.htm https://dev-www-pfizer-de.pixelpark.net/services.htm [L,R=301]
+#      - pfizer_rw28:
+#        comment: 'https://jira.pixelpark.com/jira/browse/PFIZ-2511'
+#        rewrite_rule:
+#          - ^/services/schlaganfallvorsorge.htm https://dev-www-pfizer-de.pixelpark.net/services.htm [L,R=301]
+#      - pfizer_rw29:
+#        comment: 'https://jira.pixelpark.com/jira/browse/PFIZ-2511'
+#        rewrite_rule:
+#          - ^/services/schmerz.htm https://dev-www-pfizer-de.pixelpark.net/services.htm [L,R=301]
+#      - pfizer_rw30:
+#        comment: 'https://jira.pixelpark.com/jira/browse/PFIZ-2511'
+#        rewrite_rule:
+#          - ^/services/seltene-erkrankungen.htm https://dev-www-pfizer-de.pixelpark.net/services.htm [L,R=301]
+#      - pfizer_rw31:
+#        comment: 'https://jira.pixelpark.com/jira/browse/PFIZ-2511'
+#        rewrite_rule:
+#          - ^/services/social-media.htm https://dev-www-pfizer-de.pixelpark.net/services.htm [L,R=301]
+#      - pfizer_rw32:
+#        comment: 'https://jira.pixelpark.com/jira/browse/PFIZ-2511'
+#        rewrite_rule:
+#          - ^/services/ueberaktive-blase.htm https://dev-www-pfizer-de.pixelpark.net/services.htm [L,R=301]
+
+site::profile::apache::vhosts:
+  dev-pfizer-berlin:
+    servername: dev-www-pfizer-berlin.pixelpark.net
+    docroot: '/srv/www/mspfizerberlin'
+    port: 80
+    directories:
+      - directory_root:
+        provider: directory
+        path: '/srv/www/mspfizerberlin'
+        options:
+          - FollowSymLinks
+          - MultiViews
+        allow_override:
+          - All
+      - location_root:
+        provider: location
+        path: '/'
+        auth_type: Digest
+        auth_name: pixelrealm
+        auth_digest_provider: file
+        auth_digest_algorithm: MD5
+        auth_user_file: '/etc/httpd/htdigest'
+        auth_require: 'valid-user'
+        require:
+          - 'ip 217.66.55 217.66.50 217.66.51 217.66.48.130 168.224.160 10.121.101 204.114.176 204.114.216 148.168.40 202.32.173 204.114.248 168.224.1 168.224.160 148.168.127 204.114.196 193.235.226 212.58.14 204.114.199 155.94.99 155.94.78 155.94.62 218.213.241 155.94.70 155.94.110 222.73.72 155.94.119 155.94.55 68.58.141.20 174.137.32.22 15.213.17 85.183.14'
+
+  dev-ich-beim-arzt:
+    servername: dev-ich-beim-arzt-de.pixelpark.net
+    docroot: '/srv/www/dev-www.ich-beim-arzt.de'
+    port: 80
+    directories:
+      - directory_root:
+        provider: directory
+        path: '/srv/www/dev-www.ich-beim-arzt.de'
+        options:
+          - FollowSymLinks
+          - MultiViews
+        allow_override:
+          - All
+      - location_root:
+        provider: location
+        path: '/'
+        auth_type: Digest
+        auth_name: pixelrealm
+        auth_digest_provider: file
+        auth_digest_algorithm: MD5
+        auth_user_file: '/etc/httpd/htdigest'
+        auth_require: 'valid-user'
+        require:
+          - 'ip 217.66.55 217.66.50 217.66.51 217.66.48.130 168.224.160 10.121.101 204.114.176 204.114.216 148.168.40 202.32.173 204.114.248 168.224.1 168.224.160 148.168.127 204.114.196 193.235.226 212.58.14 204.114.199 155.94.99 155.94.78 155.94.62 218.213.241 155.94.70 155.94.110 222.73.72 155.94.119 155.94.55 68.58.141.20 174.137.32.22 15.213.17 85.183.14'
+
+  dev-lungenkrebs-testen-at:
+    servername: dev-www-lungenkrebs-testen-at.pixelpark.net
+    docroot: '/srv/www/dev-www.lungenkrebs-testen.at'
+    port: 80
+    directories:
+      - directory_root:
+        provider: directory
+        path: '/srv/www/dev-www.lungenkrebs-testen.at'
+        options:
+          - FollowSymLinks
+          - MultiViews
+        allow_override:
+          - All
+      - location_root:
+        provider: location
+        path: '/'
+        auth_type: Digest
+        auth_name: pixelrealm
+        auth_digest_provider: file
+        auth_digest_algorithm: MD5
+        auth_user_file: '/etc/httpd/htdigest'
+        auth_require: 'valid-user'
+        require:
+          - 'ip 217.66.55 217.66.50 217.66.51 217.66.48.130 168.224.160 10.121.101 204.114.176 204.114.216 148.168.40 202.32.173 204.114.248 168.224.1 168.224.160 148.168.127 204.114.196 193.235.226 212.58.14 204.114.199 155.94.99 155.94.78 155.94.62 218.213.241 155.94.70 155.94.110 222.73.72 155.94.119 155.94.55 68.58.141.20 174.137.32.22 15.213.17 85.183.14'
+
+  dev-lungenkrebs-testen-de:
+    servername: dev-www-lungenkrebs-testen-de.pixelpark.net
+    docroot: '/srv/www/dev-www.lungenkrebs-testen.de'
+    port: 80
+    directories:
+      - directory_root:
+        provider: directory
+        path: '/srv/www/dev-www.lungenkrebs-testen.de'
+        options:
+          - FollowSymLinks
+          - MultiViews
+        allow_override:
+          - All
+      - location_root:
+        provider: location
+        path: '/'
+        auth_type: Digest
+        auth_name: pixelrealm
+        auth_digest_provider: file
+        auth_digest_algorithm: MD5
+        auth_user_file: '/etc/httpd/htdigest'
+        auth_require: 'valid-user'
+        require:
+          - 'ip 217.66.55 217.66.50 217.66.51 217.66.48.130 168.224.160 10.121.101 204.114.176 204.114.216 148.168.40 202.32.173 204.114.248 168.224.1 168.224.160 148.168.127 204.114.196 193.235.226 212.58.14 204.114.199 155.94.99 155.94.78 155.94.62 218.213.241 155.94.70 155.94.110 222.73.72 155.94.119 155.94.55 68.58.141.20 174.137.32.22 15.213.17 85.183.14'
+  dev-lungenkrebs-testen-de_ssl:
+    servername: dev-www-lungenkrebs-testen-de.pixelpark.net
+    docroot: '/srv/www/dev-www.lungenkrebs-testen.de'
+    port: 443
+    ssl: true
+    ssl_cert: /etc/pki/tls/certs/wildcard.pixelpark.net-cert.pem
+    ssl_chain: /etc/pki/tls/certs/wildcard.pixelpark.net-cert.pem
+    ssl_key: /etc/pki/tls/private/wildcard.pixelpark.net-key.pem
+    directories:
+      - directory_root:
+        provider: directory
+        path: '/srv/www/dev-www.lungenkrebs-testen.de'
+        options:
+          - FollowSymLinks
+          - MultiViews
+        allow_override:
+          - All
+      - location_root:
+        provider: location
+        path: '/'
+        auth_type: Digest
+        auth_name: pixelrealm
+        auth_digest_provider: file
+        auth_digest_algorithm: MD5
+        auth_user_file: '/etc/httpd/htdigest'
+        auth_require: 'valid-user'
+        require:
+          - 'ip 217.66.55 217.66.50 217.66.51 217.66.48.130 168.224.160 10.121.101 204.114.176 204.114.216 148.168.40 202.32.173 204.114.248 168.224.1 168.224.160 148.168.127 204.114.196 193.235.226 212.58.14 204.114.199 155.94.99 155.94.78 155.94.62 218.213.241 155.94.70 155.94.110 222.73.72 155.94.119 155.94.55 68.58.141.20 174.137.32.22 15.213.17 85.183.14'
+
+  dev-impf2ab60:
+    servername: dev-www-impf2ab60-de.pixelpark.net
+    serveraliases:
+      - dev-www-impf2-de.pixelpark.net
+      - dev-www-impf2ab60-de.pixelpark.net
+      - dev-www-impfzweiab60-de.pixelpark.net
+      - dev-www-impf2absechzig-de.pixelpark.net
+      - dev-www-impfzweiabsechzig-de.pixelpark.net
+      - dev-www-impf-zwei-ab-sechzig-de.pixelpark.net
+      - dev-www-impf-2-ab-60-de.pixelpark.net
+      - dev-www-impf2-ab-60-de.pixelpark.net
+    docroot: '/srv/www/dev-www.impf2ab60.de'
+    port: 80
+    directories:
+      - directory_root:
+        provider: directory
+        path: '/srv/www/dev-www.impf2ab60.de'
+        options:
+          - FollowSymLinks
+          - MultiViews
+        allow_override:
+          - All
+      - location_root:
+        provider: location
+        path: '/'
+        auth_type: Digest
+        auth_name: pixelrealm
+        auth_digest_provider: file
+        auth_digest_algorithm: MD5
+        auth_user_file: '/etc/httpd/htdigest'
+        auth_require: 'valid-user'
+        require:
+          - 'ip 217.66.55 217.66.50 217.66.51 217.66.48.130 168.224.160 10.121.101 204.114.176 204.114.216 148.168.40 202.32.173 204.114.248 168.224.1 168.224.160 148.168.127 204.114.196 193.235.226 212.58.14 204.114.199 155.94.99 155.94.78 155.94.62 218.213.241 155.94.70 155.94.110 222.73.72 155.94.119 155.94.55 68.58.141.20 174.137.32.22 15.213.17 85.183.14'
+
+  dev-wegweiser-rheuma-psoriasis:
+    servername: dev-www-wegweiser-rheuma-psoriasis-de.pixelpark.net
+    docroot: '/srv/www/dev-www.wegweiser-rheuma-psoriasis.de/current'
+    manage_docroot: false
+    port: 80
+    directories:
+      - directory_root:
+        provider: directory
+        path: '/srv/www/dev-www.wegweiser-rheuma-psoriasis.de/current'
+        options:
+          - FollowSymLinks
+          - MultiViews
+        allow_override:
+          - All
+      - location_root:
+        provider: location
+        path: '/'
+        auth_type: Digest
+        auth_name: pixelrealm
+        auth_digest_provider: file
+        auth_digest_algorithm: MD5
+        auth_user_file: '/etc/httpd/htdigest'
+        auth_require: 'valid-user'
+        require:
+          - 'ip 217.66.55 217.66.50 217.66.51 217.66.48.130 168.224.160 10.121.101 204.114.176 204.114.216 148.168.40 202.32.173 204.114.248 168.224.1 168.224.160 148.168.127 204.114.196 193.235.226 212.58.14 204.114.199 155.94.99 155.94.78 155.94.62 218.213.241 155.94.70 155.94.110 222.73.72 155.94.119 155.94.55 68.58.141.20 174.137.32.22 15.213.17 85.183.14'
+    rewrites:
+      - www:
+        comment: 'Alles nach dev-www'
+        rewrite_cond:
+          - '%%{ich-trickse}{HTTP_HOST} ^wegweiser-rheuma-psoriasis.de$'
+        rewrite_rule:
+          - ^(.*)$ https://dev-www.wegweiser-rheuma-psoriasis.de$1 [R=301,L]
+      - rheuma:
+        comment: 'Redirect to rheuma domain'
+        rewrite_cond:
+          - '%%{ich-trickse}{REQUEST_URI} ^/rheuma.html$'
+        rewrite_rule:
+          - ^/rheuma.html$ https://dev-www-wegweiser-rheuma-de.pixelpark.net [R=301,L]
+      - psoriasis:
+        comment: 'Redirect to psoriasis domain'
+        rewrite_cond:
+          - '%%{ich-trickse}{REQUEST_URI} ^/psoriasis.html$'
+        rewrite_rule:
+          - ^/psoriasis.html$ https://dev-www-wegweiser-psoriasis-de.pixelpark.net [R=301,L]
+  dev-wegweiser-rheuma-psoriasis_ssl:
+    servername: dev-www-wegweiser-rheuma-psoriasis-de.pixelpark.net
+    docroot: '/srv/www/dev-www.wegweiser-rheuma-psoriasis.de/current'
+    manage_docroot: false
+    port: 443
+    ssl: true
+    ssl_cert: /etc/pki/tls/certs/wildcard.pixelpark.net-cert.pem
+    ssl_chain: /etc/pki/tls/certs/wildcard.pixelpark.net-cert.pem
+    ssl_key: /etc/pki/tls/private/wildcard.pixelpark.net-key.pem
+    directories:
+      - directory_root:
+        provider: directory
+        path: '/srv/www/dev-www.wegweiser-rheuma-psoriasis.de/current'
+        options:
+          - FollowSymLinks
+          - MultiViews
+        allow_override:
+          - All
+      - location_root:
+        provider: location
+        path: '/'
+        auth_type: Digest
+        auth_name: pixelrealm
+        auth_digest_provider: file
+        auth_digest_algorithm: MD5
+        auth_user_file: '/etc/httpd/htdigest'
+        auth_require: 'valid-user'
+        require:
+          - 'ip 217.66.55 217.66.50 217.66.51 217.66.48.130 168.224.160 10.121.101 204.114.176 204.114.216 148.168.40 202.32.173 204.114.248 168.224.1 168.224.160 148.168.127 204.114.196 193.235.226 212.58.14 204.114.199 155.94.99 155.94.78 155.94.62 218.213.241 155.94.70 155.94.110 222.73.72 155.94.119 155.94.55 68.58.141.20 174.137.32.22 15.213.17 85.183.14'
+    rewrites:
+      - rheuma:
+        comment: 'Redirect to rheuma domain'
+        rewrite_cond:
+          - '%%{ich-trickse}{REQUEST_URI} ^/rheuma.html$'
+        rewrite_rule:
+          - ^/rheuma.html$ https://dev-www-wegweiser-rheuma-de.pixelpark.net [R=301,L]
+      - psoriasis:
+        comment: 'Redirect to psoriasis domain'
+        rewrite_cond:
+          - '%%{ich-trickse}{REQUEST_URI} ^/psoriasis.html$'
+        rewrite_rule:
+          - ^/psoriasis.html$ https://dev-www-wegweiser-psoriasis-de.pixelpark.net [R=301,L]
+
+  dev-wegweiser-rheuma:
+    servername: dev-www-wegweiser-rheuma-de.pixelpark.net
+    docroot: '/srv/www/dev-www.wegweiser-rheuma-psoriasis.de/current'
+    manage_docroot: false
+    port: 80
+    directoryindex: rheuma.html
+    directories:
+      - directory_root:
+        provider: directory
+        path: '/srv/www/dev-www.wegweiser-rheuma-psoriasis.de/current'
+        options:
+          - FollowSymLinks
+          - MultiViews
+        allow_override:
+          - All
+      - location_root:
+        provider: location
+        path: '/'
+        auth_type: Digest
+        auth_name: pixelrealm
+        auth_digest_provider: file
+        auth_digest_algorithm: MD5
+        auth_user_file: '/etc/httpd/htdigest'
+        auth_require: 'valid-user'
+        require:
+          - 'ip 217.66.55 217.66.50 217.66.51 217.66.48.130 168.224.160 10.121.101 204.114.176 204.114.216 148.168.40 202.32.173 204.114.248 168.224.1 168.224.160 148.168.127 204.114.196 193.235.226 212.58.14 204.114.199 155.94.99 155.94.78 155.94.62 218.213.241 155.94.70 155.94.110 222.73.72 155.94.119 155.94.55 68.58.141.20 174.137.32.22 15.213.17 85.183.14'
+    rewrites:
+      - rheuma:
+        comment: 'Redirect to rheuma domain'
+        rewrite_cond:
+          - '%%{ich-trickse}{REQUEST_URI} ^/rheuma.html$'
+        rewrite_rule:
+          - ^/rheuma.html$ http://dev-www-wegweiser-rheuma-de.pixelpark.net [R=301,L]
+  dev-wegweiser-rheuma_ssl:
+    servername: dev-www-wegweiser-rheuma-de.pixelpark.net
+    docroot: '/srv/www/dev-www.wegweiser-rheuma-psoriasis.de/current'
+    manage_docroot: false
+    port: 443
+    ssl: true
+    ssl_cert: /etc/pki/tls/certs/wildcard.pixelpark.net-cert.pem
+    ssl_chain: /etc/pki/tls/certs/wildcard.pixelpark.net-cert.pem
+    ssl_key: /etc/pki/tls/private/wildcard.pixelpark.net-key.pem
+    directoryindex: rheuma.html
+    directories:
+      - directory_root:
+        provider: directory
+        path: '/srv/www/dev-www.wegweiser-rheuma-psoriasis.de/current'
+        options:
+          - FollowSymLinks
+          - MultiViews
+        allow_override:
+          - All
+      - location_root:
+        provider: location
+        path: '/'
+        auth_type: Digest
+        auth_name: pixelrealm
+        auth_digest_provider: file
+        auth_digest_algorithm: MD5
+        auth_user_file: '/etc/httpd/htdigest'
+        auth_require: 'valid-user'
+        require:
+          - 'ip 217.66.55 217.66.50 217.66.51 217.66.48.130 168.224.160 10.121.101 204.114.176 204.114.216 148.168.40 202.32.173 204.114.248 168.224.1 168.224.160 148.168.127 204.114.196 193.235.226 212.58.14 204.114.199 155.94.99 155.94.78 155.94.62 218.213.241 155.94.70 155.94.110 222.73.72 155.94.119 155.94.55 68.58.141.20 174.137.32.22 15.213.17 85.183.14'
+    rewrites:
+      - rheuma:
+        comment: 'Redirect to rheuma domain'
+        rewrite_cond:
+          - '%%{ich-trickse}{REQUEST_URI} ^/rheuma.html$'
+        rewrite_rule:
+          - ^/rheuma.html$ https://dev-www-wegweiser-rheuma-de.pixelpark.net [R=301,L]
+
+  dev-wegweiser-psoriasis:
+    servername: dev-www-wegweiser-psoriasis-de.pixelpark.net
+    docroot: '/srv/www/dev-www.wegweiser-rheuma-psoriasis.de/current'
+    manage_docroot: false
+    port: 80
+    directoryindex: psoriasis.html
+    directories:
+      - directory_root:
+        provider: directory
+        path: '/srv/www/dev-www.wegweiser-rheuma-psoriasis.de/current'
+        options:
+          - FollowSymLinks
+          - MultiViews
+        allow_override:
+          - All
+      - location_root:
+        provider: location
+        path: '/'
+        auth_type: Digest
+        auth_name: pixelrealm
+        auth_digest_provider: file
+        auth_digest_algorithm: MD5
+        auth_user_file: '/etc/httpd/htdigest'
+        auth_require: 'valid-user'
+        require:
+          - 'ip 217.66.55 217.66.50 217.66.51 217.66.48.130 168.224.160 10.121.101 204.114.176 204.114.216 148.168.40 202.32.173 204.114.248 168.224.1 168.224.160 148.168.127 204.114.196 193.235.226 212.58.14 204.114.199 155.94.99 155.94.78 155.94.62 218.213.241 155.94.70 155.94.110 222.73.72 155.94.119 155.94.55 68.58.141.20 174.137.32.22 15.213.17 85.183.14'
+    rewrites:
+      - rheuma:
+        comment: 'Redirect to rheuma domain'
+        rewrite_cond:
+          - '%%{ich-trickse}{REQUEST_URI} ^/psoriasis.html'
+        rewrite_rule:
+          - ^/psoriasis.html(.*)$ http://dev-www-wegweiser-psoriasis-de.pixelpark.net$1 [R=301,L]
+  dev-wegweiser-psoriasis_ssl:
+    servername: dev-www-wegweiser-psoriasis-de.pixelpark.net
+    docroot: '/srv/www/dev-www.wegweiser-rheuma-psoriasis.de/current'
+    manage_docroot: false
+    port: 443
+    ssl: true
+    ssl_cert: /etc/pki/tls/certs/wildcard.pixelpark.net-cert.pem
+    ssl_chain: /etc/pki/tls/certs/wildcard.pixelpark.net-cert.pem
+    ssl_key: /etc/pki/tls/private/wildcard.pixelpark.net-key.pem
+    directoryindex: psoriasis.html
+    directories:
+      - directory_root:
+        provider: directory
+        path: '/srv/www/dev-www.wegweiser-rheuma-psoriasis.de/current'
+        options:
+          - FollowSymLinks
+          - MultiViews
+        allow_override:
+          - All
+      - location_root:
+        provider: location
+        path: '/'
+        auth_type: Digest
+        auth_name: pixelrealm
+        auth_digest_provider: file
+        auth_digest_algorithm: MD5
+        auth_user_file: '/etc/httpd/htdigest'
+        auth_require: 'valid-user'
+        require:
+          - 'ip 217.66.55 217.66.50 217.66.51 217.66.48.130 168.224.160 10.121.101 204.114.176 204.114.216 148.168.40 202.32.173 204.114.248 168.224.1 168.224.160 148.168.127 204.114.196 193.235.226 212.58.14 204.114.199 155.94.99 155.94.78 155.94.62 218.213.241 155.94.70 155.94.110 222.73.72 155.94.119 155.94.55 68.58.141.20 174.137.32.22 15.213.17 85.183.14'
+    rewrites:
+      - rheuma:
+        comment: 'Redirect to rheuma domain'
+        rewrite_cond:
+          - '%%{ich-trickse}{REQUEST_URI} ^/psoriasis.html'
+        rewrite_rule:
+          - ^/psoriasis.html(.*)$ http://dev-www-wegweiser-psoriasis-de.pixelpark.net$1 [R=301,L]
+  dev-static.pfizer:
+    servername: dev-static-pfizer-de.pixelpark.net
+    docroot: '/srv/www/dev-static.pfizer.de'
+    port: 80
+    directories:
+      - directory_root:
+        provider: directory
+        path: '/srv/www/dev-static.pfizer.de'
+        options:
+          - FollowSymLinks
+          - MultiViews
+        allow_override:
+          - All
+      - location_root:
+        provider: location
+        path: '/'
+        auth_type: Digest
+        auth_name: pixelrealm
+        auth_digest_provider: file
+        auth_digest_algorithm: MD5
+        auth_user_file: '/etc/httpd/htdigest'
+        auth_require: 'valid-user'
+        require:
+          - 'ip 217.66.55 217.66.50 217.66.51 217.66.48.130 168.224.160 10.121.101 204.114.176 204.114.216 148.168.40 202.32.173 204.114.248 168.224.1 168.224.160 148.168.127 204.114.196 193.235.226 212.58.14 204.114.199 155.94.99 155.94.78 155.94.62 218.213.241 155.94.70 155.94.110 222.73.72 155.94.119 155.94.55 68.58.141.20 174.137.32.22 15.213.17 85.183.14'
+  dev-www-breastcancer-matters-de:
+    servername: dev-www-breastcancer-matters-de.pixelpark.net
+    docroot: '/srv/www/dev-www-breastcancer-matters-de.pixelpark.net/drupal'
+    port: 443
+    ssl: true
+    ssl_cert: /etc/pki/tls/certs/wildcard.pixelpark.net-cert.pem
+    ssl_chain: /etc/pki/tls/certs/wildcard.pixelpark.net-cert.pem
+    ssl_key: /etc/pki/tls/private/wildcard.pixelpark.net-key.pem
+    directories:
+      - directory_root:
+        provider: directory
+        path: '/srv/www/dev-www-breastcancer-matters-de.pixelpark.net/drupal'
+        options:
+          - FollowSymLinks
+          - MultiViews
+        allow_override:
+          - All
+      - location_root:
+        provider: location
+        path: '/'
+        auth_type: Digest
+        auth_name: pixelrealm
+        auth_digest_provider: file
+        auth_digest_algorithm: MD5
+        auth_user_file: '/etc/httpd/htdigest'
+        auth_require: 'valid-user'
+        require:
+          - 'ip 217.66.55 217.66.50 217.66.51 217.66.48.130 168.224.160 10.121.101 204.114.176 204.114.216 148.168.40 202.32.173 204.114.248 168.224.1 168.224.160 148.168.127 204.114.196 193.235.226 212.58.14 204.114.199 155.94.99 155.94.78 155.94.62 218.213.241 155.94.70 155.94.110 222.73.72 155.94.119 155.94.55 68.58.141.20 174.137.32.22 15.213.17 85.183.14'
diff --git a/customer/pfizer/dev-web02-pfizer-de.pixelpark.net.yaml b/customer/pfizer/dev-web02-pfizer-de.pixelpark.net.yaml
new file mode 100644 (file)
index 0000000..ce3d850
--- /dev/null
@@ -0,0 +1,467 @@
+---
+site::role: base
+site::additional_classes:
+  - apache::mod::headers
+  - site::profile::typo3
+  - site::profile::mysql_server
+  - logstash
+
+accounts::users:
+  stephan.vits:
+    apply: true
+    sudo: true
+    groups: apache
+  thomas.bussmeyer:
+    apply: true
+    sudo: true
+    groups: apache
+  romy.pohl:
+    apply: true
+    sudo: true
+    groups: apache
+  nikolai.potapov:
+    apply: true
+    sudo: true
+    groups: apache
+  andreas.pinto-koehler:
+    apply: true
+    sudo: true
+    groups: apache
+  deploy.vogel:
+    apply: true
+    sudo: false
+    groups: apache
+  service.typo3:
+    apply: true
+    sudo: false
+    groups: apache
+# TODO: Abwarten auf Ticket: https://jira.pixelpark.com/jira/browse/PPPUPPET-202
+#  csv_upload:
+#    uid: 25113
+#    apply: true
+#    comment: "CSV-Upload-User-from-Pfizer"
+#    sudo: false
+#    group: sftpgroup
+#    password: ENC[PKCS7,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]
+
+repo::remi_php55: true
+
+php::settings:
+  Date/date.timezone: Europe/Berlin
+  PHP/upload_max_filesize: '100M'
+  PHP/post_max_size: '100M'
+  PHP/max_execution_time: '3000'
+  PHP/memory_limit: '512M'
+  PHP/expose_php: 'Off'
+  Session/session.cookie_secure: 1
+  Session/session.cookie_httponly: 1
+  PHP/cgi.fix_pathinfo: '0'
+
+php::extensions:
+  gd: {}
+  opcache: {}
+  mysqlnd: {}
+  soap: {}
+  mbstring: {}
+  pecl-imagick: {}
+  pecl-uploadprogress: {}
+  pecl-memcache: {}
+  pecl-apcu: {}
+  pecl-xslcache: {}
+
+mysql::server::backup::backuppassword: ENC[PKCS7,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]
+mysql::server::root_password: ENC[PKCS7,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]
+
+site::profile::mysql_server::databases:
+  typo3_dev:
+    user: typo3
+    password: 'rRCmIY76dFrU'
+
+site::profile::typo3::projects:
+  dev-redaktion.pfizer.de:
+    site_path: /srv/www/dev-redaktion-pfizer-de
+    use_symlink: true
+    version: '6.2.15'
+    db_pass: sTXXXwsHHRCB
+    db_user: typo3
+    db_name: redaktion_dev
+    servername: dev-redaktion.pfizer.de
+    serveraliases:
+      - dev-redaktion-pfizer-de.pixelpark.net
+      - dev-web02-pfizer-de.pixelpark.net
+      - dev-redaktion-pfizer.pixelpark.net
+      - dev-redaktion-pfizermed-de.pixelpark.net
+      - dev-redaktion-ueberaktive-blase-de.pixelpark.net
+      - dev-redaktion-monatsring-de.pixelpark.net
+      - dev-redaktion-pain-detect-de.pixelpark.net
+      - dev-redaktion-meet-pfizer-de.pixelpark.net
+      - dev-redaktion-sab-simplex-de.pixelpark.net
+      - dev-redaktion-rauchfrei-durchstarten-de.pixelpark.net
+      - dev-redaktion-lyrica-de.pixelpark.net
+      - dev-redaktion02-pfizer-de.pixelpark.net
+      - dev-redaktion02-pfizermed-de.pixelpark.net
+      - dev-redaktion02-ueberaktive-blase-de.pixelpark.net
+      - dev-redaktion02-monatsring-de.pixelpark.net
+      - dev-redaktion02-pain-detect-de.pixelpark.net
+      - dev-redaktion02-meet-pfizer-de.pixelpark.net
+      - dev-redaktion02-sab-simplex-de.pixelpark.net
+      - dev-redaktion02-rauchfrei-durchstarten-de.pixelpark.net
+      - dev-redaktion02-lyrica-de.pixelpark.net
+    ssl: true
+    ssl_cert: /etc/pki/tls/certs/wildcard.pixelpark.net-cert.pem
+    ssl_chain: /etc/pki/tls/certs/wildcard.pixelpark.net-cert.pem
+    ssl_key: /etc/pki/tls/private/wildcard.pixelpark.net-key.pem
+    #ssl_cipher:    ALL:!ADH:RC4+RSA:+HIGH:+MEDIUM:-LOW:-SSLv2:-EXP
+    #SetEnvIf User-Agent   ".*MSIE.*" nokeepalive ssl-unclean-shutdown downgrade-1.0 force-response-1.0
+    directories:
+      - location_root:
+        provider: location
+        path: '/'
+        auth_type: Digest
+        auth_name: dev-redaktion-pfizer-de
+        auth_digest_provider: file
+        auth_digest_algorithm: MD5
+        auth_user_file: '/etc/httpd/htdigest'
+        auth_require: 'valid-user'
+        require:
+          - 'ip 217.66.55 217.66.50 217.66.51 217.66.48.130 168.224.160 10.121.101 204.114.176 204.114.216 148.168.40 202.32.173 204.114.248 168.224.1 168.224.160 148.168.127 204.114.196 193.235.226 212.58.14 204.114.199 155.94.99 155.94.78 155.94.62 218.213.241 155.94.70 155.94.110 222.73.72 155.94.119 155.94.55 68.58.141.20 174.137.32.22 15.213.17 85.183.14'
+      - location_typo3:
+        provider: location
+        path: '/typo3/'
+        auth_type: Digest
+        auth_name: dev-redaktion-pfizer-de
+        auth_digest_provider: file
+        auth_digest_algorithm: MD5
+        auth_user_file: '/etc/httpd/htdigest'
+        auth_require: 'valid-user'
+        require:
+          - local
+          - ip 217.66.55
+    user: apache
+    mode: '2770'
+    rewrites:
+      - pfizermed_rw2:
+        comment: 'Rewrites fuer Pfizermed'
+        rewrite_cond:
+          - '%%{ich-trickse}{HTTP_HOST} ^(dev-redaktion.pfizermed.de|pfizermed.de)$'
+        rewrite_rule:
+          - ^/broschueren/inspra-scriptum-cardiologicum.htm$ https://dev-redaktion.pfizermed.de/index.php?id=7689 [R=301,L]
+      - pfizermed_rw3:
+        comment: 'Rewrites fuer Pfizermed'
+        rewrite_cond:
+          - '%%{ich-trickse}{HTTP_HOST} ^(dev-redaktion.pfizermed.de|pfizermed.de)$'
+        rewrite_rule:
+          - ^/produktprofile/lyrica.htm$ https://dev-redaktion.pfizermed.de/medikamente/medikamente-a-bis-z/lyrica-r-hartkapseln.htm [R=301,L]
+      - pfizermed_rw4:
+        comment: 'Rewrites fuer Pfizermed'
+        rewrite_cond:
+          - '%%{ich-trickse}{HTTP_HOST} ^(dev-redaktion.pfizermed.de|pfizermed.de)$'
+        rewrite_rule:
+          - ^/produktprofile/lyrica-loesung.htm$ https://dev-redaktion.pfizermed.de/medikamente/medikamente-a-bis-z/lyrica-r-loesung.htm [R=301,L]
+      - pfizermed_rw5:
+        comment: 'Rewrites fuer Pfizermed'
+        rewrite_cond:
+          - '%%{ich-trickse}{HTTP_HOST} ^(dev-redaktion.pfizermed.de|pfizermed.de)$'
+        rewrite_rule:
+          - ^/die-dermatom-karte.htm$ https://dev-redaktion.pfizermed.de/index.php?id=7693 [R=301,L]
+      - pfizermed_rw6:
+        comment: 'Rewrites fuer Pfizermed'
+        rewrite_cond:
+          - '%%{ich-trickse}{HTTP_HOST} ^(dev-redaktion.pfizermed.de|pfizermed.de)$'
+        rewrite_rule:
+          - ^/handhabung-lyrica-loesung/news/0.htm$ https://dev-redaktion.pfizermed.de/index.php?id=6636 [R=301,L]
+      - pfizermed_rw7:
+        comment: 'Rewrites fuer Pfizermed'
+        rewrite_cond:
+          - '%%{ich-trickse}{HTTP_HOST} ^(dev-redaktion.pfizermed.de|pfizermed.de)$'
+        rewrite_rule:
+          - ^/videos/neuropathischer-schmerz-patientenvideo/video/0.htm$ https://dev-redaktion.pfizermed.de/index.php?id=7735 [R=301,L]
+      - pfizermed_rw8:
+        comment: 'Rewrites fuer Pfizermed'
+        rewrite_cond:
+          - '%%{ich-trickse}{HTTP_HOST} ^(dev-redaktion.pfizermed.de|pfizermed.de)$'
+        rewrite_rule:
+          - ^/fortbildungen/generalisierte-angststoerung-expertenvortraege-im-video.htm$ https://dev-redaktion.pfizermed.de/index.php?id=7643 [R=301,L]
+      - pfizermed_rw9:
+        comment: 'Rewrites fuer Pfizermed'
+        rewrite_cond:
+          - '%%{ich-trickse}{HTTP_HOST} ^(dev-redaktion.pfizermed.de|pfizermed.de)$'
+        rewrite_rule:
+          - ^/videos/was-ihnen-eliquisr-bieten-kann.htm$ https://dev-redaktion.pfizermed.de/index.php?id=7736 [R=301,L]
+      - pfizermed_rw10:
+        comment: 'Rewrites fuer Pfizermed'
+        rewrite_cond:
+          - '%%{ich-trickse}{HTTP_HOST} ^(dev-redaktion.pfizermed.de|pfizermed.de)$'
+        rewrite_rule:
+          - ^/produktseiten/toviaz/toviazr-ergebnisse-der-sofia-studie.htm?WT.mc_id=400599&WT.ban=1&?dl=bc6f1b4dc7f4af667df763bdbe04a7be https://dev-redaktion.pfizermed.de/toviaz_sofia_studie.htm?dl=25f2422239bacd8903d355da10781238 [R=301,L]
+      - pfizermed_rw11:
+        comment: 'Rewrites fuer Pfizermed'
+        rewrite_cond:
+          - '%%{ich-trickse}{HTTP_HOST} ^(dev-redaktion.pfizermed.de|pfizermed.de)$'
+        rewrite_rule:
+          - ^/produktseiten/toviaz/toviazr-sofia-studie-im-video-podcast.htm$ https://dev-redaktion.pfizermed.de/index.php?id=7699 [R=301,L]
+      - pfizermed_rw12:
+        comment: 'Rewrites fuer Pfizermed'
+        rewrite_cond:
+          - '%%{ich-trickse}{HTTP_HOST} ^(dev-redaktion.pfizermed.de|pfizermed.de)$'
+        rewrite_rule:
+          - ^/virtueller-ad/kontaktformular-virtueller-ad.htm$ https://dev-redaktion.pfizermed.de/index.php?id=7704 [R=301,L]
+      - pfizermed_rw13:
+        comment: 'Rewrites fuer Pfizermed'
+        rewrite_cond:
+          - '%%{ich-trickse}{HTTP_HOST} ^(dev-redaktion.pfizermed.de|pfizermed.de)$'
+        rewrite_rule:
+          - ^/fortbildungen/service-zum-fortbildungsprogramm.htm$ https://dev-redaktion.pfizermed.de/index.php?id=7708 [R=301,L]
+      - pfizermed_rw14:
+        comment: 'Rewrites fuer Pfizermed'
+        rewrite_cond:
+          - '%%{ich-trickse}{HTTP_HOST} ^(dev-redaktion.pfizermed.de|pfizermed.de)$'
+        rewrite_rule:
+          - ^/fileadmin/pfizer.de/documents/gi/(.*).pdf$ https://%{SERVER_NAME}/fileadmin/produktdatenbank/pdf/$1.pdf [R=301,L,QSA]
+      - pfizermed_rw15:
+        comment: 'Rewrites fuer Pfizermed'
+        rewrite_cond:
+          - '%%{ich-trickse}{HTTP_HOST} ^(dev-redaktion.pfizermed.de|pfizermed.de)$'
+        rewrite_rule:
+          - ^/fileadmin/pfizer.de/documents/fi/(.*).pdf$ https://%{SERVER_NAME}/fileadmin/produktdatenbank/pdf/$1.pdf [R=301,L,QSA]
+      - pfizermed_rw16:
+        comment: 'Rewrites fuer Pfizermed'
+        rewrite_cond:
+          - '%%{ich-trickse}{HTTP_HOST} ^(dev-redaktion.pfizermed.de|pfizermed.de)$'
+          - '%%{ich-trickse}{REQUEST_URI} ^/produktprofile/lyrica.htm$'
+          - '%%{ich-trickse}{QUERY_STRING} ^dl=8d105f114b13635c44237041a5e1f095$'
+        rewrite_rule:
+          - ^(.*)$ https://dev-redaktion.pfizermed.de/medikamente/medikamente-a-bis-z/lyrica-r-hartkapseln.htm?dl=043d16a68cbc1087ae53eed9dff81739 [R=301,L]
+      - pfizermed_rw17:
+        comment: 'Rewrites fuer Pfizermed'
+        rewrite_cond:
+          - '%%{ich-trickse}{HTTP_HOST} ^(dev-redaktion.pfizermed.de|pfizermed.de)$'
+          - '%%{ich-trickse}{REQUEST_URI} ^/produktprofile/lyrica-loesung.htm$'
+          - '%%{ich-trickse}{QUERY_STRING} ^dl=dcd7ae728fe0772139c1e1473716481f$'
+        rewrite_rule:
+          - ^(.*)$ https://dev-redaktion.pfizermed.de/medikamente/medikamente-a-bis-z/lyrica-r-loesung.htm?dl=abe8a878b57e323abd07c543d0b51ccc [R=301,L]
+      - pfizermed_rw18:
+        comment: 'Rewrites fuer Pfizermed'
+        rewrite_cond:
+          - '%%{ich-trickse}{HTTP_HOST} ^(dev-redaktion.pfizermed.de|pfizermed.de)$'
+          - '%%{ich-trickse}{REQUEST_URI} ^/die-dermatom-karte.htm$'
+          - '%%{ich-trickse}{QUERY_STRING} ^dl=43201239bc9ef70f6912dafa9a85b46d$'
+        rewrite_rule:
+          - ^(.*)$ https://dev-redaktion.pfizermed.de/dermatom_karte.htm?dl=6a937294b4b10c36821d6c2460d024a5 [R=301,L]
+      - pfizermed_rw19:
+        comment: 'Rewrites fuer Pfizermed'
+        rewrite_cond:
+          - '%%{ich-trickse}{HTTP_HOST} ^(dev-redaktion.pfizermed.de|pfizermed.de)$'
+          - '%%{ich-trickse}{REQUEST_URI} ^/handhabung-lyrica-loesung/news/0.htm$'
+          - '%%{ich-trickse}{QUERY_STRING} ^dl=a88d682c81bb22b0fed558376aa29e91$'
+        rewrite_rule:
+          - ^(.*)$ https://dev-redaktion.pfizermed.de/lyrica_edetailing?dl=5940052744918c5d8c78d2b2d960675b [R=301,L]
+      - pfizermed_rw20:
+        comment: 'Rewrites fuer Pfizermed'
+        rewrite_cond:
+          - '%%{ich-trickse}{HTTP_HOST} ^(dev-redaktion.pfizermed.de|pfizermed.de)$'
+          - '%%{ich-trickse}{REQUEST_URI} ^/downloads/lyrica-ppt-extra-sonderdruck.htm$'
+          - '%%{ich-trickse}{QUERY_STRING} ^dl=4f82556463a49a9e9dbc3545481dd299$'
+        rewrite_rule:
+          - ^(.*)$ https://dev-redaktion.pfizermed.de/lyrica_sonderdruck_ppt_extra.htm?dl=9bed39730d34b08691b38525479c8a27 [R=301,L]
+      - pfizermed_rw21:
+        comment: 'Rewrites fuer Pfizermed'
+        rewrite_cond:
+          - '%%{ich-trickse}{HTTP_HOST} ^(dev-redaktion.pfizermed.de|pfizermed.de)$'
+          - '%%{ich-trickse}{REQUEST_URI} ^/videos/neuropathischer-schmerz-patientenvideo/video/0.htm$'
+          - '%%{ich-trickse}{QUERY_STRING} ^dl=d6a9696fd84e5f7df8f3249d74d7f2dd$'
+        rewrite_rule:
+          - ^(.*)$ https://dev-redaktion.pfizermed.de/neuropatischer_schmerz_patientenvideo.htm?dl=68da218e298706dee34024a3548baae3 [R=301,L]
+      - pfizermed_rw22:
+        comment: 'Rewrites fuer Pfizermed'
+        rewrite_cond:
+          - '%%{ich-trickse}{HTTP_HOST} ^(dev-redaktion.pfizermed.de|pfizermed.de)$'
+          - '%%{ich-trickse}{REQUEST_URI} ^/fortbildungen/generalisierte-angststoerung-expertenvortraege-im-video.htm$'
+          - '%%{ich-trickse}{QUERY_STRING} ^dl=5996a02b175b0f233bcb885fa30d6b56$'
+        rewrite_rule:
+          - ^(.*)$ https://dev-redaktion.pfizermed.de/generalisierte_angststoerung_expertenvortraege.htm?dl=498d9ffda73262b42a414722b5889048 [R=301,L]
+      - pfizermed_rw23:
+        comment: 'Rewrites fuer Pfizermed'
+        rewrite_cond:
+          - '%%{ich-trickse}{HTTP_HOST} ^(dev-redaktion.pfizermed.de|pfizermed.de)$'
+          - '%%{ich-trickse}{REQUEST_URI} ^/videos/was-ihnen-eliquisr-bieten-kann/video/0.htm$'
+          - '%%{ich-trickse}{QUERY_STRING} ^dl=3a513f27f38f3d3b48db006c71b56dea$'
+        rewrite_rule:
+          - ^(.*)$ https://dev-redaktion.pfizermed.de/was_ihnen_eliquis_bieten_kann.htm?dl=18dbe987148a7641d1522a8fca07ce74 [R=301,L]
+      - pfizermed_rw24:
+        comment: 'Rewrites fuer Pfizermed'
+        rewrite_cond:
+          - '%%{ich-trickse}{HTTP_HOST} ^(dev-redaktion.pfizermed.de|pfizermed.de)$'
+          - '%%{ich-trickse}{REQUEST_URI} ^/virtueller-ad.htm$'
+          - '%%{ich-trickse}{QUERY_STRING} ^dl=f8ce79a8b2c71eaa48d48bc4d69957d9$'
+        rewrite_rule:
+          - ^(.*)$ https://dev-redaktion.pfizermed.de/der_virtuelle_aussendienst.htm?dl=7d302c8dda851aa5780d12b22a9973c8 [R=301,L]
+      - pfizer_rw1:
+        comment: 'Rewrites fuer Pfizer'
+        rewrite_cond:
+          - '%%{ich-trickse}{HTTP_HOST} ^(dev-redaktion\.)?pfizer\.de$'
+          - '%%{ich-trickse}{REQUEST_URI} ^(/?)$'
+          - '%%{ich-trickse}{QUERY_STRING} ^id=2940$'
+        rewrite_rule:
+          - ^(.*)$ https://dev-redaktion.pfizer.de/? [R=301,L]
+      - pfizer_rw2:
+        comment: 'Rewrites fuer Pfizermed'
+        rewrite_cond:
+          - '%%{ich-trickse}{HTTP_HOST} ^(dev-redaktion\.)?pfizer\.de$'
+          - '%%{ich-trickse}{REQUEST_URI} ^/seite-empfehlen$ [OR]'
+          - '%%{ich-trickse}{REQUEST_URI} ^/seite-empfehlen.htm$ [OR]'
+          - '%%{ich-trickse}{REQUEST_URI} ^/nc/seite-empfehlen$ [OR]'
+          - '%%{ich-trickse}{REQUEST_URI} ^/nc/seite-empfehlen.htm$ [OR]'
+          - '%%{ich-trickse}{REQUEST_URI} ^/forschung$ [OR]'
+          - '%%{ich-trickse}{REQUEST_URI} ^/forschung.htm$ [OR]'
+          - '%%{ich-trickse}{REQUEST_URI} ^/nc/forschung$ [OR]'
+          - '%%{ich-trickse}{REQUEST_URI} ^/nc/forschung.htm$'
+        rewrite_rule:
+          - ^(.*)$ https://dev-redaktion.pfizer.de/ [R=301,L]
+      - pfizer_rw3:
+        comment: 'Rewrites fuer Pfizermed'
+        rewrite_cond:
+          - '%%{ich-trickse}{HTTP_HOST} ^(dev-redaktion\.)?pfizer\.de$'
+          - '%%{ich-trickse}{REQUEST_URI} ^/nc/gesundheit$ [OR]'
+          - '%%{ich-trickse}{REQUEST_URI} ^/nc/gesundheit.htm$ [OR]'
+          - '%%{ich-trickse}{REQUEST_URI} ^/patienten$ [OR]'
+          - '%%{ich-trickse}{REQUEST_URI} ^/patienten.htm$ [OR]'
+          - '%%{ich-trickse}{REQUEST_URI} ^/nc/patienten$ [OR]'
+          - '%%{ich-trickse}{REQUEST_URI} ^/nc/patienten.htm$'
+        rewrite_rule:
+          - ^(.*)$ https://dev-redaktion.pfizer.de/gesundheit [R=301,L]
+      - pfizer_rw4:
+        comment: 'Rewrites fuer Pfizermed'
+        rewrite_cond:
+          - '%%{ich-trickse}{HTTP_HOST} ^(dev-redaktion\.)?pfizer\.de$'
+          - '%%{ich-trickse}{REQUEST_URI} ^/unternehmen$ [OR]'
+          - '%%{ich-trickse}{REQUEST_URI} ^/unternehmen.htm$ [OR]'
+          - '%%{ich-trickse}{REQUEST_URI} ^/nc/unternehmen$ [OR]'
+          - '%%{ich-trickse}{REQUEST_URI} ^/nc/unternehmen.htm$'
+        rewrite_rule:
+          - ^(.*)$ https://dev-redaktion.pfizer.de/ueber-pfizer [R=301,L]
+      - pfizer_rw5:
+        comment: 'Rewrites fuer Pfizermed'
+        rewrite_cond:
+          - '%%{ich-trickse}{HTTP_HOST} ^(dev-redaktion\.)?pfizer\.de$'
+          - '%%{ich-trickse}{REQUEST_URI} ^/medien$ [OR]'
+          - '%%{ich-trickse}{REQUEST_URI} ^/medien.htm$ [OR]'
+          - '%%{ich-trickse}{REQUEST_URI} ^/nc/medien$ [OR]'
+          - '%%{ich-trickse}{REQUEST_URI} ^/nc/medien.htm$'
+        rewrite_rule:
+          - ^(.*)$ https://dev-redaktion.pfizer.de/presse/meldungen [R=301,L]
+      - pfizer_rw6:
+        comment: 'Rewrites fuer Pfizermed'
+        rewrite_cond:
+          - '%%{ich-trickse}{HTTP_HOST} ^(dev-redaktion\.)?pfizer\.de$'
+          - '%%{ich-trickse}{REQUEST_URI} ^/medikamente$ [OR]'
+          - '%%{ich-trickse}{REQUEST_URI} ^/medikamente.htm$ [OR]'
+          - '%%{ich-trickse}{REQUEST_URI} ^/nc/medikamente$ [OR]'
+          - '%%{ich-trickse}{REQUEST_URI} ^/nc/medikamente.htm$'
+        rewrite_rule:
+          - ^(.*)$ https://dev-redaktion.pfizer.de/medikamente-produkte [R=301,L]
+      - pfizer_rw7:
+        comment: 'Rewrites fuer Pfizermed'
+        rewrite_cond:
+          - '%%{ich-trickse}{HTTP_HOST} ^(dev-redaktion\.)?pfizer\.de$'
+          - '%%{ich-trickse}{REQUEST_URI} ^/nebenwirkungen-melden$ [OR]'
+          - '%%{ich-trickse}{REQUEST_URI} ^/nebenwirkungen-melden.htm$ [OR]'
+          - '%%{ich-trickse}{REQUEST_URI} ^/nc/nebenwirkungen-melden$ [OR]'
+          - '%%{ich-trickse}{REQUEST_URI} ^/nc/nebenwirkungen-melden.htm$'
+        rewrite_rule:
+          - ^(.*)$ https://dev-redaktion.pfizer.de/nc/footer/nebenwirkungen-melden [R=301,L]
+      - pfizer_rw8:
+        comment: 'Rewrites fuer Pfizermed'
+        rewrite_cond:
+          - '%%{ich-trickse}{HTTP_HOST} ^(dev-redaktion\.)?pfizer\.de$'
+          - '%%{ich-trickse}{REQUEST_URI} ^/agb$ [OR]'
+          - '%%{ich-trickse}{REQUEST_URI} ^/agb.htm$'
+        rewrite_rule:
+          - ^(.*)$ https://dev-redaktion.pfizer.de/footer/agb [R=301,L]
+      - pfizer_rw9:
+        comment: 'Rewrites fuer Pfizermed'
+        rewrite_cond:
+          - '%%{ich-trickse}{HTTP_HOST} ^(dev-redaktion\.)?pfizer\.de$'
+          - '%%{ich-trickse}{REQUEST_URI} ^/einkauf-de$ [OR]'
+          - '%%{ich-trickse}{REQUEST_URI} ^/einkauf-de.htm$'
+        rewrite_rule:
+          - ^(.*)$ https://dev-redaktion.pfizer.de/footer/agb/einkauf-en [R=301,L]
+      - pfizer_rw10:
+        comment: 'Rewrites fuer Pfizermed'
+        rewrite_cond:
+          - '%%{ich-trickse}{HTTP_HOST} ^(dev-redaktion\.)?pfizer\.de$'
+          - '%%{ich-trickse}{REQUEST_URI} ^/engagement$ [OR]'
+          - '%%{ich-trickse}{REQUEST_URI} ^/engagement.htm$'
+        rewrite_rule:
+          - ^(.*)$ https://dev-redaktion.pfizer.de/ueber-pfizer/engagement [R=301,L]
+      - pfizer_rw11:
+        comment: 'Rewrites fuer Pfizermed'
+        rewrite_cond:
+          - '%%{ich-trickse}{HTTP_HOST} ^(dev-redaktion\.)?pfizer\.de$'
+          - '%%{ich-trickse}{REQUEST_URI} ^/gesundheit-alt/der-virtuelle-beipackzettel$ [OR]'
+          - '%%{ich-trickse}{REQUEST_URI} ^/gesundheit-alt/der-virtuelle-beipackzettel.htm$'
+        rewrite_rule:
+          - ^(.*)$ https://dev-redaktion.pfizer.de/services/beipackzettel-verstehen [R=301,L]
+      - pfizer_rw12:
+        comment: 'Rewrites fuer Pfizermed'
+        rewrite_cond:
+          - '%%{ich-trickse}{HTTP_HOST} ^(dev-redaktion\.)?pfizer\.de$'
+          - '%%{ich-trickse}{REQUEST_URI} ^/impressum$ [OR]'
+          - '%%{ich-trickse}{REQUEST_URI} ^/impressum.htm$'
+        rewrite_rule:
+          - ^(.*)$ https://dev-redaktion.pfizer.de/footer/impressum [R=301,L]
+      - pfizer_rw13:
+        comment: 'Rewrites fuer Pfizermed'
+        rewrite_cond:
+          - '%%{ich-trickse}{HTTP_HOST} ^(dev-redaktion\.)?pfizer\.de$'
+          - '%%{ich-trickse}{REQUEST_URI} ^/kontakt$ [OR]'
+          - '%%{ich-trickse}{REQUEST_URI} ^/kontakt.htm$'
+        rewrite_rule:
+          - ^(.*)$ https://dev-redaktion.pfizer.de/footer/kontakt [R=301,L]
+      - pfizer_rw14:
+        comment: 'Rewrites fuer Pfizermed'
+        rewrite_cond:
+          - '%%{ich-trickse}{HTTP_HOST} ^(dev-redaktion\.)?pfizer\.de$'
+          - '%%{ich-trickse}{REQUEST_URI} ^/nutzungsbedingungen$ [OR]'
+          - '%%{ich-trickse}{REQUEST_URI} ^/nutzungsbedingungen.htm$'
+        rewrite_rule:
+          - ^(.*)$ https://dev-redaktion.pfizer.de/footer/nutzungsbedingungen [R=301,L]
+      - pfizer_rw15:
+        comment: 'Rewrites fuer Pfizermed'
+        rewrite_cond:
+          - '%%{ich-trickse}{HTTP_HOST} ^(dev-redaktion\.)?pfizer\.de$'
+          - '%%{ich-trickse}{REQUEST_URI} ^/pflichtangaben$ [OR]'
+          - '%%{ich-trickse}{REQUEST_URI} ^/pflichtangaben.htm$'
+        rewrite_rule:
+          - ^(.*)$ https://dev-redaktion.pfizer.de/footer/pflichtangaben [R=301,L]
+      - pfizer_rw16:
+        comment: 'Rewrites fuer Pfizermed'
+        rewrite_cond:
+          - '%%{ich-trickse}{HTTP_HOST} ^(dev-redaktion\.)?pfizer\.de$'
+          - '%%{ich-trickse}{REQUEST_URI} ^/sitemap$ [OR]'
+          - '%%{ich-trickse}{REQUEST_URI} ^/sitemap.htm$'
+        rewrite_rule:
+          - ^(.*)$ https://dev-redaktion.pfizer.de/footer/sitemap [R=301,L]
+      - pfizer_rw17:
+        comment: 'Rewrites fuer Pfizermed'
+        rewrite_cond:
+          - '%%{ich-trickse}{HTTP_HOST} ^(dev-redaktion\.)?pfizer\.de$'
+          - '%%{ich-trickse}{REQUEST_URI} ^/verkauf-de$ [OR]'
+          - '%%{ich-trickse}{REQUEST_URI} ^/verkauf-de.htm$'
+        rewrite_rule:
+          - ^(.*)$ https://dev-redaktion.pfizer.de/footer/agb/verkauf-de [R=301,L]
+      - PFIZ-1760:
+        comment: https://jira.pixelpark.com/jira/browse/PFIZ-1760
+        rewrite_rule:
+          - ^/medizinische-anfragen.htm$ https://dev-redaktion.pfizer.de/footer/medizinische-anfragen.htm [R=301,L]
+      - PFIZ-1770:
+        comment: https://jira.pixelpark.com/jira/browse/PFIZ-1770
+        rewrite_rule:
+          - ^/fileadmin/pfizer.de/documents/gi/ https://dev-redaktion.pfizer.de/medikamente-produkte.htm [R=301,L]
+      - PFIZ-1837:
+        comment: https://jira.pixelpark.com/jira/browse/PFIZ-1837
+        rewrite_cond:
+          - '%%{ich-trickse}{HTTPS} !=on'
+        rewrite_rule:
+          - ^(.*)$ https://%%{ich-trickse}{HTTP_HOST}$1 [R=301,L]
+
diff --git a/customer/pfizer/dev-www02-pfizer-de.pixelpark.net.yaml b/customer/pfizer/dev-www02-pfizer-de.pixelpark.net.yaml
new file mode 100644 (file)
index 0000000..9e27caa
--- /dev/null
@@ -0,0 +1,4 @@
+---
+site::additional_classes:
+  - site::profile::mcollective::common
+
diff --git a/customer/pfizer/development.yaml b/customer/pfizer/development.yaml
new file mode 100644 (file)
index 0000000..394b202
--- /dev/null
@@ -0,0 +1,16 @@
+---
+accounts::users:
+  stephan.vits:
+    apply: true
+    sudo: true
+  thomas.bussmeyer:
+    apply: true
+    sudo: true
+  nikolai.potapov:
+    apply: true
+    sudo: true
+  andreas.pinto-koehler:
+    apply: true
+    sudo: true
+  deploy.vogel:
+    apply: true
diff --git a/customer/pfizer/production.yaml b/customer/pfizer/production.yaml
new file mode 100644 (file)
index 0000000..ea58cd8
--- /dev/null
@@ -0,0 +1,17 @@
+---
+kunde: "pfizer"
+accounts::users:
+  thomas.bussmeyer:
+    apply: true
+  deploy.vogel:
+    apply: true
+    sudo: false
+  nikolai.potapov:
+    apply: true
+    sudo: false
+  andreas.pinto-koehler:
+    apply: true
+    sudo: false
+  stephan.vits:
+    apply: true
+    sudo: false
diff --git a/customer/pfizer/test-web01-pfizer-de.pixelpark.net.yaml b/customer/pfizer/test-web01-pfizer-de.pixelpark.net.yaml
new file mode 100644 (file)
index 0000000..180652e
--- /dev/null
@@ -0,0 +1,992 @@
+---
+site::role: base
+site::additional_classes:
+  - apache::mod::headers
+  - site::profile::drupal
+  - site::profile::typo3
+  - site::profile::mysql_server
+  - logstash
+
+apache::mpm_module: worker
+
+accounts::users:
+  stephan.vits:
+    apply: true
+    sudo: false
+    groups: apache
+  thomas.bussmeyer:
+    apply: true
+    sudo: false 
+    groups: apache
+  nikolai.potapov:
+    apply: true
+    sudo: false
+    groups: apache
+  andreas.pinto-koehler:
+    apply: true
+    sudo: false
+    groups: apache
+  konrad.tadesse:
+    apply: true
+    sudo: false
+    groups: apache
+  deploy.vogel:
+    apply: true
+    sudo: false
+    group: apache
+  service.typo3:
+    apply: true
+    sudo: false
+    groups: apache
+    
+# TODO: Abwarten auf Ticket: https://jira.pixelpark.com/jira/browse/PPPUPPET-202
+#  csv_upload:
+#    uid: 25113
+#    apply: true
+#    comment: "CSV-Upload-User-from-Pfizer"
+#    sudo: false
+#    group: sftpgroup
+#    password: ENC[PKCS7,MIIBeQYJKoZIhvcNAQcDoIIBajCCAWYCAQAxggEhMIIBHQIBADAFMAACAQEwDQYJKoZIhvcNAQEBBQAEggEAiSPgmPTsHjiklhwnMKZyK71JzyqPtpsFkw5O2Tqc+3IuSw5lQEPtZpEZy4w6Q8NI4vKfAhefmVssj0PgzNG0u5V4dUbWGWGBBdnwG3WwwyLqWHChrHQ8/ODhRKLx+MqAAyrr/M6WDFFf1YLAJbR9yGHKdJeBTJ8X4W20pxZFRr0ZMbM5G7soBs0SvOpJwmVFU0Gsc0er3BIh6FCVYXTVYNuUaMGYxrmRPrCfkLU6J0Zvm2DYspWPcx+PQB9Gp53P69SF18SlIY9KK7Wcr8oRK+eDgWhlmtzMQRfMhoSmrB4SXo4+wObQXDDgOE/UGt378GzwjCS0iFJXfFqvvwQVCTA8BgkqhkiG9w0BBwEwHQYJYIZIAWUDBAEqBBC6uT2qaHTxdbIzHGR7wynEgBDyxljzehxP3wJWvVj4JNlj]
+
+# Add specific sudo rights for CI Deployment
+sudo::configs:
+  cmd_alias:
+    priority: "05"
+    content: |
+      Cmnd_Alias MKDIRDOC = /bin/mkdir /srv/www/*
+      Cmnd_Alias CHOWNDOC = /bin/chown -R apache\:apache /srv/www/*
+  deploy.vogel:
+    priority: "06"
+    content: |
+      deploy.vogel ALL=(apache) NOPASSWD: ALL
+      deploy.vogel ALL=(ALL) NOPASSWD: MKDIRDOC, CHOWNDOC
+
+repo::remi_php55: true
+
+php::settings:
+  Date/date.timezone: Europe/Berlin
+  PHP/upload_max_filesize: 100M
+  PHP/post_max_size: 100M
+  PHP/max_execution_time: '240'
+  PHP/memory_limit: '512M'
+  PHP/expose_php: 'Off'
+  Session/session.cookie_secure: 1
+  Session/session.cookie_httponly: 1
+  PHP/cgi.fix_pathinfo: 0
+
+php::extensions:
+  gd: {}
+  opcache: {}
+  mysqlnd: {}
+  soap: {}
+  mbstring: {}
+  pecl-imagick: {}
+  pecl-uploadprogress: {}
+  pecl-memcache: {}
+  pecl-apcu: {}
+  pecl-xslcache: {}
+
+mysql::server::remove_default_accounts: true
+mysql::server::backup::backupuser: backup
+mysql::server::backup::backuppassword: ENC[PKCS7,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]
+mysql::server::backup::backupdir: /srv/backup/mysql
+mysql::server::root_password: ENC[PKCS7,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]
+
+site::profile::mysql_server::databases:
+  typo3_test:
+    user: typo3
+    password: ENC[PKCS7,MIIBeQYJKoZIhvcNAQcDoIIBajCCAWYCAQAxggEhMIIBHQIBADAFMAACAQEwDQYJKoZIhvcNAQEBBQAEggEASM8UWWqxOfXwQeIOjeWdOPU7hB3ZvVJ9gg2lYeik2xxPYQmZ969oNKxLN/ew1Eh+qaxiNpCzYYVFnNbshuuxsHKQyEzIB0uN6+vF+jdfPLE+NFiipRyLM8F7UkSn63ar+s+sywXCmd25/LRuIbpjvIxI3+5lkalCRvVLxp/1/SwxZMxjArGJteslaAWGVUSYY7JI1XA9JwHVJBmuZKFyG7c6diEe0pJ61Eo6bCM8Pky5/59Y+cMEQIv5giGE6nIEulmOsbHA1tu5i1I9RBRpZHGkH96l7Ub/LYzcCylCBdy+n6nN35vCsVh7Yxv62k1C/SdU+cW7Ryxax2JnJhQKjTA8BgkqhkiG9w0BBwEwHQYJYIZIAWUDBAEqBBCuShSG+2AfEkaZv9tXTTskgBBgVYFvHNkenz9qHFEQ9ZJc]
+  bi-pfizer:
+    user: bi-pfizer
+    password: ENC[PKCS7,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]
+
+# test-bi.pfizer.de
+site::profile::drupal::manage_php: false
+site::profile::drupal::projects:
+  test-bi.pfizer.de:
+    #ip: 217.66.55.100
+    site_path: /srv/www/test-bi.pfizer.de
+    servername: test-bi-pfizer-de.pixelpark.net
+    ssl: true
+    ssl_cert: /etc/pki/tls/certs/wildcard.pixelpark.net-cert.pem
+    ssl_chain: /etc/pki/tls/certs/wildcard.pixelpark.net-cert.pem
+    ssl_key: /etc/pki/tls/private/wildcard.pixelpark.net-key.pem
+    #ssl_cipher              ALL:!ADH:RC4+RSA:+HIGH:+MEDIUM:-LOW:-SSLv2:-EXP
+    #SetEnvIf User-Agent         ".*MSIE.*" nokeepalive ssl-unclean-shutdown downgrade-1.0 force-response-1.0
+    directories:
+      - directory_root:
+        provider: directory
+        path: '/srv/www/test-bi.pfizer.de'
+        options:
+          - FollowSymLinks
+          - MultiViews
+        allow_override:
+          - All
+      - location_root:
+        provider: location
+        path: '/'
+        auth_type: Digest
+        auth_name: pixelrealm
+        auth_digest_provider: file
+        auth_digest_algorithm: MD5
+        auth_user_file: '/etc/httpd/htdigest'
+        auth_require: 'valid-user'
+        require:
+          - 'ip 217.66.55 217.66.50 217.66.51 217.66.48.130 168.224.160 10.121.101 204.114.176 204.114.216 148.168.40 202.32.173 204.114.248 168.224.1 168.224.160 148.168.127 204.114.196 193.235.226 212.58.14 204.114.199 155.94.99 155.94.78 155.94.62 218.213.241 155.94.70 155.94.110 222.73.72 155.94.119 155.94.55 68.58.141.20 174.137.32.22 15.213.17 85.183.14'
+    rewrites:
+      - alias:
+        comment: 'Alles auf https umleiten'
+        rewrite_cond:
+          - '%%{ich-trickse}{HTTPS} !=on'
+        rewrite_rule:
+          - ^(.*)$  https://test-bi-pfizer-de.pixelpark.net$1  [R=303,L]
+
+# test-www.pfizer.de
+site::profile::typo3::projects:
+  test-www.pfizer.de:
+    site_path: /srv/www/test-www.pfizer.de
+    use_symlink: true
+    version: '6.2.15'
+    db_pass: ENC[PKCS7,MIIBeQYJKoZIhvcNAQcDoIIBajCCAWYCAQAxggEhMIIBHQIBADAFMAACAQEwDQYJKoZIhvcNAQEBBQAEggEASM8UWWqxOfXwQeIOjeWdOPU7hB3ZvVJ9gg2lYeik2xxPYQmZ969oNKxLN/ew1Eh+qaxiNpCzYYVFnNbshuuxsHKQyEzIB0uN6+vF+jdfPLE+NFiipRyLM8F7UkSn63ar+s+sywXCmd25/LRuIbpjvIxI3+5lkalCRvVLxp/1/SwxZMxjArGJteslaAWGVUSYY7JI1XA9JwHVJBmuZKFyG7c6diEe0pJ61Eo6bCM8Pky5/59Y+cMEQIv5giGE6nIEulmOsbHA1tu5i1I9RBRpZHGkH96l7Ub/LYzcCylCBdy+n6nN35vCsVh7Yxv62k1C/SdU+cW7Ryxax2JnJhQKjTA8BgkqhkiG9w0BBwEwHQYJYIZIAWUDBAEqBBCuShSG+2AfEkaZv9tXTTskgBBgVYFvHNkenz9qHFEQ9ZJc]
+    db_user: typo3
+    db_name: typo3_test
+    servername: test-redaktion-pfizer-de.pixelpark.net
+    serveraliases:
+      - test-web01-pfizer-de.pixelpark.net
+      - test-www-pfizer-de.pixelpark.net
+      - test-www-pfizermed-de.pixelpark.net # CName auf test-www-pfizer-de.pixelpark.net
+      - test-www-pain-detect-de.pixelpark.net # CName auf test-www-pfizer-de.pixelpark.net
+      - test-www-meet-pfizer-de.pixelpark.net # CName auf test-www-pfizer-de.pixelpark.net
+      - test-www-ueberaktive-blase-de.pixelpark.net # CName auf test-www-pfizer-de.pixelpark.net
+      - test-www-rauchfrei-durchstarten-de.pixelpark.net # CName auf test-www-pfizer-de.pixelpark.net
+      - test-www-monatsring-de.pixelpark.net # CName auf test-www-pfizer-de.pixelpark.net
+      - test-www-sab-simplex-de.pixelpark.net # CName auf test-www-pfizer-de.pixelpark.net
+      - test-www-lyrica-de.pixelpark.net # CName auf test-www-pfizer-de.pixelpark.net
+      - test-redaktion-pfizer-de.pixelpark.net
+      - test-redaktion-pfizermed-de.pixelpark.net # CName auf test-redaktion-pfizer-de.pixelpark.net
+      - test-redaktion-ueberaktive-blase-de.pixelpark.net # kein DNS
+      - test-redaktion-monatsring-de.pixelpark.net # kein DNS
+      - test-redaktion-pain-detect-de.pixelpark.net # kein DNS
+      - test-redaktion-meet-pfizer-de.pixelpark.net # CName auf test-redaktion-pfizer-de.pixelpark.net
+      - test-redaktion-sab-simplex-de.pixelpark.net # kein DNS
+      - test-redaktion-rauchfrei-durchstarten-de.pixelpark.net # kein DNS 
+      - test-redaktion-lyrica-de.pixelpark.net # kein DNS
+    ssl: true
+    ssl_cert: /etc/pki/tls/certs/wildcard.pixelpark.net-cert.pem
+    ssl_chain: /etc/pki/tls/certs/wildcard.pixelpark.net-cert.pem
+    ssl_key: /etc/pki/tls/private/wildcard.pixelpark.net-key.pem
+    directories:
+      - location_root:
+        provider: location
+        path: '/'
+        auth_type: Digest
+        auth_name: pixelrealm
+        auth_digest_provider: file
+        auth_digest_algorithm: MD5
+        auth_user_file: '/etc/httpd/htdigest'
+        auth_require: 'valid-user'
+        require:
+          - 'ip 217.66.55 217.66.50 217.66.51 217.66.48.130 168.224.160 10.121.101 204.114.176 204.114.216 148.168.40 202.32.173 204.114.248 168.224.1 168.224.160 148.168.127 204.114.196 193.235.226 212.58.14 204.114.199 155.94.99 155.94.78 155.94.62 218.213.241 155.94.70 155.94.110 222.73.72 155.94.119 155.94.55 68.58.141.20 174.137.32.22 15.213.17 85.183.14'
+    user: apache
+    mode: '2770'
+    rewrites:
+      - pfizermed_rw2:
+        comment: 'Rewrites fuer Pfizermed'
+        rewrite_cond:
+          - '%%{ich-trickse}{HTTP_HOST} ^(test-www-pfizermed-de.pixelpark.net)$'
+        rewrite_rule:
+          - ^/broschueren/inspra-scriptum-cardiologicum.htm$ https://test-www-pfizermed-de.pixelpark.net/index.php?id=7689 [R=301,L]
+      - pfizermed_rw3:
+        comment: 'Rewrites fuer Pfizermed'
+        rewrite_cond:
+          - '%%{ich-trickse}{HTTP_HOST} ^(test-www-pfizermed-de.pixelpark.net)$'
+        rewrite_rule:
+          - ^/produktprofile/lyrica.htm$ https://test-www-pfizermed-de.pixelpark.net/medikamente/medikamente-a-bis-z/lyrica-r-hartkapseln.htm [R=301,L]
+      - pfizermed_rw4:
+        comment: 'Rewrites fuer Pfizermed'
+        rewrite_cond:
+          - '%%{ich-trickse}{HTTP_HOST} ^(test-www-pfizermed-de.pixelpark.net)$'
+        rewrite_rule:
+          - ^/produktprofile/lyrica-loesung.htm$ https://test-www-pfizermed-de.pixelpark.net/medikamente/medikamente-a-bis-z/lyrica-r-loesung.htm [R=301,L]
+      - pfizermed_rw5:
+        comment: 'Rewrites fuer Pfizermed'
+        rewrite_cond:
+          - '%%{ich-trickse}{HTTP_HOST} ^(test-www-pfizermed-de.pixelpark.net)$'
+        rewrite_rule:
+          - ^/die-dermatom-karte.htm$ https://test-www-pfizermed-de.pixelpark.net/index.php?id=7693 [R=301,L]
+      - pfizermed_rw6:
+        comment: 'Rewrites fuer Pfizermed'
+        rewrite_cond:
+          - '%%{ich-trickse}{HTTP_HOST} ^(test-www-pfizermed-de.pixelpark.net)$'
+        rewrite_rule:
+          - ^/handhabung-lyrica-loesung/news/0.htm$ https://test-www-pfizermed-de.pixelpark.net/index.php?id=6636 [R=301,L]
+      - pfizermed_rw7:
+        comment: 'Rewrites fuer Pfizermed'
+        rewrite_cond:
+          - '%%{ich-trickse}{HTTP_HOST} ^(test-www-pfizermed-de.pixelpark.net)$'
+        rewrite_rule:
+          - ^/videos/neuropathischer-schmerz-patientenvideo/video/0.htm$ https://test-www-pfizermed-de.pixelpark.net/index.php?id=7735 [R=301,L]
+      - pfizermed_rw8:
+        comment: 'Rewrites fuer Pfizermed'
+        rewrite_cond:
+          - '%%{ich-trickse}{HTTP_HOST} ^(test-www-pfizermed-de.pixelpark.net)$'
+        rewrite_rule:
+          - ^/fortbildungen/generalisierte-angststoerung-expertenvortraege-im-video.htm$ https://test-www-pfizermed-de.pixelpark.net/index.php?id=7643 [R=301,L]
+      - pfizermed_rw9:
+        comment: 'Rewrites fuer Pfizermed'
+        rewrite_cond:
+          - '%%{ich-trickse}{HTTP_HOST} ^(test-www-pfizermed-de.pixelpark.net)$'
+        rewrite_rule:
+          - ^/videos/was-ihnen-eliquisr-bieten-kann.htm$ https://test-www-pfizermed-de.pixelpark.net/index.php?id=7736 [R=301,L]
+      - pfizermed_rw10:
+        comment: 'Rewrites fuer Pfizermed'
+        rewrite_cond:
+          - '%%{ich-trickse}{HTTP_HOST} ^(test-www-pfizermed-de.pixelpark.net)$'
+        rewrite_rule:
+          - ^/produktseiten/toviaz/toviazr-ergebnisse-der-sofia-studie.htm?WT.mc_id=400599&WT.ban=1&?dl=bc6f1b4dc7f4af667df763bdbe04a7be https://test-www-pfizermed-de.pixelpark.net/toviaz_sofia_studie.htm?dl=25f2422239bacd8903d355da10781238 [R=301,L]
+      - pfizermed_rw11:
+        comment: 'Rewrites fuer Pfizermed'
+        rewrite_cond:
+          - '%%{ich-trickse}{HTTP_HOST} ^(test-www-pfizermed-de.pixelpark.net)$'
+        rewrite_rule:
+          - ^/produktseiten/toviaz/toviazr-sofia-studie-im-video-podcast.htm$ https://test-www-pfizermed-de.pixelpark.net/index.php?id=7699 [R=301,L]
+      - pfizermed_rw12:
+        comment: 'Rewrites fuer Pfizermed'
+        rewrite_cond:
+          - '%%{ich-trickse}{HTTP_HOST} ^(test-www-pfizermed-de.pixelpark.net)$'
+        rewrite_rule:
+          - ^/virtueller-ad/kontaktformular-virtueller-ad.htm$ https://test-www-pfizermed-de.pixelpark.net/index.php?id=7704 [R=301,L]
+      - pfizermed_rw13:
+        comment: 'Rewrites fuer Pfizermed'
+        rewrite_cond:
+          - '%%{ich-trickse}{HTTP_HOST} ^(test-www-pfizermed-de.pixelpark.net)$'
+        rewrite_rule:
+          - ^/fortbildungen/service-zum-fortbildungsprogramm.htm$ https://test-www-pfizermed-de.pixelpark.net/index.php?id=7708 [R=301,L]
+      - pfizermed_rw14:
+        comment: 'Rewrites fuer Pfizermed'
+        rewrite_cond:
+          - '%%{ich-trickse}{HTTP_HOST} ^(test-www-pfizermed-de.pixelpark.net)$'
+        rewrite_rule:
+          - ^/fileadmin/pfizer.de/documents/gi/(.*).pdf$ https://%{SERVER_NAME}/fileadmin/produktdatenbank/pdf/$1.pdf [R=301,L,QSA]
+      - pfizermed_rw15:
+        comment: 'Rewrites fuer Pfizermed'
+        rewrite_cond:
+          - '%%{ich-trickse}{HTTP_HOST} ^(test-www-pfizermed-de.pixelpark.net)$'
+        rewrite_rule:
+          - ^/fileadmin/pfizer.de/documents/fi/(.*).pdf$ https://%{SERVER_NAME}/fileadmin/produktdatenbank/pdf/$1.pdf [R=301,L,QSA]
+      - pfizermed_rw16:
+        comment: 'Rewrites fuer Pfizermed'
+        rewrite_cond:
+          - '%%{ich-trickse}{HTTP_HOST} ^(test-www-pfizermed-de.pixelpark.net)$'
+          - '%%{ich-trickse}{REQUEST_URI} ^/produktprofile/lyrica.htm$'
+          - '%%{ich-trickse}{QUERY_STRING} ^dl=8d105f114b13635c44237041a5e1f095$'
+        rewrite_rule:
+          - ^(.*)$ https://test-www-pfizermed-de.pixelpark.net/medikamente/medikamente-a-bis-z/lyrica-r-hartkapseln.htm?dl=043d16a68cbc1087ae53eed9dff81739 [R=301,L]
+      - pfizermed_rw17:
+        comment: 'Rewrites fuer Pfizermed'
+        rewrite_cond:
+          - '%%{ich-trickse}{HTTP_HOST} ^(test-www-pfizermed-de.pixelpark.net)$'
+          - '%%{ich-trickse}{REQUEST_URI} ^/produktprofile/lyrica-loesung.htm$'
+          - '%%{ich-trickse}{QUERY_STRING} ^dl=dcd7ae728fe0772139c1e1473716481f$'
+        rewrite_rule:
+          - ^(.*)$ https://test-www-pfizermed-de.pixelpark.net/medikamente/medikamente-a-bis-z/lyrica-r-loesung.htm?dl=abe8a878b57e323abd07c543d0b51ccc [R=301,L]
+      - pfizermed_rw18:
+        comment: 'Rewrites fuer Pfizermed'
+        rewrite_cond:
+          - '%%{ich-trickse}{HTTP_HOST} ^(test-www-pfizermed-de.pixelpark.net)$'
+          - '%%{ich-trickse}{REQUEST_URI} ^/die-dermatom-karte.htm$'
+          - '%%{ich-trickse}{QUERY_STRING} ^dl=43201239bc9ef70f6912dafa9a85b46d$'
+        rewrite_rule:
+          - ^(.*)$ https://test-www-pfizermed-de.pixelpark.net/dermatom_karte.htm?dl=6a937294b4b10c36821d6c2460d024a5 [R=301,L]
+      - pfizermed_rw19:
+        comment: 'Rewrites fuer Pfizermed'
+        rewrite_cond:
+          - '%%{ich-trickse}{HTTP_HOST} ^(test-www-pfizermed-de.pixelpark.net)$'
+          - '%%{ich-trickse}{REQUEST_URI} ^/handhabung-lyrica-loesung/news/0.htm$'
+          - '%%{ich-trickse}{QUERY_STRING} ^dl=a88d682c81bb22b0fed558376aa29e91$'
+        rewrite_rule:
+          - ^(.*)$ https://test-www-pfizermed-de.pixelpark.net/lyrica_edetailing?dl=5940052744918c5d8c78d2b2d960675b [R=301,L]
+      - pfizermed_rw20:
+        comment: 'Rewrites fuer Pfizermed'
+        rewrite_cond:
+          - '%%{ich-trickse}{HTTP_HOST} ^(test-www-pfizermed-de.pixelpark.net)$'
+          - '%%{ich-trickse}{REQUEST_URI} ^/downloads/lyrica-ppt-extra-sonderdruck.htm$'
+          - '%%{ich-trickse}{QUERY_STRING} ^dl=4f82556463a49a9e9dbc3545481dd299$'
+        rewrite_rule:
+          - ^(.*)$ https://test-www-pfizermed-de.pixelpark.net/lyrica_sonderdruck_ppt_extra.htm?dl=9bed39730d34b08691b38525479c8a27 [R=301,L]
+      - pfizermed_rw21:
+        comment: 'Rewrites fuer Pfizermed'
+        rewrite_cond:
+          - '%%{ich-trickse}{HTTP_HOST} ^(test-www-pfizermed-de.pixelpark.net)$'
+          - '%%{ich-trickse}{REQUEST_URI} ^/videos/neuropathischer-schmerz-patientenvideo/video/0.htm$'
+          - '%%{ich-trickse}{QUERY_STRING} ^dl=d6a9696fd84e5f7df8f3249d74d7f2dd$'
+        rewrite_rule:
+          - ^(.*)$ https://test-www-pfizermed-de.pixelpark.net/neuropatischer_schmerz_patientenvideo.htm?dl=68da218e298706dee34024a3548baae3 [R=301,L]
+      - pfizermed_rw22:
+        comment: 'Rewrites fuer Pfizermed'
+        rewrite_cond:
+          - '%%{ich-trickse}{HTTP_HOST} ^(test-www-pfizermed-de.pixelpark.net)$'
+          - '%%{ich-trickse}{REQUEST_URI} ^/fortbildungen/generalisierte-angststoerung-expertenvortraege-im-video.htm$'
+          - '%%{ich-trickse}{QUERY_STRING} ^dl=5996a02b175b0f233bcb885fa30d6b56$'
+        rewrite_rule:
+          - ^(.*)$ https://test-www-pfizermed-de.pixelpark.net/generalisierte_angststoerung_expertenvortraege.htm?dl=498d9ffda73262b42a414722b5889048 [R=301,L]
+      - pfizermed_rw23:
+        comment: 'Rewrites fuer Pfizermed'
+        rewrite_cond:
+          - '%%{ich-trickse}{HTTP_HOST} ^(test-www-pfizermed-de.pixelpark.net)$'
+          - '%%{ich-trickse}{REQUEST_URI} ^/videos/was-ihnen-eliquisr-bieten-kann/video/0.htm$'
+          - '%%{ich-trickse}{QUERY_STRING} ^dl=3a513f27f38f3d3b48db006c71b56dea$'
+        rewrite_rule:
+          - ^(.*)$ https://test-www-pfizermed-de.pixelpark.net/was_ihnen_eliquis_bieten_kann.htm?dl=18dbe987148a7641d1522a8fca07ce74 [R=301,L]
+      - pfizermed_rw24:
+        comment: 'Rewrites fuer Pfizermed'
+        rewrite_cond:
+          - '%%{ich-trickse}{HTTP_HOST} ^(test-www-pfizermed-de.pixelpark.net)$'
+          - '%%{ich-trickse}{REQUEST_URI} ^/virtueller-ad.htm$'
+          - '%%{ich-trickse}{QUERY_STRING} ^dl=f8ce79a8b2c71eaa48d48bc4d69957d9$'
+        rewrite_rule:
+          - ^(.*)$ https://test-www-pfizermed-de.pixelpark.net/der_virtuelle_aussendienst.htm?dl=7d302c8dda851aa5780d12b22a9973c8 [R=301,L]
+      - pfizer_rw1:
+        comment: 'Rewrites fuer Pfizer'
+        rewrite_cond:
+          - '%%{ich-trickse}{HTTP_HOST} ^(test-www-pfizer-de.pixelpark.net)$'
+          - '%%{ich-trickse}{REQUEST_URI} ^(/?)$'
+          - '%%{ich-trickse}{QUERY_STRING} ^id=2940$'
+        rewrite_rule:
+          - ^(.*)$ https://test-www-pfizer-de.pixelpark.net/? [R=301,L]
+      - pfizer_rw2:
+        comment: 'Rewrites fuer Pfizer'
+        rewrite_cond:
+          - '%%{ich-trickse}{HTTP_HOST} ^test-www-pfizer-de.pixelpark.net$'
+          - '%%{ich-trickse}{REQUEST_URI} ^/seite-empfehlen$ [OR]'
+          - '%%{ich-trickse}{REQUEST_URI} ^/seite-empfehlen.htm$ [OR]'
+          - '%%{ich-trickse}{REQUEST_URI} ^/nc/seite-empfehlen$ [OR]'
+          - '%%{ich-trickse}{REQUEST_URI} ^/nc/seite-empfehlen.htm$ [OR]'
+          - '%%{ich-trickse}{REQUEST_URI} ^/forschung$ [OR]'
+          - '%%{ich-trickse}{REQUEST_URI} ^/forschung.htm$ [OR]'
+          - '%%{ich-trickse}{REQUEST_URI} ^/nc/forschung$ [OR]'
+          - '%%{ich-trickse}{REQUEST_URI} ^/nc/forschung.htm$'
+        rewrite_rule:
+          - ^(.*)$ https://test-www-pfizer-de.pixelpark.net/ [R=301,L]
+      - pfizer_rw3:
+        comment: 'Rewrites fuer Pfizer'
+        rewrite_cond:
+          - '%%{ich-trickse}{HTTP_HOST} ^test-www-pfizer-de.pixelpark.net$'
+          - '%%{ich-trickse}{REQUEST_URI} ^/nc/gesundheit$ [OR]'
+          - '%%{ich-trickse}{REQUEST_URI} ^/nc/gesundheit.htm$ [OR]'
+          - '%%{ich-trickse}{REQUEST_URI} ^/patienten$ [OR]'
+          - '%%{ich-trickse}{REQUEST_URI} ^/patienten.htm$ [OR]'
+          - '%%{ich-trickse}{REQUEST_URI} ^/nc/patienten$ [OR]'
+          - '%%{ich-trickse}{REQUEST_URI} ^/nc/patienten.htm$'
+        rewrite_rule:
+          - ^(.*)$ https://test-www-pfizer-de.pixelpark.net/gesundheit [R=301,L]
+      - pfizer_rw4:
+        comment: 'Rewrites fuer Pfizer'
+        rewrite_cond:
+          - '%%{ich-trickse}{HTTP_HOST} ^test-www-pfizer-de.pixelpark.net$'
+          - '%%{ich-trickse}{REQUEST_URI} ^/unternehmen$ [OR]'
+          - '%%{ich-trickse}{REQUEST_URI} ^/unternehmen.htm$ [OR]'
+          - '%%{ich-trickse}{REQUEST_URI} ^/nc/unternehmen$ [OR]'
+          - '%%{ich-trickse}{REQUEST_URI} ^/nc/unternehmen.htm$'
+        rewrite_rule:
+          - ^(.*)$ https://test-www-pfizer-de.pixelpark.net/ueber-pfizer [R=301,L]
+      - pfizer_rw5:
+        comment: 'Rewrites fuer Pfizer'
+        rewrite_cond:
+          - '%%{ich-trickse}{HTTP_HOST} ^test-www-pfizer-de.pixelpark.net$'
+          - '%%{ich-trickse}{REQUEST_URI} ^/medien$ [OR]'
+          - '%%{ich-trickse}{REQUEST_URI} ^/medien.htm$ [OR]'
+          - '%%{ich-trickse}{REQUEST_URI} ^/nc/medien$ [OR]'
+          - '%%{ich-trickse}{REQUEST_URI} ^/nc/medien.htm$'
+        rewrite_rule:
+          - ^(.*)$ https://test-www-pfizer-de.pixelpark.net/presse/meldungen [R=301,L]
+      - pfizer_rw6:
+        comment: 'Rewrites fuer Pfizer'
+        rewrite_cond:
+          - '%%{ich-trickse}{HTTP_HOST} ^test-www-pfizer-de.pixelpark.net$'
+          - '%%{ich-trickse}{REQUEST_URI} ^/medikamente$ [OR]'
+          - '%%{ich-trickse}{REQUEST_URI} ^/medikamente.htm$ [OR]'
+          - '%%{ich-trickse}{REQUEST_URI} ^/nc/medikamente$ [OR]'
+          - '%%{ich-trickse}{REQUEST_URI} ^/nc/medikamente.htm$'
+        rewrite_rule:
+          - ^(.*)$ https://test-www-pfizer-de.pixelpark.net/medikamente-produkte [R=301,L]
+      - pfizer_rw7:
+        comment: 'Rewrites fuer Pfizer'
+        rewrite_cond:
+          - '%%{ich-trickse}{HTTP_HOST} ^test-www-pfizer-de.pixelpark.net$'
+          - '%%{ich-trickse}{REQUEST_URI} ^/nebenwirkungen-melden$ [OR]'
+          - '%%{ich-trickse}{REQUEST_URI} ^/nebenwirkungen-melden.htm$ [OR]'
+          - '%%{ich-trickse}{REQUEST_URI} ^/nc/nebenwirkungen-melden$ [OR]'
+          - '%%{ich-trickse}{REQUEST_URI} ^/nc/nebenwirkungen-melden.htm$'
+        rewrite_rule:
+          - ^(.*)$ https://test-www-pfizer-de.pixelpark.net/nc/footer/nebenwirkungen-melden [R=301,L]
+      - pfizer_rw8:
+        comment: 'Rewrites fuer Pfizer'
+        rewrite_cond:
+          - '%%{ich-trickse}{HTTP_HOST} ^test-www-pfizer-de.pixelpark.net$'
+          - '%%{ich-trickse}{REQUEST_URI} ^/agb$ [OR]'
+          - '%%{ich-trickse}{REQUEST_URI} ^/agb.htm$'
+        rewrite_rule:
+          - ^(.*)$ https://test-www-pfizer-de.pixelpark.net/footer/agb [R=301,L]
+      - pfizer_rw9:
+        comment: 'Rewrites fuer Pfizer'
+        rewrite_cond:
+          - '%%{ich-trickse}{HTTP_HOST} ^test-www-pfizer-de.pixelpark.net$'
+          - '%%{ich-trickse}{REQUEST_URI} ^/einkauf-de$ [OR]'
+          - '%%{ich-trickse}{REQUEST_URI} ^/einkauf-de.htm$'
+        rewrite_rule:
+          - ^(.*)$ https://test-www-pfizer-de.pixelpark.net/footer/agb/einkauf-en [R=301,L]
+      - pfizer_rw10:
+        comment: 'Rewrites fuer Pfizer'
+        rewrite_cond:
+          - '%%{ich-trickse}{HTTP_HOST} ^test-www-pfizer-de.pixelpark.net$'
+          - '%%{ich-trickse}{REQUEST_URI} ^/engagement$ [OR]'
+          - '%%{ich-trickse}{REQUEST_URI} ^/engagement.htm$'
+        rewrite_rule:
+          - ^(.*)$ https://test-www-pfizer-de.pixelpark.net/ueber-pfizer/engagement [R=301,L]
+      - pfizer_rw11:
+        comment: 'Rewrites fuer Pfizer'
+        rewrite_cond:
+          - '%%{ich-trickse}{HTTP_HOST} ^test-www-pfizer-de.pixelpark.net$'
+          - '%%{ich-trickse}{REQUEST_URI} ^/gesundheit-alt/der-virtuelle-beipackzettel$ [OR]'
+          - '%%{ich-trickse}{REQUEST_URI} ^/gesundheit-alt/der-virtuelle-beipackzettel.htm$'
+        rewrite_rule:
+          - ^(.*)$ https://test-www-pfizer-de.pixelpark.net/services/beipackzettel-verstehen [R=301,L]
+      - pfizer_rw12:
+        comment: 'Rewrites fuer Pfizer'
+        rewrite_cond:
+          - '%%{ich-trickse}{HTTP_HOST} ^test-www-pfizer-de.pixelpark.net$'
+          - '%%{ich-trickse}{REQUEST_URI} ^/impressum$ [OR]'
+          - '%%{ich-trickse}{REQUEST_URI} ^/impressum.htm$'
+        rewrite_rule:
+          - ^(.*)$ https://test-www-pfizer-de.pixelpark.net/footer/impressum [R=301,L]
+      - pfizer_rw13:
+        comment: 'Rewrites fuer Pfizer'
+        rewrite_cond:
+          - '%%{ich-trickse}{HTTP_HOST} ^test-www-pfizer-de.pixelpark.net$'
+          - '%%{ich-trickse}{REQUEST_URI} ^/kontakt$ [OR]'
+          - '%%{ich-trickse}{REQUEST_URI} ^/kontakt.htm$'
+        rewrite_rule:
+          - ^(.*)$ https://test-www-pfizer-de.pixelpark.net/footer/kontakt [R=301,L]
+      - pfizer_rw14:
+        comment: 'Rewrites fuer Pfizer'
+        rewrite_cond:
+          - '%%{ich-trickse}{HTTP_HOST} ^test-www-pfizer-de.pixelpark.net$'
+          - '%%{ich-trickse}{REQUEST_URI} ^/nutzungsbedingungen$ [OR]'
+          - '%%{ich-trickse}{REQUEST_URI} ^/nutzungsbedingungen.htm$'
+        rewrite_rule:
+          - ^(.*)$ https://test-www-pfizer-de.pixelpark.net/footer/nutzungsbedingungen [R=301,L]
+      - pfizer_rw15:
+        comment: 'Rewrites fuer Pfizer'
+        rewrite_cond:
+          - '%%{ich-trickse}{HTTP_HOST} ^test-www-pfizer-de.pixelpark.net$'
+          - '%%{ich-trickse}{REQUEST_URI} ^/pflichtangaben$ [OR]'
+          - '%%{ich-trickse}{REQUEST_URI} ^/pflichtangaben.htm$'
+        rewrite_rule:
+          - ^(.*)$ https://test-www-pfizer-de.pixelpark.net/footer/pflichtangaben [R=301,L]
+      - pfizer_rw16:
+        comment: 'Rewrites fuer Pfizer'
+        rewrite_cond:
+          - '%%{ich-trickse}{HTTP_HOST} ^test-www-pfizer-de.pixelpark.net$'
+          - '%%{ich-trickse}{REQUEST_URI} ^/sitemap$ [OR]'
+          - '%%{ich-trickse}{REQUEST_URI} ^/sitemap.htm$'
+        rewrite_rule:
+          - ^(.*)$ https://test-www-pfizer-de.pixelpark.net/footer/sitemap [R=301,L]
+      - pfizer_rw17:
+        comment: 'Rewrites fuer Pfizer'
+        rewrite_cond:
+          - '%%{ich-trickse}{HTTP_HOST} ^test-www-pfizer-de.pixelpark.net$'
+          - '%%{ich-trickse}{REQUEST_URI} ^/verkauf-de$ [OR]'
+          - '%%{ich-trickse}{REQUEST_URI} ^/verkauf-de.htm$'
+        rewrite_rule:
+          - ^(.*)$ https://test-www-pfizer-de.pixelpark.net/footer/agb/verkauf-de [R=301,L]
+      - PFIZ-1760:
+        comment: https://jira.pixelpark.com/jira/browse/PFIZ-1760
+        rewrite_rule:
+          - ^/medizinische-anfragen.htm$ https://test-www-pfizer-de.pixelpark.net/footer/medizinische-anfragen.htm [R=301,L]
+      - PFIZ-1770:
+        comment: https://jira.pixelpark.com/jira/browse/PFIZ-1770
+        rewrite_rule:
+          - ^/fileadmin/pfizer.de/documents/gi/ https://test-www-pfizer-de.pixelpark.net/medikamente-produkte.htm [R=301,L]
+      - PFIZ-1837:
+        comment: https://jira.pixelpark.com/jira/browse/PFIZ-1837
+        rewrite_cond:
+          - '%%{ich-trickse}{HTTPS} !=on'
+        rewrite_rule:
+          - ^(.*)$ https://%%{ich-trickse}{HTTP_HOST}$1 [R=301,L]
+#      - pfizer_rw18:
+#        comment: 'https://jira.pixelpark.com/jira/browse/PFIZ-2511'
+#        rewrite_rule:
+#          - ^/services/aelter-werden.htm https://test-www-pfizer-de.pixelpark.net/services.htm [L,R=301]
+#      - pfizer_rw19:
+#        comment: 'https://jira.pixelpark.com/jira/browse/PFIZ-2511'
+#        rewrite_rule:
+#          - ^/services/arzneimittelfaelschung.htm https://test-www-pfizer-de.pixelpark.net/services.htm [L,R=301]
+#      - pfizer_rw20:
+#        comment: 'https://jira.pixelpark.com/jira/browse/PFIZ-2511'
+#        rewrite_rule:
+#          - ^/services/beipackzettel-verstehen.htm https://test-www-pfizer-de.pixelpark.net/services.htm [L,R=301]
+#      - pfizer_rw21:
+#        comment: 'https://jira.pixelpark.com/jira/browse/PFIZ-2511'
+#        rewrite_rule:
+#          - ^/services/erektionsstoerungen.htm https://test-www-pfizer-de.pixelpark.net/services.htm [L,R=301]
+#      - pfizer_rw22:
+#        comment: 'https://jira.pixelpark.com/jira/browse/PFIZ-2511'
+#        rewrite_rule:
+#          - ^/services/haemophilie.htm https://test-www-pfizer-de.pixelpark.net/services.htm [L,R=301]
+#      - pfizer_rw23:
+#        comment: 'https://jira.pixelpark.com/jira/browse/PFIZ-2511'
+#        rewrite_rule:
+#          - ^/services/ich-beim-arzt.htm https://test-www-pfizer-de.pixelpark.net/services.htm [L,R=301]
+#      - pfizer_rw24:
+#        comment: 'https://jira.pixelpark.com/jira/browse/PFIZ-2511'
+#        rewrite_rule:
+#          - ^/services/impfungen.htm https://test-www-pfizer-de.pixelpark.net/services.htm [L,R=301]
+#      - pfizer_rw25:
+#        comment: 'https://jira.pixelpark.com/jira/browse/PFIZ-2511'
+#        rewrite_rule:
+#          - ^/services/klinische-studien.htm https://test-www-pfizer-de.pixelpark.net/services.htm [L,R=301]
+#      - pfizer_rw26:
+#        comment: 'https://jira.pixelpark.com/jira/browse/PFIZ-2511'
+#        rewrite_rule:
+#          - ^/services/personalisierte-krebsmedizin.htm https://test-www-pfizer-de.pixelpark.net/services.htm [L,R=301]
+#      - pfizer_rw27:
+#        comment: 'https://jira.pixelpark.com/jira/browse/PFIZ-2511'
+#        rewrite_rule:
+#          - ^/services/rheuma.htm https://test-www-pfizer-de.pixelpark.net/services.htm [L,R=301]
+#      - pfizer_rw28:
+#        comment: 'https://jira.pixelpark.com/jira/browse/PFIZ-2511'
+#        rewrite_rule:
+#          - ^/services/schlaganfallvorsorge.htm https://test-www-pfizer-de.pixelpark.net/services.htm [L,R=301]
+#      - pfizer_rw29:
+#        comment: 'https://jira.pixelpark.com/jira/browse/PFIZ-2511'
+#        rewrite_rule:
+#          - ^/services/schmerz.htm https://test-www-pfizer-de.pixelpark.net/services.htm [L,R=301]
+#      - pfizer_rw30:
+#        comment: 'https://jira.pixelpark.com/jira/browse/PFIZ-2511'
+#        rewrite_rule:
+#          - ^/services/seltene-erkrankungen.htm https://test-www-pfizer-de.pixelpark.net/services.htm [L,R=301]
+#      - pfizer_rw31:
+#        comment: 'https://jira.pixelpark.com/jira/browse/PFIZ-2511'
+#        rewrite_rule:
+#          - ^/services/social-media.htm https://test-www-pfizer-de.pixelpark.net/services.htm [L,R=301]
+#      - pfizer_rw32:
+#        comment: 'https://jira.pixelpark.com/jira/browse/PFIZ-2511'
+#        rewrite_rule:
+#          - ^/services/ueberaktive-blase.htm https://test-www-pfizer-de.pixelpark.net/services.htm [L,R=301]
+
+site::profile::apache::vhosts:
+  pfizer-berlin:
+    servername: test-www-pfizer-berlin.pixelpark.net
+    docroot: '/srv/www/mspfizerberlin'
+    port: 80
+    directories:
+      - directory_root:
+        provider: directory
+        path: '/srv/www/mspfizerberlin'
+        options:
+          - FollowSymLinks
+          - MultiViews
+        allow_override:
+          - All
+      - location_root:
+        provider: location
+        path: '/'
+        auth_type: Digest
+        auth_name: pixelrealm
+        auth_digest_provider: file
+        auth_digest_algorithm: MD5
+        auth_user_file: '/etc/httpd/htdigest'
+        auth_require: 'valid-user'
+        require:
+          - 'ip 217.66.55 217.66.50 217.66.51 217.66.48.130 168.224.160 10.121.101 204.114.176 204.114.216 148.168.40 202.32.173 204.114.248 168.224.1 168.224.160 148.168.127 204.114.196 193.235.226 212.58.14 204.114.199 155.94.99 155.94.78 155.94.62 218.213.241 155.94.70 155.94.110 222.73.72 155.94.119 155.94.55 68.58.141.20 174.137.32.22 15.213.17 85.183.14'
+
+  ich-beim-arzt:
+    servername: test-ich-beim-arzt-de.pixelpark.net
+    docroot: '/srv/www/test-www.ich-beim-arzt.de'
+    port: 80
+    directories:
+      - directory_root:
+        provider: directory
+        path: '/srv/www/test-www.ich-beim-arzt.de'
+        options:
+          - FollowSymLinks
+          - MultiViews
+        allow_override:
+          - All
+      - location_root:
+        provider: location
+        path: '/'
+        auth_type: Digest
+        auth_name: pixelrealm
+        auth_digest_provider: file
+        auth_digest_algorithm: MD5
+        auth_user_file: '/etc/httpd/htdigest'
+        auth_require: 'valid-user'
+        require:
+          - 'ip 217.66.55 217.66.50 217.66.51 217.66.48.130 168.224.160 10.121.101 204.114.176 204.114.216 148.168.40 202.32.173 204.114.248 168.224.1 168.224.160 148.168.127 204.114.196 193.235.226 212.58.14 204.114.199 155.94.99 155.94.78 155.94.62 218.213.241 155.94.70 155.94.110 222.73.72 155.94.119 155.94.55 68.58.141.20 174.137.32.22 15.213.17 85.183.14'
+
+  lungenkrebs-testen-at:
+    servername: test-www-lungenkrebs-testen-at.pixelpark.net
+    docroot: '/srv/www/test-www.lungenkrebs-testen.at'
+    port: 80
+    directories:
+      - directory_root:
+        provider: directory
+        path: '/srv/www/test-www.lungenkrebs-testen.at'
+        options:
+          - FollowSymLinks
+          - MultiViews
+        allow_override:
+          - All
+      - location_root:
+        provider: location
+        path: '/'
+        auth_type: Digest
+        auth_name: pixelrealm
+        auth_digest_provider: file
+        auth_digest_algorithm: MD5
+        auth_user_file: '/etc/httpd/htdigest'
+        auth_require: 'valid-user'
+        require:
+          - 'ip 217.66.55 217.66.50 217.66.51 217.66.48.130 168.224.160 10.121.101 204.114.176 204.114.216 148.168.40 202.32.173 204.114.248 168.224.1 168.224.160 148.168.127 204.114.196 193.235.226 212.58.14 204.114.199 155.94.99 155.94.78 155.94.62 218.213.241 155.94.70 155.94.110 222.73.72 155.94.119 155.94.55 68.58.141.20 174.137.32.22 15.213.17 85.183.14'
+
+  lungenkrebs-testen-de:
+    servername: test-www-lungenkrebs-testen-de.pixelpark.net
+    docroot: '/srv/www/test-www.lungenkrebs-testen.de'
+    port: 80
+    directories:
+      - directory_root:
+        provider: directory
+        path: '/srv/www/test-www.lungenkrebs-testen.de'
+        options:
+          - FollowSymLinks
+          - MultiViews
+        allow_override:
+          - All
+      - location_root:
+        provider: location
+        path: '/'
+        auth_type: Digest
+        auth_name: pixelrealm
+        auth_digest_provider: file
+        auth_digest_algorithm: MD5
+        auth_user_file: '/etc/httpd/htdigest'
+        auth_require: 'valid-user'
+        require:
+          - 'ip 217.66.55 217.66.50 217.66.51 217.66.48.130 168.224.160 10.121.101 204.114.176 204.114.216 148.168.40 202.32.173 204.114.248 168.224.1 168.224.160 148.168.127 204.114.196 193.235.226 212.58.14 204.114.199 155.94.99 155.94.78 155.94.62 218.213.241 155.94.70 155.94.110 222.73.72 155.94.119 155.94.55 68.58.141.20 174.137.32.22 15.213.17 85.183.14'
+  lungenkrebs-testen-de_ssl:
+    servername: test-www-lungenkrebs-testen-de.pixelpark.net
+    docroot: '/srv/www/test-www.lungenkrebs-testen.de'
+    port: 443
+    ssl: true
+    ssl_cert: /etc/pki/tls/certs/wildcard.pixelpark.net-cert.pem
+    ssl_chain: /etc/pki/tls/certs/wildcard.pixelpark.net-cert.pem
+    ssl_key: /etc/pki/tls/private/wildcard.pixelpark.net-key.pem
+    directories:
+      - directory_root:
+        provider: directory
+        path: '/srv/www/test-www.lungenkrebs-testen.de'
+        options:
+          - FollowSymLinks
+          - MultiViews
+        allow_override:
+          - All
+      - location_root:
+        provider: location
+        path: '/'
+        auth_type: Digest
+        auth_name: pixelrealm
+        auth_digest_provider: file
+        auth_digest_algorithm: MD5
+        auth_user_file: '/etc/httpd/htdigest'
+        auth_require: 'valid-user'
+        require:
+          - 'ip 217.66.55 217.66.50 217.66.51 217.66.48.130 168.224.160 10.121.101 204.114.176 204.114.216 148.168.40 202.32.173 204.114.248 168.224.1 168.224.160 148.168.127 204.114.196 193.235.226 212.58.14 204.114.199 155.94.99 155.94.78 155.94.62 218.213.241 155.94.70 155.94.110 222.73.72 155.94.119 155.94.55 68.58.141.20 174.137.32.22 15.213.17 85.183.14'
+
+  impf2ab60:
+    servername: test-www-impf2ab60-de.pixelpark.net
+    serveraliases:
+      - test-www-impf2ab60-de.pixelpark.net
+      - test-www-impfzweiab60-de.pixelpark.net
+      - test-www-impf2absechzig-de.pixelpark.net
+      - test-www-impfzweiabsechzig-de.pixelpark.net
+      - test-www-impf-zwei-ab-sechzig-de.pixelpark.net
+      - test-www-impf-2-ab-60-de.pixelpark.net
+      - test-www-impf2-ab-60-de.pixelpark.net
+      - test-www-impf2-de.pixelpark.net
+    docroot: '/srv/www/test-www.impf2ab60.de'
+    port: 80
+    directories:
+      - directory_root:
+        provider: directory
+        path: '/srv/www/test-www.impf2ab60.de'
+        options:
+          - FollowSymLinks
+          - MultiViews
+        allow_override:
+          - All
+      - location_root:
+        provider: location
+        path: '/'
+        auth_type: Digest
+        auth_name: pixelrealm
+        auth_digest_provider: file
+        auth_digest_algorithm: MD5
+        auth_user_file: '/etc/httpd/htdigest'
+        auth_require: 'valid-user'
+        require:
+          - 'ip 217.66.55 217.66.50 217.66.51 217.66.48.130 168.224.160 10.121.101 204.114.176 204.114.216 148.168.40 202.32.173 204.114.248 168.224.1 168.224.160 148.168.127 204.114.196 193.235.226 212.58.14 204.114.199 155.94.99 155.94.78 155.94.62 218.213.241 155.94.70 155.94.110 222.73.72 155.94.119 155.94.55 68.58.141.20 174.137.32.22 15.213.17 85.183.14'
+
+  wegweiser-rheuma-psoriasis:
+    servername: test-www-wegweiser-rheuma-psoriasis-de.pixelpark.net
+    docroot: '/srv/www/test-www.wegweiser-rheuma-psoriasis.de/current'
+    manage_docroot: false
+    port: 80
+    directories:
+      - directory_root:
+        provider: directory
+        path: '/srv/www/test-www.wegweiser-rheuma-psoriasis.de/current'
+        options:
+          - FollowSymLinks
+          - MultiViews
+        allow_override:
+          - All
+      - location_root:
+        provider: location
+        path: '/'
+        auth_type: Digest
+        auth_name: pixelrealm
+        auth_digest_provider: file
+        auth_digest_algorithm: MD5
+        auth_user_file: '/etc/httpd/htdigest'
+        auth_require: 'valid-user'
+        require:
+          - 'ip 217.66.55 217.66.50 217.66.51 217.66.48.130 168.224.160 10.121.101 204.114.176 204.114.216 148.168.40 202.32.173 204.114.248 168.224.1 168.224.160 148.168.127 204.114.196 193.235.226 212.58.14 204.114.199 155.94.99 155.94.78 155.94.62 218.213.241 155.94.70 155.94.110 222.73.72 155.94.119 155.94.55 68.58.141.20 174.137.32.22 15.213.17 85.183.14'
+    rewrites:
+      - www:
+        comment: 'Alles nach test-www'
+        rewrite_cond:
+          - '%%{ich-trickse}{HTTP_HOST} ^wegweiser-rheuma-psoriasis.de$'
+        rewrite_rule:
+          - ^(.*)$ https://test-www.wegweiser-rheuma-psoriasis.de$1 [R=301,L]
+      - rheuma:
+        comment: 'Redirect to rheuma domain'
+        rewrite_cond:
+          - '%%{ich-trickse}{REQUEST_URI} ^/rheuma.html$'
+        rewrite_rule:
+          - ^/rheuma.html$ https://test-www-wegweiser-rheuma-de.pixelpark.net [R=301,L]
+      - psoriasis:
+        comment: 'Redirect to psoriasis domain'
+        rewrite_cond:
+          - '%%{ich-trickse}{REQUEST_URI} ^/psoriasis.html$'
+        rewrite_rule:
+          - ^/psoriasis.html$ https://test-www-wegweiser-psoriasis-de.pixelpark.net [R=301,L]
+  wegweiser-rheuma-psoriasis_ssl:
+    servername: test-www-wegweiser-rheuma-psoriasis-de.pixelpark.net
+    docroot: '/srv/www/test-www.wegweiser-rheuma-psoriasis.de/current'
+    manage_docroot: false
+    port: 443
+    ssl: true
+    ssl_cert: /etc/pki/tls/certs/wildcard.pixelpark.net-cert.pem
+    ssl_chain: /etc/pki/tls/certs/wildcard.pixelpark.net-cert.pem
+    ssl_key: /etc/pki/tls/private/wildcard.pixelpark.net-key.pem
+    directories:
+      - directory_root:
+        provider: directory
+        path: '/srv/www/test-www.wegweiser-rheuma-psoriasis.de/current'
+        options:
+          - FollowSymLinks
+          - MultiViews
+        allow_override:
+          - All
+      - location_root:
+        provider: location
+        path: '/'
+        auth_type: Digest
+        auth_name: pixelrealm
+        auth_digest_provider: file
+        auth_digest_algorithm: MD5
+        auth_user_file: '/etc/httpd/htdigest'
+        auth_require: 'valid-user'
+        require:
+          - 'ip 217.66.55 217.66.50 217.66.51 217.66.48.130 168.224.160 10.121.101 204.114.176 204.114.216 148.168.40 202.32.173 204.114.248 168.224.1 168.224.160 148.168.127 204.114.196 193.235.226 212.58.14 204.114.199 155.94.99 155.94.78 155.94.62 218.213.241 155.94.70 155.94.110 222.73.72 155.94.119 155.94.55 68.58.141.20 174.137.32.22 15.213.17 85.183.14'
+    rewrites:
+      - rheuma:
+        comment: 'Redirect to rheuma domain'
+        rewrite_cond:
+          - '%%{ich-trickse}{REQUEST_URI} ^/rheuma.html$'
+        rewrite_rule:
+          - ^/rheuma.html$ https://test-www-wegweiser-rheuma-de.pixelpark.net [R=301,L]
+      - psoriasis:
+        comment: 'Redirect to psoriasis domain'
+        rewrite_cond:
+          - '%%{ich-trickse}{REQUEST_URI} ^/psoriasis.html$'
+        rewrite_rule:
+          - ^/psoriasis.html$ https://test-www-wegweiser-psoriasis-de.pixelpark.net [R=301,L]
+
+  wegweiser-rheuma:
+    servername: test-www-wegweiser-rheuma-de.pixelpark.net
+    docroot: '/srv/www/test-www.wegweiser-rheuma-psoriasis.de/current'
+    manage_docroot: false
+    port: 80
+    directoryindex: rheuma.html
+    directories:
+      - directory_root:
+        provider: directory
+        path: '/srv/www/test-www.wegweiser-rheuma-psoriasis.de/current'
+        options:
+          - FollowSymLinks
+          - MultiViews
+        allow_override:
+          - All
+      - location_root:
+        provider: location
+        path: '/'
+        auth_type: Digest
+        auth_name: pixelrealm
+        auth_digest_provider: file
+        auth_digest_algorithm: MD5
+        auth_user_file: '/etc/httpd/htdigest'
+        auth_require: 'valid-user'
+        require:
+          - 'ip 217.66.55 217.66.50 217.66.51 217.66.48.130 168.224.160 10.121.101 204.114.176 204.114.216 148.168.40 202.32.173 204.114.248 168.224.1 168.224.160 148.168.127 204.114.196 193.235.226 212.58.14 204.114.199 155.94.99 155.94.78 155.94.62 218.213.241 155.94.70 155.94.110 222.73.72 155.94.119 155.94.55 68.58.141.20 174.137.32.22 15.213.17 85.183.14'
+    rewrites:
+      - rheuma:
+        comment: 'Redirect to rheuma domain'
+        rewrite_cond:
+          - '%%{ich-trickse}{REQUEST_URI} ^/rheuma.html$'
+        rewrite_rule:
+          - ^/rheuma.html$ http://test-www-wegweiser-rheuma-de.pixelpark.net [R=301,L]
+  wegweiser-rheuma_ssl:
+    servername: test-www-wegweiser-rheuma-de.pixelpark.net
+    docroot: '/srv/www/test-www.wegweiser-rheuma-psoriasis.de/current'
+    manage_docroot: false
+    port: 443
+    ssl: true
+    ssl_cert: /etc/pki/tls/certs/wildcard.pixelpark.net-cert.pem
+    ssl_chain: /etc/pki/tls/certs/wildcard.pixelpark.net-cert.pem
+    ssl_key: /etc/pki/tls/private/wildcard.pixelpark.net-key.pem
+    directoryindex: rheuma.html
+    directories:
+      - directory_root:
+        provider: directory
+        path: '/srv/www/test-www.wegweiser-rheuma-psoriasis.de/current'
+        options:
+          - FollowSymLinks
+          - MultiViews
+        allow_override:
+          - All
+      - location_root:
+        provider: location
+        path: '/'
+        auth_type: Digest
+        auth_name: pixelrealm
+        auth_digest_provider: file
+        auth_digest_algorithm: MD5
+        auth_user_file: '/etc/httpd/htdigest'
+        auth_require: 'valid-user'
+        require:
+          - 'ip 217.66.55 217.66.50 217.66.51 217.66.48.130 168.224.160 10.121.101 204.114.176 204.114.216 148.168.40 202.32.173 204.114.248 168.224.1 168.224.160 148.168.127 204.114.196 193.235.226 212.58.14 204.114.199 155.94.99 155.94.78 155.94.62 218.213.241 155.94.70 155.94.110 222.73.72 155.94.119 155.94.55 68.58.141.20 174.137.32.22 15.213.17 85.183.14'
+    rewrites:
+      - rheuma:
+        comment: 'Redirect to rheuma domain'
+        rewrite_cond:
+          - '%%{ich-trickse}{REQUEST_URI} ^/rheuma.html$'
+        rewrite_rule:
+          - ^/rheuma.html$ https://test-www-wegweiser-rheuma-de.pixelpark.net [R=301,L]
+
+  wegweiser-psoriasis:
+    servername: test-www-wegweiser-psoriasis-de.pixelpark.net
+    docroot: '/srv/www/test-www.wegweiser-rheuma-psoriasis.de/current'
+    manage_docroot: false
+    port: 80
+    directoryindex: psoriasis.html
+    directories:
+      - directory_root:
+        provider: directory
+        path: '/srv/www/test-www.wegweiser-rheuma-psoriasis.de/current'
+        options:
+          - FollowSymLinks
+          - MultiViews
+        allow_override:
+          - All
+      - location_root:
+        provider: location
+        path: '/'
+        auth_type: Digest
+        auth_name: pixelrealm
+        auth_digest_provider: file
+        auth_digest_algorithm: MD5
+        auth_user_file: '/etc/httpd/htdigest'
+        auth_require: 'valid-user'
+        require:
+          - 'ip 217.66.55 217.66.50 217.66.51 217.66.48.130 168.224.160 10.121.101 204.114.176 204.114.216 148.168.40 202.32.173 204.114.248 168.224.1 168.224.160 148.168.127 204.114.196 193.235.226 212.58.14 204.114.199 155.94.99 155.94.78 155.94.62 218.213.241 155.94.70 155.94.110 222.73.72 155.94.119 155.94.55 68.58.141.20 174.137.32.22 15.213.17 85.183.14'
+    rewrites:
+      - rheuma:
+        comment: 'Redirect to rheuma domain'
+        rewrite_cond:
+          - '%%{ich-trickse}{REQUEST_URI} ^/psoriasis.html'
+        rewrite_rule:
+          - ^/psoriasis.html(.*)$ http://test-www-wegweiser-psoriasis-de.pixelpark.net$1 [R=301,L]
+  wegweiser-psoriasis_ssl:
+    servername: test-www-wegweiser-psoriasis-de.pixelpark.net
+    docroot: '/srv/www/test-www.wegweiser-rheuma-psoriasis.de/current'
+    manage_docroot: false
+    port: 443
+    ssl: true
+    ssl_cert: /etc/pki/tls/certs/wildcard.pixelpark.net-cert.pem
+    ssl_chain: /etc/pki/tls/certs/wildcard.pixelpark.net-cert.pem
+    ssl_key: /etc/pki/tls/private/wildcard.pixelpark.net-key.pem
+    directoryindex: psoriasis.html
+    directories:
+      - directory_root:
+        provider: directory
+        path: '/srv/www/test-www.wegweiser-rheuma-psoriasis.de/current'
+        options:
+          - FollowSymLinks
+          - MultiViews
+        allow_override:
+          - All
+      - location_root:
+        provider: location
+        path: '/'
+        auth_type: Digest
+        auth_name: pixelrealm
+        auth_digest_provider: file
+        auth_digest_algorithm: MD5
+        auth_user_file: '/etc/httpd/htdigest'
+        auth_require: 'valid-user'
+        require:
+          - 'ip 217.66.55 217.66.50 217.66.51 217.66.48.130 168.224.160 10.121.101 204.114.176 204.114.216 148.168.40 202.32.173 204.114.248 168.224.1 168.224.160 148.168.127 204.114.196 193.235.226 212.58.14 204.114.199 155.94.99 155.94.78 155.94.62 218.213.241 155.94.70 155.94.110 222.73.72 155.94.119 155.94.55 68.58.141.20 174.137.32.22 15.213.17 85.183.14'
+    rewrites:
+      - rheuma:
+        comment: 'Redirect to rheuma domain'
+        rewrite_cond:
+          - '%%{ich-trickse}{REQUEST_URI} ^/psoriasis.html'
+        rewrite_rule:
+          - ^/psoriasis.html(.*)$ http://test-www-wegweiser-psoriasis-de.pixelpark.net$1 [R=301,L]
+  static.pfizer:
+    servername: test-static-pfizer-de.pixelpark.net
+    docroot: '/srv/www/test-static.pfizer.de'
+    port: 80
+    directories:
+      - directory_root:
+        provider: directory
+        path: '/srv/www/test-static.pfizer.de'
+        options:
+          - FollowSymLinks
+          - MultiViews
+        allow_override:
+          - All
+      - location_root:
+        provider: location
+        path: '/'
+        auth_type: Digest
+        auth_name: pixelrealm
+        auth_digest_provider: file
+        auth_digest_algorithm: MD5
+        auth_user_file: '/etc/httpd/htdigest'
+        auth_require: 'valid-user'
+        require:
+          - 'ip 217.66.55 217.66.50 217.66.51 217.66.48.130 168.224.160 10.121.101 204.114.176 204.114.216 148.168.40 202.32.173 204.114.248 168.224.1 168.224.160 148.168.127 204.114.196 193.235.226 212.58.14 204.114.199 155.94.99 155.94.78 155.94.62 218.213.241 155.94.70 155.94.110 222.73.72 155.94.119 155.94.55 68.58.141.20 174.137.32.22 15.213.17 85.183.14'
diff --git a/customer/pfizer/test.yaml b/customer/pfizer/test.yaml
new file mode 100644 (file)
index 0000000..2c7bb34
--- /dev/null
@@ -0,0 +1,100 @@
+---
+accounts::users:
+  thomas.bussmeyer:
+    apply: true
+    sudo: true
+  stephan.vits:
+    apply: true
+    sudo: true
+  nikolai.potapov:
+    apply: true
+    sudo: true
+  romy.pohl:
+    apply: true
+    sudo: false
+  deploy.vogel:
+    apply: true
+    sudo: false
+  andreas.pinto-koehler:
+    apply: true
+    sudo: false
+
+database::params::database_name: "mysql"
+database::params::servername: "test-redaktion-pfizer-de.pixelpark.net"
+database::params::listen_addresses: "217.66.55.140"
+httpd::webserver:
+  webserver1:
+    servername: "test-redaktion-pfizer-de.pixelpark.net"
+    listens:
+      - "217.66.55.140:80"
+      - "217.66.55.140:443"
+    php_modul: true
+    worker: true
+    keepAqlive: "On"
+    hostnameLookups: "Off"
+    servername: "test-redaktion.pfizer-de.pixelpark.net"
+    extendedStatus: "On"
+    serverlimit: 250
+    maxKeepAliveRequests: 50
+    keepAliveTimeout: 3
+    timeout: 600
+    acceptMutex: "sysvsem"
+    useCanonicalPhysicalPort: "On"
+    startServers: 10
+    minSpareServers: 10
+    maxSpareServers: 20
+    minSpareThreads: 25
+    maxSpareThreads: 175
+    maxClients: 250
+    threadsPerChild: 25
+    maxRequestsPerChild: 0
+    vhosts:
+      # https vhost
+      vhost1:
+        srvname: "test-redaktion-pfizermed-de.pixelpark.net"
+        vhost_ip: "217.66.55.140"
+        port: 80
+      vhost2:
+        srvname: "test-redaktion-meet-pfizer-de.pixelpark.net"
+        vhost_ip: "217.66.55.140"
+        port: 80
+      vhost3:
+        srvname: "test-redaktion-pfizermed-de.pixelpark.net"
+        vhost_ip: "217.66.55.140"
+        port: 443
+      vhost4:
+        srvname: "test-redaktion-meet-pfizer-de.pixelpark.net"
+        vhost_ip: "217.66.55.140"
+        port: 443
+      vhost5:
+        srvname: "test-redaktion-pfizer-de.pixelpark.net"
+        vhost_ip: "217.66.55.140"
+        port: 443
+        serveraliases:
+         - "test-redaktion.pfizer-de.pixelpark.net"
+      vhost6:
+        srvname: "test-redaktion-pfizer-de.pixelpark.net"
+        vhost_ip: "217.66.55.140"
+        port: 80
+        serveraliases:
+         - "test-redaktion.pfizer-de.pixelpark.net"
+    modules:
+      - "alias"
+      - "autoindex"
+      - "dir"
+      - "deflate"
+      - "auth_digest"
+      - "authn_file"
+      - "env"
+      - "expires"
+      - "headers"
+      - "include"
+      - "info"
+      - "mime"
+      - "negotiation"
+      - "setenvif"
+      - "unique_id"
+      - "vhost_alias"
+      - "authz_host"
+      - "log_config"
+      - "rewrite"
diff --git a/customer/pfizer/web01-pfizer-de.pixelpark.net.yaml b/customer/pfizer/web01-pfizer-de.pixelpark.net.yaml
new file mode 100644 (file)
index 0000000..47163c7
--- /dev/null
@@ -0,0 +1,1232 @@
+---
+site::role: base
+site::additional_classes:
+  - apache::mod::headers
+  - site::profile::drupal
+  - site::profile::typo3
+  - site::profile::mysql_server
+  - logstash
+
+apache::mpm_module: worker
+apache::default_vhost: false
+
+accounts::users:
+  stephan.vits:
+    apply: true
+    sudo: false
+    groups: apache
+  thomas.bussmeyer:
+    apply: true
+    sudo: false 
+    groups: apache
+  nikolai.potapov:
+    apply: true
+    sudo: false
+    groups: apache
+  andreas.pinto-koehler:
+    apply: true
+    sudo: false
+    groups: apache
+  deploy.vogel:
+    apply: true
+    sudo: false
+    group: apache
+  service.typo3:
+    apply: true
+    sudo: false
+    groups: apache
+    
+# TODO: Abwarten auf Ticket: https://jira.pixelpark.com/jira/browse/PPPUPPET-202
+#  csv_upload:
+#    uid: 25113
+#    apply: true
+#    comment: "CSV-Upload-User-from-Pfizer"
+#    sudo: false
+#    group: sftpgroup
+#    password: ENC[PKCS7,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]
+
+repo::remi_php55: true
+
+php::settings:
+  Date/date.timezone: Europe/Berlin
+  PHP/upload_max_filesize: 100M
+  PHP/post_max_size: 100M
+  PHP/max_execution_time: '240'
+  PHP/memory_limit: '512M'
+  PHP/expose_php: 'Off'
+  Session/session.cookie_secure: 1
+  Session/session.cookie_httponly: 1
+  PHP/cgi.fix_pathinfo: 0
+
+php::extensions:
+  gd: {}
+  opcache: {}
+  mysqlnd: {}
+  soap: {}
+  mbstring: {}
+  pecl-imagick: {}
+  pecl-uploadprogress: {}
+  pecl-memcache: {}
+  pecl-apcu: {}
+  pecl-xslcache: {}
+
+mysql::server::remove_default_accounts: true
+mysql::server::backup::backupuser: backup
+mysql::server::backup::backuppassword: ENC[PKCS7,MIIBiQYJKoZIhvcNAQcDoIIBejCCAXYCAQAxggEhMIIBHQIBADAFMAACAQEwDQYJKoZIhvcNAQEBBQAEggEAw7c8vYxvuFnXvBedqD3AnHqr3zktNQGKi/LIWNBkRFEZwgAdAW9urkElDzG/3bpIvf1fdysZhk4xsJDAkAS6KaC6VysvNcRzRzCk0YYYTcGGEDB+aD+KRfbBA62FZTpizUo9C3AuSFlBv18H1RAOEv/hswlTPXpYx+beT2qQ7i84V0lbz696NinWNjzaD3UQYBFHZjsYGiHD6NwBhzLWr7X4tIk8ITZhMshJ7pZdVNDKez3v6DOfF/v+eicwiKCIYxvWCo/r9PWuCPcpCDa1h68mVKp1nWvJqa8RWCRCcQ9T22VNYjI0wx6dtdO9f7dNwaI47NKg0/zGovVZtdws8TBMBgkqhkiG9w0BBwEwHQYJYIZIAWUDBAEqBBCp5J+kg2E94jOt6qzt+YCbgCBsM3frKIETVhWuuIq90Y12zL2t3EQhe3wZShrCxgaZdg==]
+mysql::server::backup::backupdir: /srv/backup/mysql
+mysql::server::root_password: ENC[PKCS7,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]
+
+mysql::server::override_options:
+  mysqld:
+    bind-address: 0.0.0.0
+
+site::profile::mysql_server::databases:
+  typo3_live:
+    user: typo3
+    password: ENC[PKCS7,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]
+  # Mysql communication between web02 -> web01
+  typo3_redaktion:
+    user: typo3
+    host: 217.66.55.106
+    dbname: typo3_live
+    password: ENC[PKCS7,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]
+  bi-pfizer:
+    user: bi-pfizer
+    password: ENC[PKCS7,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]
+
+# bi.pfizer.de
+site::profile::drupal::manage_php: false
+site::profile::drupal::projects:
+  bi.pfizer.de:
+    ip: 217.66.55.100
+    site_path: /srv/www/bi.pfizer.de
+    servername: bi.pfizer.de
+    serveraliases:
+      - www02-bi-pfizer-de.pixelpark.net
+    ssl: true
+    ssl_cert: /etc/pki/tls/certs/www.pfizer.de-cert.pem.san
+    ssl_chain: /etc/pki/tls/certs/www.pfizer.de-cert.pem.san
+    ssl_key: /etc/pki/tls/private/www.pfizer.de-key.pem.san
+    #SetEnvIf User-Agent         ".*MSIE.*" nokeepalive ssl-unclean-shutdown downgrade-1.0 force-response-1.0
+    directories:
+      - directory_root:
+        provider: directory
+        path: '/srv/www/bi.pfizer.de'
+        options:
+          - FollowSymLinks
+          - MultiViews
+        allow_override:
+          - All
+        directoryindex: index.php
+    rewrites:
+      - alias:
+        comment: 'Alles auf https umleiten'
+        rewrite_cond:
+          - '%%{ich-trickse}{HTTPS} !=on'
+        rewrite_rule:
+          - ^(.*)$  https://bi.pfizer.de$1  [R=301,L]
+
+# www.pfizer.de
+site::profile::typo3::projects:
+  www.pfizer.de:
+    ip: 217.66.55.99
+    site_path: /srv/www/www.pfizer.de
+    use_symlink: true
+####################################################################################################
+#    Vorsicht: Es muss unbedingt beim Update folgender Patch eingespielt werden.
+#    https://git.pixelpark.com/pfizer/pfizer-de/commit/1c1f589795f31c5af3e1b9ec5f76914d5f2d0290
+####################################################################################################
+    version: '6.2.17'
+    db_pass: ENC[PKCS7,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]
+    db_user: typo3
+    db_name: typo3_live
+    servername: www.pfizer.de
+    serveraliases:
+      - pfizer.de
+      - www.pfizermed.de pfizermed.de
+      - www.pain-detect.de pain-detect.de
+      - www.meet-pfizer.de meet-pfizer.de
+      - www.ueberaktive-blase.de ueberaktive-blase.de
+      - www.rauchfrei-durchstarten.de rauchfrei-durchstarten.de
+      - www.monatsring.de monatsring.de
+      - www.sab-simplex.de sab-simplex.de
+      - www.lyrica.de lyrica.de
+      # Pixelpark
+      - www-pfizer-de.pixelpark.net
+      - www-pfizermed-de.pixelpark.net
+      - www-pain-detect-de.pixelpark.net
+      - www-meet-pfizer-de.pixelpark.net
+      - www-ueberaktive-blase.pixelpark.net
+      - www-rauchfrei-durchstarten-de.pixelpark.net
+      - www-monatsring-de.pixelpark.net
+      - www-sab-simplex-de.pixelpark.net
+      - www-lyrica-de.pixelpark.net
+      # Upgrade
+      - www02-pfizer-de.pixelpark.net
+      - www02-pfizermed-de.pixelpark.net
+      - www02-pain-detect-de.pixelpark.net
+      - www02-meet-pfizer-de.pixelpark.net
+      - www02-ueberaktive-blase-de.pixelpark.net
+      - www02-rauchfrei-durchstarten-de.pixelpark.net
+      - www02-monatsring-de.pixelpark.net
+      - www02-sab-simplex-de.pixelpark.net
+      - www02-lyrica-de.pixelpark.net
+    ssl: true
+    ssl_cert: /etc/pki/tls/certs/www.pfizer.de-cert.pem.san
+    ssl_chain: /etc/pki/tls/certs/www.pfizer.de-cert.pem.san
+    ssl_key: /etc/pki/tls/private/www.pfizer.de-key.pem.san
+    #SetEnvIf User-Agent   ".*MSIE.*" nokeepalive ssl-unclean-shutdown downgrade-1.0 force-response-1.0
+    directories:
+      - location_typo3:
+        provider: location
+        path: '/typo3/'
+        auth_type: Digest
+        auth_name: pixelrealm
+        auth_digest_provider: file
+        auth_digest_algorithm: MD5
+        auth_user_file: '/etc/httpd/htdigest'
+        auth_require: 'valid-user'
+        require:
+          - local
+          - ip 217.66.55
+      - location_typo3_validationform:
+        provider: location
+        path: '/typo3/sysext/frontend/Resources/Public/JavaScript/jsfunc.validateform.js'
+      - location_recycler:
+        provider: location
+        path: '/fileadmin/recycler/'
+        require:
+          - local
+    user: apache
+    mode: '2770'
+    php_admin_value:
+      memory_limit: 512M
+      upload_max_filesize: 100M
+      post_max_size: 100M
+    rewrites:
+      - pfizermed_rw2:
+        comment: 'Rewrites fuer Pfizermed'
+        rewrite_cond:
+          - '%%{ich-trickse}{HTTP_HOST} ^(www.pfizermed.de|pfizermed.de)$'
+        rewrite_rule:
+          - ^/broschueren/inspra-scriptum-cardiologicum.htm$ https://www.pfizermed.de/index.php?id=7689 [R=301,L]
+      - pfizermed_rw3:
+        comment: 'Rewrites fuer Pfizermed'
+        rewrite_cond:
+          - '%%{ich-trickse}{HTTP_HOST} ^(www.pfizermed.de|pfizermed.de)$'
+        rewrite_rule:
+          - ^/produktprofile/lyrica.htm$ https://www.pfizermed.de/medikamente/medikamente-a-bis-z/lyrica-r-hartkapseln.htm [R=301,L]
+      - pfizermed_rw4:
+        comment: 'Rewrites fuer Pfizermed'
+        rewrite_cond:
+          - '%%{ich-trickse}{HTTP_HOST} ^(www.pfizermed.de|pfizermed.de)$'
+        rewrite_rule:
+          - ^/produktprofile/lyrica-loesung.htm$ https://www.pfizermed.de/medikamente/medikamente-a-bis-z/lyrica-r-loesung.htm [R=301,L]
+      - pfizermed_rw5:
+        comment: 'Rewrites fuer Pfizermed'
+        rewrite_cond:
+          - '%%{ich-trickse}{HTTP_HOST} ^(www.pfizermed.de|pfizermed.de)$'
+        rewrite_rule:
+          - ^/die-dermatom-karte.htm$ https://www.pfizermed.de/index.php?id=7693 [R=301,L]
+      - pfizermed_rw6:
+        comment: 'Rewrites fuer Pfizermed'
+        rewrite_cond:
+          - '%%{ich-trickse}{HTTP_HOST} ^(www.pfizermed.de|pfizermed.de)$'
+        rewrite_rule:
+          - ^/handhabung-lyrica-loesung/news/0.htm$ https://www.pfizermed.de/index.php?id=6636 [R=301,L]
+      - pfizermed_rw7:
+        comment: 'Rewrites fuer Pfizermed'
+        rewrite_cond:
+          - '%%{ich-trickse}{HTTP_HOST} ^(www.pfizermed.de|pfizermed.de)$'
+        rewrite_rule:
+          - ^/videos/neuropathischer-schmerz-patientenvideo/video/0.htm$ https://www.pfizermed.de/index.php?id=7735 [R=301,L]
+      - pfizermed_rw8:
+        comment: 'Rewrites fuer Pfizermed'
+        rewrite_cond:
+          - '%%{ich-trickse}{HTTP_HOST} ^(www.pfizermed.de|pfizermed.de)$'
+        rewrite_rule:
+          - ^/fortbildungen/generalisierte-angststoerung-expertenvortraege-im-video.htm$ https://www.pfizermed.de/index.php?id=7643 [R=301,L]
+      - pfizermed_rw9:
+        comment: 'Rewrites fuer Pfizermed'
+        rewrite_cond:
+          - '%%{ich-trickse}{HTTP_HOST} ^(www.pfizermed.de|pfizermed.de)$'
+        rewrite_rule:
+          - ^/videos/was-ihnen-eliquisr-bieten-kann.htm$ https://www.pfizermed.de/index.php?id=7736 [R=301,L]
+      - pfizermed_rw10:
+        comment: 'Rewrites fuer Pfizermed'
+        rewrite_cond:
+          - '%%{ich-trickse}{HTTP_HOST} ^(www.pfizermed.de|pfizermed.de)$'
+        rewrite_rule:
+          - ^/produktseiten/toviaz/toviazr-ergebnisse-der-sofia-studie.htm?WT.mc_id=400599&WT.ban=1&?dl=bc6f1b4dc7f4af667df763bdbe04a7be https://www.pfizermed.de/toviaz_sofia_studie.htm?dl=25f2422239bacd8903d355da10781238 [R=301,L]
+      - pfizermed_rw11:
+        comment: 'Rewrites fuer Pfizermed'
+        rewrite_cond:
+          - '%%{ich-trickse}{HTTP_HOST} ^(www.pfizermed.de|pfizermed.de)$'
+        rewrite_rule:
+          - ^/produktseiten/toviaz/toviazr-sofia-studie-im-video-podcast.htm$ https://www.pfizermed.de/index.php?id=7699 [R=301,L]
+      - pfizermed_rw12:
+        comment: 'Rewrites fuer Pfizermed'
+        rewrite_cond:
+          - '%%{ich-trickse}{HTTP_HOST} ^(www.pfizermed.de|pfizermed.de)$'
+        rewrite_rule:
+          - ^/virtueller-ad/kontaktformular-virtueller-ad.htm$ https://www.pfizermed.de/index.php?id=7704 [R=301,L]
+      - pfizermed_rw13:
+        comment: 'Rewrites fuer Pfizermed'
+        rewrite_cond:
+          - '%%{ich-trickse}{HTTP_HOST} ^(www.pfizermed.de|pfizermed.de)$'
+        rewrite_rule:
+          - ^/fortbildungen/service-zum-fortbildungsprogramm.htm$ https://www.pfizermed.de/index.php?id=7708 [R=301,L]
+      - pfizermed_rw14:
+        comment: 'Rewrites fuer Pfizermed'
+        rewrite_cond:
+          - '%%{ich-trickse}{HTTP_HOST} ^(www.pfizermed.de|pfizermed.de)$'
+        rewrite_rule:
+          - ^/fileadmin/pfizer.de/documents/gi/(.*).pdf$ https://www.pfizermed.de/fileadmin/produktdatenbank/pdf/$1.pdf [R=301,L,QSA]
+      - pfizermed_rw15:
+        comment: 'Rewrites fuer Pfizermed'
+        rewrite_cond:
+          - '%%{ich-trickse}{HTTP_HOST} ^(www.pfizermed.de|pfizermed.de)$'
+        rewrite_rule:
+          - ^/fileadmin/pfizer.de/documents/fi/(.*).pdf$ https://www.pfizermed.de/fileadmin/produktdatenbank/pdf/$1.pdf [R=301,L,QSA]
+      - pfizermed_rw16:
+        comment: 'Rewrites fuer Pfizermed'
+        rewrite_cond:
+          - '%%{ich-trickse}{HTTP_HOST} ^(www.pfizermed.de|pfizermed.de)$'
+          - '%%{ich-trickse}{REQUEST_URI} ^/produktprofile/lyrica.htm$'
+          - '%%{ich-trickse}{QUERY_STRING} ^dl=8d105f114b13635c44237041a5e1f095$'
+        rewrite_rule:
+          - ^(.*)$ https://www.pfizermed.de/medikamente/medikamente-a-bis-z/lyrica-r-hartkapseln.htm?dl=043d16a68cbc1087ae53eed9dff81739 [R=301,L]
+      - pfizermed_rw17:
+        comment: 'Rewrites fuer Pfizermed'
+        rewrite_cond:
+          - '%%{ich-trickse}{HTTP_HOST} ^(www.pfizermed.de|pfizermed.de)$'
+          - '%%{ich-trickse}{REQUEST_URI} ^/produktprofile/lyrica-loesung.htm$'
+          - '%%{ich-trickse}{QUERY_STRING} ^dl=dcd7ae728fe0772139c1e1473716481f$'
+        rewrite_rule:
+          - ^(.*)$ https://www.pfizermed.de/medikamente/medikamente-a-bis-z/lyrica-r-loesung.htm?dl=abe8a878b57e323abd07c543d0b51ccc [R=301,L]
+      - pfizermed_rw18:
+        comment: 'Rewrites fuer Pfizermed'
+        rewrite_cond:
+          - '%%{ich-trickse}{HTTP_HOST} ^(www.pfizermed.de|pfizermed.de)$'
+          - '%%{ich-trickse}{REQUEST_URI} ^/die-dermatom-karte.htm$'
+          - '%%{ich-trickse}{QUERY_STRING} ^dl=43201239bc9ef70f6912dafa9a85b46d$'
+        rewrite_rule:
+          - ^(.*)$ https://www.pfizermed.de/dermatom_karte.htm?dl=6a937294b4b10c36821d6c2460d024a5 [R=301,L]
+      - pfizermed_rw19:
+        comment: 'Rewrites fuer Pfizermed'
+        rewrite_cond:
+          - '%%{ich-trickse}{HTTP_HOST} ^(www.pfizermed.de|pfizermed.de)$'
+          - '%%{ich-trickse}{REQUEST_URI} ^/handhabung-lyrica-loesung/news/0.htm$'
+          - '%%{ich-trickse}{QUERY_STRING} ^dl=a88d682c81bb22b0fed558376aa29e91$'
+        rewrite_rule:
+          - ^(.*)$ https://www.pfizermed.de/lyrica_edetailing?dl=5940052744918c5d8c78d2b2d960675b [R=301,L]
+      - pfizermed_rw20:
+        comment: 'Rewrites fuer Pfizermed'
+        rewrite_cond:
+          - '%%{ich-trickse}{HTTP_HOST} ^(www.pfizermed.de|pfizermed.de)$'
+          - '%%{ich-trickse}{REQUEST_URI} ^/downloads/lyrica-ppt-extra-sonderdruck.htm$'
+          - '%%{ich-trickse}{QUERY_STRING} ^dl=4f82556463a49a9e9dbc3545481dd299$'
+        rewrite_rule:
+          - ^(.*)$ https://www.pfizermed.de/lyrica_sonderdruck_ppt_extra.htm?dl=9bed39730d34b08691b38525479c8a27 [R=301,L]
+      - pfizermed_rw21:
+        comment: 'Rewrites fuer Pfizermed'
+        rewrite_cond:
+          - '%%{ich-trickse}{HTTP_HOST} ^(www.pfizermed.de|pfizermed.de)$'
+          - '%%{ich-trickse}{REQUEST_URI} ^/videos/neuropathischer-schmerz-patientenvideo/video/0.htm$'
+          - '%%{ich-trickse}{QUERY_STRING} ^dl=d6a9696fd84e5f7df8f3249d74d7f2dd$'
+        rewrite_rule:
+          - ^(.*)$ https://www.pfizermed.de/neuropatischer_schmerz_patientenvideo.htm?dl=68da218e298706dee34024a3548baae3 [R=301,L]
+      - pfizermed_rw22:
+        comment: 'Rewrites fuer Pfizermed'
+        rewrite_cond:
+          - '%%{ich-trickse}{HTTP_HOST} ^(www.pfizermed.de|pfizermed.de)$'
+          - '%%{ich-trickse}{REQUEST_URI} ^/fortbildungen/generalisierte-angststoerung-expertenvortraege-im-video.htm$'
+          - '%%{ich-trickse}{QUERY_STRING} ^dl=5996a02b175b0f233bcb885fa30d6b56$'
+        rewrite_rule:
+          - ^(.*)$ https://www.pfizermed.de/generalisierte_angststoerung_expertenvortraege.htm?dl=498d9ffda73262b42a414722b5889048 [R=301,L]
+      - pfizermed_rw23:
+        comment: 'Rewrites fuer Pfizermed'
+        rewrite_cond:
+          - '%%{ich-trickse}{HTTP_HOST} ^(www.pfizermed.de|pfizermed.de)$'
+          - '%%{ich-trickse}{REQUEST_URI} ^/videos/was-ihnen-eliquisr-bieten-kann/video/0.htm$'
+          - '%%{ich-trickse}{QUERY_STRING} ^dl=3a513f27f38f3d3b48db006c71b56dea$'
+        rewrite_rule:
+          - ^(.*)$ https://www.pfizermed.de/was_ihnen_eliquis_bieten_kann.htm?dl=18dbe987148a7641d1522a8fca07ce74 [R=301,L]
+      - pfizermed_rw24:
+        comment: 'Rewrites fuer Pfizermed'
+        rewrite_cond:
+          - '%%{ich-trickse}{HTTP_HOST} ^(www.pfizermed.de|pfizermed.de)$'
+          - '%%{ich-trickse}{REQUEST_URI} ^/virtueller-ad.htm$'
+          - '%%{ich-trickse}{QUERY_STRING} ^dl=f8ce79a8b2c71eaa48d48bc4d69957d9$'
+        rewrite_rule:
+          - ^(.*)$ https://www.pfizermed.de/der_virtuelle_aussendienst.htm?dl=7d302c8dda851aa5780d12b22a9973c8 [R=301,L]
+      - pfizer_rw1:
+        comment: 'Rewrites fuer Pfizer'
+        rewrite_cond:
+          - '%%{ich-trickse}{HTTP_HOST} ^(www\.)?pfizer\.de$'
+          - '%%{ich-trickse}{REQUEST_URI} ^(/?)$'
+          - '%%{ich-trickse}{QUERY_STRING} ^id=2940$'
+        rewrite_rule:
+          - ^(.*)$ https://www.pfizer.de/? [R=301,L]
+      - pfizer_rw2:
+        comment: 'Rewrites fuer Pfizer'
+        rewrite_cond:
+          - '%%{ich-trickse}{HTTP_HOST} ^(www\.)?pfizer\.de$'
+          - '%%{ich-trickse}{REQUEST_URI} ^/seite-empfehlen$ [OR]'
+          - '%%{ich-trickse}{REQUEST_URI} ^/seite-empfehlen/ [OR]'
+          - '%%{ich-trickse}{REQUEST_URI} ^/seite-empfehlen.htm$ [OR]'
+          - '%%{ich-trickse}{REQUEST_URI} ^/nc/seite-empfehlen$ [OR]'
+          - '%%{ich-trickse}{REQUEST_URI} ^/nc/seite-empfehlen/ [OR]'
+          - '%%{ich-trickse}{REQUEST_URI} ^/nc/seite-empfehlen.htm$ [OR]'
+          - '%%{ich-trickse}{REQUEST_URI} ^/forschung$ [OR]'
+          - '%%{ich-trickse}{REQUEST_URI} ^/forschung/ [OR]'
+          - '%%{ich-trickse}{REQUEST_URI} ^/forschung.htm$ [OR]'
+          - '%%{ich-trickse}{REQUEST_URI} ^/nc/forschung$ [OR]'
+          - '%%{ich-trickse}{REQUEST_URI} ^/nc/forschung/ [OR]'
+          - '%%{ich-trickse}{REQUEST_URI} ^/nc/forschung.htm$'
+        rewrite_rule:
+          - ^(.*)$ https://www.pfizer.de/ [R=301,L]
+      - pfizer_rw3:
+        comment: 'Rewrites fuer Pfizer'
+        rewrite_cond:
+          - '%%{ich-trickse}{HTTP_HOST} ^(www\.)?pfizer\.de$'
+          - '%%{ich-trickse}{REQUEST_URI} ^/nc/gesundheit$ [OR]'
+          - '%%{ich-trickse}{REQUEST_URI} ^/nc/gesundheit/ [OR]'
+          - '%%{ich-trickse}{REQUEST_URI} ^/nc/gesundheit.htm$ [OR]'
+          - '%%{ich-trickse}{REQUEST_URI} ^/patienten$ [OR]'
+          - '%%{ich-trickse}{REQUEST_URI} ^/patienten/ [OR]'
+          - '%%{ich-trickse}{REQUEST_URI} ^/patienten.htm$ [OR]'
+          - '%%{ich-trickse}{REQUEST_URI} ^/nc/patienten$ [OR]'
+          - '%%{ich-trickse}{REQUEST_URI} ^/nc/patienten/ [OR]'
+          - '%%{ich-trickse}{REQUEST_URI} ^/nc/patienten.htm$'
+        rewrite_rule:
+          - ^(.*)$ https://www.pfizer.de/gesundheit [R=301,L]
+      - pfizer_rw4:
+        comment: 'Rewrites fuer Pfizer'
+        rewrite_cond:
+          - '%%{ich-trickse}{HTTP_HOST} ^(www\.)?pfizer\.de$'
+          - '%%{ich-trickse}{REQUEST_URI} ^/unternehmen$ [OR]'
+          - '%%{ich-trickse}{REQUEST_URI} ^/unternehmen.htm$ [OR]'
+          - '%%{ich-trickse}{REQUEST_URI} ^/nc/unternehmen$ [OR]'
+          - '%%{ich-trickse}{REQUEST_URI} ^/nc/unternehmen/ [OR]'
+          - '%%{ich-trickse}{REQUEST_URI} ^/nc/unternehmen.htm$'
+        rewrite_rule:
+          - ^(.*)$ https://www.pfizer.de/ueber-pfizer [R=301,L]
+      - pfizer_rw5:
+        comment: 'Rewrites fuer Pfizer'
+        rewrite_cond:
+          - '%%{ich-trickse}{HTTP_HOST} ^(www\.)?pfizer\.de$'
+          - '%%{ich-trickse}{REQUEST_URI} ^/medien$ [OR]'
+          - '%%{ich-trickse}{REQUEST_URI} ^/medien/ [OR]'
+          - '%%{ich-trickse}{REQUEST_URI} ^/medien.htm$ [OR]'
+          - '%%{ich-trickse}{REQUEST_URI} ^/nc/medien$ [OR]'
+          - '%%{ich-trickse}{REQUEST_URI} ^/nc/medien/ [OR]'
+          - '%%{ich-trickse}{REQUEST_URI} ^/nc/medien.htm$'
+        rewrite_rule:
+          - ^(.*)$ https://www.pfizer.de/presse/meldungen [R=301,L]
+      - pfizer_rw6:
+        comment: 'Rewrites fuer Pfizer'
+        rewrite_cond:
+          - '%%{ich-trickse}{HTTP_HOST} ^(www\.)?pfizer\.de$'
+          - '%%{ich-trickse}{REQUEST_URI} ^/medikamente$ [OR]'
+          - '%%{ich-trickse}{REQUEST_URI} ^/medikamente/ [OR]'
+          - '%%{ich-trickse}{REQUEST_URI} ^/medikamente.htm$ [OR]'
+          - '%%{ich-trickse}{REQUEST_URI} ^/nc/medikamente$ [OR]'
+          - '%%{ich-trickse}{REQUEST_URI} ^/nc/medikamente/ [OR]'
+          - '%%{ich-trickse}{REQUEST_URI} ^/nc/medikamente.htm$'
+        rewrite_rule:
+          - ^(.*)$ https://www.pfizer.de/medikamente-produkte [R=301,L]
+      - pfizer_rw7:
+        comment: 'Rewrites fuer Pfizer'
+        rewrite_cond:
+          - '%%{ich-trickse}{HTTP_HOST} ^(www\.)?pfizer\.de$'
+          - '%%{ich-trickse}{REQUEST_URI} ^/nebenwirkungen-melden$ [OR]'
+          - '%%{ich-trickse}{REQUEST_URI} ^/nebenwirkungen-melden/ [OR]'
+          - '%%{ich-trickse}{REQUEST_URI} ^/nebenwirkungen-melden.htm$ [OR]'
+          - '%%{ich-trickse}{REQUEST_URI} ^/nc/nebenwirkungen-melden$ [OR]'
+          - '%%{ich-trickse}{REQUEST_URI} ^/nc/nebenwirkungen-melden/ [OR]'
+          - '%%{ich-trickse}{REQUEST_URI} ^/nc/nebenwirkungen-melden.htm$'
+        rewrite_rule:
+          - ^(.*)$ https://www.pfizer.de/nc/footer/nebenwirkungen-melden [R=301,L]
+      - pfizer_rw8:
+        comment: 'Rewrites fuer Pfizer'
+        rewrite_cond:
+          - '%%{ich-trickse}{HTTP_HOST} ^(www\.)?pfizer\.de$'
+          - '%%{ich-trickse}{REQUEST_URI} ^/agb$ [OR]'
+          - '%%{ich-trickse}{REQUEST_URI} ^/agb/ [OR]'
+          - '%%{ich-trickse}{REQUEST_URI} ^/agb.htm$'
+        rewrite_rule:
+          - ^(.*)$ https://www.pfizer.de/footer/agb [R=301,L]
+      - pfizer_rw9:
+        comment: 'Rewrites fuer Pfizer'
+        rewrite_cond:
+          - '%%{ich-trickse}{HTTP_HOST} ^(www\.)?pfizer\.de$'
+          - '%%{ich-trickse}{REQUEST_URI} ^/einkauf-de$ [OR]'
+          - '%%{ich-trickse}{REQUEST_URI} ^/einkauf-de/ [OR]'
+          - '%%{ich-trickse}{REQUEST_URI} ^/einkauf-de.htm$'
+        rewrite_rule:
+          - ^(.*)$ https://www.pfizer.de/footer/agb/einkauf-en [R=301,L]
+      - pfizer_rw10:
+        comment: 'Rewrites fuer Pfizer'
+        rewrite_cond:
+          - '%%{ich-trickse}{HTTP_HOST} ^(www\.)?pfizer\.de$'
+          - '%%{ich-trickse}{REQUEST_URI} ^/engagement$ [OR]'
+          - '%%{ich-trickse}{REQUEST_URI} ^/engagement/ [OR]'
+          - '%%{ich-trickse}{REQUEST_URI} ^/engagement.htm$'
+        rewrite_rule:
+          - ^(.*)$ https://www.pfizer.de/ueber-pfizer/engagement [R=301,L]
+      - pfizer_rw11:
+        comment: 'Rewrites fuer Pfizer'
+        rewrite_cond:
+          - '%%{ich-trickse}{HTTP_HOST} ^(www\.)?pfizer\.de$'
+          - '%%{ich-trickse}{REQUEST_URI} ^/gesundheit-alt/der-virtuelle-beipackzettel$ [OR]'
+          - '%%{ich-trickse}{REQUEST_URI} ^/gesundheit-alt/der-virtuelle-beipackzettel/ [OR]'
+          - '%%{ich-trickse}{REQUEST_URI} ^/gesundheit-alt/der-virtuelle-beipackzettel.htm$'
+        rewrite_rule:
+          - ^(.*)$ https://www.pfizer.de/services/beipackzettel-verstehen [R=301,L]
+      - pfizer_rw12:
+        comment: 'Rewrites fuer Pfizer'
+        rewrite_cond:
+          - '%%{ich-trickse}{HTTP_HOST} ^(www\.)?pfizer\.de$'
+          - '%%{ich-trickse}{REQUEST_URI} ^/impressum$ [OR]'
+          - '%%{ich-trickse}{REQUEST_URI} ^/impressum/ [OR]'
+          - '%%{ich-trickse}{REQUEST_URI} ^/impressum.htm$'
+        rewrite_rule:
+          - ^(.*)$ https://www.pfizer.de/footer/impressum [R=301,L]
+      - pfizer_rw13:
+        comment: 'Rewrites fuer Pfizer'
+        rewrite_cond:
+          - '%%{ich-trickse}{HTTP_HOST} ^(www\.)?pfizer\.de$'
+          - '%%{ich-trickse}{REQUEST_URI} ^/kontakt$ [OR]'
+          - '%%{ich-trickse}{REQUEST_URI} ^/kontakt/ [OR]'
+          - '%%{ich-trickse}{REQUEST_URI} ^/kontakt.htm$'
+        rewrite_rule:
+          - ^(.*)$ https://www.pfizer.de/footer/kontakt [R=301,L]
+      - pfizer_rw14:
+        comment: 'Rewrites fuer Pfizer'
+        rewrite_cond:
+          - '%%{ich-trickse}{HTTP_HOST} ^(www\.)?pfizer\.de$'
+          - '%%{ich-trickse}{REQUEST_URI} ^/nutzungsbedingungen$ [OR]'
+          - '%%{ich-trickse}{REQUEST_URI} ^/nutzungsbedingungen/ [OR]'
+          - '%%{ich-trickse}{REQUEST_URI} ^/nutzungsbedingungen.htm$'
+        rewrite_rule:
+          - ^(.*)$ https://www.pfizer.de/footer/nutzungsbedingungen [R=301,L]
+      - pfizer_rw15:
+        comment: 'Rewrites fuer Pfizer'
+        rewrite_cond:
+          - '%%{ich-trickse}{HTTP_HOST} ^(www\.)?pfizer\.de$'
+          - '%%{ich-trickse}{REQUEST_URI} ^/pflichtangaben$ [OR]'
+          - '%%{ich-trickse}{REQUEST_URI} ^/pflichtangaben/ [OR]'
+          - '%%{ich-trickse}{REQUEST_URI} ^/pflichtangaben.htm$'
+        rewrite_rule:
+          - ^(.*)$ https://www.pfizer.de/footer/pflichtangaben [R=301,L]
+      - pfizer_rw16:
+        comment: 'Rewrites fuer Pfizer'
+        rewrite_cond:
+          - '%%{ich-trickse}{HTTP_HOST} ^(www\.)?pfizer\.de$'
+          - '%%{ich-trickse}{REQUEST_URI} ^/sitemap$ [OR]'
+          - '%%{ich-trickse}{REQUEST_URI} ^/sitemap/ [OR]'
+          - '%%{ich-trickse}{REQUEST_URI} ^/sitemap.htm$'
+        rewrite_rule:
+          - ^(.*)$ https://www.pfizer.de/footer/sitemap [R=301,L]
+      - pfizer_rw17:
+        comment: 'Rewrites fuer Pfizer'
+        rewrite_cond:
+          - '%%{ich-trickse}{HTTP_HOST} ^(www\.)?pfizer\.de$'
+          - '%%{ich-trickse}{REQUEST_URI} ^/verkauf-de$ [OR]'
+          - '%%{ich-trickse}{REQUEST_URI} ^/verkauf-de/ [OR]'
+          - '%%{ich-trickse}{REQUEST_URI} ^/verkauf-de.htm$'
+        rewrite_rule:
+          - ^(.*)$ https://www.pfizer.de/footer/agb/verkauf-de [R=301,L]
+      - PFIZ-1760:
+        comment: https://jira.pixelpark.com/jira/browse/PFIZ-1760
+        rewrite_rule:
+          - ^/medizinische-anfragen.htm$ https://www.pfizer.de/footer/medizinische-anfragen.htm [R=301,L]
+      - PFIZ-1770:
+        comment: https://jira.pixelpark.com/jira/browse/PFIZ-1770
+        rewrite_rule:
+          - ^/fileadmin/pfizer.de/documents/gi/ https://www.pfizer.de/medikamente-produkte.htm [R=301,L]
+      - PFIZ-1837:
+        comment: https://jira.pixelpark.com/jira/browse/PFIZ-1837
+        rewrite_cond:
+          - '%%{ich-trickse}{HTTPS} !=on'
+        rewrite_rule:
+          - ^(.*)$ https://%%{ich-trickse}{HTTP_HOST}$1 [R=301,L]
+      - PFIZ-2445:
+        comment: https://jira.pixelpark.com/jira/browse/PFIZ-2445
+        rewrite_rule:
+          - ^/datenschutz/kontakt-datenschutzbeauftragter.htm$ https://www.pfizer.de/allgemein/datenschutz/kontakt-zum-pfizer-datenschutzbeauftragten.htm [R=301,L]
+      - pfizer_rw18:
+        comment: 'https://jira.pixelpark.com/jira/browse/PFIZ-2511'
+        rewrite_rule:
+          - ^/services/aelter-werden.htm https://www.pfizer.de/services.htm [L,R=301]
+      - pfizer_rw19:
+        comment: 'https://jira.pixelpark.com/jira/browse/PFIZ-2511'
+        rewrite_rule:
+          - ^/services/arzneimittelfaelschung.htm https://www.pfizer.de/services.htm [L,R=301]
+      - pfizer_rw20:
+        comment: 'https://jira.pixelpark.com/jira/browse/PFIZ-2511'
+        rewrite_rule:
+          - ^/services/beipackzettel-verstehen.htm https://www.pfizer.de/services.htm [L,R=301]
+      - pfizer_rw21:
+        comment: 'https://jira.pixelpark.com/jira/browse/PFIZ-2511'
+        rewrite_rule:
+          - ^/services/erektionsstoerungen.htm https://www.pfizer.de/services.htm [L,R=301]
+      - pfizer_rw22:
+        comment: 'https://jira.pixelpark.com/jira/browse/PFIZ-2511'
+        rewrite_rule:
+          - ^/services/haemophilie.htm https://www.pfizer.de/services.htm [L,R=301]
+      - pfizer_rw23:
+        comment: 'https://jira.pixelpark.com/jira/browse/PFIZ-2511'
+        rewrite_rule:
+          - ^/services/ich-beim-arzt.htm https://www.pfizer.de/services.htm [L,R=301]
+      - pfizer_rw24:
+        comment: 'https://jira.pixelpark.com/jira/browse/PFIZ-2511'
+        rewrite_rule:
+          - ^/services/impfungen.htm https://www.pfizer.de/services.htm [L,R=301]
+      - pfizer_rw25:
+        comment: 'https://jira.pixelpark.com/jira/browse/PFIZ-2511'
+        rewrite_rule:
+          - ^/services/klinische-studien.htm https://www.pfizer.de/services.htm [L,R=301]
+      - pfizer_rw26:
+        comment: 'https://jira.pixelpark.com/jira/browse/PFIZ-2511'
+        rewrite_rule:
+          - ^/services/personalisierte-krebsmedizin.htm https://www.pfizer.de/services.htm [L,R=301]
+      - pfizer_rw27:
+        comment: 'https://jira.pixelpark.com/jira/browse/PFIZ-2511'
+        rewrite_rule:
+          - ^/services/rheuma.htm https://www.pfizer.de/services.htm [L,R=301]
+      - pfizer_rw28:
+        comment: 'https://jira.pixelpark.com/jira/browse/PFIZ-2511'
+        rewrite_rule:
+          - ^/services/schlaganfallvorsorge.htm https://www.pfizer.de/services.htm [L,R=301]
+      - pfizer_rw29:
+        comment: 'https://jira.pixelpark.com/jira/browse/PFIZ-2511'
+        rewrite_rule:
+          - ^/services/schmerz.htm https://www.pfizer.de/services.htm [L,R=301]
+      - pfizer_rw30:
+        comment: 'https://jira.pixelpark.com/jira/browse/PFIZ-2511'
+        rewrite_rule:
+          - ^/services/seltene-erkrankungen.htm https://www.pfizer.de/services.htm [L,R=301]
+      - pfizer_rw31:
+        comment: 'https://jira.pixelpark.com/jira/browse/PFIZ-2511'
+        rewrite_rule:
+          - ^/services/social-media.htm https://www.pfizer.de/services.htm [L,R=301]
+      - pfizer_rw32:
+        comment: 'https://jira.pixelpark.com/jira/browse/PFIZ-2511'
+        rewrite_rule:
+          - ^/services/ueberaktive-blase.htm https://www.pfizer.de/services.htm [L,R=301]
+      - pfizer_rw33:
+        comment: 'https://jira.pixelpark.com/jira/browse/PFIZ-2427'
+        rewrite_cond:
+          - '%%{ich-trickse}{HTTP_HOST} ^(www\.)?pfizer\.de$'
+          - '%%{ich-trickse}{REQUEST_URI} ^/gesundheit/augenheilkunde.htm [OR]'
+          - '%%{ich-trickse}{REQUEST_URI} ^/gesundheit/augenheilkunde/glaukom.htm [OR]'
+          - '%%{ich-trickse}{REQUEST_URI} ^/gesundheit/der-virtuelle-beipackzettel/nebenwirkungen.htm [OR]'
+          - '%%{ich-trickse}{REQUEST_URI} ^/gesundheit/frauengesundheit/schwangerschaft.htm [OR]'
+          - '%%{ich-trickse}{REQUEST_URI} ^/gesundheit/frauengesundheit/verhuetung.htm [OR]'
+          - '%%{ich-trickse}{REQUEST_URI} ^/gesundheit/gehirn-und-nervensystem.htm [OR]'
+          - '%%{ich-trickse}{REQUEST_URI} ^/gesundheit/gehirn-und-nervensystem/alzheimer.htm [OR]'
+          - '%%{ich-trickse}{REQUEST_URI} ^/gesundheit/gehirn-und-nervensystem/angst.htm [OR]'
+          - '%%{ich-trickse}{REQUEST_URI} ^/gesundheit/gehirn-und-nervensystem/depression.htm [OR]'
+          - '%%{ich-trickse}{REQUEST_URI} ^/gesundheit/gehirn-und-nervensystem/epilepsie.htm [OR]'
+          - '%%{ich-trickse}{REQUEST_URI} ^/gesundheit/haemophilie.htm [OR]'
+          - '%%{ich-trickse}{REQUEST_URI} ^/gesundheit/haut/schuppenflechte.htm [OR]'
+          - '%%{ich-trickse}{REQUEST_URI} ^/gesundheit/herz-kreislauf-und-stoffwechselerkrankungen.htm [OR]'
+          - '%%{ich-trickse}{REQUEST_URI} ^/gesundheit/herz-kreislauf-und-stoffwechselerkrankungen/bluthochdruck-herzinsuffizienz-und-herzinfarkt.htm [OR]'
+          - '%%{ich-trickse}{REQUEST_URI} ^/gesundheit/herz-kreislauf-und-stoffwechselerkrankungen/diabetes.htm [OR]'
+          - '%%{ich-trickse}{REQUEST_URI} ^/gesundheit/herz-kreislauf-und-stoffwechselerkrankungen/erhoehtes-cholesterin.htm [OR]'
+          - '%%{ich-trickse}{REQUEST_URI} ^/gesundheit/herz-kreislauf-und-stoffwechselerkrankungen/schlaganfall.htm [OR]'
+          - '%%{ich-trickse}{REQUEST_URI} ^/gesundheit/herz-kreislauf-und-stoffwechselerkrankungen/schlaganfall/tabs/behandlung.htm [OR]'
+          - '%%{ich-trickse}{REQUEST_URI} ^/gesundheit/herz-kreislauf-und-stoffwechselerkrankungen/schlaganfall/tabs/betroffene.htm [OR]'
+          - '%%{ich-trickse}{REQUEST_URI} ^/gesundheit/humanmedizin.htm [OR]'
+          - '%%{ich-trickse}{REQUEST_URI} ^/gesundheit/humanmedizin/atemwegserkrankungen/basisinformation.htm [OR]'
+          - '%%{ich-trickse}{REQUEST_URI} ^/gesundheit/humanmedizin/augenheilkunde.htm [OR]'
+          - '%%{ich-trickse}{REQUEST_URI} ^/gesundheit/humanmedizin/frauen-und-maennergesundheit/erektionsstoerungen.htm [OR]'
+          - '%%{ich-trickse}{REQUEST_URI} ^/gesundheit/humanmedizin/frauen-und-maennergesundheit/verhuetung.htm [OR]'
+          - '%%{ich-trickse}{REQUEST_URI} ^/gesundheit/humanmedizin/gehirn-und-nervensystem/angst.htm [OR]'
+          - '%%{ich-trickse}{REQUEST_URI} ^/gesundheit/humanmedizin/gehirn-und-nervensystem/depression.htm [OR]'
+          - '%%{ich-trickse}{REQUEST_URI} ^/gesundheit/humanmedizin/haemophilie.htm [OR]'
+          - '%%{ich-trickse}{REQUEST_URI} ^/gesundheit/humanmedizin/herz-kreislauf-und-stoffwechselerkrankungen.htm [OR]'
+          - '%%{ich-trickse}{REQUEST_URI} ^/gesundheit/humanmedizin/herz-kreislauf-und-stoffwechselerkrankungen/bluthochdruck-herzinfarkt-und-schlaganfall.htm [OR]'
+          - '%%{ich-trickse}{REQUEST_URI} ^/gesundheit/humanmedizin/herz-kreislauf-und-stoffwechselerkrankungen/nikotinsucht.htm [OR]'
+          - '%%{ich-trickse}{REQUEST_URI} ^/gesundheit/humanmedizin/transplantation.htm [OR]'
+          - '%%{ich-trickse}{REQUEST_URI} ^/gesundheit/humanmedizin/verdauung.htm [OR]'
+          - '%%{ich-trickse}{REQUEST_URI} ^/gesundheit/impfstoffe.htm [OR]'
+          - '%%{ich-trickse}{REQUEST_URI} ^/gesundheit/infektionen.htm [OR]'
+          - '%%{ich-trickse}{REQUEST_URI} ^/gesundheit/paediatrie.htm [OR]'
+          - '%%{ich-trickse}{REQUEST_URI} ^/gesundheit/rauchentwoehnung.htm [OR]'
+          - '%%{ich-trickse}{REQUEST_URI} ^/gesundheit/rauchentwoehnung/tabs/wie-aeussert-sich-eine-haemophilie.htm [OR]'
+          - '%%{ich-trickse}{REQUEST_URI} ^/gesundheit/tiergesundheit.htm [OR]'
+          - '%%{ich-trickse}{REQUEST_URI} ^/gesundheit/transplantation.htm [OR]'
+          - '%%{ich-trickse}{REQUEST_URI} ^/gesundheit/transthyretin-assoziierte-familiaere-amyloid-polyneuropathie-ttr-fap.htm [OR]'
+          - '%%{ich-trickse}{REQUEST_URI} ^/gesundheit/urologie/ueberaktive-blase.htm [OR]'
+          - '%%{ich-trickse}{REQUEST_URI} ^/gesundheit/wachstumshormone.htm [OR]'
+          - '%%{ich-trickse}{REQUEST_URI} ^/gesundheit/wachstumshormone/akromegalie.htm [OR]'
+          - '%%{ich-trickse}{REQUEST_URI} ^/gesundheit/wachstumshormone/wachstumshormonmangel.htm [OR]'
+          - '%%{ich-trickse}{REQUEST_URI} ^/patienten/gesundheitswesen-in-deutschland.htm [OR]'
+          - '%%{ich-trickse}{REQUEST_URI} ^/patienten/patientenorganisationen.htm [OR]'
+          - '%%{ich-trickse}{REQUEST_URI} ^/pfizer/gesundheit/dienste/schlafstoerungen.html'
+        rewrite_rule:
+          - ^(.*)$ https://www.pfizer.de/gesundheit.htm [R=301,L]
+      - pfizer_rw34:
+        comment: 'https://jira.pixelpark.com/jira/browse/PFIZ-2427'
+        rewrite_cond:
+          - '%%{ich-trickse}{HTTP_HOST} ^(www\.)?pfizer\.de$'
+          - '%%{ich-trickse}{REQUEST_URI} ^/presse/bilder-grafiken/medienkategorie/baldriparan.htm [OR]'
+          - '%%{ich-trickse}{REQUEST_URI} ^/presse/bilder-grafiken/medienkategorie/caltrate.htm [OR]'
+          - '%%{ich-trickse}{REQUEST_URI} ^/presse/bilder-grafiken/medienkategorie/centrum.htm [OR]'
+          - '%%{ich-trickse}{REQUEST_URI} ^/presse/bilder-grafiken/medienkategorie/deutschlandzentrale-berlin.htm [OR]'
+          - '%%{ich-trickse}{REQUEST_URI} ^/presse/bilder-grafiken/medienkategorie/endokrinologie.htm [OR]'
+          - '%%{ich-trickse}{REQUEST_URI} ^/presse/bilder-grafiken/medienkategorie/haemophilie.htm [OR]'
+          - '%%{ich-trickse}{REQUEST_URI} ^/presse/bilder-grafiken/medienkategorie/haut.htm [OR]'
+          - '%%{ich-trickse}{REQUEST_URI} ^/presse/bilder-grafiken/medienkategorie/impfstoffe.htm [OR]'
+          - '%%{ich-trickse}{REQUEST_URI} ^/presse/bilder-grafiken/medienkategorie/kindergesundheit.htm [OR]'
+          - '%%{ich-trickse}{REQUEST_URI} ^/presse/bilder-grafiken/medienkategorie/krebs.htm [OR]'
+          - '%%{ich-trickse}{REQUEST_URI} ^/presse/bilder-grafiken/medienkategorie/ophtalmologie.htm [OR]'
+          - '%%{ich-trickse}{REQUEST_URI} ^/presse/bilder-grafiken/medienkategorie/rauchentwoehnung.htm [OR]'
+          - '%%{ich-trickse}{REQUEST_URI} ^/presse/bilder-grafiken/medienkategorie/rheuma.htm [OR]'
+          - '%%{ich-trickse}{REQUEST_URI} ^/presse/bilder-grafiken/medienkategorie/selbstmedikation.htm [OR]'
+          - '%%{ich-trickse}{REQUEST_URI} ^/presse/bilder-grafiken/medienkategorie/spalt.htm [OR]'
+          - '%%{ich-trickse}{REQUEST_URI} ^/presse/bilder-grafiken/medienkategorie/standort-freiburg.htm [OR]'
+          - '%%{ich-trickse}{REQUEST_URI} ^/presse/bilder-grafiken/medienkategorie/standort-illertissen.htm [OR]'
+          - '%%{ich-trickse}{REQUEST_URI} ^/presse/bilder-grafiken/medienkategorie/standort-karlsruhe.htm [OR]'
+          - '%%{ich-trickse}{REQUEST_URI} ^/presse/bilder-grafiken/medienkategorie/therapiegebiete-1.htm [OR]'
+          - '%%{ich-trickse}{REQUEST_URI} ^/presse/bilder-grafiken/medienkategorie/thermacare.htm [OR]'
+          - '%%{ich-trickse}{REQUEST_URI} ^/presse/bilder-grafiken/medienkategorie/transplantation.htm [OR]'
+          - '%%{ich-trickse}{REQUEST_URI} ^/presse/bilder-grafiken/medienkategorie/ttr-fap.htm [OR]'
+          - '%%{ich-trickse}{REQUEST_URI} ^/presse/bilder-grafiken/medienkategorie/unternehmen-1.htm [OR]'
+          - '%%{ich-trickse}{REQUEST_URI} ^/presse/bilder-grafiken/medienkategorie/vitasprint.htm'
+        rewrite_rule:
+          - ^(.*)$ https://www.pfizer.de/presse/bilder-grafiken.htm [R=301,L]
+      - pfizer_rw35:
+        comment: 'https://jira.pixelpark.com/jira/browse/PFIZ-2427'
+        rewrite_cond:
+          - '%%{ich-trickse}{HTTP_HOST} ^(www\.)?pfizer\.de$'
+          - '%%{ich-trickse}{REQUEST_URI} ^/karriere/arbeiten-bei-pfizer/ariane-liar-kundenservice.htm [OR]'
+          - '%%{ich-trickse}{REQUEST_URI} ^/karriere/arbeiten-bei-pfizer/esther-glastetter-medical-advisor.htm [OR]'
+          - '%%{ich-trickse}{REQUEST_URI} ^/karriere/arbeiten-bei-pfizer/katharina-wilcke-human-resources-manager.htm [OR]'
+          - '%%{ich-trickse}{REQUEST_URI} ^/karriere/arbeiten-bei-pfizer/milena-vasileva-finance-lead-global-established-products.htm [OR]'
+          - '%%{ich-trickse}{REQUEST_URI} ^/karriere/arbeiten-bei-pfizer/sirkka-meier-senior-brand-manager-vaccines.htm [OR]'
+          - '%%{ich-trickse}{REQUEST_URI} ^/karriere/arbeiten-bei-pfizer/tim-mehrtens-regionalleiter-im-aussendienst.htm [OR]'
+          - '%%{ich-trickse}{REQUEST_URI} ^/karriere/ausbildung_fachlagerist.htm [OR]'
+          - '%%{ich-trickse}{REQUEST_URI} ^/karriere/dualesstudium/dualesstudium.htm [OR]'
+          - '%%{ich-trickse}{REQUEST_URI} ^/karriere/hochschulabsolventen/traineeprogramme.htm [OR]'
+          - '%%{ich-trickse}{REQUEST_URI} ^/karriere/pfizeralsarbeitgeber/arbeitskultur.htm [OR]'
+          - '%%{ich-trickse}{REQUEST_URI} ^/karriere/pfizeralsarbeitgeber/entwicklungspersp.htm [OR]'
+          - '%%{ich-trickse}{REQUEST_URI} ^/karriere/pfizeralsarbeitgeber/verguetung.htm'
+        rewrite_rule:
+          - ^(.*)$ https://www.pfizer.de/karriere/arbeiten-bei-pfizer.htm [R=301,L]
+      - pfizer_rw36:
+        comment: 'https://jira.pixelpark.com/jira/browse/PFIZ-2427'
+        rewrite_cond:
+          - '%%{ich-trickse}{HTTP_HOST} ^(www\.)?pfizer\.de$'
+          - '%%{ich-trickse}[REQUEST_URI} ^/gesundheit/humanmedizin/schmerz.htm [OR]'
+          - '%%{ich-trickse}[REQUEST_URI} ^/gesundheit/humanmedizin/schmerz/neuropathischer-schmerz.htm [OR]'
+          - '%%{ich-trickse}[REQUEST_URI} ^/gesundheit/neuropathischer-schmerz.htm [OR]'
+          - '%%{ich-trickse}[REQUEST_URI} ^/gesundheit/schmerz/migraene.htm'
+        rewrite_rule:
+          - ^(.*)$ https://www.pfizer.de/gesundheit/schmerz.htm [R=301,L]
+      - pfizer_rw37:
+        comment: 'https://jira.pixelpark.com/jira/browse/PFIZ-2427'
+        rewrite_cond:
+          - '%%{ich-trickse}{HTTP_HOST} ^(www\.)?pfizer\.de$'
+          - '%%{ich-trickse}{REQUEST_URI} ^/gesundheit/humanmedizin/krebs.htm [OR]'
+          - '%%{ich-trickse}{REQUEST_URI} ^/gesundheit/humanmedizin/krebs/basisinformation.htm [OR]'
+          - '%%{ich-trickse}{REQUEST_URI} ^/gesundheit/infektionen/infektionen-durch-bakterien-viren-oder-pilze.htm [OR]'
+          - '%%{ich-trickse}{REQUEST_URI} ^/gesundheit/krebs/brust-magen-und-darmkrebs-gist-und-pnet.htm [OR]'
+          - '%%{ich-trickse}{REQUEST_URI} ^/gesundheit/krebs/nierenkrebs.htm'
+        rewrite_rule:
+          - ^(.*)$ https://www.pfizer.de/gesundheit/personalisierte-krebsmedizin.htm [R=301,L]
+      - pfizer_rw38:
+        comment: 'https://jira.pixelpark.com/jira/browse/PFIZ-2427'
+        rewrite_cond:
+          - '%%{ich-trickse}{HTTP_HOST} ^(www\.)?pfizer\.de$'
+          - '%%{ich-trickse}{REQUEST_URI} ^/produkte/beipackzettel.xhtm [OR]'
+          - '%%{ich-trickse}{REQUEST_URI} ^/produkte/beipackzettel/beipackzettel.htm [OR]'
+          - '%%{ich-trickse}{REQUEST_URI} ^/produkte/packungsbeilage.htm'
+        rewrite_rule:
+          - ^(.*)$ https://www.pfizer.de/services.htm [R=301,L]
+      - pfizer_rw39:
+        comment: 'https://jira.pixelpark.com/jira/browse/PFIZ-2427'
+        rewrite_cond:
+          - '%%{ich-trickse}{HTTP_HOST} ^(www\.)?pfizer\.de$'
+          - '%%{ich-trickse}{REQUEST_URI} ^/unternehmen/pfizer_deutschland/standorte.htm [OR]'
+          - '%%{ich-trickse}{REQUEST_URI} ^/unternehmen/standorte/freiburg.htm'
+        rewrite_rule:
+          - ^(.*)$ https://www.pfizer.de/ueber-pfizer/standorte.htm [R=301,L]
+      - pfizer_rw40:
+        comment: 'https://jira.pixelpark.com/jira/browse/PFIZ-2427'
+        rewrite_cond:
+          - '%%{ich-trickse}{HTTP_HOST} ^(www\.)?pfizer\.de$'
+          - '%%{ich-trickse}{REQUEST_URI} ^/unternehmen/unternehmensprofil/zahlen-und-fakten.htm'
+        rewrite_rule:
+          - ^(.*)$ https://www.pfizer.de/ueber-pfizer/daten-fakten.htm [R=301,L]
+      - pfizer_rw41:
+        comment: 'https://jira.pixelpark.com/jira/browse/PFIZ-2427'
+        rewrite_cond:
+          - '%%{ich-trickse}{HTTP_HOST} ^(www\.)?pfizer\.de$'
+          - '%%{ich-trickse}{REQUEST_URI} ^/standpunkte/werte.htm'
+        rewrite_rule:
+          - ^(.*)$ https://www.pfizer.de/ueber-pfizer.htm [R=301,L]
+      - pfizer_rw42:
+        comment: 'https://jira.pixelpark.com/jira/browse/PFIZ-2427'
+        rewrite_cond:
+          - '%%{ich-trickse}{HTTP_HOST} ^(www\.)?pfizer\.de$'
+          - '%%{ich-trickse}{REQUEST_URI} ^/medien/pressekontakt.htm'
+        rewrite_rule:
+          - ^(.*)$ https://www.pfizer.de/presse/pressekontakt.htm [R=301,L]
+      - pfizer_rw43:
+        comment: 'https://jira.pixelpark.com/jira/browse/PFIZ-2427'
+        rewrite_cond:
+          - '%%{ich-trickse}{HTTP_HOST} ^(www\.)?pfizer\.de$'
+          - '%%{ich-trickse}{REQUEST_URI} ^/medien/meldungen-fuer-fachkreise/meldungen-fachkreise-2015.htm [OR]'
+          - '%%{ich-trickse}{REQUEST_URI} ^/medien/meldungen/meldung/news/gefaelschte-arzneimittel-gefahr-durch-illegalen-online-handel-steigt.htm [OR]'
+          - '%%{ich-trickse}{REQUEST_URI} ^/medien/meldungen/news-seiten/fuer-mehr-aufklaerung-zum-leben-und-umgang-mit-rheuma.htm'
+        rewrite_rule:
+          - ^(.*)$ https://www.pfizer.de/presse/meldungen-fuer-fachkreise/meldungen-fuer-fachkreise-2015.htm [R=301,L]
+      - pfizer_rw44:
+        comment: 'https://jira.pixelpark.com/jira/browse/PFIZ-2427'
+        rewrite_cond:
+          - '%%{ich-trickse}{HTTP_HOST} ^(www\.)?pfizer\.de$'
+          - '%%{ich-trickse}{REQUEST_URI} ^/gesundheit/urologie.htm [OR]'
+          - '%%{ich-trickse}{REQUEST_URI} ^/gesundheit/urologie/erektionsstoerungen.htm'
+        rewrite_rule:
+          - ^(.*)$ https://www.pfizer.de/gesundheit/erektionsstoerungen.htm [R=301,L]
+      - pfizer_rw45:
+        comment: 'https://jira.pixelpark.com/jira/browse/PFIZ-2427'
+        rewrite_cond:
+          - '%%{ich-trickse}{HTTP_HOST} ^(www\.)?pfizer\.de$'
+          - '%%{ich-trickse}{REQUEST_URI} ^/gesundheit/humanmedizin/rheuma.htm [OR]'
+          - '%%{ich-trickse}{REQUEST_URI} ^/gesundheit/rheuma/morbus-bechterew.htm [OR]'
+          - '%%{ich-trickse}{REQUEST_URI} ^/gesundheit/rheuma/psoriasis-arthritis.htm'
+        rewrite_rule:
+          - ^(.*)$ https://www.pfizer.de/gesundheit/rheuma.htm [R=301,L]
+      - pfizer_rw45:
+        comment: 'https://jira.pixelpark.com/jira/browse/PFIZ-2427'
+        rewrite_cond:
+          - '%%{ich-trickse}{HTTP_HOST} ^(www\.)?pfizer\.de$'
+          - '%%{ich-trickse}{REQUEST_URI} ^/medikamente-produkte/pfizer-produkte/detailansicht/circletR.htm [OR]'
+          - '%%{ich-trickse}{REQUEST_URI} ^/medikamente-produkte/rezeptpflichtige-medikamente/pfizer-produkte/detailansicht/circletR.htm [OR]'
+          - '%%{ich-trickse}{REQUEST_URI} ^/medikamente/circlet.htm'
+        rewrite_rule:
+          - ^(.*)$ https://www.pfizer.de/medikamente-produkte/rezeptpflichtige-medikamente.htm [R=301,L]
+      - pfizer_rw46:
+        comment: 'https://jira.pixelpark.com/jira/browse/PFIZ-2427'
+        rewrite_cond:
+          - '%%{ich-trickse}{HTTP_HOST} ^(www\.)?pfizer\.de$'
+          - '%%{ich-trickse}{REQUEST_URI} ^/karriere/jobs.htm [OR]'
+          - '%%{ich-trickse}{REQUEST_URI} ^/karriere/karrierewege.htm [OR]'
+          - '%%{ich-trickse}{REQUEST_URI} ^/karriere/life/karrierewege/jobboerse/jobboerse.htm'
+        rewrite_rule:
+          - ^(.*)$ https://www.pfizer.de/karriere/bewerben-bei-pfizer.htm [R=301,L]
+      - pfizer_rw47:
+        comment: 'https://jira.pixelpark.com/jira/browse/PFIZ-2427'
+        rewrite_cond:
+          - '%%{ich-trickse}{HTTP_HOST} ^(www\.)?pfizer\.de$'
+          - '%%{ich-trickse}{REQUEST_URI} ^/einkauf-en.htm'
+        rewrite_rule:
+          - ^(.*)$ https://www.pfizer.de/footer/agb/einkauf-en.htm [R=301,L]
+      - pfizer_rw48:
+        comment: 'https://jira.pixelpark.com/jira/browse/PFIZ-2427'
+        rewrite_cond:
+          - '%%{ich-trickse}{HTTP_HOST} ^(www\.)?pfizer\.de$'
+          - '%%{ich-trickse}{REQUEST_URI} ^/patienten/arzneimittelfaelschungen.htm'
+        rewrite_rule:
+          - ^(.*)$ https://www.pfizer.de/gesundheit/arzneimittelfaelschung.htm [R=301,L]
+      - pfizer_rw49:
+        comment: 'https://jira.pixelpark.com/jira/browse/PFIZ-2427'
+        rewrite_cond:
+          - '%%{ich-trickse}{HTTP_HOST} ^(www\.)?pfizer\.de$'
+          - '%%{ich-trickse}{REQUEST_URI} ^/patienten/arzneimittelfaelschungen.htm'
+        rewrite_rule:
+          - ^(.*)$ https://www.pfizer.de/gesundheit/arzneimittelfaelschung.htm [R=301,L]
+      - pfizer_rw50:
+        comment: 'https://jira.pixelpark.com/jira/browse/PFIZ-2427'
+        rewrite_cond:
+          - '%%{ich-trickse}{HTTP_HOST} ^(www\.)?pfizer\.de$'
+          - '%%{ich-trickse}{REQUEST_URI} ^/gesundheit/humanmedizin/impfstoffe.htm'
+        rewrite_rule:
+          - ^(.*)$ https://www.pfizer.de/gesundheit/impfungen.htm [R=301,L]
+      - pfizer_rw51:
+        comment: 'https://jira.pixelpark.com/jira/browse/PFIZ-2427'
+        rewrite_cond:
+          - '%%{ich-trickse}{HTTP_HOST} ^(www\.)?pfizer\.de$'
+          - '%%{ich-trickse}{REQUEST_URI} ^/unternehmen/karriere.htm'
+        rewrite_rule:
+          - ^(.*)$ https://www.pfizer.de/karriere.htm [R=301,L]
+      - pfizer_rw52:
+        comment: 'https://jira.pixelpark.com/jira/browse/PFIZ-2427'
+        rewrite_cond:
+          - '%%{ich-trickse}{HTTP_HOST} ^(www\.)?pfizer\.de$'
+          - '%%{ich-trickse}{REQUEST_URI} ^/medikamente/rezeptfreie-medikamente-und-produkte.htm'
+        rewrite_rule:
+          - ^(.*)$ https://www.pfizer.de/medikamente-produkte/rezeptfreie-medikamente-und-produkte.htm [R=301,L]
+      - pfizer_rw53:
+        comment: 'https://jira.pixelpark.com/jira/browse/PFIZ-2427'
+        rewrite_cond:
+          - '%%{ich-trickse}{HTTP_HOST} ^(www\.)?pfizer\.de$'
+          - '%%{ich-trickse}{REQUEST_URI} ^/medikamente-produkte/rezeptpflichtige-medikamente/pfizer-produkte/produkt-liste/detailansicht/accupro.htm'
+        rewrite_rule:
+          - ^(.*)$ https://www.pfizer.de/medikamente-produkte/rezeptpflichtige-medikamente/pfizer-produkte/detailansicht/accuproR.htm [R=301,L]
+      - pfizer_rw54:
+        comment: 'https://jira.pixelpark.com/jira/browse/PFIZ-2427'
+        rewrite_cond:
+          - '%%{ich-trickse}{HTTP_HOST} ^(www\.)?pfizer\.de$'
+          - '%%{ich-trickse}{REQUEST_URI} ^/medikamente-produkte/rezeptpflichtige-medikamente/pfizer-produkte/produkt-liste/detailansicht/celebrex.htm'
+        rewrite_rule:
+          - ^(.*)$ https://www.pfizer.de/medikamente-produkte/rezeptpflichtige-medikamente/pfizer-produkte/detailansicht/celebrexR.htm [R=301,L]
+      - pfizer_rw55:
+        comment: 'https://jira.pixelpark.com/jira/browse/PFIZ-2427'
+        rewrite_cond:
+          - '%%{ich-trickse}{HTTP_HOST} ^(www\.)?pfizer\.de$'
+          - '%%{ich-trickse}{REQUEST_URI} ^/medikamente-produkte/rezeptpflichtige-medikamente/pfizer-produkte/produkt-liste/detailansicht/climopax-climopax-mono-climopax-cyclo.htm'
+        rewrite_rule:
+          - ^(.*)$ https://www.pfizer.de/medikamente-produkte/rezeptpflichtige-medikamente/pfizer-produkte/detailansicht/climopaxR-climopaxR-mono-climopaxR-cyclo.htm [R=301,L]
+      - pfizer_rw56:
+        comment: 'https://jira.pixelpark.com/jira/browse/PFIZ-2427'
+        rewrite_cond:
+          - '%%{ich-trickse}{HTTP_HOST} ^(www\.)?pfizer\.de$'
+          - '%%{ich-trickse}{REQUEST_URI} ^/medikamente-produkte/pfizer-produkte/produkt-liste/detailansicht/fragminR-p-p-forte.htm'
+        rewrite_rule:
+          - ^(.*)$ https://www.pfizer.de/medikamente-produkte/rezeptpflichtige-medikamente/pfizer-produkte/detailansicht/fragminR-p-p-forte-1.htm [R=301,L]
+      - pfizer_rw57:
+        comment: 'https://jira.pixelpark.com/jira/browse/PFIZ-2427'
+        rewrite_cond:
+          - '%%{ich-trickse}{HTTP_HOST} ^(www\.)?pfizer\.de$'
+          - '%%{ich-trickse}{REQUEST_URI} ^/medikamente-produkte/rezeptpflichtige-medikamente/pfizer-produkte/produkt-liste/detailansicht/fragminR-p-p-forte.htm'
+        rewrite_rule:
+          - ^(.*)$ https://www.pfizer.de/medikamente-produkte/rezeptpflichtige-medikamente/pfizer-produkte/detailansicht/fragminR-p-p-forte-1.htm [R=301,L]
+      - pfizer_rw58:
+        comment: 'https://jira.pixelpark.com/jira/browse/PFIZ-2427'
+        rewrite_cond:
+          - '%%{ich-trickse}{HTTP_HOST} ^(www\.)?pfizer\.de$'
+          - '%%{ich-trickse}{REQUEST_URI} ^/medikamente-produkte/rezeptpflichtige-medikamente/pfizer-produkte/produkt-liste/detailansicht/rapamune-loesung.htm'
+        rewrite_rule:
+          - ^(.*)$ https://www.pfizer.de/medikamente-produkte/rezeptpflichtige-medikamente/pfizer-produkte/detailansicht/rapamuneR-loesung.htm [R=301,L]
+      - pfizer_rw59:
+        comment: 'https://jira.pixelpark.com/jira/browse/PFIZ-2427'
+        rewrite_cond:
+          - '%%{ich-trickse}{HTTP_HOST} ^(www\.)?pfizer\.de$'
+          - '%%{ich-trickse}{REQUEST_URI} ^/medikamente-produkte/rezeptpflichtige-medikamente/pfizer-produkte/produkt-liste/detailansicht/tygacil.htm'
+        rewrite_rule:
+          - ^(.*)$ hhttps://www.pfizer.de/medikamente-produkte/rezeptpflichtige-medikamente/pfizer-produkte/detailansicht/tygacilR.htm [R=301,L]
+      - pfizer_rw60:
+        comment: 'https://jira.pixelpark.com/jira/browse/PFIZ-2427'
+        rewrite_cond:
+          - '%%{ich-trickse}{HTTP_HOST} ^(www\.)?pfizer\.de$'
+          - '%%{ich-trickse}{REQUEST_URI} ^/produkte/'
+        rewrite_rule:
+          - ^(.*)$ https://www.pfizer.de/medikamente-produkte.htm [R=301,L]
+
+site::profile::apache::vhosts:
+  pfizer-berlin:
+    servername: pfizer.berlin
+    docroot: '/srv/www/mspfizerberlin'
+    ip: 217.66.55.99
+    add_listen: false
+    port: 80
+    serveraliases:
+      - www.pfizer.berlin
+      - www-pfizer-berlin.pixelpark.net
+      # Upgrade
+      - www02-pfizer-berlin.pixelpark.net
+
+  ich-beim-arzt:
+    servername: www.ich-beim-arzt.de
+    docroot: '/srv/www/www.ich-beim-arzt.de'
+    ip: 217.66.55.99
+    add_listen: false
+    port: 80
+    serveraliases:
+      - www.ichbeimarzt.de
+      - ichbeimarzt.de
+      - ich-beim-arzt.de
+      - ich-beim-arzt-de.pixelpark.net
+      # Upgrade
+      - www02-ichbeimarzt-de.pixelpark.net
+
+  lungenkrebs-testen-at:
+    servername: www.lungenkrebs-testen.at
+    docroot: '/srv/www/www.lungenkrebs-testen.at'
+    ip: 217.66.55.99
+    add_listen: false
+    port: 80
+    # PHP Code wird wohl im Januar zurückgebaut
+    custom_fragment: 'ProxyPassMatch ^/(.*\.php(/.*)?)$ fcgi://127.0.0.1:9000/srv/www/www.lungenkrebs-testen.at/$1'
+    serveraliases:
+      - lungenkrebs-testen.at
+      - www-lungenkrebs-testen-at.pixelpark.net
+      # Upgrade
+      - www02-lungenkrebs-testen-at.pixelpark.net
+
+  lungenkrebs-testen-de:
+    servername: www.lungenkrebs-testen.de
+    docroot: '/srv/www/www.lungenkrebs-testen.de'
+    ip: 217.66.55.99
+    add_listen: false
+    port: 80
+    serveraliases:
+      - lungenkrebs-testen.de
+      - www-lungenkrebs-testen-de.pixelpark.net
+      # Upgrade
+      - www02-lungenkrebs-testen-de.pixelpark.net
+  lungenkrebs-testen-de_ssl:
+    servername: www.lungenkrebs-testen.de
+    docroot: '/srv/www/www.lungenkrebs-testen.de'
+    ip: 217.66.55.99
+    add_listen: false
+    port: 443
+    ssl: true
+    ssl_cert: /etc/pki/tls/certs/www.pfizer.de-cert.pem.san
+    ssl_chain: /etc/pki/tls/certs/www.pfizer.de-cert.pem.san
+    ssl_key: /etc/pki/tls/private/www.pfizer.de-key.pem.san
+    serveraliases:
+      - lungenkrebs-testen.de
+      - www-lungenkrebs-testen-de.pixelpark.net
+      # Upgrade
+      - www02-lungenkrebs-testen-de.pixelpark.net
+
+  impf2ab60:
+    servername: www.impf2ab60.de
+    docroot: '/srv/www/www.impf2ab60.de'
+    ip: 217.66.55.99
+    add_listen: false
+    port: 80
+    serveraliases:
+      - impf2ab60.de
+      - impfzweiab60.de
+      - impf2absechzig.de
+      - impfzweiabsechzig.de
+      - impf-zwei-ab-sechzig.de
+      - impf-2-ab-60.de
+      - impf2-ab-60.de
+      - impf2.de
+      - www.impf2ab60.de
+      - www.impfzweiab60.de
+      - www.impf2absechzig.de
+      - www.impfzweiabsechzig.de
+      - www.impf-zwei-ab-sechzig.de
+      - www.impf-2-ab-60.de
+      - www.impf2-ab-60.de
+      - www.impf2.de
+      - impf2-ab-60-de.pixelpark.net
+      # Upgrade
+      - www02-impf2ab60-de.pixelpark.net
+    rewrites:
+      - alias:
+        comment: 'Alle Aliase auf Servername'
+        rewrite_cond:
+          - '%%{ich-trickse}{HTTP_HOST} ^impf2ab60.de$ [OR]'
+          - '%%{ich-trickse}{HTTP_HOST} ^impfzweiab60.de$ [OR]'
+          - '%%{ich-trickse}{HTTP_HOST} ^impf2absechzig.de$ [OR]'
+          - '%%{ich-trickse}{HTTP_HOST} ^impfzweiabsechzig.de$ [OR]'
+          - '%%{ich-trickse}{HTTP_HOST} ^impf-zwei-ab-sechzig.de$ [OR]'
+          - '%%{ich-trickse}{HTTP_HOST} ^impf-2-ab-60.de$ [OR]'
+          - '%%{ich-trickse}{HTTP_HOST} ^impf2-ab-60.de$ [OR]'
+          - '%%{ich-trickse}{HTTP_HOST} ^impf2.de$ [OR]'
+          - '%%{ich-trickse}{HTTP_HOST} ^www.impfzweiab60.de$ [OR]'
+          - '%%{ich-trickse}{HTTP_HOST} ^www.impf2absechzig.de$ [OR]'
+          - '%%{ich-trickse}{HTTP_HOST} ^www.impfzweiabsechzig.de$ [OR]'
+          - '%%{ich-trickse}{HTTP_HOST} ^www.impf-zwei-ab-sechzig.de$ [OR]'
+          - '%%{ich-trickse}{HTTP_HOST} ^www.impf-2-ab-60.de$ [OR]'
+          - '%%{ich-trickse}{HTTP_HOST} ^www.impf2-ab-60.de$ [OR]'
+          - '%%{ich-trickse}{HTTP_HOST} ^www.impf2ab60.de$'
+        rewrite_rule:
+          - ^(.*)$ http://www.impf2.de$1 [R=301,L]
+
+  wegweiser-rheuma-psoriasis:
+    servername: www.wegweiser-rheuma-psoriasis.de
+    docroot: '/srv/www/www.wegweiser-rheuma-psoriasis.de/current'
+    manage_docroot: false
+    ip: 217.66.55.99
+    add_listen: false
+    port: 80
+    serveraliases:
+      - wegweiser-rheuma-psoriasis.de
+      # Upgrade
+      - www02-wegweiser-rheuma-psoriasis-de.pixelpark.net
+    rewrites:
+      - www:
+        comment: 'Alles nach www'
+        rewrite_cond:
+          - '%%{ich-trickse}{HTTP_HOST} ^wegweiser-rheuma-psoriasis.de$'
+        rewrite_rule:
+          - ^(.*)$ https://www.wegweiser-rheuma-psoriasis.de$1 [R=301,L]
+      - rheuma:
+        comment: 'Redirect to rheuma domain'
+        rewrite_cond:
+          - '%%{ich-trickse}{REQUEST_URI} ^/rheuma.html$'
+        rewrite_rule:
+          - ^/rheuma.html$ https://www.wegweiser-rheuma.de [R=301,L]
+      - psoriasis:
+        comment: 'Redirect to psoriasis domain'
+        rewrite_cond:
+          - '%%{ich-trickse}{REQUEST_URI} ^/psoriasis.html$'
+        rewrite_rule:
+          - ^/psoriasis.html$ https://www.wegweiser-psoriasis.de [R=301,L]
+  wegweiser-rheuma-psoriasis_ssl:
+    servername: www.wegweiser-rheuma-psoriasis.de
+    docroot: '/srv/www/www.wegweiser-rheuma-psoriasis.de/current'
+    manage_docroot: false
+    ip: 217.66.55.99
+    add_listen: false
+    port: 443
+    ssl: true
+    ssl_cert: /etc/pki/tls/certs/www.pfizer.de-cert.pem.san
+    ssl_chain: /etc/pki/tls/certs/www.pfizer.de-cert.pem.san
+    ssl_key: /etc/pki/tls/private/www.pfizer.de-key.pem.san
+    serveraliases:
+      - wegweiser-rheuma-psoriasis.de
+      # Upgrade
+      - www02-wegweiser-rheuma-psoriasis-de.pixelpark.net
+    rewrites:
+      - www:
+        comment: 'Alles nach www'
+        rewrite_cond:
+          - '%%{ich-trickse}{HTTP_HOST} ^wegweiser-rheuma-psoriasis.de$'
+        rewrite_rule:
+          - ^(.*)$ https://www.wegweiser-rheuma-psoriasis.de$1 [R=301,L]
+      - rheuma:
+        comment: 'Redirect to rheuma domain'
+        rewrite_cond:
+          - '%%{ich-trickse}{REQUEST_URI} ^/rheuma.html$'
+        rewrite_rule:
+          - ^/rheuma.html$ https://www.wegweiser-rheuma.de [R=301,L]
+      - psoriasis:
+        comment: 'Redirect to psoriasis domain'
+        rewrite_cond:
+          - '%%{ich-trickse}{REQUEST_URI} ^/psoriasis.html$'
+        rewrite_rule:
+          - ^/psoriasis.html$ https://www.wegweiser-psoriasis.de [R=301,L]
+
+  wegweiser-rheuma:
+    servername: www.wegweiser-rheuma.de
+    docroot: '/srv/www/www.wegweiser-rheuma-psoriasis.de/current'
+    manage_docroot: false
+    ip: 217.66.55.99
+    add_listen: false
+    port: 80
+    directoryindex: rheuma.html
+    serveraliases:
+      - wegweiser-rheuma.de
+      # Upgrade
+      - www02-wegweiser-rheuma-de.pixelpark.net
+    rewrites:
+      - www:
+        comment: 'Alles nach www'
+        rewrite_cond:
+          - '%%{ich-trickse}{HTTP_HOST} ^wegweiser-rheuma.de$'
+        rewrite_rule:
+          - ^(.*)$ http://www.wegweiser-rheuma.de$1 [R=301,L]
+      - rheuma:
+        comment: 'Redirect to rheuma domain'
+        rewrite_cond:
+          - '%%{ich-trickse}{REQUEST_URI} ^/rheuma.html$'
+        rewrite_rule:
+          - ^/rheuma.html$ http://www.wegweiser-rheuma.de [R=301,L]
+  wegweiser-rheuma_ssl:
+    servername: www.wegweiser-rheuma.de
+    docroot: '/srv/www/www.wegweiser-rheuma-psoriasis.de/current'
+    manage_docroot: false
+    ip: 217.66.55.99
+    add_listen: false
+    port: 443
+    ssl: true
+    ssl_cert: /etc/pki/tls/certs/www.pfizer.de-cert.pem.san
+    ssl_chain: /etc/pki/tls/certs/www.pfizer.de-cert.pem.san
+    ssl_key: /etc/pki/tls/private/www.pfizer.de-key.pem.san
+    directoryindex: rheuma.html
+    serveraliases:
+      - wegweiser-rheuma.de
+      # Upgrade
+      - www02-wegweiser-rheuma-de.pixelpark.net
+    rewrites:
+      - www:
+        comment: 'Alles nach www'
+        rewrite_cond:
+          - '%%{ich-trickse}{HTTP_HOST} ^wegweiser-rheuma.de$'
+        rewrite_rule:
+          - ^(.*)$ https://www.wegweiser-rheuma.de$1 [R=301,L]
+      - rheuma:
+        comment: 'Redirect to rheuma domain'
+        rewrite_cond:
+          - '%%{ich-trickse}{REQUEST_URI} ^/rheuma.html$'
+        rewrite_rule:
+          - ^/rheuma.html$ https://www.wegweiser-rheuma.de [R=301,L]
+
+  wegweiser-psoriasis:
+    servername: www.wegweiser-psoriasis.de
+    docroot: '/srv/www/www.wegweiser-rheuma-psoriasis.de/current'
+    manage_docroot: false
+    ip: 217.66.55.99
+    add_listen: false
+    port: 80
+    directoryindex: psoriasis.html
+    serveraliases:
+      - wegweiser-psoriasis.de
+      # Upgrade
+      - www02-wegweiser-psoriasis-de.pixelpark.net
+    rewrites:
+      - www:
+        comment: 'Alles nach www'
+        rewrite_cond:
+          - '%%{ich-trickse}{HTTP_HOST} ^wegweiser-psoriasis.de$'
+        rewrite_rule:
+          - ^(.*)$ http://www.wegweiser-psoriasis.de$1 [R=301,L]
+      - rheuma:
+        comment: 'Redirect to rheuma domain'
+        rewrite_cond:
+          - '%%{ich-trickse}{REQUEST_URI} ^/psoriasis.html'
+        rewrite_rule:
+          - ^/psoriasis.html(.*)$ http://www.wegweiser-psoriasis.de$1 [R=301,L]
+  wegweiser-psoriasis_ssl:
+    servername: www.wegweiser-psoriasis.de
+    docroot: '/srv/www/www.wegweiser-rheuma-psoriasis.de/current'
+    manage_docroot: false
+    ip: 217.66.55.99
+    add_listen: false
+    port: 443
+    ssl: true
+    ssl_cert: /etc/pki/tls/certs/www.pfizer.de-cert.pem.san
+    ssl_chain: /etc/pki/tls/certs/www.pfizer.de-cert.pem.san
+    ssl_key: /etc/pki/tls/private/www.pfizer.de-key.pem.san
+    directoryindex: psoriasis.html
+    serveraliases:
+      - wegweiser-psoriasis.de
+      # Upgrade
+      - www02-wegweiser-psoriasis-de.pixelpark.net
+    rewrites:
+      - www:
+        comment: 'Alles nach www'
+        rewrite_cond:
+          - '%%{ich-trickse}{HTTP_HOST} ^wegweiser-psoriasis.de$'
+        rewrite_rule:
+          - ^(.*)$ http://www.wegweiser-psoriasis.de$1 [R=301,L]
+      - rheuma:
+        comment: 'Redirect to rheuma domain'
+        rewrite_cond:
+          - '%%{ich-trickse}{REQUEST_URI} ^/psoriasis.html'
+        rewrite_rule:
+          - ^/psoriasis.html(.*)$ http://www.wegweiser-psoriasis.de$1 [R=301,L]
+  static.pfizer:
+    servername: static.pfizer.de
+    docroot: '/srv/www/static.pfizer.de'
+    ip: 217.66.55.99
+    add_listen: false
+    port: 80
+    serveraliases:
+      - static-pfizer-de.pixelpark.net
+      - www02-static-pfizer-de.pixelpark.net
+
+logstash::generic_resource:
+  maillog:
+    resource: file
+    order: 10 # Input
+    parameters:
+      path: '/var/log/maillog'
+      type: maillog
+      tags:
+        - "%{customer}"
+        - "%{tier}"
+
diff --git a/customer/pfizer/web02-pfizer-de.pixelpark.net.yaml b/customer/pfizer/web02-pfizer-de.pixelpark.net.yaml
new file mode 100644 (file)
index 0000000..3eb394c
--- /dev/null
@@ -0,0 +1,819 @@
+---
+site::role: base
+site::additional_classes:
+  - apache::mod::headers
+  - site::profile::typo3
+  - site::profile::mysql_server
+  - logstash
+
+accounts::users:
+  stephan.vits:
+    apply: true
+    sudo: false
+    groups: apache
+  thomas.bussmeyer:
+    apply: true
+    sudo: false
+    groups: apache
+  nikolai.potapov:
+    apply: true
+    sudo: false
+    groups: apache
+  andreas.pinto-koehler:
+    apply: true
+    sudo: true
+    groups: apache
+  deploy.vogel:
+    apply: true
+    sudo: false
+    group: apache
+  service.typo3:
+    apply: true
+    sudo: false
+    groups: apache
+# TODO: Abwarten auf Ticket: https://jira.pixelpark.com/jira/browse/PPPUPPET-202
+#  csv_upload:
+#    uid: 25113
+#    apply: true
+#    comment: "CSV-Upload-User-from-Pfizer"
+#    sudo: false
+#    group: sftpgroup
+#    password: ENC[PKCS7,MIIBeQYJKoZIhvcNAQcDoIIBajCCAWYCAQAxggEhMIIBHQIBADAFMAACAQEwDQYJKoZIhvcNAQEBBQAEggEAE5C4nE51Xi3Z1l7fHWvkplz1XBcyk4Z9AmtsfiW+9PcpJEsMxtUcrRHul77qjRifruPpbfOSFvab2xBG+7Bn+2WIcOyeFFid7lWOvdli40WFsgcU+BOPUuE4N5hojaSQeZq2Xwa+kqfhSURtQ8jWC6fBFgDMAFmO7Gz6lrEg3wICnG1R13rToqCO6IrBA849FQsf3E2gDP5TmRMSblD7Fn2oz66ZLvCVEJslhxwFnoGw5BBRJ0ot9k8Dv5Z1VAX5YffjexwjSpmsR5syRUwgf1ouvhbUxF0nPwkp3asVMzdxujYDQF0Xm0mE39viZ5qiU9/cTzQGhxR4FaSuaFRaEDA8BgkqhkiG9w0BBwEwHQYJYIZIAWUDBAEqBBAShSOzRBbGrZj9lXO5CWefgBCLOdtMRowibswx2J96tr6X]
+
+repo::remi_php55: true
+
+php::settings:
+  Date/date.timezone: Europe/Berlin
+  PHP/upload_max_filesize: '100M'
+  PHP/post_max_size: '100M'
+  PHP/max_execution_time: '3000'
+  PHP/memory_limit: '512M'
+  PHP/expose_php: 'Off'
+  Session/session.cookie_secure: 1
+  Session/session.cookie_httponly: 1
+  PHP/cgi.fix_pathinfo: '0'
+
+php::dev: true
+php::pear: true
+
+php::extensions:
+  gd: {}
+  opcache: {}
+  mysqlnd: {}
+  soap: {}
+  mbstring: {}
+  pecl-imagick: {}
+  pecl-uploadprogress: {}
+  pecl-memcache: {}
+  pecl-apcu: {}
+  pecl-xslcache: {}
+  xdebug:
+    provider: pecl
+    settings:
+      xdebug.max_nesting_level: 400
+      xdebug.remote_port: 9001
+      xdebug.idekey: apache
+      xdebug.remote_connect_back: 1
+      xdebug.remote_enable: 1
+    zend: true
+
+mysql::server::remove_default_accounts: true
+mysql::server::backup::backupuser: backup
+mysql::server::backup::backuppassword: ENC[PKCS7,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]
+mysql::server::backup::backupdir: /srv/backup/mysql
+mysql::server::root_password: ENC[PKCS7,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]
+
+
+site::profile::mysql_server::databases:
+  redaktion_live:
+    user: typo3
+    password: ENC[PKCS7,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]
+
+site::profile::typo3::projects:
+  redaktion-pfizer-de.pixelpark.net:
+    #ip: 217.66.55.106
+    site_path: /srv/www/redaktion-pfizer-de
+    use_symlink: true
+    version: '6.2.17'
+    db_pass: ENC[PKCS7,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]
+    db_user: typo3
+    db_name: redaktion_live
+    servername: redaktion-pfizer-de.pixelpark.net
+    serveraliases:
+      - web02-pfizer-de.pixelpark.net
+#      - redaktion-pfizer.pixelpark.net -> anspricht nicht den Standardkonventionen
+      - redaktion-pfizermed-de.pixelpark.net
+      - redaktion-ueberaktive-blase-de.pixelpark.net
+      - redaktion-monatsring-de.pixelpark.net
+      - redaktion-pain-detect-de.pixelpark.net
+      - redaktion-meet-pfizer-de.pixelpark.net
+      - redaktion-sab-simplex-de.pixelpark.net
+      - redaktion-rauchfrei-durchstarten-de.pixelpark.net
+      - redaktion-lyrica-de.pixelpark.net
+    ssl: true
+    ssl_cert: /etc/pki/tls/certs/wildcard.pixelpark.net-cert.pem
+    ssl_chain: /etc/pki/tls/certs/wildcard.pixelpark.net-cert.pem
+    ssl_key: /etc/pki/tls/private/wildcard.pixelpark.net-key.pem
+    #SetEnvIf User-Agent   ".*MSIE.*" nokeepalive ssl-unclean-shutdown downgrade-1.0 force-response-1.0
+    directories:
+      - location_root:
+        provider: location
+        path: '/'
+        auth_type: Digest
+        auth_name: redaktion-pfizer-de
+        auth_digest_provider: file
+        auth_digest_algorithm: MD5
+        auth_user_file: '/etc/httpd/htdigest'
+        auth_require: 'valid-user'
+        require:
+          - 'ip 217.66.55 217.66.50 217.66.51 217.66.48.130 168.224.160 10.121.101 204.114.176 204.114.216 148.168.40 202.32.173 204.114.248 168.224.1 168.224.160 148.168.127 204.114.196 193.235.226 212.58.14 204.114.199 155.94.99 155.94.78 155.94.62 218.213.241 155.94.70 155.94.110 222.73.72 155.94.119 155.94.55 68.58.141.20 174.137.32.22 15.213.17 85.183.14'
+      - location_typo3:
+        provider: location
+        path: '/typo3/'
+        auth_type: Digest
+        auth_name: redaktion-pfizer-de
+        auth_digest_provider: file
+        auth_digest_algorithm: MD5
+        auth_user_file: '/etc/httpd/htdigest'
+        auth_require: 'valid-user'
+        require:
+          - local
+          - ip 217.66.55
+      - location_typo3_validationform:
+        provider: location
+        path: '/typo3/sysext/frontend/Resources/Public/JavaScript/jsfunc.validateform.js'
+      - location_recycler:
+        provider: location
+        path: '/fileadmin/recycler/'
+        require:
+          - local
+    user: apache
+    mode: '2770'
+    php_admin_value:
+      memory_limit: 512M
+      upload_max_filesize: 100M
+      post_max_size: 100M
+    rewrites:
+      - pfizermed_rw2:
+        comment: 'Rewrites fuer Pfizermed'
+        rewrite_cond:
+          - '%%{ich-trickse}{HTTP_HOST} ^(redaktion-pfizermed-de.pixelpark.net)$'
+        rewrite_rule:
+          - ^/broschueren/inspra-scriptum-cardiologicum.htm$ https://redaktion-pfizermed-de.pixelpark.net/index.php?id=7689 [R=301,L]
+      - pfizermed_rw3:
+        comment: 'Rewrites fuer Pfizermed'
+        rewrite_cond:
+          - '%%{ich-trickse}{HTTP_HOST} ^(redaktion-pfizermed-de.pixelpark.net)$'
+        rewrite_rule:
+          - ^/produktprofile/lyrica.htm$ https://redaktion-pfizermed-de.pixelpark.net/medikamente/medikamente-a-bis-z/lyrica-r-hartkapseln.htm [R=301,L]
+      - pfizermed_rw4:
+        comment: 'Rewrites fuer Pfizermed'
+        rewrite_cond:
+          - '%%{ich-trickse}{HTTP_HOST} ^(redaktion-pfizermed-de.pixelpark.net)$'
+        rewrite_rule:
+          - ^/produktprofile/lyrica-loesung.htm$ https://redaktion-pfizermed-de.pixelpark.net/medikamente/medikamente-a-bis-z/lyrica-r-loesung.htm [R=301,L]
+      - pfizermed_rw5:
+        comment: 'Rewrites fuer Pfizermed'
+        rewrite_cond:
+          - '%%{ich-trickse}{HTTP_HOST} ^(redaktion-pfizermed-de.pixelpark.net)$'
+        rewrite_rule:
+          - ^/die-dermatom-karte.htm$ https://redaktion-pfizermed-de.pixelpark.net/index.php?id=7693 [R=301,L]
+      - pfizermed_rw6:
+        comment: 'Rewrites fuer Pfizermed'
+        rewrite_cond:
+          - '%%{ich-trickse}{HTTP_HOST} ^(redaktion-pfizermed-de.pixelpark.net)$'
+        rewrite_rule:
+          - ^/handhabung-lyrica-loesung/news/0.htm$ https://redaktion-pfizermed-de.pixelpark.net/index.php?id=6636 [R=301,L]
+      - pfizermed_rw7:
+        comment: 'Rewrites fuer Pfizermed'
+        rewrite_cond:
+          - '%%{ich-trickse}{HTTP_HOST} ^(redaktion-pfizermed-de.pixelpark.net)$'
+        rewrite_rule:
+          - ^/videos/neuropathischer-schmerz-patientenvideo/video/0.htm$ https://redaktion-pfizermed-de.pixelpark.net/index.php?id=7735 [R=301,L]
+      - pfizermed_rw8:
+        comment: 'Rewrites fuer Pfizermed'
+        rewrite_cond:
+          - '%%{ich-trickse}{HTTP_HOST} ^(redaktion-pfizermed-de.pixelpark.net)$'
+        rewrite_rule:
+          - ^/fortbildungen/generalisierte-angststoerung-expertenvortraege-im-video.htm$ https://redaktion-pfizermed-de.pixelpark.net/index.php?id=7643 [R=301,L]
+      - pfizermed_rw9:
+        comment: 'Rewrites fuer Pfizermed'
+        rewrite_cond:
+          - '%%{ich-trickse}{HTTP_HOST} ^(redaktion-pfizermed-de.pixelpark.net)$'
+        rewrite_rule:
+          - ^/videos/was-ihnen-eliquisr-bieten-kann.htm$ https://redaktion-pfizermed-de.pixelpark.net/index.php?id=7736 [R=301,L]
+      - pfizermed_rw10:
+        comment: 'Rewrites fuer Pfizermed'
+        rewrite_cond:
+          - '%%{ich-trickse}{HTTP_HOST} ^(redaktion-pfizermed-de.pixelpark.net)$'
+        rewrite_rule:
+          - ^/produktseiten/toviaz/toviazr-ergebnisse-der-sofia-studie.htm?WT.mc_id=400599&WT.ban=1&?dl=bc6f1b4dc7f4af667df763bdbe04a7be https://redaktion-pfizermed-de.pixelpark.net/toviaz_sofia_studie.htm?dl=25f2422239bacd8903d355da10781238 [R=301,L]
+      - pfizermed_rw11:
+        comment: 'Rewrites fuer Pfizermed'
+        rewrite_cond:
+          - '%%{ich-trickse}{HTTP_HOST} ^(redaktion-pfizermed-de.pixelpark.net)$'
+        rewrite_rule:
+          - ^/produktseiten/toviaz/toviazr-sofia-studie-im-video-podcast.htm$ https://redaktion-pfizermed-de.pixelpark.net/index.php?id=7699 [R=301,L]
+      - pfizermed_rw12:
+        comment: 'Rewrites fuer Pfizermed'
+        rewrite_cond:
+          - '%%{ich-trickse}{HTTP_HOST} ^(redaktion-pfizermed-de.pixelpark.net)$'
+        rewrite_rule:
+          - ^/virtueller-ad/kontaktformular-virtueller-ad.htm$ https://redaktion-pfizermed-de.pixelpark.net/index.php?id=7704 [R=301,L]
+      - pfizermed_rw13:
+        comment: 'Rewrites fuer Pfizermed'
+        rewrite_cond:
+          - '%%{ich-trickse}{HTTP_HOST} ^(redaktion-pfizermed-de.pixelpark.net)$'
+        rewrite_rule:
+          - ^/fortbildungen/service-zum-fortbildungsprogramm.htm$ https://redaktion-pfizermed-de.pixelpark.net/index.php?id=7708 [R=301,L]
+      - pfizermed_rw14:
+        comment: 'Rewrites fuer Pfizermed'
+        rewrite_cond:
+          - '%%{ich-trickse}{HTTP_HOST} ^(redaktion-pfizermed-de.pixelpark.net)$'
+        rewrite_rule:
+          - ^/fileadmin/pfizer.de/documents/gi/(.*).pdf$ https://redaktion-pfizermed-de.pixelpark.net/fileadmin/produktdatenbank/pdf/$1.pdf [R=301,L,QSA]
+      - pfizermed_rw15:
+        comment: 'Rewrites fuer Pfizermed'
+        rewrite_cond:
+          - '%%{ich-trickse}{HTTP_HOST} ^(redaktion-pfizermed-de.pixelpark.net)$'
+        rewrite_rule:
+          - ^/fileadmin/pfizer.de/documents/fi/(.*).pdf$ https://redaktion-pfizermed-de.pixelpark.net/fileadmin/produktdatenbank/pdf/$1.pdf [R=301,L,QSA]
+      - pfizermed_rw16:
+        comment: 'Rewrites fuer Pfizermed'
+        rewrite_cond:
+          - '%%{ich-trickse}{HTTP_HOST} ^(redaktion-pfizermed-de.pixelpark.net)$'
+          - '%%{ich-trickse}{REQUEST_URI} ^/produktprofile/lyrica.htm$'
+          - '%%{ich-trickse}{QUERY_STRING} ^dl=8d105f114b13635c44237041a5e1f095$'
+        rewrite_rule:
+          - ^(.*)$ https://redaktion-pfizermed-de.pixelpark.net/medikamente/medikamente-a-bis-z/lyrica-r-hartkapseln.htm?dl=043d16a68cbc1087ae53eed9dff81739 [R=301,L]
+      - pfizermed_rw17:
+        comment: 'Rewrites fuer Pfizermed'
+        rewrite_cond:
+          - '%%{ich-trickse}{HTTP_HOST} ^(redaktion-pfizermed-de.pixelpark.net)$'
+          - '%%{ich-trickse}{REQUEST_URI} ^/produktprofile/lyrica-loesung.htm$'
+          - '%%{ich-trickse}{QUERY_STRING} ^dl=dcd7ae728fe0772139c1e1473716481f$'
+        rewrite_rule:
+          - ^(.*)$ https://redaktion-pfizermed-de.pixelpark.net/medikamente/medikamente-a-bis-z/lyrica-r-loesung.htm?dl=abe8a878b57e323abd07c543d0b51ccc [R=301,L]
+      - pfizermed_rw18:
+        comment: 'Rewrites fuer Pfizermed'
+        rewrite_cond:
+          - '%%{ich-trickse}{HTTP_HOST} ^(redaktion-pfizermed-de.pixelpark.net)$'
+          - '%%{ich-trickse}{REQUEST_URI} ^/die-dermatom-karte.htm$'
+          - '%%{ich-trickse}{QUERY_STRING} ^dl=43201239bc9ef70f6912dafa9a85b46d$'
+        rewrite_rule:
+          - ^(.*)$ https://redaktion-pfizermed-de.pixelpark.net/dermatom_karte.htm?dl=6a937294b4b10c36821d6c2460d024a5 [R=301,L]
+      - pfizermed_rw19:
+        comment: 'Rewrites fuer Pfizermed'
+        rewrite_cond:
+          - '%%{ich-trickse}{HTTP_HOST} ^(redaktion-pfizermed-de.pixelpark.net)$'
+          - '%%{ich-trickse}{REQUEST_URI} ^/handhabung-lyrica-loesung/news/0.htm$'
+          - '%%{ich-trickse}{QUERY_STRING} ^dl=a88d682c81bb22b0fed558376aa29e91$'
+        rewrite_rule:
+          - ^(.*)$ https://redaktion-pfizermed-de.pixelpark.net/lyrica_edetailing?dl=5940052744918c5d8c78d2b2d960675b [R=301,L]
+      - pfizermed_rw20:
+        comment: 'Rewrites fuer Pfizermed'
+        rewrite_cond:
+          - '%%{ich-trickse}{HTTP_HOST} ^(redaktion-pfizermed-de.pixelpark.net)$'
+          - '%%{ich-trickse}{REQUEST_URI} ^/downloads/lyrica-ppt-extra-sonderdruck.htm$'
+          - '%%{ich-trickse}{QUERY_STRING} ^dl=4f82556463a49a9e9dbc3545481dd299$'
+        rewrite_rule:
+          - ^(.*)$ https://redaktion-pfizermed-de.pixelpark.net/lyrica_sonderdruck_ppt_extra.htm?dl=9bed39730d34b08691b38525479c8a27 [R=301,L]
+      - pfizermed_rw21:
+        comment: 'Rewrites fuer Pfizermed'
+        rewrite_cond:
+          - '%%{ich-trickse}{HTTP_HOST} ^(redaktion-pfizermed-de.pixelpark.net)$'
+          - '%%{ich-trickse}{REQUEST_URI} ^/videos/neuropathischer-schmerz-patientenvideo/video/0.htm$'
+          - '%%{ich-trickse}{QUERY_STRING} ^dl=d6a9696fd84e5f7df8f3249d74d7f2dd$'
+        rewrite_rule:
+          - ^(.*)$ https://redaktion-pfizermed-de.pixelpark.net/neuropatischer_schmerz_patientenvideo.htm?dl=68da218e298706dee34024a3548baae3 [R=301,L]
+      - pfizermed_rw22:
+        comment: 'Rewrites fuer Pfizermed'
+        rewrite_cond:
+          - '%%{ich-trickse}{HTTP_HOST} ^(redaktion-pfizermed-de.pixelpark.net)$'
+          - '%%{ich-trickse}{REQUEST_URI} ^/fortbildungen/generalisierte-angststoerung-expertenvortraege-im-video.htm$'
+          - '%%{ich-trickse}{QUERY_STRING} ^dl=5996a02b175b0f233bcb885fa30d6b56$'
+        rewrite_rule:
+          - ^(.*)$ https://redaktion-pfizermed-de.pixelpark.net/generalisierte_angststoerung_expertenvortraege.htm?dl=498d9ffda73262b42a414722b5889048 [R=301,L]
+      - pfizermed_rw23:
+        comment: 'Rewrites fuer Pfizermed'
+        rewrite_cond:
+          - '%%{ich-trickse}{HTTP_HOST} ^(redaktion-pfizermed-de.pixelpark.net)$'
+          - '%%{ich-trickse}{REQUEST_URI} ^/videos/was-ihnen-eliquisr-bieten-kann/video/0.htm$'
+          - '%%{ich-trickse}{QUERY_STRING} ^dl=3a513f27f38f3d3b48db006c71b56dea$'
+        rewrite_rule:
+          - ^(.*)$ https://redaktion-pfizermed-de.pixelpark.net/was_ihnen_eliquis_bieten_kann.htm?dl=18dbe987148a7641d1522a8fca07ce74 [R=301,L]
+      - pfizermed_rw24:
+        comment: 'Rewrites fuer Pfizermed'
+        rewrite_cond:
+          - '%%{ich-trickse}{HTTP_HOST} ^(redaktion-pfizermed-de.pixelpark.net)$'
+          - '%%{ich-trickse}{REQUEST_URI} ^/virtueller-ad.htm$'
+          - '%%{ich-trickse}{QUERY_STRING} ^dl=f8ce79a8b2c71eaa48d48bc4d69957d9$'
+        rewrite_rule:
+          - ^(.*)$ https://redaktion-pfizermed-de.pixelpark.net/der_virtuelle_aussendienst.htm?dl=7d302c8dda851aa5780d12b22a9973c8 [R=301,L]
+      - pfizer_rw1:
+        comment: 'Rewrites fuer Pfizer'
+        rewrite_cond:
+          - '%%{ich-trickse}{HTTP_HOST} ^(redaktion-pfizer-de.pixelpark.net)$'
+          - '%%{ich-trickse}{REQUEST_URI} ^(/?)$'
+          - '%%{ich-trickse}{QUERY_STRING} ^id=2940$'
+        rewrite_rule:
+          - ^(.*)$ https://redaktion-pfizer-de.pixelpark.net/? [R=301,L]
+      - pfizer_rw2:
+        comment: 'Rewrites fuer Pfizer'
+        rewrite_cond:
+          - '%%{ich-trickse}{HTTP_HOST} ^(redaktion-pfizer-de.pixelpark.net)$'
+          - '%%{ich-trickse}{REQUEST_URI} ^/seite-empfehlen$ [OR]'
+          - '%%{ich-trickse}{REQUEST_URI} ^/seite-empfehlen.htm$ [OR]'
+          - '%%{ich-trickse}{REQUEST_URI} ^/nc/seite-empfehlen$ [OR]'
+          - '%%{ich-trickse}{REQUEST_URI} ^/nc/seite-empfehlen.htm$ [OR]'
+          - '%%{ich-trickse}{REQUEST_URI} ^/forschung$ [OR]'
+          - '%%{ich-trickse}{REQUEST_URI} ^/forschung.htm$ [OR]'
+          - '%%{ich-trickse}{REQUEST_URI} ^/nc/forschung$ [OR]'
+          - '%%{ich-trickse}{REQUEST_URI} ^/nc/forschung.htm$'
+        rewrite_rule:
+          - ^(.*)$ https://redaktion-pfizer-de.pixelpark.net/ [R=301,L]
+      - pfizer_rw3:
+        comment: 'Rewrites fuer Pfizer'
+        rewrite_cond:
+          - '%%{ich-trickse}{HTTP_HOST} ^(redaktion-pfizer-de.pixelpark.net)$'
+          - '%%{ich-trickse}{REQUEST_URI} ^/nc/gesundheit$ [OR]'
+          - '%%{ich-trickse}{REQUEST_URI} ^/nc/gesundheit.htm$ [OR]'
+          - '%%{ich-trickse}{REQUEST_URI} ^/patienten$ [OR]'
+          - '%%{ich-trickse}{REQUEST_URI} ^/patienten.htm$ [OR]'
+          - '%%{ich-trickse}{REQUEST_URI} ^/nc/patienten$ [OR]'
+          - '%%{ich-trickse}{REQUEST_URI} ^/nc/patienten.htm$'
+        rewrite_rule:
+          - ^(.*)$ https://redaktion-pfizer-de.pixelpark.net/gesundheit [R=301,L]
+      - pfizer_rw4:
+        comment: 'Rewrites fuer Pfizer'
+        rewrite_cond:
+          - '%%{ich-trickse}{HTTP_HOST} ^(redaktion-pfizer-de.pixelpark.net)$'
+          - '%%{ich-trickse}{REQUEST_URI} ^/unternehmen$ [OR]'
+          - '%%{ich-trickse}{REQUEST_URI} ^/unternehmen.htm$ [OR]'
+          - '%%{ich-trickse}{REQUEST_URI} ^/nc/unternehmen$ [OR]'
+          - '%%{ich-trickse}{REQUEST_URI} ^/nc/unternehmen.htm$'
+        rewrite_rule:
+          - ^(.*)$ https://redaktion-pfizer-de.pixelpark.net/ueber-pfizer [R=301,L]
+      - pfizer_rw5:
+        comment: 'Rewrites fuer Pfizer'
+        rewrite_cond:
+          - '%%{ich-trickse}{HTTP_HOST} ^(redaktion-pfizer-de.pixelpark.net)$'
+          - '%%{ich-trickse}{REQUEST_URI} ^/medien$ [OR]'
+          - '%%{ich-trickse}{REQUEST_URI} ^/medien.htm$ [OR]'
+          - '%%{ich-trickse}{REQUEST_URI} ^/nc/medien$ [OR]'
+          - '%%{ich-trickse}{REQUEST_URI} ^/nc/medien.htm$'
+        rewrite_rule:
+          - ^(.*)$ https://redaktion-pfizer-de.pixelpark.net/presse/meldungen [R=301,L]
+      - pfizer_rw6:
+        comment: 'Rewrites fuer Pfizer'
+        rewrite_cond:
+          - '%%{ich-trickse}{HTTP_HOST} ^(redaktion-pfizer-de.pixelpark.net)$'
+          - '%%{ich-trickse}{REQUEST_URI} ^/medikamente$ [OR]'
+          - '%%{ich-trickse}{REQUEST_URI} ^/medikamente.htm$ [OR]'
+          - '%%{ich-trickse}{REQUEST_URI} ^/nc/medikamente$ [OR]'
+          - '%%{ich-trickse}{REQUEST_URI} ^/nc/medikamente.htm$'
+        rewrite_rule:
+          - ^(.*)$ https://redaktion-pfizer-de.pixelpark.net/medikamente-produkte [R=301,L]
+      - pfizer_rw7:
+        comment: 'Rewrites fuer Pfizer'
+        rewrite_cond:
+          - '%%{ich-trickse}{HTTP_HOST} ^(redaktion-pfizer-de.pixelpark.net)$'
+          - '%%{ich-trickse}{REQUEST_URI} ^/nebenwirkungen-melden$ [OR]'
+          - '%%{ich-trickse}{REQUEST_URI} ^/nebenwirkungen-melden.htm$ [OR]'
+          - '%%{ich-trickse}{REQUEST_URI} ^/nc/nebenwirkungen-melden$ [OR]'
+          - '%%{ich-trickse}{REQUEST_URI} ^/nc/nebenwirkungen-melden.htm$'
+        rewrite_rule:
+          - ^(.*)$ https://redaktion-pfizer-de.pixelpark.net/nc/footer/nebenwirkungen-melden [R=301,L]
+      - pfizer_rw8:
+        comment: 'Rewrites fuer Pfizer'
+        rewrite_cond:
+          - '%%{ich-trickse}{HTTP_HOST} ^(redaktion-pfizer-de.pixelpark.net)$'
+          - '%%{ich-trickse}{REQUEST_URI} ^/agb$ [OR]'
+          - '%%{ich-trickse}{REQUEST_URI} ^/agb.htm$'
+        rewrite_rule:
+          - ^(.*)$ https://redaktion-pfizer-de.pixelpark.net/footer/agb [R=301,L]
+      - pfizer_rw9:
+        comment: 'Rewrites fuer Pfizer'
+        rewrite_cond:
+          - '%%{ich-trickse}{HTTP_HOST} ^(redaktion-pfizer-de.pixelpark.net)$'
+          - '%%{ich-trickse}{REQUEST_URI} ^/einkauf-de$ [OR]'
+          - '%%{ich-trickse}{REQUEST_URI} ^/einkauf-de.htm$'
+        rewrite_rule:
+          - ^(.*)$ https://redaktion-pfizer-de.pixelpark.net/footer/agb/einkauf-en [R=301,L]
+      - pfizer_rw10:
+        comment: 'Rewrites fuer Pfizer'
+        rewrite_cond:
+          - '%%{ich-trickse}{HTTP_HOST} ^(redaktion-pfizer-de.pixelpark.net)$'
+          - '%%{ich-trickse}{REQUEST_URI} ^/engagement$ [OR]'
+          - '%%{ich-trickse}{REQUEST_URI} ^/engagement.htm$'
+        rewrite_rule:
+          - ^(.*)$ https://redaktion-pfizer-de.pixelpark.net/ueber-pfizer/engagement [R=301,L]
+      - pfizer_rw11:
+        comment: 'Rewrites fuer Pfizer'
+        rewrite_cond:
+          - '%%{ich-trickse}{HTTP_HOST} ^(redaktion-pfizer-de.pixelpark.net)$'
+          - '%%{ich-trickse}{REQUEST_URI} ^/gesundheit-alt/der-virtuelle-beipackzettel$ [OR]'
+          - '%%{ich-trickse}{REQUEST_URI} ^/gesundheit-alt/der-virtuelle-beipackzettel.htm$'
+        rewrite_rule:
+          - ^(.*)$ https://redaktion-pfizer-de.pixelpark.net/services/beipackzettel-verstehen [R=301,L]
+      - pfizer_rw12:
+        comment: 'Rewrites fuer Pfizer'
+        rewrite_cond:
+          - '%%{ich-trickse}{HTTP_HOST} ^(redaktion-pfizer-de.pixelpark.net)$'
+          - '%%{ich-trickse}{REQUEST_URI} ^/impressum$ [OR]'
+          - '%%{ich-trickse}{REQUEST_URI} ^/impressum.htm$'
+        rewrite_rule:
+          - ^(.*)$ https://redaktion-pfizer-de.pixelpark.net/footer/impressum [R=301,L]
+#      - pfizer_rw13:
+#        comment: 'Rewrites fuer Pfizer'
+#        rewrite_cond:
+#          - '%%{ich-trickse}{HTTP_HOST} ^(redaktion-pfizer-de.pixelpark.net)$'
+#          - '%%{ich-trickse}{REQUEST_URI} ^/kontakt$ [OR]'
+#          - '%%{ich-trickse}{REQUEST_URI} ^/kontakt.htm$'
+#        rewrite_rule:
+#          - ^(.*)$ https://redaktion-pfizer-de.pixelpark.net/footer/kontakt [R=301,L]
+      - pfizer_rw14:
+        comment: 'Rewrites fuer Pfizer'
+        rewrite_cond:
+          - '%%{ich-trickse}{HTTP_HOST} ^(redaktion-pfizer-de.pixelpark.net)$'
+          - '%%{ich-trickse}{REQUEST_URI} ^/nutzungsbedingungen$ [OR]'
+          - '%%{ich-trickse}{REQUEST_URI} ^/nutzungsbedingungen.htm$'
+        rewrite_rule:
+          - ^(.*)$ https://redaktion-pfizer-de.pixelpark.net/footer/nutzungsbedingungen [R=301,L]
+      - pfizer_rw15:
+        comment: 'Rewrites fuer Pfizer'
+        rewrite_cond:
+          - '%%{ich-trickse}{HTTP_HOST} ^(redaktion-pfizer-de.pixelpark.net)$'
+          - '%%{ich-trickse}{REQUEST_URI} ^/pflichtangaben$ [OR]'
+          - '%%{ich-trickse}{REQUEST_URI} ^/pflichtangaben.htm$'
+        rewrite_rule:
+          - ^(.*)$ https://redaktion-pfizer-de.pixelpark.net/footer/pflichtangaben [R=301,L]
+      - pfizer_rw16:
+        comment: 'Rewrites fuer Pfizer'
+        rewrite_cond:
+          - '%%{ich-trickse}{HTTP_HOST} ^(redaktion-pfizer-de.pixelpark.net)$'
+          - '%%{ich-trickse}{REQUEST_URI} ^/sitemap$ [OR]'
+          - '%%{ich-trickse}{REQUEST_URI} ^/sitemap.htm$'
+        rewrite_rule:
+          - ^(.*)$ https://redaktion-pfizer-de.pixelpark.net/footer/sitemap [R=301,L]
+      - pfizer_rw17:
+        comment: 'Rewrites fuer Pfizer'
+        rewrite_cond:
+          - '%%{ich-trickse}{HTTP_HOST} ^(redaktion-pfizer-de.pixelpark.net)$'
+          - '%%{ich-trickse}{REQUEST_URI} ^/verkauf-de$ [OR]'
+          - '%%{ich-trickse}{REQUEST_URI} ^/verkauf-de.htm$'
+        rewrite_rule:
+          - ^(.*)$ https://redaktion-pfizer-de.pixelpark.net/footer/agb/verkauf-de [R=301,L]
+      - PFIZ-1760:
+        comment: https://jira.pixelpark.com/jira/browse/PFIZ-1760
+        rewrite_rule:
+          - ^/medizinische-anfragen.htm$ https://redaktion-pfizer-de.pixelpark.net/footer/medizinische-anfragen.htm [R=301,L]
+#      - kontakt:
+#        comment: 'Rewrite all kontakt to footer/kontakt on redaktions-pfizer-de' 
+#        rewrite_rule:
+#          - ^/kontakt.htm$ https://redaktion-pfizer-de.pixelpark.net/footer/kontakt.htm [R=301,L]
+      - top-kontakt:
+        comment: 'Rewrite all top-kontakt to footer/kontakt on redaktions-pfizer-de' 
+        rewrite_rule:
+          - ^/top-kontakt.htm$ https://redaktion-pfizer-de.pixelpark.net/footer/kontakt.htm [R=301,L]
+      - PFIZ-1770:
+        comment: https://jira.pixelpark.com/jira/browse/PFIZ-1770
+        rewrite_rule:
+          - ^/fileadmin/pfizer.de/documents/gi/ https://redaktion-pfizer-de.pixelpark.net/medikamente-produkte.htm [R=301,L]
+      - PFIZ-1837:
+        comment: https://jira.pixelpark.com/jira/browse/PFIZ-1837
+        rewrite_cond:
+          - '%%{ich-trickse}{HTTPS} !=on'
+        rewrite_rule:
+          - ^(.*)$ https://%%{ich-trickse}{HTTP_HOST}$1 [R=301,L]
+      - PFIZ-2445:
+        comment: https://jira.pixelpark.com/jira/browse/PFIZ-2445
+        rewrite_rule:
+          - ^/datenschutz/kontakt-datenschutzbeauftragter.htm$ https://redaktion-pfizer-de.pixelpark.net/allgemein/datenschutz/kontakt-zum-pfizer-datenschutzbeauftragten.htm [R=301,L]
+#      - pfizer_rw18:
+#        comment: 'https://jira.pixelpark.com/jira/browse/PFIZ-2511'
+#        rewrite_rule:
+#          - ^/services/aelter-werden.htm https://redaktion-pfizer-de.pixelpark.net/services.htm [L,R=301]
+#      - pfizer_rw19:
+#        comment: 'https://jira.pixelpark.com/jira/browse/PFIZ-2511'
+#        rewrite_rule:
+#          - ^/services/arzneimittelfaelschung.htm https://redaktion-pfizer-de.pixelpark.net/services.htm [L,R=301]
+#      - pfizer_rw20:
+#        comment: 'https://jira.pixelpark.com/jira/browse/PFIZ-2511'
+#        rewrite_rule:
+#          - ^/services/beipackzettel-verstehen.htm https://redaktion-pfizer-de.pixelpark.net/services.htm [L,R=301]
+#      - pfizer_rw21:
+#        comment: 'https://jira.pixelpark.com/jira/browse/PFIZ-2511'
+#        rewrite_rule:
+#          - ^/services/erektionsstoerungen.htm https://redaktion-pfizer-de.pixelpark.net/services.htm [L,R=301]
+#      - pfizer_rw22:
+#        comment: 'https://jira.pixelpark.com/jira/browse/PFIZ-2511'
+#        rewrite_rule:
+#          - ^/services/haemophilie.htm https://redaktion-pfizer-de.pixelpark.net/services.htm [L,R=301]
+#      - pfizer_rw23:
+#        comment: 'https://jira.pixelpark.com/jira/browse/PFIZ-2511'
+#        rewrite_rule:
+#          - ^/services/ich-beim-arzt.htm https://redaktion-pfizer-de.pixelpark.net/services.htm [L,R=301]
+#      - pfizer_rw24:
+#        comment: 'https://jira.pixelpark.com/jira/browse/PFIZ-2511'
+#        rewrite_rule:
+#          - ^/services/impfungen.htm https://redaktion-pfizer-de.pixelpark.net/services.htm [L,R=301]
+#      - pfizer_rw25:
+#        comment: 'https://jira.pixelpark.com/jira/browse/PFIZ-2511'
+#        rewrite_rule:
+#          - ^/services/klinische-studien.htm https://redaktion-pfizer-de.pixelpark.net/services.htm [L,R=301]
+#      - pfizer_rw26:
+#        comment: 'https://jira.pixelpark.com/jira/browse/PFIZ-2511'
+#        rewrite_rule:
+#          - ^/services/personalisierte-krebsmedizin.htm https://redaktion-pfizer-de.pixelpark.net/services.htm [L,R=301]
+#      - pfizer_rw27:
+#        comment: 'https://jira.pixelpark.com/jira/browse/PFIZ-2511'
+#        rewrite_rule:
+#          - ^/services/rheuma.htm https://redaktion-pfizer-de.pixelpark.net/services.htm [L,R=301]
+#      - pfizer_rw28:
+#        comment: 'https://jira.pixelpark.com/jira/browse/PFIZ-2511'
+#        rewrite_rule:
+#          - ^/services/schlaganfallvorsorge.htm https://redaktion-pfizer-de.pixelpark.net/services.htm [L,R=301]
+#      - pfizer_rw29:
+#        comment: 'https://jira.pixelpark.com/jira/browse/PFIZ-2511'
+#        rewrite_rule:
+#          - ^/services/schmerz.htm https://redaktion-pfizer-de.pixelpark.net/services.htm [L,R=301]
+#      - pfizer_rw30:
+#        comment: 'https://jira.pixelpark.com/jira/browse/PFIZ-2511'
+#        rewrite_rule:
+#          - ^/services/seltene-erkrankungen.htm https://redaktion-pfizer-de.pixelpark.net/services.htm [L,R=301]
+#      - pfizer_rw31:
+#        comment: 'https://jira.pixelpark.com/jira/browse/PFIZ-2511'
+#        rewrite_rule:
+#          - ^/services/social-media.htm https://redaktion-pfizer-de.pixelpark.net/services.htm [L,R=301]
+#      - pfizer_rw32:
+#        comment: 'https://jira.pixelpark.com/jira/browse/PFIZ-2511'
+#        rewrite_rule:
+#          - ^/services/ueberaktive-blase.htm https://redaktion-pfizer-de.pixelpark.net/services.htm [L,R=301]
+
+
+site::profile::apache::vhosts:
+  pfizer-berlin:
+    servername: redaktion.pfizer.berlin
+    docroot: '/srv/www/mspfizerberlin'
+    #ip: 217.66.55.99
+    port: 80
+    serveraliases:
+      - redaktion-pfizer-berlin.pixelpark.net
+      # Upgrade
+
+  ich-beim-arzt:
+    servername: redaktion.ich-beim-arzt.de
+    docroot: '/srv/www/www.ich-beim-arzt.de'
+    #ip: 217.66.55.99
+    port: 80
+    serveraliases:
+      - redaktion.ichbeimarzt.de
+      - redaktion.ich-beim-arzt.de
+      - redaktion.ich-beim-arzt-de.pixelpark.net
+      # Upgrade
+
+  lungenkrebs-testen-at:
+    servername: redaktion.lungenkrebs-testen.at
+    docroot: '/srv/www/www.lungenkrebs-testen.at'
+    #ip: 217.66.55.99
+    port: 80
+    serveraliases:
+      - redaktion-lungenkrebs-testen-at.pixelpark.net
+      # Upgrade
+
+  lungenkrebs-testen-de:
+    servername: redaktion.lungenkrebs-testen.de
+    docroot: '/srv/www/www.lungenkrebs-testen.de'
+    #ip: 217.66.55.99
+    port: 80
+    serveraliases:
+      - redaktion-lungenkrebs-testen-de.pixelpark.net
+      # Upgrade
+  lungenkrebs-testen-de_ssl:
+    servername: redaktion.lungenkrebs-testen.de
+    docroot: '/srv/www/www.lungenkrebs-testen.de'
+    #ip: 217.66.55.99
+    port: 443
+    ssl: true
+    ssl_cert: /etc/pki/tls/certs/wildcard.pixelpark.net-cert.pem
+    ssl_chain: /etc/pki/tls/certs/wildcard.pixelpark.net-cert.pem
+    ssl_key: /etc/pki/tls/private/wildcard.pixelpark.net-key.pem
+    serveraliases:
+      - redaktion-lungenkrebs-testen-de.pixelpark.net
+      # Upgrade
+
+  impf2ab60:
+    servername: redaktion-impf2ab60-de.pixelpark.net
+    docroot: '/srv/www/www.impf2ab60.de'
+    #ip: 217.66.55.99
+    port: 80
+    serveraliases:
+      - redaktion-impfzweiab60-de.pixelpark.net
+      - redaktion-impf2absechzig-de.pixelpark.net
+      - redaktion-impfzweiabsechzig-de.pixelpark.net
+      - redaktion-impf-zwei-ab-sechzig-de.pixelpark.net
+      - redaktion-impf-2-ab-60-de.pixelpark.net
+      - redaktion-impf2-ab-60-de.pixelpark.net
+      - redaktion-impf2-de.pixelpark.net
+    rewrites:
+      - alias:
+        comment: 'Alle Aliase auf Servername'
+        rewrite_cond:
+          - '%%{ich-trickse}{HTTP_HOST} ^impf2ab60.de$'
+          - '%%{ich-trickse}{HTTP_HOST} ^impfzweiab60.de$'
+          - '%%{ich-trickse}{HTTP_HOST} ^impf2absechzig.de$'
+          - '%%{ich-trickse}{HTTP_HOST} ^impfzweiabsechzig.de$'
+          - '%%{ich-trickse}{HTTP_HOST} ^impf-zwei-ab-sechzig.de$'
+          - '%%{ich-trickse}{HTTP_HOST} ^impf-2-ab-60.de$'
+          - '%%{ich-trickse}{HTTP_HOST} ^impf2-ab-60.de$'
+          - '%%{ich-trickse}{HTTP_HOST} ^impf2.de$'
+          - '%%{ich-trickse}{HTTP_HOST} ^redaktion.impfzweiab60.de$'
+          - '%%{ich-trickse}{HTTP_HOST} ^redaktion.impf2absechzig.de$'
+          - '%%{ich-trickse}{HTTP_HOST} ^redaktion.impfzweiabsechzig.de$'
+          - '%%{ich-trickse}{HTTP_HOST} ^redaktion.impf-zwei-ab-sechzig.de$'
+          - '%%{ich-trickse}{HTTP_HOST} ^redaktion.impf-2-ab-60.de$'
+          - '%%{ich-trickse}{HTTP_HOST} ^redaktion.impf2-ab-60.de$'
+          - '%%{ich-trickse}{HTTP_HOST} ^redaktion.impf2.de$'
+        rewrite_rule:
+          - ^(.*)$ http://redaktion.impf2ab60.de$1 [R=301,L]
+
+  wegweiser-rheuma-psoriasis:
+    servername: redaktion.wegweiser-rheuma-psoriasis.de
+    docroot: '/srv/www/www.wegweiser-rheuma-psoriasis.de/current'
+    manage_docroot: false
+    #ip: 217.66.55.99
+    port: 80
+    serveraliases:
+      - wegweiser-rheuma-psoriasis.de
+      # Upgrade
+      - redaktion-wegweiser-rheuma-psoriasis-de.pixelpark.net
+    rewrites:
+      - redaktion:
+        comment: 'Alles nach redaktion'
+        rewrite_cond:
+          - '%%{ich-trickse}{HTTP_HOST} ^wegweiser-rheuma-psoriasis.de$'
+        rewrite_rule:
+          - ^(.*)$ https://redaktion.wegweiser-rheuma-psoriasis.de$1 [R=301,L]
+      - rheuma:
+        comment: 'Redirect to rheuma domain'
+        rewrite_cond:
+          - '%%{ich-trickse}{REQUEST_URI} ^/rheuma.html$'
+        rewrite_rule:
+          - ^/rheuma.html$ https://redaktion.wegweiser-rheuma.de [R=301,L]
+      - psoriasis:
+        comment: 'Redirect to psoriasis domain'
+        rewrite_cond:
+          - '%%{ich-trickse}{REQUEST_URI} ^/psoriasis.html$'
+        rewrite_rule:
+          - ^/psoriasis.html$ https://redaktion.wegweiser-psoriasis.de [R=301,L]
+  wegweiser-rheuma-psoriasis_ssl:
+    servername: redaktion.wegweiser-rheuma-psoriasis.de
+    docroot: '/srv/www/www.wegweiser-rheuma-psoriasis.de/current'
+    #ip: 217.66.55.99
+    port: 443
+    ssl: true
+    #ssl_cert: /etc/pki/tls/certs/www.pfizer.de-cert.pem.san
+    #ssl_chain: /etc/pki/tls/certs/www.pfizer.de-cert.pem.san
+    #ssl_key: /etc/pki/tls/private/www.pfizer.de-key.pem.san
+    ssl_cert: /etc/pki/tls/certs/wildcard.pixelpark.net-cert.pem
+    ssl_chain: /etc/pki/tls/certs/wildcard.pixelpark.net-cert.pem
+    ssl_key: /etc/pki/tls/private/wildcard.pixelpark.net-key.pem
+    serveraliases:
+      - wegweiser-rheuma-psoriasis.de
+      # Upgrade
+      - redaktion-wegweiser-rheuma-psoriasis-de.pixelpark.net
+    rewrites:
+      - redaktion:
+        comment: 'Alles nach redaktion'
+        rewrite_cond:
+          - '%%{ich-trickse}{HTTP_HOST} ^wegweiser-rheuma-psoriasis.de$'
+        rewrite_rule:
+          - ^(.*)$ https://redaktion.wegweiser-rheuma-psoriasis.de$1 [R=301,L]
+      - rheuma:
+        comment: 'Redirect to rheuma domain'
+        rewrite_cond:
+          - '%%{ich-trickse}{REQUEST_URI} ^/rheuma.html$'
+        rewrite_rule:
+          - ^/rheuma.html$ https://redaktion.wegweiser-rheuma.de [R=301,L]
+      - psoriasis:
+        comment: 'Redirect to psoriasis domain'
+        rewrite_cond:
+          - '%%{ich-trickse}{REQUEST_URI} ^/psoriasis.html$'
+        rewrite_rule:
+          - ^/psoriasis.html$ https://redaktion.wegweiser-psoriasis.de [R=301,L]
+
+  wegweiser-rheuma:
+    servername: redaktion.wegweiser-rheuma.de
+    docroot: '/srv/www/www.wegweiser-rheuma-psoriasis.de/current'
+    #ip: 217.66.55.99
+    port: 80
+    directoryindex: rheuma.html
+    serveraliases:
+      - wegweiser-rheuma.de
+      # Upgrade
+      - redaktion-wegweiser-rheuma-de.pixelpark.net
+    rewrites:
+      - redaktion:
+        comment: 'Alles nach redaktion'
+        rewrite_cond:
+          - '%%{ich-trickse}{HTTP_HOST} ^wegweiser-rheuma.de$'
+        rewrite_rule:
+          - ^(.*)$ http://redaktion.wegweiser-rheuma.de$1 [R=301,L]
+      - rheuma:
+        comment: 'Redirect to rheuma domain'
+        rewrite_cond:
+          - '%%{ich-trickse}{REQUEST_URI} ^/rheuma.html$'
+        rewrite_rule:
+          - ^/rheuma.html$ http://redaktion.wegweiser-rheuma.de [R=301,L]
+  wegweiser-rheuma_ssl:
+    servername: redaktion.wegweiser-rheuma.de
+    docroot: '/srv/www/www.wegweiser-rheuma-psoriasis.de/current'
+    #ip: 217.66.55.99
+    port: 443
+    ssl: true
+    #ssl_cert: /etc/pki/tls/certs/www.pfizer.de-cert.pem.san
+    #ssl_chain: /etc/pki/tls/certs/www.pfizer.de-cert.pem.san
+    #ssl_key: /etc/pki/tls/private/www.pfizer.de-key.pem.san
+    ssl_cert: /etc/pki/tls/certs/wildcard.pixelpark.net-cert.pem
+    ssl_chain: /etc/pki/tls/certs/wildcard.pixelpark.net-cert.pem
+    ssl_key: /etc/pki/tls/private/wildcard.pixelpark.net-key.pem
+    directoryindex: rheuma.html
+    serveraliases:
+      - wegweiser-rheuma.de
+      # Upgrade
+      - redaktion-wegweiser-rheuma-de.pixelpark.net
+    rewrites:
+      - redaktion:
+        comment: 'Alles nach redaktion'
+        rewrite_cond:
+          - '%%{ich-trickse}{HTTP_HOST} ^wegweiser-rheuma.de$'
+        rewrite_rule:
+          - ^(.*)$ https://redaktion.wegweiser-rheuma.de$1 [R=301,L]
+      - rheuma:
+        comment: 'Redirect to rheuma domain'
+        rewrite_cond:
+          - '%%{ich-trickse}{REQUEST_URI} ^/rheuma.html$'
+        rewrite_rule:
+          - ^/rheuma.html$ https://redaktion.wegweiser-rheuma.de [R=301,L]
+
+  wegweiser-psoriasis:
+    servername: redaktion.wegweiser-psoriasis.de
+    docroot: '/srv/www/www.wegweiser-rheuma-psoriasis.de/current'
+    #ip: 217.66.55.99
+    port: 80
+    directoryindex: psoriasis.html
+    serveraliases:
+      - wegweiser-psoriasis.de
+      # Upgrade
+      - redaktion-wegweiser-psoriasis-de.pixelpark.net
+    rewrites:
+      - redaktion:
+        comment: 'Alles nach redaktion'
+        rewrite_cond:
+          - '%%{ich-trickse}{HTTP_HOST} ^wegweiser-psoriasis.de$'
+        rewrite_rule:
+          - ^(.*)$ http://redaktion.wegweiser-psoriasis.de$1 [R=301,L]
+      - rheuma:
+        comment: 'Redirect to rheuma domain'
+        rewrite_cond:
+          - '%%{ich-trickse}{REQUEST_URI} ^/psoriasis.html'
+        rewrite_rule:
+          - ^/psoriasis.html(.*)$ http://redaktion.wegweiser-psoriasis.de$1 [R=301,L]
+  wegweiser-psoriasis_ssl:
+    servername: redaktion.wegweiser-psoriasis.de
+    docroot: '/srv/www/www.wegweiser-rheuma-psoriasis.de/current'
+    #ip: 217.66.55.99
+    port: 443
+    ssl: true
+    #ssl_cert: /etc/pki/tls/certs/www.pfizer.de-cert.pem.san
+    #ssl_chain: /etc/pki/tls/certs/www.pfizer.de-cert.pem.san
+    #ssl_key: /etc/pki/tls/private/www.pfizer.de-key.pem.san
+    ssl_cert: /etc/pki/tls/certs/wildcard.pixelpark.net-cert.pem
+    ssl_chain: /etc/pki/tls/certs/wildcard.pixelpark.net-cert.pem
+    ssl_key: /etc/pki/tls/private/wildcard.pixelpark.net-key.pem
+    directoryindex: psoriasis.html
+    serveraliases:
+      - wegweiser-psoriasis.de
+      # Upgrade
+      - redaktion-wegweiser-psoriasis-de.pixelpark.net
+    rewrites:
+      - redaktion:
+        comment: 'Alles nach redaktion'
+        rewrite_cond:
+          - '%%{ich-trickse}{HTTP_HOST} ^wegweiser-psoriasis.de$'
+        rewrite_rule:
+          - ^(.*)$ http://redaktion.wegweiser-psoriasis.de$1 [R=301,L]
+      - rheuma:
+        comment: 'Redirect to rheuma domain'
+        rewrite_cond:
+          - '%%{ich-trickse}{REQUEST_URI} ^/psoriasis.html'
+        rewrite_rule:
+          - ^/psoriasis.html(.*)$ http://redaktion.wegweiser-psoriasis.de$1 [R=301,L]    
+  static.pfizer:
+    servername: static.pfizer.de
+    docroot: '/srv/www/static.pfizer.de'
+    #ip: 217.66.55.99
+    port: 80
+    serveraliases:
+      - redaktion-static-pfizer-de.pixelpark.net
diff --git a/customer/pixelpark/achilles.pixelpark.com.yaml b/customer/pixelpark/achilles.pixelpark.com.yaml
new file mode 100644 (file)
index 0000000..7fad204
--- /dev/null
@@ -0,0 +1,3 @@
+---
+# time01.pixelpark.com
+site::profile::ntp::disable_ntp: true
\ No newline at end of file
diff --git a/customer/pixelpark/app01.sparkasse.local.yaml b/customer/pixelpark/app01.sparkasse.local.yaml
new file mode 100644 (file)
index 0000000..3295dda
--- /dev/null
@@ -0,0 +1,4 @@
+---
+site::additional_classes:
+  - repo
+
diff --git a/customer/pixelpark/app02.sparkasse.local.yaml b/customer/pixelpark/app02.sparkasse.local.yaml
new file mode 100644 (file)
index 0000000..3295dda
--- /dev/null
@@ -0,0 +1,4 @@
+---
+site::additional_classes:
+  - repo
+
diff --git a/customer/pixelpark/aurora.pixelpark.net.yaml b/customer/pixelpark/aurora.pixelpark.net.yaml
new file mode 100644 (file)
index 0000000..b0a0efb
--- /dev/null
@@ -0,0 +1,8 @@
+---
+site::additional_classes:
+  - accounts
+
+accounts::users:
+  ivan.prikhodko:
+    apply: true
+    sudo: true
\ No newline at end of file
diff --git a/customer/pixelpark/bat.pixelpark.net.yaml b/customer/pixelpark/bat.pixelpark.net.yaml
new file mode 100644 (file)
index 0000000..4c3c2b5
--- /dev/null
@@ -0,0 +1,2 @@
+---
+site::role: base
diff --git a/customer/pixelpark/bauhaus.pixelpark.com.yaml b/customer/pixelpark/bauhaus.pixelpark.com.yaml
new file mode 100644 (file)
index 0000000..566974f
--- /dev/null
@@ -0,0 +1,168 @@
+---
+site::role: base
+site::additional_classes:
+  - site::role::build_server
+site::additional_packages:
+  libpng-devel: {}
+
+accounts::users:
+  thomas.bussmeyer:
+    apply: true
+    sudo: true
+  dennis.klein:
+    apply: true
+  florian.schade:
+    apply: true
+    sudo: true
+  dominic.radtke:
+    apply: true
+    sudo: true
+  ivan.prikhodko:
+    apply: true
+    sudo: true
+  samuel.bufe:
+    apply: true
+    sudo: true
+  m_scholze:
+    apply: true
+    sudo: true
+
+mysql::server::override_options:
+  mysqld:
+    bind-address: '0.0.0.0'
+site::profile::mysql_server::databases:
+  sonar:
+    user: sonar
+    password: ENC[PKCS7,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]
+
+php::phpunit: true
+php::dev: true
+
+php::fpm::pools:
+  www:
+    listen: 127.0.0.1:9100
+
+nodejs::npm_package_ensure: present
+nodejs::npm_package_name: nodejs-npm
+
+#
+# other nginx vhost
+#
+nginx::nginx_vhosts:
+  basebox:
+    server_name:
+      - basebox.pixelpark.com
+    www_root: /var/lib/basebox
+    ssl: true
+    ssl_cert: /etc/pki/tls/certs/wildcard.pixelpark.com-cert.pem
+    ssl_key: /etc/pki/tls/private/wildcard.pixelpark.com-key.pem
+    rewrite_to_https: true
+#
+# Nexus
+#
+site::profile::infrastructure::nexus::nginx_vhosts:
+  nexus:
+    server_name:
+      - nexus.pixelpark.com
+    proxy: http://localhost:8081
+    proxy_set_header: 
+      - 'X-Forwarded-Proto "https"'
+      - 'X-Forwarded-For $proxy_add_x_forwarded_for'
+      - 'X-Real-IP $remote_addr'
+      - 'Host $host'
+    listen_ip: 217.66.55.70
+    client_max_body_size: 2G
+    ssl: true
+    ssl_cert: /etc/pki/tls/certs/wildcard.pixelpark.com-cert.pem
+    ssl_key: /etc/pki/tls/private/wildcard.pixelpark.com-key.pem
+    rewrite_to_https: true
+site::profile::infrastructure::nexus::version: 2.11.4
+
+#
+# Sonarqube
+#
+
+site::profile::infrastructure::sonarqube::sonar_db_password: ENC[PKCS7,MIIBiQYJKoZIhvcNAQcDoIIBejCCAXYCAQAxggEhMIIBHQIBADAFMAACAQEwDQYJKoZIhvcNAQEBBQAEggEAmxiuE4IcXIShbBhD+1prhPkbrz3m2AEEFxOiUsGpOvjdDZ9C3Dp4ijEUcsoPEBB5ylLsIcVVWrcH7+5r6wvxBwtARRaq6Qd/eAFAbqRGkXv4W7jcAi+s4wMOAr5hjiDPPaavAv/ltMgRfyEvnkiUUOVD7uCB9MWwO07OQmZMSpz5BYsQfYZWsv767cMWWO/jChqR/3JE/h0uQci0eXQty1DZ3ciXTYIeB3SkglzbAueRx5kTnkQAk5+Iq8tKRb5P0TM8aLz4DAmyiDRZ50X0sdB6rafNsueO/sVNFDuyE4zNXNRczbFGAudu32GKuDQ2SSG6JJAVbUS0hLhg13uikDBMBgkqhkiG9w0BBwEwHQYJYIZIAWUDBAEqBBA9mYErV5hqc0067EBdMIASgCCMUUdgXYQ5HR+soH3A1aLZiphrVXyRUV9OK7vs+lhNSQ==]
+sonarqube::download_url: 'https://sonarsource.bintray.com/Distribution/sonarqube/'
+site::profile::infrastructure::sonarqube::version: 4.5.6
+site::profile::infrastructure::sonarqube::nginx_vhosts:
+  sonar:
+    server_name:
+      - sonar.pixelpark.com
+    proxy: http://localhost:9000
+    proxy_set_header:
+      - 'X-Forwarded-Proto "https"'
+      - 'X-Forwarded-For $proxy_add_x_forwarded_for'
+      - 'X-Real-IP $remote_addr'
+      - 'Host $host'
+    listen_ip: 217.66.55.71
+    ssl: true
+    ssl_cert: /etc/pki/tls/certs/wildcard.pixelpark.com-cert.pem
+    ssl_key: /etc/pki/tls/private/wildcard.pixelpark.com-key.pem
+    rewrite_to_https: true
+
+site::profile::infrastructure::sonarqube::plugins:
+  sonar-php-plugin:
+    version: 2.6
+    groupid: 'org.codehaus.sonar-plugins.php'
+  sonar-css-plugin:
+    version: 1.5
+    groupid: 'org.codehaus.sonar-plugins.css'
+  sonar-web-plugin:
+    version: 2.4
+    groupid: 'org.codehaus.sonar-plugins'
+  sonar-javascript-plugin:
+    version: 2.8
+    groupid: 'org.codehaus.sonar-plugins.javascript'
+  sonar-build-breaker-plugin:
+    version: 1.1
+    groupid: 'org.codehaus.sonar-plugins'
+
+#
+# Jenkins
+#
+site::profile::infrastructure::jenkins::nginx_vhosts:
+  jenkins:
+    server_name:
+      - jenkins.pixelpark.com
+    proxy: http://localhost:8080
+    proxy_set_header:
+      - 'X-Forwarded-Proto "https"'
+      - 'X-Forwarded-For $proxy_add_x_forwarded_for'
+      - 'X-Real-IP $remote_addr'
+      - 'Host $host'
+    listen_ip: 217.66.55.72
+    ssl: true
+    ssl_cert: /etc/pki/tls/certs/wildcard.pixelpark.com-cert.pem
+    ssl_key: /etc/pki/tls/private/wildcard.pixelpark.com-key.pem
+    rewrite_to_https: true
+
+site::profile::infrastructure::jenkins::jobs:
+  bmas-esf-0-Watcher:
+    scm_url: git@git.pixelpark.com:bmas/esf.git
+  mbvd-wkz-0-Watcher:
+    scm_url: git@git.pixelpark.com:mbvd/wkz-infrastructure.git
+  mbvd-mbvd_retailportal-0-Watcher:
+    scm_url: git@git.pixelpark.com:mbvd/mbvd_retailportal-infrastructure.git
+  pfizer-bi-portal-0-Watcher:
+    scm_url: git@git.pixelpark.com:pfizer/bi-portal-infrastructure.git
+  pfizer-pfizer-de-0-Watcher:
+    scm_url: git@git.pixelpark.com:pfizer/pfizer-de-infrastructure.git
+  lbs-lbs-de-0-Watcher:
+    scm_url: git@git.pixelpark.com:lbs/lbs_infrastructure.git
+  spd-spd-de-0-Watcher:
+    scm_url: git@git.pixelpark.com:spd/spd-de-infrastructure.git
+  mbvd-service-and-smile-0-Watcher:
+    scm_url: git@git.pixelpark.com:mbvd/service-and-smile-infrastructure.git
+  talos-0-Watcher:
+    scm_url: git@git.pixelpark.com:talos/talos-infrastructure.git
+  airport-berlin-cdm-web-app-0-Watcher:
+    scm_url: git@git.pixelpark.com:airport-berlin/cdm-web-app-infrastructure.git
+  airport-berlin-airport-web-app-0-Watcher:
+    scm_url: git@git.pixelpark.com:airport-berlin/airport-web-app-infrastructure.git
+# muss noch von der Entwicklung geupdatet werden Ticket: https://jira.pixelpark.com/jira/browse/BMASSGBZWEI-47
+#  bmas-bmas-sgb2-bca-extranet-0-Watcher:
+#    scm_url: git@git.pixelpark.com:bmas/bmas-sgb2-bca-extranet-infrastructure.git
+  bmas-bmas-sgb2-gf-extranet-0-Watcher:
+    scm_url: git@git.pixelpark.com:bmas/bmas-sgb2-gf-extranet-infrastructure.git
+  
diff --git a/customer/pixelpark/bb-mercedes-benz-de.pixelpark.net.yaml b/customer/pixelpark/bb-mercedes-benz-de.pixelpark.net.yaml
new file mode 100644 (file)
index 0000000..4c3c2b5
--- /dev/null
@@ -0,0 +1,2 @@
+---
+site::role: base
diff --git a/customer/pixelpark/bfs-gadget-mercedes-benz-de.pixelpark.net.yaml b/customer/pixelpark/bfs-gadget-mercedes-benz-de.pixelpark.net.yaml
new file mode 100644 (file)
index 0000000..af95ee4
--- /dev/null
@@ -0,0 +1,4 @@
+---
+site::additional_classes:
+  - accounts
+
diff --git a/customer/pixelpark/bilder-emmt-daimler-com.pixelpark.net.yaml b/customer/pixelpark/bilder-emmt-daimler-com.pixelpark.net.yaml
new file mode 100644 (file)
index 0000000..33099ca
--- /dev/null
@@ -0,0 +1,5 @@
+---
+site::additional_classes:
+  - repo
+  - accounts
+
diff --git a/customer/pixelpark/classicpartner-suche-mercedes-benz-de.pixelpark.net.yaml b/customer/pixelpark/classicpartner-suche-mercedes-benz-de.pixelpark.net.yaml
new file mode 100644 (file)
index 0000000..4c3c2b5
--- /dev/null
@@ -0,0 +1,2 @@
+---
+site::role: base
diff --git a/customer/pixelpark/confluence01.pixelpark.net.yaml b/customer/pixelpark/confluence01.pixelpark.net.yaml
new file mode 100644 (file)
index 0000000..3b9eef2
--- /dev/null
@@ -0,0 +1,11 @@
+---
+site::role: base
+httpd::webserver:
+  confluence01.pixelpark.net:
+    modules:
+      - proxy_ajp
+    listens:
+      - 0.0.0.0:80
+      - 0.0.0.0:443
+    extendedStatus: true
+    worker: true
diff --git a/customer/pixelpark/cow.pixelpark.net.yaml b/customer/pixelpark/cow.pixelpark.net.yaml
new file mode 100644 (file)
index 0000000..f8e79e1
--- /dev/null
@@ -0,0 +1,9 @@
+---
+site::additional_classes:
+  - repo
+  - accounts
+
+accounts::users:
+  ivan.prikhodko:
+    apply: true
+    sudo: true
\ No newline at end of file
diff --git a/customer/pixelpark/deploy.pixelpark.com.yaml b/customer/pixelpark/deploy.pixelpark.com.yaml
new file mode 100644 (file)
index 0000000..5f98cf5
--- /dev/null
@@ -0,0 +1,17 @@
+---
+site::role: base
+site::additional_classes:
+  - logstash
+
+python::dev: true
+site::profile::ansible::optional_packages:
+  openssl-devel:
+    ensure: present
+
+logstash::generic_resource:
+  ansible:
+    resource: file
+    order: 10 # Input
+    parameters:
+      path: '/var/log/ansible/*.log'
+      type: ansible-log
diff --git a/customer/pixelpark/design-berlin.pixelpark.net.yaml b/customer/pixelpark/design-berlin.pixelpark.net.yaml
new file mode 100644 (file)
index 0000000..efc76cd
--- /dev/null
@@ -0,0 +1,47 @@
+---
+site::role: base
+site::additional_classes:
+  - site::profile::apache_php
+
+accounts::users:
+  sftp1:
+    apply: true
+
+repo::remi_php55: true
+php::settings:
+  Date/date.timezone: Europe/Berlin
+  PHP/expose_php: 'Off'
+
+accounts::users:
+  sftp1:
+    apply: true
+
+site::profile::apache::pp_vhosts:
+  design-berlin:
+    servername: design-berlin.pixelpark.net
+    docroot: '/srv/www/design-berlin.pixelpark.net'
+    serveraliases:
+      - www.design-berlin.pixelpark.net
+    port: 80
+    custom_fragment: 'ProxyPassMatch ^/(.*\.php(/.*)?)$ fcgi://127.0.0.1:9000/srv/www/design-berlin.pixelpark.net/$1'
+    ssl_cert: '/etc/pki/tls/certs/wildcard.pixelpark.net-cert.pem'
+    ssl_chain: '/etc/pki/tls/certs/wildcard.pixelpark.net-cert.pem'
+    ssl_key: '/etc/pki/tls/private/wildcard.pixelpark.net-key.pem'
+    custom_fragment: 'ProxyPassMatch ^/(.*\.php(/.*)?)$ fcgi://127.0.0.1:9000/srv/www/design-berlin.pixelpark.net/$1'
+    directories:
+      - directory1:
+        provider: directory
+        path: '/srv/www/design-berlin.pixelpark.net'
+        options:
+          - Indexes
+          - FollowSymLinks
+          - MultiViews
+      - location1:
+        provider: location
+        path: '/'
+        auth_type: Digest
+        auth_name: Limitierung
+        auth_digest_provider: file
+        auth_digest_algorithm: MD5  
+        auth_user_file: '/etc/httpd/htdigest'
+        auth_require: 'valid-user'
\ No newline at end of file
diff --git a/customer/pixelpark/dev-app01.sparkasse.local.yaml b/customer/pixelpark/dev-app01.sparkasse.local.yaml
new file mode 100644 (file)
index 0000000..3295dda
--- /dev/null
@@ -0,0 +1,4 @@
+---
+site::additional_classes:
+  - repo
+
diff --git a/customer/pixelpark/dev-app02.sparkasse.local.yaml b/customer/pixelpark/dev-app02.sparkasse.local.yaml
new file mode 100644 (file)
index 0000000..3295dda
--- /dev/null
@@ -0,0 +1,4 @@
+---
+site::additional_classes:
+  - repo
+
diff --git a/customer/pixelpark/dev-bmwi.pixelpark.net.yaml b/customer/pixelpark/dev-bmwi.pixelpark.net.yaml
new file mode 100644 (file)
index 0000000..af95ee4
--- /dev/null
@@ -0,0 +1,4 @@
+---
+site::additional_classes:
+  - accounts
+
diff --git a/customer/pixelpark/dev-hy01-demo.pixelpark.net.yaml b/customer/pixelpark/dev-hy01-demo.pixelpark.net.yaml
new file mode 100644 (file)
index 0000000..31dd860
--- /dev/null
@@ -0,0 +1,2 @@
+---
+site::role: base
\ No newline at end of file
diff --git a/customer/pixelpark/dev-monitoring.pixelpark.com.yaml b/customer/pixelpark/dev-monitoring.pixelpark.com.yaml
new file mode 100644 (file)
index 0000000..29ef3bd
--- /dev/null
@@ -0,0 +1,3 @@
+---
+site::role: base
+repo::remi_php56: true
diff --git a/customer/pixelpark/dev-web01-mbvd.pixelpark.net.yaml b/customer/pixelpark/dev-web01-mbvd.pixelpark.net.yaml
new file mode 100644 (file)
index 0000000..4c3c2b5
--- /dev/null
@@ -0,0 +1,2 @@
+---
+site::role: base
diff --git a/customer/pixelpark/dev-web02.sparkasse.local.yaml b/customer/pixelpark/dev-web02.sparkasse.local.yaml
new file mode 100644 (file)
index 0000000..3295dda
--- /dev/null
@@ -0,0 +1,4 @@
+---
+site::additional_classes:
+  - repo
+
diff --git a/customer/pixelpark/development.yaml b/customer/pixelpark/development.yaml
new file mode 100644 (file)
index 0000000..61a7bf6
--- /dev/null
@@ -0,0 +1,5 @@
+---
+accounts::users:
+  michael.krause:
+    apply: true
+    sudo: true
diff --git a/customer/pixelpark/dnsmaster01.pixelpark.com.yaml b/customer/pixelpark/dnsmaster01.pixelpark.com.yaml
new file mode 100644 (file)
index 0000000..dc1aa7e
--- /dev/null
@@ -0,0 +1,11 @@
+---
+site::role: base
+site::additional_classes:
+  - powerdns
+  - powerdns::backend::gmysql
+
+
+powerdns::backend::gmysql::host: mysql-pp07.pixelpark.com
+powerdns::backend::gmysql::user: pdns
+powerdns::backend::gmysql::password: ENC[PKCS7,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]
+powerdns::backend::gmysql::dbname: pdns
diff --git a/customer/pixelpark/dnsmaster02.pixelpark.com.yaml b/customer/pixelpark/dnsmaster02.pixelpark.com.yaml
new file mode 100644 (file)
index 0000000..96d797e
--- /dev/null
@@ -0,0 +1,11 @@
+---
+site::role: base
+site::additional_classes:
+  - powerdns
+  - powerdns::backend::gmysql
+
+
+powerdns::backend::gmysql::host: mysql-pp07.pixelpark.com
+powerdns::backend::gmysql::user: pdns
+powerdns::backend::gmysql::password: ENC[PKCS7,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]
+powerdns::backend::gmysql::dbname: pdns_ext
diff --git a/customer/pixelpark/dnsmaster03.pixelpark.com.yaml b/customer/pixelpark/dnsmaster03.pixelpark.com.yaml
new file mode 100644 (file)
index 0000000..4c3c2b5
--- /dev/null
@@ -0,0 +1,2 @@
+---
+site::role: base
diff --git a/customer/pixelpark/ekhi.pixelpark.net.yaml b/customer/pixelpark/ekhi.pixelpark.net.yaml
new file mode 100644 (file)
index 0000000..36a6c12
--- /dev/null
@@ -0,0 +1,8 @@
+---
+site::additional_classes:
+  - xymon
+
+xymon::modules:
+  - 'net2'
+  - 'ipmi'
+  - 'iostat'
diff --git a/customer/pixelpark/extranet01.pixelpark.net.yaml b/customer/pixelpark/extranet01.pixelpark.net.yaml
new file mode 100644 (file)
index 0000000..4c3c2b5
--- /dev/null
@@ -0,0 +1,2 @@
+---
+site::role: base
diff --git a/customer/pixelpark/foreman01.pixelpark.com.yaml b/customer/pixelpark/foreman01.pixelpark.com.yaml
new file mode 100644 (file)
index 0000000..40e229a
--- /dev/null
@@ -0,0 +1,6 @@
+---
+site::role: base
+accounts::users:
+  samuel.bufe:
+    apply: true
+    sudo: true
\ No newline at end of file
diff --git a/customer/pixelpark/foreman02.pixelpark.com.yaml b/customer/pixelpark/foreman02.pixelpark.com.yaml
new file mode 100644 (file)
index 0000000..de7fcf0
--- /dev/null
@@ -0,0 +1,9 @@
+---
+site::role: base
+site::additional_classes:
+  - python
+  - site::profile::apache
+
+python::python_pips:
+  puppetboard:
+    ensure: 0.0.5
diff --git a/customer/pixelpark/fotoficient-dm03-de.pixelpark.net.yaml b/customer/pixelpark/fotoficient-dm03-de.pixelpark.net.yaml
new file mode 100644 (file)
index 0000000..4c3c2b5
--- /dev/null
@@ -0,0 +1,2 @@
+---
+site::role: base
diff --git a/customer/pixelpark/git.pixelpark.com.yaml b/customer/pixelpark/git.pixelpark.com.yaml
new file mode 100644 (file)
index 0000000..b26cfa9
--- /dev/null
@@ -0,0 +1,57 @@
+---
+site::role: base
+site::additional_classes:
+  - nginx
+  - gitlab
+
+gitlab::git_user: git
+gitlab::git_home: '/srv/git'
+gitlab::git_email: webmaster@pixelpark.com
+gitlab::git_comment: GitLab
+gitlab::gitlab_sources: https://github.com/gitlabhq/gitlabhq.git
+gitlab::gitlab_branch: '7-11-stable'
+gitlab::gitlabshell_sources: https://github.com/gitlabhq/gitlab-shell.git
+gitlab::gitlabshell_branch: 'v2.6.3'
+gitlab::proxy_name: 'gitlab'
+gitlab::gitlab_dbtype: pgsql
+gitlab::gitlab_dbname: gitlab
+gitlab::gitlab_dbuser: gitlab
+gitlab::gitlab_dbpwd: ENC[PKCS7,MIIBiQYJKoZIhvcNAQcDoIIBejCCAXYCAQAxggEhMIIBHQIBADAFMAACAQEwDQYJKoZIhvcNAQEBBQAEggEAo1CBi/Y6gKL3BbCQLxExZK4cxTayybguJWyPcmvhKBlDw5NCe2lW0jHn/kqct8jVTG+0cMs9XTSwLa0Xi+RunljKadqjMso0XYDaHGLvyDK7MBNABvCC++/iqz74E9YYea8aFROrN2meZMLuk2vs59cmX9MlyBEBrOXOs7LjYOxi/R9OZJBFKWMJAYEdb8w/Q+aAHLyaxocbuFU31226N7GF54Ko01K5MSWCy1mAXvPh6PfBNOxzm/ibJmDI6KV60xNUYug+9sLWovSDfKz5mnTXNRYzuGlMwD3jAGbELvQ9Nc95CB5fmnHLXaCndIK4j+tKN/z/BVt1xHd6lZNhRzBMBgkqhkiG9w0BBwEwHQYJYIZIAWUDBAEqBBBjHqVRXvnvcJFWgEMKBVqWgCDaxmesLbHyk/nkKWPw3NaM2kFXe00hHIpaUMd4ORKsqw==]
+gitlab::gitlab_dbhost: psql-pp01.pixelpark.net
+gitlab::gitlab_dbport: '5432'
+gitlab::gitlab_domain: 'git.pixelpark.com'
+gitlab::gitlab_domain_alias: false
+gitlab::gitlab_repodir: '/srv/git'
+gitlab::gitlab_satellitedir: '/srv/git'
+gitlab::gitlab_backup: false # really?
+gitlab::gitlab_backup_path: 'tmp/backups' # (relative to $git_home)
+gitlab::gitlab_backup_keep_time: 0
+#gitlab::gitlab_backup_time: fqdn_rand(5)+1
+gitlab::gitlab_backup_postscript: false
+gitlab::gitlab_ssl: true
+gitlab::gitlab_ssl_cert: '/etc/pki/tls/certs/wildcard.pixelpark.com-cert.pem'
+gitlab::gitlab_ssl_key: '/etc/pki/tls/private/wildcard.pixelpark.com-key.pem'
+gitlab::gitlab_ssl_self_signed: false
+gitlab::gitlab_projects: '10'
+gitlab::gitlab_username_change: true
+gitlab::gitlab_unicorn_listen: 127.0.0.1
+gitlab::gitlab_unicorn_port: '8080'
+gitlab::gitlab_unicorn_worker: '2'
+gitlab::gitlab_bundler_flags: '--deployment'
+gitlab::gitlab_manage_rbenv: false
+gitlab::gitlab_ruby_version: '2.0.0'
+#gitlab::exec_path: '${git_home}/.rbenv/shims:/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin'
+gitlab::gitlab_bundler_jobs: '1'
+gitlab::gitlab_ensure_postfix: true
+gitlab::gitlab_ensure_curl: true
+gitlab::ldap_enabled: true
+gitlab::ldap_host: 'ldap.pixelpark.com'
+gitlab::ldap_base: 'ou=People,o=Pixelpark,o=isp'
+gitlab::ldap_uid: 'uid'
+gitlab::ldap_port: '636'
+gitlab::ldap_method: ssl
+gitlab::ldap_bind_dn: 'uid=wwwadm,ou=wwwserver,ou=applications,o=pixelpark,o=isp'
+gitlab::ldap_bind_password: ENC[PKCS7,MIIBeQYJKoZIhvcNAQcDoIIBajCCAWYCAQAxggEhMIIBHQIBADAFMAACAQEwDQYJKoZIhvcNAQEBBQAEggEAE1PZB6R9r8U7IStlVOFk6WtD0YnmdaVMshSzwzA5tCttwxF1Fne4UvGUvG8IJTagcQ+L+87xwvJ4cW2lGdkGdfqMTeofhEqEW3GxuprVusDtvj1mMq3a5Ge9f8ACa81/xvfLeI+kUfw5JaD88IaaTyPEE2uPPN0ycYdJKdB5b1jkuotVsIk4XBoCdg+3bhhixrC+rdiOn0x9jQJyIVANhNdyyc5ivEzd3mXS0QLmsBZhngskWLen82lKjgJCo1jPhH4TSvm5bpzgrcp3Z0lB2xnM/2j29wt3Qa7YrJfVbtx2lkXOcwDNTMxik00fhSLEEVrRUnO/QIhNHvqCUvc74TA8BgkqhkiG9w0BBwEwHQYJYIZIAWUDBAEqBBBCrHy99tyP3PtCncgP9Uf4gBCW5wWkR6k93gEXyIvI5bf/]
+gitlab::ssh_port: '22'
+gitlab::google_analytics_id: ''
+gitlab::webserver_service_name: nginx
diff --git a/customer/pixelpark/int-db-odt-daimler-com.pixelpark.internal.yaml b/customer/pixelpark/int-db-odt-daimler-com.pixelpark.internal.yaml
new file mode 100644 (file)
index 0000000..af95ee4
--- /dev/null
@@ -0,0 +1,4 @@
+---
+site::additional_classes:
+  - accounts
+
diff --git a/customer/pixelpark/intra-collective01.pixelpark.com.yaml b/customer/pixelpark/intra-collective01.pixelpark.com.yaml
new file mode 100644 (file)
index 0000000..1a8c5a2
--- /dev/null
@@ -0,0 +1,4 @@
+---
+site::additional_classes:
+  - xymon
+
diff --git a/customer/pixelpark/isis.pixelpark.net.yaml b/customer/pixelpark/isis.pixelpark.net.yaml
new file mode 100644 (file)
index 0000000..d2d0c6e
--- /dev/null
@@ -0,0 +1,7 @@
+---
+site::additional_classes:
+  - repo
+  - accounts
+
+xymon::modules:
+  - lsiRaidctl-solaris
\ No newline at end of file
diff --git a/customer/pixelpark/ivan-wheezy64.pixelpark.com.yaml b/customer/pixelpark/ivan-wheezy64.pixelpark.com.yaml
new file mode 100644 (file)
index 0000000..8357665
--- /dev/null
@@ -0,0 +1,22 @@
+---
+site::additional_classes:
+  - python
+  - motd
+  - tcsh
+  - zabbix::agent
+  - zabbix::repo
+
+zabbix::agent::server: '217.66.51.48,217.66.51.91'
+zabbix::agent::listenport: 10060
+zabbix::agent::listenip: 192.168.122.118
+zabbix::agent::hostmetadata: ENC[PKCS7,MIIBiQYJKoZIhvcNAQcDoIIBejCCAXYCAQAxggEhMIIBHQIBADAFMAACAQEwDQYJKoZIhvcNAQEBBQAEggEACqntXBpJsjoXINeIPuZfETvU5RLLqCUCLkWXddHtNptAO1BAUIp846T1WuRHDTiEhoZSSNZy9B8GInpzkz/q5FH9R+NrLGkwaN0aonvkCFGb4H007hSe1MuvXmTOYSmBinTH5uu6sxZCP4vxAC/vCFCKVXrz5sgx3KEylYDdAAHryz743yy93CBF+SkuAH4vqV5JJlRrxLosHaBe3BFZHjp+r/uKy25NgK332lbV0pTRqbSzrBBxllCE64fTkp00WOCG6tcPUXH1rpt/3F45tEoyM61s9nb/aMZDC9m+agBssgcuBhPWc0y9K/UxD50K2Ey55gRffo7aHymYfZN4lDBMBgkqhkiG9w0BBwEwHQYJYIZIAWUDBAEqBBCFAbDFES5ZARfmRlySUBrsgCAVe0jjFFrLKfmKWGwcDMk/y9o7+24as5LIKxuJyljHgQ==]
+# zabbix::agent::manage_repo: true
+zabbix::repo::version: '2.4'
+
+
+xymon::check::rabbitmq::members:
+  - rabbitmq01.test-cloud.pixelpark.internal:5672
+  - rabbitmq02.test-cloud.pixelpark.internal:5672
+xymon::check::rabbitmq::password: 'sUTrsaeSKduY33io'
+xymon::check::rabbitmq::user: 'guest'
+
diff --git a/customer/pixelpark/ivandeb.pixelpark.com.yaml b/customer/pixelpark/ivandeb.pixelpark.com.yaml
new file mode 100644 (file)
index 0000000..f6855a7
--- /dev/null
@@ -0,0 +1,5 @@
+---
+site::additional_classes:
+  - motd
+  - tcsh
+
diff --git a/customer/pixelpark/jira01.pixelpark.net.yaml b/customer/pixelpark/jira01.pixelpark.net.yaml
new file mode 100644 (file)
index 0000000..31deadb
--- /dev/null
@@ -0,0 +1,14 @@
+---
+site::role: base
+httpd::webserver:
+  jira01.pixelpark.net:
+    modules:
+      - proxy_ajp
+    listens:
+      - 0.0.0.0:80
+      - 0.0.0.0:443
+    extendedStatus: true
+    worker: true
+
+tomcat2::instance::max_heap: '5120m'
+tomcat2::instance::min_heap: '5120m'
diff --git a/customer/pixelpark/koji.cloud.pixelpark.internal.yaml b/customer/pixelpark/koji.cloud.pixelpark.internal.yaml
new file mode 100644 (file)
index 0000000..4c3c2b5
--- /dev/null
@@ -0,0 +1,2 @@
+---
+site::role: base
diff --git a/customer/pixelpark/lug.pixelpark.com.yaml b/customer/pixelpark/lug.pixelpark.com.yaml
new file mode 100644 (file)
index 0000000..e2f678c
--- /dev/null
@@ -0,0 +1,12 @@
+---
+site::role: base
+site::additional_classes:
+  - zabbix::agent
+  
+zabbix::agent::server: '217.66.51.48,217.66.51.91'
+zabbix::agent::manage_repo: false
+
+accounts::users:
+  ivan.prikhodko:
+    apply: true
+    sudo: true
diff --git a/customer/pixelpark/mail01.pixelpark.com.yaml b/customer/pixelpark/mail01.pixelpark.com.yaml
new file mode 100644 (file)
index 0000000..4c3c2b5
--- /dev/null
@@ -0,0 +1,2 @@
+---
+site::role: base
diff --git a/customer/pixelpark/mailex.pixelpark.com.yaml b/customer/pixelpark/mailex.pixelpark.com.yaml
new file mode 100644 (file)
index 0000000..a00e3e1
--- /dev/null
@@ -0,0 +1,14 @@
+---
+site::role: base
+site::additional_classes:
+  - logstash
+
+logstash::generic_resource:
+  ansible:
+    resource: file
+    order: 10 # Input
+    parameters:
+      path: '/var/log/maillog'
+      type: mailex
+      tags:
+        - 'maillog'
diff --git a/customer/pixelpark/messageq01.pixelpark.com.yaml b/customer/pixelpark/messageq01.pixelpark.com.yaml
new file mode 100644 (file)
index 0000000..27ebf88
--- /dev/null
@@ -0,0 +1,29 @@
+---
+site::role: base
+site::additional_classes:
+  - site::profile::mcollective::common
+  - site::profile::mcollective::middleware
+  - rabbitmq
+
+rabbitmq::delete_guest_user: true
+rabbitmq::repos_ensure: false
+rabbitmq::package_provider: yum
+rabbitmq::ssl: true
+rabbitmq::stomp_ensure: true
+rabbitmq::config_stomp: true
+rabbitmq::stomp_port: 61613
+rabbitmq::ssl_stomp_port: 61614
+rabbitmq::config_variables:
+  reverse_dns_lookups: true
+rabbitmq::ssl_versions: ['tlsv1.2', 'tlsv1.1', 'tlsv1']
+#rabbitmq::ssl_cert: /etc/rabbitmq/ssl/wildcard.pixelpark.com-cert.pem
+#rabbitmq::ssl_key: /etc/rabbitmq/ssl/wildcard.pixelpark.com-key.pem
+#rabbitmq::ssl_cacert: /etc/rabbitmq/ssl/wildcard.pixelpark.com-ca.pem
+
+rabbitmq::ssl_cert: "%{puppet_vardir}/ssl/certs/%{fqdn}.pem"
+rabbitmq::ssl_key: "%{puppet_vardir}/ssl/private_keys/%{fqdn}.pem"
+rabbitmq::ssl_cacert: "%{puppet_vardir}/ssl/certs/ca.pem"
+
+site::profile::mcollective::middleware::middleware_admin_password: ENC[PKCS7,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]
+# Password für MCollective Channel
+site::profile::mcollective::middleware::middleware_password: ENC[PKCS7,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]
\ No newline at end of file
diff --git a/customer/pixelpark/minerva.pixelpark.com.yaml b/customer/pixelpark/minerva.pixelpark.com.yaml
new file mode 100644 (file)
index 0000000..a198c94
--- /dev/null
@@ -0,0 +1,3 @@
+---
+# time03.pixelpark.com
+site::profile::ntp::disable_ntp: true
\ No newline at end of file
diff --git a/customer/pixelpark/mockbuild.cloud.pixelpark.internal.yaml b/customer/pixelpark/mockbuild.cloud.pixelpark.internal.yaml
new file mode 100644 (file)
index 0000000..4c3c2b5
--- /dev/null
@@ -0,0 +1,2 @@
+---
+site::role: base
diff --git a/customer/pixelpark/monkey.pixelpark.com.yaml b/customer/pixelpark/monkey.pixelpark.com.yaml
new file mode 100644 (file)
index 0000000..2f1eda1
--- /dev/null
@@ -0,0 +1,14 @@
+---
+site::role: base
+accounts::users:
+  ivan.prikhodko:
+    apply: true
+    sudo: true
+
+xymon::ports:
+  radius_port:
+    local: "%([.:]18120)$"
+    state: "LISTEN"
+    col: "RED"
+    track: "radius"
+    text: "RADIUS Port"
\ No newline at end of file
diff --git a/customer/pixelpark/mysql-pp07.pixelpark.com.yaml b/customer/pixelpark/mysql-pp07.pixelpark.com.yaml
new file mode 100644 (file)
index 0000000..8a47e2a
--- /dev/null
@@ -0,0 +1,43 @@
+---
+site::role: base
+site::additional_classes:
+  - mysql::server::backup
+  - site::profile::mysql_server
+
+
+mysql::server::root_password: ENC[PKCS7,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]
+mysql::server::override_options:
+  mysqld:
+    bind-address: '0.0.0.0'
+mysql::server::backup::backuppassword: ENC[PKCS7,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]
+site::profile::mysql_server::databases:
+  pdns:
+    user: pdns
+    password: ENC[PKCS7,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]
+    host: "%"
+  pdns_ext:
+    user: pdns
+    password: ENC[PKCS7,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]
+    host: "%"
+  rt3:
+    user: rt3login
+    password: ENC[PKCS7,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]
+    host: "%"
+  cableprod:
+    user: cable
+    password: ENC[PKCS7,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]
+    host: "%"
+  ITS:
+    user: itsapp
+    password: ENC[PKCS7,MIIBeQYJKoZIhvcNAQcDoIIBajCCAWYCAQAxggEhMIIBHQIBADAFMAACAQEwDQYJKoZIhvcNAQEBBQAEggEAupxXxhy/M0tOihEjHkxlDZeTcnXgf9DER210Zg0yPGqkwCXIhJxRNhHorJQutj41veTyCVRZCLuFDfSSRmDnThdAW6isB+ikLxXe4wSXqSvn4nZmiIPGc9R696HfCGHP5hMxg6p7iH0TDM60JHjSUZPIrgE57y4tmMoZCLpwXzROw8IKCtG+NMGyMsn8qCUQs2JibLQvtqfjG8rAa1DaoYEhMHNLuPkgbTZ2SDBlOycKSBMJZyl91ZA/w1V3tbU728y5E9/C0JVGYM7Z1jnofAfH2PUQxTPw9OfL1filQMBSE29H0cQFurnpf9oqJc7ImW4SSEhR5OEysSM9uoFrhzA8BgkqhkiG9w0BBwEwHQYJYIZIAWUDBAEqBBC8MoWuGdlCmdRRZGmc2IHXgBCLBfa9WphyJiEMG2m0RdST]
+    host: "%"
+  INV:
+    user: inv
+    password: ENC[PKCS7,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]
+    host: "%"
+  hrtool:
+    user: hrtool
+    password: ENC[PKCS7,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]
+    host: "%"
+
+mysql::server::remove_default_accounts: true
diff --git a/customer/pixelpark/najaden.pixelpark.com.yaml b/customer/pixelpark/najaden.pixelpark.com.yaml
new file mode 100644 (file)
index 0000000..eabe824
--- /dev/null
@@ -0,0 +1,3 @@
+---
+site::additional_classes:
+  - accounts
\ No newline at end of file
diff --git a/customer/pixelpark/nechtan.pixelpark.com.yaml b/customer/pixelpark/nechtan.pixelpark.com.yaml
new file mode 100644 (file)
index 0000000..bfdaf51
--- /dev/null
@@ -0,0 +1,3 @@
+---
+site::additional_classes:
+  - site::profile::zonehost
\ No newline at end of file
diff --git a/customer/pixelpark/nike.pixelpark.net.yaml b/customer/pixelpark/nike.pixelpark.net.yaml
new file mode 100644 (file)
index 0000000..e6a99ee
--- /dev/null
@@ -0,0 +1,9 @@
+---
+site::additional_classes:
+  - accounts
+  - site::profile::zonehost
+
+accounts::users:
+  samuel.bufe:
+    apply: true
+    sudo: true
\ No newline at end of file
diff --git a/customer/pixelpark/nl-fischerwerke.pixelpark.net.yaml b/customer/pixelpark/nl-fischerwerke.pixelpark.net.yaml
new file mode 100644 (file)
index 0000000..4c3c2b5
--- /dev/null
@@ -0,0 +1,2 @@
+---
+site::role: base
diff --git a/customer/pixelpark/nl-medperts.pixelpark.net.yaml b/customer/pixelpark/nl-medperts.pixelpark.net.yaml
new file mode 100644 (file)
index 0000000..4c3c2b5
--- /dev/null
@@ -0,0 +1,2 @@
+---
+site::role: base
diff --git a/customer/pixelpark/nuadu.pixelpark.com.yaml b/customer/pixelpark/nuadu.pixelpark.com.yaml
new file mode 100644 (file)
index 0000000..b45d9c9
--- /dev/null
@@ -0,0 +1,14 @@
+---
+site::role: base
+site::additional_classes:
+  - site::profile::mcollective::common
+  - zabbix::agent
+  
+zabbix::agent::server: '217.66.51.48,217.66.51.91'
+zabbix::agent::manage_repo: false
+accounts::users:
+  ivan.prikhodko:
+    apply: true
+    sudo: true
+
diff --git a/customer/pixelpark/ppnet.novalocal.yaml b/customer/pixelpark/ppnet.novalocal.yaml
new file mode 100644 (file)
index 0000000..4c3c2b5
--- /dev/null
@@ -0,0 +1,2 @@
+---
+site::role: base
diff --git a/customer/pixelpark/production.yaml b/customer/pixelpark/production.yaml
new file mode 100644 (file)
index 0000000..61a7bf6
--- /dev/null
@@ -0,0 +1,5 @@
+---
+accounts::users:
+  michael.krause:
+    apply: true
+    sudo: true
diff --git a/customer/pixelpark/psql-pp01.pixelpark.net.yaml b/customer/pixelpark/psql-pp01.pixelpark.net.yaml
new file mode 100644 (file)
index 0000000..09bb19b
--- /dev/null
@@ -0,0 +1,82 @@
+---
+site::role: base
+#site::additional_classes:
+#  - site::profile::postgresql_server
+#  - www_tree
+#  - pp_postgresql::backup
+
+postgresql::globals::validcon_script_path: "/www/tmp/valid_postgres_connection.sh"
+postgresql::globals::version: "9.3"
+postgresql::conf::shared_buffers:
+  shared_buffers:
+    value: "4096MB"
+
+postgresql::server::ipv4acls:
+  - "host confluence confluence 217.66.53.114/32 md5" # Confluence
+  - "host confluence confluence 217.66.51.0/24 md5" # Confluence  Admin Netz
+  - "host jira jira 217.66.53.113/32 md5" # Jira
+  - "host jira jira 217.66.51.0/24 md5" # Jira Admin Netz
+  - "host confluence_ext confluence_ext 217.66.53.109/32 md5"
+  - "host confluence_ext confluence_ext 217.66.51.0/24 md5"
+  - "host postgres xymon 217.66.53.169/32 trust" # Xymon monitoring User
+  - "host puppetdb_live puppetdb 93.188.104.37/32 md5"
+  - "host foreman_live foreman 93.188.104.39/32 md5"
+  - "host gerrit gerrit 217.66.53.243/32 md5" # Gerrit
+  - "host gitlab gitlab 217.66.53.247/32 md5" # Gitlab
+  - "host all ppadmin 217.66.51.0/24 md5"
+  - "host all ppadmin 217.66.53.169/32 md5"
+
+postgresql::server::listen_addresses: '217.66.53.169,93.188.104.42'
+
+site::profile::postgresql_server::tablespaces:
+  ts_confluence:
+    location: '/www/data/postgres/ts_confluence'
+    owner: confluence
+  ts_jira:
+    location: '/www/data/postgres/ts_jira'
+    owner: jira
+  ts_confluence_ext:
+    location: '/www/data/postgres/ts_confluence_ext'
+    owner: confluence_ext
+  ts_foreman:
+    location: '/www/data/postgres/ts_foreman'
+    owner: foreman
+  ts_puppetdb:
+    location: '/www/data/postgres/ts_puppetdb'
+    owner: puppetdb
+  ts_gerrit:
+    location: '/www/data/postgres/ts_gerrit'
+    owner: gerrit
+  ts_gitlab:
+    location: '/www/data/postgres/ts_gitlab'
+    owner: gitlab
+
+site::profile::postgresql_server::databases:
+  confluence:
+    tablespace: ts_confluence
+    user: confluence
+    password: ENC[PKCS7,MIIBiQYJKoZIhvcNAQcDoIIBejCCAXYCAQAxggEhMIIBHQIBADAFMAACAQEwDQYJKoZIhvcNAQEBBQAEggEAwPGc48ISl0bjRPNULC+BdPsuG/BhNMa9xviFAShQw6641zs+/Ug/iA0Fc84GalrGIDtDaAuIU9d+zEfpX1/TfCn169YbHJl4sqM2nRVssTf+0517O7sb/EpZwlpVDxt0cvgLVHKL+d7SOLATdQFdEt6hprGuj4aSgEBw+K8FYtAv/6Ybdzgt/rtkulhRcvnH0ZKX+3X3qmbQxSC1eDTJReNi+vh1Z5OmI0Zd1gSThaTsmuOoZnxPoZwU4Ld13aiF0Y1TjWgxefZ5MgIhy8ZqasVyMSDU+lfL1ydJDVZW16mLNsSTLrNkfCf8U4g63muqyRb+0IYrtktR0vHb5l0R0zBMBgkqhkiG9w0BBwEwHQYJYIZIAWUDBAEqBBCI+DHBBu7rEfvUbllNJssWgCAyT6G8gNoCfiEqbQr974r2125EhKhUoP7y5xeOjW31Gg==]
+  jira:
+    user: jira
+    password: ENC[PKCS7,MIIBiQYJKoZIhvcNAQcDoIIBejCCAXYCAQAxggEhMIIBHQIBADAFMAACAQEwDQYJKoZIhvcNAQEBBQAEggEANXesE5zp5wLc9d1rNUjBIleZI0JhCATPtVvl9nzHBXC8cXgGMOO++h/bvi5Wj7eRWZstUkryz7IHNbhCmeXz0c5ozakgQr45AHDgeo7SYVfLEYvNFtLsOc7fuY23UULTvedQGbn+fyWCsKfgIjlUov5jN7H2qP2tOV341csnIXZkXYG4IYWe6CmuaIGm+DfJND2H2CIqqMWss8A9fBj/Bpc84Rbmz8kmZqYosBZOD75qw8Ec8K7iK7ZceXyfmn5pMVpMrspQmROapRiBc+H8Km9TBiPTCey+T1YdZtQdnKEqrNaBl+hwA5nbJzuVzSCerkZfB6n0wSg5ojLexJmEzTBMBgkqhkiG9w0BBwEwHQYJYIZIAWUDBAEqBBB2YOij2vi8SleoURDrJWASgCBwkAnbH5V7pXKQP+4dwrMvcPzLC6wAgjygAd/wHRRMcA==]
+  confluence_ext:
+    user: confluence_ext
+    tablespace: ts_confluence_ext
+    password: ENC[PKCS7,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]
+  puppetdb_live:
+    user: puppetdb
+    tablespace: ts_puppetdb
+    password: ENC[PKCS7,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]
+  foreman_live:
+    user: foreman
+    tablespace: ts_foreman
+    password: ENC[PKCS7,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]
+  gerrit:
+    user: gerrit
+    tablespace: ts_gerrit
+    password: ENC[PKCS7,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]
+  gitlab:
+    user: gitlab
+    tablespace: ts_gitlab
+    password: ENC[PKCS7,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]
+
diff --git a/customer/pixelpark/puppet-schulung-1.cloud.pixelpark.internal.yaml b/customer/pixelpark/puppet-schulung-1.cloud.pixelpark.internal.yaml
new file mode 100644 (file)
index 0000000..2b2e2cc
--- /dev/null
@@ -0,0 +1,2 @@
+---
+bash::package_ensure: latest
diff --git a/customer/pixelpark/puppet-schulung-1.novalocal.yaml b/customer/pixelpark/puppet-schulung-1.novalocal.yaml
new file mode 100644 (file)
index 0000000..85d068e
--- /dev/null
@@ -0,0 +1,7 @@
+---
+accounts::users:
+  ivan.prikhodko:
+    apply: true
+    sudo: true
+bash::package_ensure: latest
+
diff --git a/customer/pixelpark/puppet-schulung-2.novalocal.yaml b/customer/pixelpark/puppet-schulung-2.novalocal.yaml
new file mode 100644 (file)
index 0000000..e00bd9e
--- /dev/null
@@ -0,0 +1,5 @@
+---
+accounts::users:
+  ivan.prikhodko:
+    apply: true
+    sudo: true
\ No newline at end of file
diff --git a/customer/pixelpark/puppetmaster.cloud.pixelpark.internal.yaml b/customer/pixelpark/puppetmaster.cloud.pixelpark.internal.yaml
new file mode 100644 (file)
index 0000000..d137b35
--- /dev/null
@@ -0,0 +1,6 @@
+---
+puppetconf::params::is_puppetmaster: true
+accounts::users:
+  thomas.bussmeyer:
+    apply: true
+    sudo: true
\ No newline at end of file
diff --git a/customer/pixelpark/puppetmaster.pixelpark.com.yaml b/customer/pixelpark/puppetmaster.pixelpark.com.yaml
new file mode 100644 (file)
index 0000000..6d05238
--- /dev/null
@@ -0,0 +1,3 @@
+---
+mcollective::params::client: true
+mcollective::client: true
diff --git a/customer/pixelpark/puppetmaster01.pixelpark.com.yaml b/customer/pixelpark/puppetmaster01.pixelpark.com.yaml
new file mode 100644 (file)
index 0000000..199cf30
--- /dev/null
@@ -0,0 +1,91 @@
+---
+site::role: base
+site::additional_classes:
+#  - apache
+#  - site::profile::apache
+#  - apache::mod::passenger
+  - pp_mcollective
+  - site::profile::mcollective::common
+
+accounts::users:
+  ivan.prikhodko:
+    apply: true
+    sudo: true
+  samuel.bufe:
+    apply: true
+    sudo: true
+
+
+mcollective::client: false
+mcollective::server: true
+pp_mcollective::client: true
+pp_mcollective::server: false
+
+
+apache::mpm_module: worker
+apache::mod::passenger::passenger_max_pool_size: 32
+apache::mod::passenger::passenger_pool_idle_time: 600
+apache::mod::passenger::passenger_max_requests: 10000
+apache::mod::passenger::passenger_high_performance: 'On'
+apache::mod::passenger::passenger_ruby: /usr/bin/ruby
+apache::mod::passenger::passenger_root: /usr/local/share/gems/gems/passenger-5.0.15
+apache::mod::passenger::mod_path: '/usr/local/share/gems/gems/passenger-5.0.15/buildout/apache2/mod_passenger.so'
+
+site::profile::apache::vhosts:
+  rewrite:
+    port: 80
+    servername: puppetmaster.pixelpark.com
+    serveraliases:
+      - puppetmaster01.pixelpark.com
+    docroot: /var/www/html/
+    redirect_dest: https://foreman.pixelpark.com
+  gitdeploy:
+    port: 8009
+    servername: puppetmaster.pixelpark.com
+    serveraliases:
+      - puppetmaster01.pixelpark.com
+    docroot: /var/www/cgi-bin
+    directories:
+      - directory1:
+        provider: directory
+        path: '/var/www/cgi-bin'
+        options:
+          - Indexes
+          - FollowSymlinks
+          - MultiViews
+          - ExecCGI
+        addhandlers:
+          handler: cgi-script
+          extensions: '.py'
+  puppetmaster:
+    servername: puppetmaster.pixelpark.com
+    serveraliases:
+      - puppetmaster01.pixelpark.com
+    docroot: /usr/share/puppet/rack/puppetmasterd/public
+    passenger_min_instances: 4
+    port: 8140
+    ssl: true
+    ssl_protocol: "ALL -SSLv2 -SSLv3"
+    ssl_cipher: "EDH+CAMELLIA:EDH+aRSA:EECDH+aRSA+AESGCM:EECDH+aRSA+SHA384:EECDH+aRSA+SHA256:EECDH:+CAMELLIA256:+AES256:+CAMELLIA128:+AES128:+SSLv3:!aNULL:!eNULL:!LOW:!3DES:!MD5:!EXP:!PSK:!DSS:!RC4:!SEED:!IDEA:!ECDSA:kEDH:CAMELLIA256-SHA:AES256-SHA:CAMELLIA128-SHA:AES128-SHA"
+    ssl_options: "+StdEnvVars +ExportCertData"
+    ssl_verify_client: "optional"
+    ssl_verify_depth: 1
+    ssl_crl: "/var/lib/puppet/ssl/ca/ca_crl.pem"
+    ssl_crl_check: chain
+    ssl_ca: "/var/lib/puppet/ssl/ca/ca_crt.pem"
+    ssl_chain: "/var/lib/puppet/ssl/ca/ca_crt.pem"
+    ssl_key: "/var/lib/puppet/ssl/private_keys/puppetmaster01.pixelpark.com.pem"
+    ssl_cert: "/var/lib/puppet/ssl/certs/puppetmaster01.pixelpark.com.pem"
+    request_headers:
+      - "unset X-Forwarded-For"
+      - "set X-SSL-Subject %%{ich-trickse}{SSL_CLIENT_S_DN}e"
+      - "set X-Client-DN %%{ich-trickse}{SSL_CLIENT_S_DN}e"
+      - "set X-Client-Verify %%{ich-trickse}{SSL_CLIENT_VERIFY}e"
+    directories:
+      - directory1:
+        provider: directory
+        path: '/usr/share/puppet/rack/puppetmasterd'
+        options:
+          - None
+        allow_override:
+          - None
diff --git a/customer/pixelpark/red-bmwi-de.pixelpark.net.yaml b/customer/pixelpark/red-bmwi-de.pixelpark.net.yaml
new file mode 100644 (file)
index 0000000..197004a
--- /dev/null
@@ -0,0 +1,5 @@
+---
+site::additional_classes:
+  - accounts
+  - pp_mcollective
+
diff --git a/customer/pixelpark/repo-sol.pixelpark.com.yaml b/customer/pixelpark/repo-sol.pixelpark.com.yaml
new file mode 100644 (file)
index 0000000..4c3c2b5
--- /dev/null
@@ -0,0 +1,2 @@
+---
+site::role: base
diff --git a/customer/pixelpark/repo.pixelpark.com.yaml b/customer/pixelpark/repo.pixelpark.com.yaml
new file mode 100644 (file)
index 0000000..da45eb4
--- /dev/null
@@ -0,0 +1,26 @@
+---
+site::role: base
+site::additional_classes:
+  - site::profile::apache
+
+apache::mpm_module: worker
+apache::default_vhost: false
+
+site::profile::apache::pp_vhosts:
+  repo:
+    docroot: '/srv/www/repo'
+    servername: repo.pixelpark.com
+    ssl: true
+    ssl_cert: '/etc/pki/tls/certs/wildcard.pixelpark.com-cert.pem'
+    ssl_key: '/etc/pki/tls/private/wildcard.pixelpark.com-key.pem'
+    ssl_chain: '/etc/pki/tls/certs/wildcard.pixelpark.com-cert.pem'
+    # HtAccess
+    directories: 
+      - directory1:
+        provider: directory
+        path: '/srv/www/repo'
+        index_options:
+          - FancyIndexing
+        options:
+          - Indexes
+          - FollowSymLinks
diff --git a/customer/pixelpark/review.pixelpark.com.yaml b/customer/pixelpark/review.pixelpark.com.yaml
new file mode 100644 (file)
index 0000000..d7b5fea
--- /dev/null
@@ -0,0 +1,90 @@
+---
+site::role: base
+site::additional_classes:
+  - site::profile::apache
+  - gerrit
+  - logstash
+
+apache::mpm_module: worker
+apache::default_vhost: false
+site::profile::apache::vhosts:
+  review:
+    servername: review.pixelpark.com
+    docroot: '/var/www/git'
+    port: 80
+    redirect_status: 'permanent'
+    redirect_dest: 'https://review.pixelpark.com/'
+  review_ssl:
+    servername: review.pixelpark.com
+    docroot: '/var/www/git'
+    port: 443
+    ssl: true
+    ssl_cert: '/etc/pki/tls/certs/wildcard.pixelpark.com-cert.pem'
+    ssl_key: '/etc/pki/tls/private/wildcard.pixelpark.com-key.pem'
+    ssl_ca: '/etc/pki/tls/certs/wildcard.pixelpark.com-cert.pem'
+    allow_encoded_slashes: 'on'
+    scriptaliases:
+      - { alias: /gitweb, path: /var/www/git/gitweb.cgi }
+    directories: 
+      - directory1:
+        provider: directory
+        path: '/var/www/git/'
+        options:
+          - +FollowSymLinks
+          - +ExecCGI
+        addhandlers:
+          handler: 'cgi-script'
+          extensions: '.cgi'
+    proxy_preserve_host: On
+    proxy_pass:
+      - { path: /server-status, url: '!' }
+      - { path: /server-info, url: '!' }
+      - { path: /gitweb, url: '!' }
+      - { path: /static, url: '!' }
+      - { path: /, url: 'http://%{fqdn}:8080/', keywords: ['nocanon'] }
+
+gerrit::gerrit_version: '2.11.5'
+gerrit::manage_firewall: false
+gerrit::manage_database: false
+gerrit::install_gitweb: true
+
+gerrit::override_options:
+  auth:
+    type: LDAP
+  container:
+    user: gerrit
+    javaHome: '/usr/lib/jvm/jre'
+  gerrit:
+    basePath: '/srv/gerrit'
+    canonicalWebUrl: 'https://review.pixelpark.com/'
+  gitweb:
+    cgi: /var/www/git/gitweb.cgi
+    type: gitweb
+  index:
+    type: LUCENE
+  sendemail:
+    smtpServer: localhost
+  sshd:
+    listenAddress: '*:29418'
+  httpd:
+    listenUrl: 'proxy-https://*:8080'
+  cache:
+    directory: cache
+  ldap:
+    server: ldap://ldap.pixelpark.com
+    username: 'uid=wwwadm,ou=wwwserver,ou=applications,o=pixelpark,o=isp'
+    password: ENC[PKCS7,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]
+    accountBase: 'ou=People,o=Pixelpark,o=isp'
+    accountPattern: '(uid=${username})'
+    accountEmailAddress: mail
+    accountFullName: cn
+    groupBase: 'ou=Groups,o=Pixelpark,o=isp'
+    readTimeout: '15 s'
+    useConnectionPooling: true
+    connectTimeout: '10 s'
+  database:
+    type: POSTGRESQL
+    hostname: psql-pp01.pixelpark.net
+    database: gerrit
+    username: gerrit
+    password: ENC[PKCS7,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]
diff --git a/customer/pixelpark/rpm-repo.pixelpark.com.yaml b/customer/pixelpark/rpm-repo.pixelpark.com.yaml
new file mode 100644 (file)
index 0000000..c0658ac
--- /dev/null
@@ -0,0 +1,23 @@
+---
+site::role: base
+site::additional_classes:
+  - site::profile::mcollective::common
+  - httpd
+
+httpd::webserver:
+  rpm-repo.pixelpark.com:
+    worker: true
+    listens:
+      - "93.188.104.22:80"
+      - "93.188.104.22:443"
+    vhosts:
+      # http vhost
+      vhost1:
+        ip: 93.188.104.22
+        port: 80
+        docroot: "/www/sites/rpm-repo.pixelpark.com/docs"
+      # https vhost
+      vhost2:
+        ip: 93.188.104.22
+        port: 443
+        docroot: "/www/sites/rpm-repo.pixelpark.com/docs"
diff --git a/customer/pixelpark/sancus.pixelpark.com.yaml b/customer/pixelpark/sancus.pixelpark.com.yaml
new file mode 100644 (file)
index 0000000..e2f678c
--- /dev/null
@@ -0,0 +1,12 @@
+---
+site::role: base
+site::additional_classes:
+  - zabbix::agent
+  
+zabbix::agent::server: '217.66.51.48,217.66.51.91'
+zabbix::agent::manage_repo: false
+
+accounts::users:
+  ivan.prikhodko:
+    apply: true
+    sudo: true
diff --git a/customer/pixelpark/selenium.pixelpark.com.yaml b/customer/pixelpark/selenium.pixelpark.com.yaml
new file mode 100644 (file)
index 0000000..dc1f0c1
--- /dev/null
@@ -0,0 +1,6 @@
+---
+site::role: base
+accounts::users:
+  florian.schade:
+    apply: true
+    sudo: true
\ No newline at end of file
diff --git a/customer/pixelpark/sol11.pixelpark.com.yaml b/customer/pixelpark/sol11.pixelpark.com.yaml
new file mode 100644 (file)
index 0000000..44276e4
--- /dev/null
@@ -0,0 +1,27 @@
+---
+site::additional_classes:
+  - repo
+  - accounts
+
+accounts::users:
+  cmadmin:
+    uid: 9955
+    shell: "bash"
+    apply: true
+    keys:
+      david.winter:
+        key: "AAAAB3NzaC1yc2EAAAABIwAAAQEAwlEqnBE1xMb5SOA4JnDF7tbrgcKl4NGeBQ34Nc3VzfKfnHy+5qT27ieocjyMt5kNt6I+44e9BUFRbGex+hjMH/K0i0lYqjnhn/kHOm/EKVNBonCjDojlxriIaZQsJgMDaFN25m/7c0XmcofBxBUeIwThGFrXMOuW4hVNWOQVkszJ49Db7EzbbUUCeAYpTqcQF+S5m+DEAii8RnsoT7qERPt7BAht1MORaQyNEskyNIJpL0m0zm5A/SMlXkb1RSEMfam7T9lmuC6/goX+ojV2Dgm0rb+PQZpSGdaCePaJNN7OYLQ3frfpgfV86nGRqPW/FQnLxsK5NN8QrvUoTWEuUw=="
+      thomas.voelkel:
+        key: "AAAAB3NzaC1yc2EAAAABIwAAAQEAmtUbtz6Q6lE4iaT2uuWohocaN+//5vAoAPiNV6MBH1CLvlXgjU1GmKJCYVqCT0xOWWP4ZS9BrruYzbbo+X2jDTY6BmUyN8qEtLvRpzQybjQEmu9Za79aBjQg0GHXprxvKBUIwqAtlCOInUwrewfomgzFSuOABsyL3wnl5VCOf0dtxYiFjtQQhBWPwBSpX3wu/iFh0icpaKsti9n63TalLY7D8L3nCzXewx1nEmDnb1hR3xxDnumCfrq3Ulc2zZP6spCa6O/+ku2Jb9x1IR5RZAjLs+mDOKL31V3fX4tyh637X8G/L2LJ+GcNu/iQXFMvg+kC5RQddNQPI6XSVA8wTQ=="
+      thomas.hermel:
+        key: "AAAAB3NzaC1yc2EAAAABIwAAAQEAq4V/o1XRoqhwooqJysiTmuvti5dlbklCrfcqnBlY8/Dc63CQq8TL0MvUVdHSRonPQWn47UFJywN3qaji1LPtw9+r3jYEqOi81T72myZBFSLh9ncwNUK5zsFvD1W+dafoz7RLs3sePBHUzaE+K32/SiwEJxa0Om8iKl+l7L9znIuGwrU+ofWDC3uxj6zZMFkREAL8HOjywZMplhmVpBgt5ZaUKlaKAHxf5y4noQX7idDCuCL3TBJBt8Ik2a4w36WS4AQjc804EgxMMccA3VKys9oZSmsmQxux2IFjt6V9qv4+TR4MgfA61Kcl2roa7jiarZvTbk1dtyccLDyWF1JhWQ=="
+      michael.fricke:
+        key: "AAAAB3NzaC1yc2EAAAABIwAAAQEA3BICQMaFDIS0LGZbIWHwggkUFHc3lzrImOll1aMdTihHb2DFiey8EmToI/OGz+1qotSrPW/Od9CI3WhTbnwejg6JS8Brg8VfumdSK6B9oRZIvV7WStzUw52bwiiFHKB/5zF8NBRwrJ/aYEW06r0NIL8lxLUkPJ/epbC4A68fJPDqRG3NO3M7n2DOvE5eK6+vxzLkJyx9hHb6tXbYX4QFB7qCl5ycuGm2n9xyoPRuqNWUCVQIzNSsErlok3EUjUYDqQ69ZzkIomeZUipwoNycvSr9KyNaoocQ5HAnyLUiNl1Jqm3EM21BOMOddaY+TKk4YpFjMDXe26/9FXIdNnaU1Q=="
+      christoph.langnickel:
+        key: "AAAAB3NzaC1yc2EAAAABIwAAAQEAzaea/6afGThvtE9mZTopXhRvssPiY+7TXpLDGiGX23mJDANHNAvLrvYVcGrjOTHZ0x5tpYTdlvTNgu6L4X0QyeG1A0/G6gfjL5dGMbNFNBXLmXdDP/lSxydIPFMlM4FlmHiaLgOuQuxf7BtSC5sWe69wTnUU7frYvRxFEEyMh4b0c1AIwqcRHU08phZw6RNj3lBfKb2/rACvumY/1giUkRUR02r9RjObbOvNmJbpud9xIQoYneWzow7vsBp9tAhUrWd2MDQ3UAVhoFeufnicCxwSHLXah+7asOUF1iP0tBKB1JbKM30gRyHf9ax8QH3P93z13cfrSua8V46DEGr1Uw=="
+      frederik.giesen:
+        key: "AAAAB3NzaC1yc2EAAAABIwAAAQEAo7M5ltf6OD1lpf5tfQDRZUssLsHTgEudjt2zAumuPqiJabD1/aU7ZaIaQ8UyS2pI5ySBmVjGWo/pE+9ovubSMftzlf314sokmhEUpnVTa59DlvsV9NoGSwyxizPER/wkgJ9X6j+3zBCsVlEqx6dqHeEPriJ38pkntZ4Bs6+wTrCYkXzlmesPV1hyvnM6L5zPPAu7ItNBC/HInfCsJdjOrrdxFoEPmynbQ75RTitezyuPxUmZ5V/WTcMEpoEpSr5LVbz8r+rnBCowe+t5OHSKCsXQr7x/3fe8Su1UGTkXYcq3fRGTovXflrB9IED2tADVZDGUoJD2wfn1e6M565FbcQ=="
+      uwe.zillessen:
+        key: "AAAAB3NzaC1yc2EAAAABIwAAAQEArD+xcJdtnu8z80DYCSUOv9wH2bMx2l/J2tWdNjOniWFhy0qQlacQfXjzFsqFysQUGXlwH0cabjozAA8JSLCnQS+ZOEY7KnGscJ/wT7tK4RE8XuuCqHBqdEjxQBdb99pdui2YednnOUSXzXKU/Gz5VEoe53GnwblzRm59NZRbYkV7IJGi4toHKT5316yQekG5sxAudwvfm0FMPFizn73CRFFCIjqACt8R/1sbO7+RhjYfywqVoWEzLfkX7VFK1/eCuQyHZMVjX7usglS/oSd6P9iy1crimhPjdRlxoMZySw5N8a8WOj65cy7muZRMJg2fqcFcfBB5W1BtLGhpB1yiaQ=="
+      hooman.paknahd:
+        key: "AAAAB3NzaC1yc2EAAAABIwAAAQEA6YGpoxwTik/mjZkBHx8zcFk8mib5KkYHGssKKJCEtT+XgUOLNumC5mzEaX0VRVWTp1hiZq6BunpMu6BagLvBp0SLKj28b3HQrsN8l8TV9i3tzIwkDfJO3TREg4nQp7cysry3yZpVpJ6P1ZZ5jAfAdO1MHUku05yVV9WlKoU7rBhiyJq241No6rl5/d/Et7vrEmRHHHYujxovSr0BfJ42+8B2ZpGKG/w4MmyAQGyjas+cPXYgcerWxo2s/dP0sQTmhoNDJOR8kqfLGOC1O8HEhNrIVQCWjE6WoRUUx7n6Ymi0rfMAlBeZ41P7ystx7ctEyna+HHV9YThIHKIbDsuBYw=="
diff --git a/customer/pixelpark/solaris10-afs.pixelpark.com.yaml b/customer/pixelpark/solaris10-afs.pixelpark.com.yaml
new file mode 100644 (file)
index 0000000..7f4a003
--- /dev/null
@@ -0,0 +1,13 @@
+---
+site::additional_classes:
+  - accounts
+  - bash
+  - tcsh
+
+accounts::users:
+  ivan.prikhodko:
+    apply: true
+    sudo: true
+  samuel.bufe:
+    apply: true
+    sudo: true
\ No newline at end of file
diff --git a/customer/pixelpark/solaris11-afs.pixelpark.com.yaml b/customer/pixelpark/solaris11-afs.pixelpark.com.yaml
new file mode 100644 (file)
index 0000000..d2e9b01
--- /dev/null
@@ -0,0 +1,395 @@
+---
+site::additional_classes:
+  - accounts
+  - pp_tools
+  - vim
+
+accounts::users:
+  ivan.prikhodko:
+    apply: true
+    sudo: true
+  samuel.bufe:
+    apply: true
+    sudo: true
+
+vim::opt_misc:
+  - showcmd
+  - showmatch
+  - ignorecase
+  - smartcase
+  - incsearch
+  - autowrite
+  - hidden
+  - ttyfast
+  - t_Co=16
+  - t_AB=^[[%?%p1%{8}%<%t%p1%{40}%+%e%p1%{92}%+%;%dm
+  - t_AF=^[[%?%p1%{8}%<%t%p1%{30}%+%e%p1%{82}%+%;%dm
+  - autoindent
+  - nobackup
+  - backspace=2
+  - nocompatible
+  - "comments=b:#,:%,fb:-,n:>,n:)" # has to be escaped because it uses yaml indicators
+  - digraph
+  - noerrorbells
+  - esckeys
+  - formatoptions=cqrt
+  - helpheight=0
+  - highlight=8r,db,es,hs,mb,Mr,nu,rs,sr,tb,vr,ws
+  - nohlsearch
+  - noicon
+  - ignorecase
+  - noinsertmode
+  - iskeyword=@,48-57,_,192-255,-,.,@-@
+  - joinspaces
+  - laststatus=2
+  - listchars=tab:��,trail:�,eol:$ #TODO
+  - magic
+  - modeline
+  - modelines=2
+  - nonumber #TODO
+# - path=.,,~/.P/vim,~/.P/vim/syntax,~/.P/vim/source,$VIM/syntax/ "sollte geändert werden
+  - report=0
+  - ruler
+# - shell=/usr/bin/tcsh "muss angepasst/erweitert werden siehe zeile 174
+  - shiftwidth=8
+  - shortmess=at
+  - showcmd
+  - showmatch
+  - showmode
+  - suffixes=.aux,.bak,.dvi,.gz,.idx,.log,.ps,.swp,.tar
+  - nostartofline
+  - tabstop=8
+  - notextmode      #obsolete option, but sets fileformat to unix, which is the current best practice
+  - notitle
+  - ttyfast
+  - ttybuiltin
+  - ttytype=rxvt    #TODO
+  - viminfo="NONE"  #required by ISO 27001/IT-Grundschutz
+  - history=100     #keeps 100 lines in history, lost after closing session
+  - visualbell      #is disabled again by next option?
+  - t_vb=
+  - wildchar=<TAB>
+  - wrap
+  - nowritebackup   #TODO
+  - pastetoggle=<F5>
+
+
+
+vim::opt_code:
+  - |
+      if has("wildmenu")
+        set wildmenu wildmode=longest:full,full 
+      endif
+  - |
+      if has("statusline")
+        set statusline=%f%00(\ %2*%m%*%)%00(\ %3*%r%*%)%00(\ %h%w%)\ %=
+        set statusline+=%36(\ [B:%2n][L:%3l/%3L][C:%2c-%2v][%%:%2p]%)
+        if has("title")
+          set title                       " use nice title
+          set titlestring=VIM\ -\ %f%00(\ %m%)%00(\ %r%)%(
+          set titlestring+=\ (%{expand(\"%:~:.:h\")})%)%(\ %a%)
+        endif
+      endif 
+  - |
+      if has("autocmd")
+
+         " In text files, always limit the width of text to 78 characters
+         autocmd BufRead *.txt set tw=78
+        
+         augroup cprog
+          " Remove all cprog autocommands
+          au!
+        
+          " When starting to edit a file:
+          "   For C and C++ files set formatting of comments and set C-indenting on.
+          "   For other files switch it off.
+          "   Don't change the order, it's important that the line with * comes first.
+          autocmd FileType *      set formatoptions=tcql nocindent comments&
+          autocmd FileType c,cpp  set formatoptions=croql cindent comments=sr:/*,mb:*,el:*/,://
+         augroup END
+        
+         augroup gzip
+          " Remove all gzip autocommands
+          au!
+        
+          " Enable editing of gzipped files
+          " set binary mode before reading the file
+          " use "gzip -d", gunzip isn't always available
+          autocmd BufReadPre,FileReadPre        *.gz,*.bz2 set bin
+          autocmd BufReadPost,FileReadPost      *.gz call GZIP_read("gzip -d")
+          autocmd BufReadPost,FileReadPost      *.bz2 call GZIP_read("bzip2 -d")
+          autocmd BufWritePost,FileWritePost    *.gz call GZIP_write("gzip")
+          autocmd BufWritePost,FileWritePost    *.bz2 call GZIP_write("bzip2")
+          autocmd FileAppendPre                 *.gz call GZIP_appre("gzip -d")
+          autocmd FileAppendPre                 *.bz2 call GZIP_appre("bzip2 -d")
+          autocmd FileAppendPost                *.gz call GZIP_write("gzip")
+          autocmd FileAppendPost                *.bz2 call GZIP_write("bzip2")
+          " After reading compressed file: Uncompress text in buffer with "cmd"
+          fun! GZIP_read(cmd)
+            " set 'cmdheight' to two, to avoid the hit-return prompt
+            let ch_save = &ch
+            set ch=3
+            " when filtering the whole buffer, it will become empty
+            let empty = line("'[") == 1 && line("']") == line("$")
+            let tmp = tempname()
+            let tmpe = tmp . "." . expand("<afile>:e")
+            " write the just read lines to a temp file "'[,']w tmp.gz"
+            execute "'[,']w " . tmpe
+            " uncompress the temp file: call system("gzip -d tmp.gz")
+            call system(a:cmd . " " . tmpe)
+            " delete the compressed lines
+            '[,']d
+            " read in the uncompressed lines "'[-1r tmp"
+            set nobin
+            execute "'[-1r " . tmp
+            " if buffer became empty, delete trailing blank line
+            if empty
+              normal Gdd''
+            endif
+            " delete the temp file
+            call delete(tmp)
+            let &ch = ch_save
+            " When uncompressed the whole buffer, do autocommands
+            if empty
+              execute ":doautocmd BufReadPost " . expand("%:r")
+            endif
+          endfun
+
+          " After writing compressed file: Compress written file with "cmd"
+          fun! GZIP_write(cmd)
+            if rename(expand("<afile>"), expand("<afile>:r")) == 0
+              call system(a:cmd . " " . expand("<afile>:r"))
+            endif
+          endfun
+
+          " Before appending to compressed file: Uncompress file with "cmd"
+          fun! GZIP_appre(cmd)
+            call system(a:cmd . " " . expand("<afile>"))
+            call rename(expand("<afile>:r"), expand("<afile>"))
+          endfun
+         augroup END
+
+         " This is disabled, because it changes the jumplist.  Can't use CTRL-O to go
+         " back to positions in previous files more than once.
+         if 0
+          " When editing a file, always jump to the last cursor position.
+          " This must be after the uncompress commands.
+           autocmd BufReadPost * if line("'\"") && line("'\"") <= line("$") | exe "normal `\"" | endif
+         endif
+
+      endif " has("autocmd")
+  - |
+      if has("unix")
+        let &shell="zsh\ -l"
+              let &shell="tcsh"
+      endif
+  #Abreviations
+  - |
+      " Abbreviations for some important numbers:
+        iab Npi 3.1415926535897932384626433832795028841972
+      "  iab Ne  2.7182818284590452353602874713526624977573
+      "
+      "     Ydigit : The ten digits.
+        iab Ydigit 1234567890
+      "
+      "     Yruler : A ruler.
+        iab Yruler 1234567890123456789012345678901234567890123456789012345678901234567890123456789012345678901234567890
+      " 
+      "     Ysuper: A nice long word from the musical "Mary Poppins".
+        iab Ysuper supercalifragilisticexpialidocious
+      " 
+      " Inserting an ellipsis to indicate deleted text
+        iab  Yell  [...]
+        vmap ,ell c[...]<ESC>
+        
+      " First, some command to add date stamps (with and without time).
+      " I use these manually after a substantial change to a webpage.
+      " [These abbreviations are used with the mapping for ",L".]
+      "
+        iab Ydate <C-R>=strftime("%y%m%d")<CR>
+      " Example: 971027
+      "
+        iab Ytime <C-R>=strftime("%H:%M")<CR>
+      " Example: 14:28
+      "
+        iab YDT   <C-R>=strftime("%y%m%d %T")<CR>
+      " Example: 971027 12:00:00
+      "
+        iab YDATE <C-R>=strftime("%a %d.%b %Y %T")<CR>
+      " Example: Tue Dec 16 12:07:00 CET 1997
+  #Mappings 
+  - |
+      " Caveat:  Mapping must be "prefix free", ie no mapping must be the
+      " prefix of any other mapping.  Example:  "map ,abc foo" and
+      " "map ,abcd bar" will give you the error message "Ambigous mapping".
+      " 
+      " The backslash ('\') is the only(?) unmapped key, so this is the best
+      " key to start mappings with as this does not take away a command key.
+      " However, the backslash is never in the same position with keyboards.
+      " Eg on German keyboards it is AltGr-sz - don't ask.
+      " Anyway, I have decided to start mappings with the comma as this
+      " character is always on the same position on almost all keyboards
+      " and I hardly have a need for that command.
+      " 
+      " The following maps get rid of some basic problems:
+      " 
+      " When the backspace key sends a "delete" character
+      " then you simply map the "delete" to a "backspace" (CTRL-H):
+        map <Del> <C-H>
+      " 
+      " With Vim-4 the format command was just 'Q' and
+      " I am too used to it.  So I need this back!
+        nnoremap Q gq
+        vnoremap Q gq
+      " 
+      " 980527 I often reformat a paragraph to fit some textwidth -
+      " and I use the following mapping to adjust it to the
+      " current position of the cursor:
+        map #tw :set textwidth=<C-R>=col(".")<C-M>
+      "
+      " 981210 Whenever I paste some text into VIM I have to
+      " toggle from "nopaste" to "paste" and back again:
+      " map <f4>   :set paste!<c-m>:set paste?<c-m>
+      " map <esc>[14~ :set paste!<c-m>:set paste?<c-m>
+      set pastetoggle=<F5>
+      
+      "
+      " Disable the command 'K' (keyword lookup) by mapping it
+      " to an "empty command".  (thanks, Lawrence! :-):
+        map K <NUL>
+      
+      " Make CTRL-^ rebound to the *column* in the previous file
+        noremap <C-^> <C-^>`"
+      "
+      " Make "gf" rebound to last cursor position (line *and* column)
+        noremap gf gf`"
+      "
+      " When I let Vim write the current buffer I frequently mistype the
+      " command ":w" as ":W" - so I have to remap it to correct this typo:
+        nmap :W :w
+      "
+      " Are you used to the Unix commands "alias" and "which"?
+      " I sometimes use these to look up my abbreviations and mappings.
+      " So I need them available on the command line:
+        map :alias map
+        map :which map
+      "
+      " The command {number}CTRL-G show the current nuffer number, too.
+      " This is yet another feature that vi does not have.
+      " As I always want to see the buffer number I map it to CTRL-G.
+      " Pleae note that here we need to prevent a loop in the mapping by
+      " using the comamnd "noremap"!
+        noremap <C-G> 2<C-G>
+      "
+      " 980706  Sourcing syntax files from the distribution
+      " A nice and fast way to both source syntax files
+      " and to take a look at "what's there":
+        map ,V  :so $VIMRUNTIME/syntax/2html.vim<CR>kJ
+      "
+      " Make p in Visual mode replace the selected text with the "" register.
+        vnoremap p    <Esc>:let current_reg = @"<CR>gvdi<C-R>=current_reg<CR><Esc>
+
+  #Customizing the command line
+  - |
+      " Valid names for keys are:  <Up> <Down> <Left> <Right> <Home> <End>
+      " <S-Left> <S-Right> <S-Up> <PageUp> <S-Down> <PageDown>  <LeftMouse>
+      "
+      " Many shells allow editing in "Emacs Style".
+      " Although I love Vi, I am quite used to this kind of editing now.
+      " So here it is - command line editing commands in emacs style:
+        cnoremap <C-A> <Home>
+        cnoremap <C-F> <Right>
+        cnoremap <C-B> <Left>
+        cnoremap <C-E> <End>
+        cnoremap <ESC>b <S-Left>
+        cnoremap <ESC>f <S-Right>
+        cnoremap <ESC><C-H> <C-W>
+      " 
+      " Additional codes for that "English" keyboard at the Xterminal
+        cnoremap <ESC>[D <Left>
+        cnoremap <ESC>[C <Right>
+
+  #VIM - Editing and updating the vimrc:
+  - |
+      " As I often make changes to this file I use these commands
+      " to start editing it and also update it:
+        if has("unix")
+          let vimrc='~/.vimrc'
+        else
+      " ie:  if has("dos16") || has("dos32") || has("win32")
+          let vimrc='$VIM\_vimrc'
+        endif
+        nn  ,u :source <C-R>=vimrc<CR><CR>
+  #General Editing
+  - |
+      " Define "del" char to be the same backspace (saves a LOT of trouble!)
+      " As the angle notation cannot be use with the LeftHandSide
+      " with mappings you must type this in *literally*!
+      " map <C-V>127 <C-H>
+      "cmap <C-V>127 <C-H>
+      " the same for Linux Debian which uses
+       imap <Esc>[3~ <C-H>
+       imap ^?       <C-H>
+       cmap ^?       <C-H>
+      " 
+      "      ;rcm = remove "control-m"s - for those mails sent from DOS:
+        cmap ;rcm %s/<C-M>//g
+      " 
+      "     Make whitespace visible:
+      "     Sws = show whitespace
+        nmap ,Sws :%s/ /_/g<C-M>
+        vmap ,Sws :%s/ /_/g<C-M>
+      "      
+      "     Sometimes you just want to *see* that trailing whitespace:
+      "     Stws = show trailing whitespace
+        nmap ,Stws :%s/  *$/_/g<C-M>
+        vmap ,Stws :%s/  *$/_/g<C-M>
+      " 
+      " General Editing - Turning umlauts into ascii (for German keyboards)
+      "
+      " imap ï¿½ ae
+      " imap ï¿½ oe
+      " imap ï¿½ ue
+      " imap ï¿½ ss
+      "
+      " &#196; -> ï¿½  :%s/\&#196;/�/gc  -> D
+      " &#214; -> ï¿½  :%s/\&#214;/�/gc  -> V
+      " &#220; -> ï¿½  :%s/\&#220;/�/gc  -> \
+      " &#228; -> ï¿½  :%s/\&#228;/�/gc  -> d
+      " &#246; -> ï¿½  :%s/\&#246;/�/gc  -> v
+      " &#252; -> ï¿½  :%s/\&#252;/�/gc  -> |
+
+#Inserting Dates and Times / Updating Date+Time Stamps
+  - |
+      "     ,L  = "Last updated" - replace old time stamp with a new one
+      "        preserving whitespace and using internal "strftime" command:
+      "       requires the abbreviation  "YDATE"
+      if line("$") > 20
+              let l = 20
+              else
+              let l = line("$")
+              endif
+      
+      if exists("$REMOTEHOST")
+              let $my_host = $REMOTEHOST
+      else
+              let $my_host = $HOST
+      endif
+      
+      map ,L  1G/Last update:\s*/e+1<CR>CYDATE by user <ESC>D:r! echo "$USER" "($my_host)"<CR>kJ
+      map ,,L 1G/Last change:\s*/e+1<CR>CYDATE by user <ESC>D:r! echo "$USER" "($my_host)"<CR>kJ
+      
+      " Example:
+      " before:  "Last update:   Thu Apr  6 12:07:00 CET 1967"
+      " after:   "Last update:   Tue Dec 16 12:07:00 CET 1997"
+
+#General Editing - link to program "screen" 
+  - |
+      "       ,Et = edit temporary file of "screen" program
+        map   ,Et :e /tmp/screen-exchange
+      "       as a user of Unix systems you *must* have this program!
+      "       see also:  http://www.math.fu-berlin.de/~guckes/screen/
+      " 
+#shift + __  -> toggle syntax hl
+  - |
+        nn __ mg:if has("syntax_items")<Bar>syn clear<CR>else<Bar>syn on<CR>en<CR>`g
\ No newline at end of file
diff --git a/customer/pixelpark/streamingmedia01.pixelpark.net.yaml b/customer/pixelpark/streamingmedia01.pixelpark.net.yaml
new file mode 100644 (file)
index 0000000..4c3c2b5
--- /dev/null
@@ -0,0 +1,2 @@
+---
+site::role: base
diff --git a/customer/pixelpark/streamingmedia02.pixelpark.net.yaml b/customer/pixelpark/streamingmedia02.pixelpark.net.yaml
new file mode 100644 (file)
index 0000000..4c3c2b5
--- /dev/null
@@ -0,0 +1,2 @@
+---
+site::role: base
diff --git a/customer/pixelpark/tellus.pixelpark.net.yaml b/customer/pixelpark/tellus.pixelpark.net.yaml
new file mode 100644 (file)
index 0000000..1a8c5a2
--- /dev/null
@@ -0,0 +1,4 @@
+---
+site::additional_classes:
+  - xymon
+
diff --git a/customer/pixelpark/test-confluence01.pixelpark.net.yaml b/customer/pixelpark/test-confluence01.pixelpark.net.yaml
new file mode 100644 (file)
index 0000000..b130cfa
--- /dev/null
@@ -0,0 +1,17 @@
+---
+site::role: base
+httpd::webserver:
+  test-confluence01.pixelpark.net:
+    modules:
+      - proxy_ajp
+    listens:
+      - 0.0.0.0:80
+      - 0.0.0.0:443
+    extendedStatus: true
+    worker: true
+    
+accounts::users:
+  carsten.hensiek:
+    apply: true
+  samuel.bufe:
+    apply: true
diff --git a/customer/pixelpark/test-extranet01.pixelpark.com.yaml b/customer/pixelpark/test-extranet01.pixelpark.com.yaml
new file mode 100644 (file)
index 0000000..94c40db
--- /dev/null
@@ -0,0 +1,6 @@
+---
+site::role: base
+accounts::users:
+  carsten.hensiek:
+    apply: true
+    sudo: true
\ No newline at end of file
diff --git a/customer/pixelpark/test-jira01.pixelpark.net.yaml b/customer/pixelpark/test-jira01.pixelpark.net.yaml
new file mode 100644 (file)
index 0000000..00d84e5
--- /dev/null
@@ -0,0 +1,11 @@
+---
+site::role: base
+httpd::webserver:
+  test-jira01.pixelpark.net:
+    modules:
+      - proxy_ajp
+    listens:
+      - 0.0.0.0:80
+      - 0.0.0.0:443
+    extendedStatus: true
+    worker: true
diff --git a/customer/pixelpark/test-master01-bmwi-de.pixelpark.net.yaml b/customer/pixelpark/test-master01-bmwi-de.pixelpark.net.yaml
new file mode 100644 (file)
index 0000000..197004a
--- /dev/null
@@ -0,0 +1,5 @@
+---
+site::additional_classes:
+  - accounts
+  - pp_mcollective
+
diff --git a/customer/pixelpark/test-master01.prometheus.pixelpark.net.yaml b/customer/pixelpark/test-master01.prometheus.pixelpark.net.yaml
new file mode 100644 (file)
index 0000000..2a1de13
--- /dev/null
@@ -0,0 +1,7 @@
+---
+site::role: base
+
+accounts::users:
+  samuel.bufe:
+    apply: true
+    sudo: true
diff --git a/customer/pixelpark/test-monitoring01.pixelpark.net.yaml b/customer/pixelpark/test-monitoring01.pixelpark.net.yaml
new file mode 100644 (file)
index 0000000..4f3699a
--- /dev/null
@@ -0,0 +1,8 @@
+---
+site::role: base
+
+accounts::users:
+  ivan.prikhodko:
+    apply: true
+    sudo: true
+
diff --git a/customer/pixelpark/test-psql-pp01.pixelpark.net.yaml b/customer/pixelpark/test-psql-pp01.pixelpark.net.yaml
new file mode 100644 (file)
index 0000000..31c695b
--- /dev/null
@@ -0,0 +1,50 @@
+---
+site::role: base
+#site::additional_classes:
+#  - site::profile::postgresql_server
+
+postgresql::globals::validcon_script_path: "/www/tmp/valid_postgres_connection.sh"
+postgresql::globals::version: "9.3"
+
+postgresql::server::ipv4acls:
+  - "host confluence confluence 217.66.53.112/32 md5" # Test Confluence
+  - "host confluence confluence 217.66.51.0/24 md5" # Test Confluence  Admin Netz
+  - "host jira jira 217.66.53.111/32 md5" # Test Jira
+  - "host jira jira 217.66.51.0/24 md5" # Test Jira Admin Netz
+  - "host jira_test jira 217.66.51.0/24 md5" # Test JIRA Migration
+  - "host confluence_ext confluence_ext 217.66.53.108/32 md5" # Test Confluence Extranet
+  - "host confluence_ext confluence_ext 217.66.51.0/24 md5" #  Test Confluence Extranet
+  - "host confluence_test confluence_test 217.66.53.109/32 md5" # Test Confluence Migration
+  - "host confluence_test confluence_test 217.66.53.112/32 md5" # Test Confluence Migration
+  - "host confluence_test confluence_test 217.66.51.0/24 md5" # Test Confluence Migration
+  - "host postgres xymon 217.66.53.170/32 trust" # self access Xymon
+  
+postgresql::server::listen_addresses: 217.66.53.170
+
+site::profile::postgresql_server::tablespaces:
+  ts_confluence:
+    location: '/www/data/postgres/ts_confluence'
+    owner: confluence
+  ts_jira:
+    location: '/www/data/postgres/ts_jira'
+    owner: jira
+  ts_jira_test:
+    location: '/www/data/postgres/ts_jira_test'
+    owner: jira
+  ts_confluence_ext:
+    location: '/www/data/postgres/ts_confluence_ext'
+    owner: confluence_ext
+
+site::profile::postgresql_server::databases:
+  confluence:
+    tablespace: ts_confluence
+    user: confluence
+    password: ENC[PKCS7,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]
+  jira:
+    tablespace: ts_jira
+    user: jira
+    password: ENC[PKCS7,MIIBiQYJKoZIhvcNAQcDoIIBejCCAXYCAQAxggEhMIIBHQIBADAFMAACAQEwDQYJKoZIhvcNAQEBBQAEggEAHmXMJPvxowveFrVITrjHeLhYjhCDXTs6vUEWYzNgGrzpPs70r8FotFgmllpMGj1RcFk1POSd9RDLsrnG/3UO2r3t8whaZtDoZ3Xp89f/VPYucveXi/hVs3A+w1qrlIdG5kIe7C8QM5zYD0qZDM5h+Zp3X+BjoKP5ON2eGBYeo57QTZQOjZR8JvkQThN7Go97lhkRExq4EWPHNunrrzbmn6XVzBdlATO0nO0fWuuRItwPTFPtYGSr545zdbsib/JkibG4VPrkoStNYduQ14VhEjQxLND9bNscfwwry+24v2lrsIXuGqWSfe/Xty+H0chacL+qSRUUf9mzbKVaifY9QjBMBgkqhkiG9w0BBwEwHQYJYIZIAWUDBAEqBBC9HizFvslNA8uUx5AcKX9bgCA5qlQkmrGBHfpY5cLGZFBW6eihAYumx3ZKKRPCO0WZNg==]
+  confluence_ext:
+    tablespace: ts_confluence_ext
+    user: confluence_ext
+    password: ENC[PKCS7,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]
diff --git a/customer/pixelpark/test-red-bmwi-de.pixelpark.net.yaml b/customer/pixelpark/test-red-bmwi-de.pixelpark.net.yaml
new file mode 100644 (file)
index 0000000..af95ee4
--- /dev/null
@@ -0,0 +1,4 @@
+---
+site::additional_classes:
+  - accounts
+
diff --git a/customer/pixelpark/test-slave01.prometheus.pixelpark.net.yaml b/customer/pixelpark/test-slave01.prometheus.pixelpark.net.yaml
new file mode 100644 (file)
index 0000000..2a1de13
--- /dev/null
@@ -0,0 +1,7 @@
+---
+site::role: base
+
+accounts::users:
+  samuel.bufe:
+    apply: true
+    sudo: true
diff --git a/customer/pixelpark/test-www01-bmwi-de.pixelpark.net.yaml b/customer/pixelpark/test-www01-bmwi-de.pixelpark.net.yaml
new file mode 100644 (file)
index 0000000..197004a
--- /dev/null
@@ -0,0 +1,5 @@
+---
+site::additional_classes:
+  - accounts
+  - pp_mcollective
+
diff --git a/customer/pixelpark/test.yaml b/customer/pixelpark/test.yaml
new file mode 100644 (file)
index 0000000..61a7bf6
--- /dev/null
@@ -0,0 +1,5 @@
+---
+accounts::users:
+  michael.krause:
+    apply: true
+    sudo: true
diff --git a/customer/pixelpark/vm-elk-01.pixelpark.net.yaml b/customer/pixelpark/vm-elk-01.pixelpark.net.yaml
new file mode 100644 (file)
index 0000000..31dd860
--- /dev/null
@@ -0,0 +1,2 @@
+---
+site::role: base
\ No newline at end of file
diff --git a/customer/pixelpark/vm-elk-02.pixelpark.net.yaml b/customer/pixelpark/vm-elk-02.pixelpark.net.yaml
new file mode 100644 (file)
index 0000000..31dd860
--- /dev/null
@@ -0,0 +1,2 @@
+---
+site::role: base
\ No newline at end of file
diff --git a/customer/pixelpark/vm-puppetclient.cloud.pixelpark.internal.yaml b/customer/pixelpark/vm-puppetclient.cloud.pixelpark.internal.yaml
new file mode 100644 (file)
index 0000000..13e2c91
--- /dev/null
@@ -0,0 +1,11 @@
+---
+database::params::database_name: "postgresql"
+database::params::version: "9.3"
+database::postgresqlUser:
+  testuser1:
+    ensure: "present"
+    createdb: true
+    createrole : false
+    login: true
+    password: "mypass"
+    superuser: true
diff --git a/customer/pixelpark/vm04-olli.pixelpark.com.yaml b/customer/pixelpark/vm04-olli.pixelpark.com.yaml
new file mode 100644 (file)
index 0000000..623d627
--- /dev/null
@@ -0,0 +1,70 @@
+---
+
+site::role: base
+site::additional_classes:
+  - site::profile::apache
+  - apache::mod::wsgi
+
+apache::default_vhost: false
+apache::mpm_module: worker
+
+apache::mod::wsgi::wsgi_python_home: /www/apps/python-venv-portal-esysta-com
+
+site::profile::apache::vhosts:
+  esysta:
+    servername: portal-esysta-com.pixelpark.net
+    serveraliases:
+      - portal.esysta.com
+    docroot: '/var/www/esysta'
+    ip: 217.66.51.181
+    port: 80
+    directories:
+      - directory_root:
+        provider: directory
+        path: '/var/www/esysta'
+        options:
+          - FollowSymLinks
+          - MultiViews
+        allow_override:
+          - All
+    wsgi_daemon_process: staffsite
+    wsgi_daemon_process_options:
+      processes: 2
+      threads: 15
+      display-name: "%%{BLUBB}{GROUP}"
+      maximum-requests: 10000
+      python-path: "/www/apps/python-venv-portal-esysta-com/lib/python2.6/site-packages:/www/htdocs/portal.esysta.com/docs/portal_esysta_com/lib"
+    wsgi_process_group: staffsite
+    wsgi_script_aliases:
+      '/': '/www/htdocs/portal.esysta.com/docs/portal_esysta_com/lib/support/wsgi.py'
+
+  esysta_ssl:
+    servername: portal-esysta-com.pixelpark.net
+    serveraliases:
+      - portal.esysta.com
+    docroot: '/var/www/esysta'
+    ip: 217.66.51.181
+    port: 443
+    ssl: true
+    ssl_cert: /etc/pki/tls/certs/wildcard.pixelpark.net-cert.pem
+    ssl_chain: /etc/pki/tls/certs/wildcard.pixelpark.net-cert.pem
+    ssl_key: /etc/pki/tls/private/wildcard.pixelpark.net-key.pem
+    directories:
+      - directory_root:
+        provider: directory
+        path: '/var/www/esysta'
+        options:
+          - FollowSymLinks
+          - MultiViews
+        allow_override:
+          - All
+    wsgi_daemon_process: staffsite_ssl
+    wsgi_daemon_process_options:
+      processes: 2
+      threads: 15
+      display-name: "%%{BLUBB}{GROUP}"
+      maximum-requests: 10000
+      python-path: "/www/apps/python-venv-portal-esysta-com/lib/python2.6/site-packages:/www/htdocs/portal.esysta.com/docs/portal_esysta_com/lib"
+    wsgi_process_group: staffsite_ssl
+    wsgi_script_aliases:
+      '/': '/www/htdocs/portal.esysta.com/docs/portal_esysta_com/lib/support/wsgi.py'
diff --git a/customer/pixelpark/web-client-survey.pixelpark.com.yaml b/customer/pixelpark/web-client-survey.pixelpark.com.yaml
new file mode 100644 (file)
index 0000000..287486c
--- /dev/null
@@ -0,0 +1,66 @@
+---
+accounts::users:
+  daniel.pritzkau:
+    apply: true
+    sudo: true
+    sudo_cmds:
+      - RESTARTNODE
+      - JOURNALCTL
+      - JOURNAL
+
+sudo::configs:
+  cmd_alias:
+    priority: "05"
+    content: |
+      Cmnd_Alias RESTARTNODE = /bin/systemctl restart node-survey.service
+      Cmnd_Alias JOURNALCTL = /bin/journalctl -f -u node-survey.service
+      Cmnd_Alias JOURNAL = /bin/journalctl/bin/journalctl -u node-survey.service
+
+site::role: base
+site::additional_classes:
+  - site::profile::apache
+  - apache::mod::headers
+  - nodejs
+  - site::profile::mysql_server
+
+mysql::server::root_password: ENC[PKCS7,MIIBiQYJKoZIhvcNAQcDoIIBejCCAXYCAQAxggEhMIIBHQIBADAFMAACAQEwDQYJKoZIhvcNAQEBBQAEggEAPCo/9hlPSqjUtb4e5shtBwK7m6KwS6tOefhiz2B7JTlQpDRWzn3lxVUBhxdEy9vtCLAb9yrll602tSKxv4mjUIQ1Rd1eRZDOdGzY/l0ElHm44IKBnK3FtZroMLus6J4UyBUJu6ow4gYL45r7wsTVfgqhZl5pnmyWrJewI+U8rXDfOjUwsPzWyBggut/wh/tVwF9YU3AuXf5Z2+lEd0LHgAGQrLx/U2oBoIP+oGhODmoH/mg5zAA/ldFFzjDsAj5wSdaG/o9j/dvTHPQgaFm2j3ZCvMPZeDGgCzysFY8L1MqPfRXhN50gyK/6L3oRmnbb+pYhQv/S+GwTkcfzoe8tPDBMBgkqhkiG9w0BBwEwHQYJYIZIAWUDBAEqBBAfddZ6pyD+bPJ6CZ6oo9ZBgCDd8m2FSjj24l1D2vCDhZIYtuSmM6xRG4esiRBbrlgZ0g==]
+mysql::server::backup::backuppassword: ENC[PKCS7,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]
+site::profile::mysql_server::databases:
+  clientsurvey:
+    user: clientsurvey
+    password: ENC[PKCS7,MIIBeQYJKoZIhvcNAQcDoIIBajCCAWYCAQAxggEhMIIBHQIBADAFMAACAQEwDQYJKoZIhvcNAQEBBQAEggEAaAVh5WMbKzcyTCQ5UvhMGmg4i1PLiFfz//KJD0JxXLS1ydzTsMbDKxMvYT92wCzp8YBybNP4W1GcsEfjAxHS275KZ6hcfRWrPgkMYDpULgzmpZifMHmYKrQlTgk+Sylox/qZrXLBP0cLEuQZptvHKvRZIaqOpTfAEJUI7eLPiqxbxl/UYsoiF0byKE0/MS+CbNMZdph1/H0cko4O/Gw57gUXeELEAf9LcX6sIGtcDmyUonMLEQa86dc731n1VxUnFR4FbZKpCk9MYVzdtmxgPa+xy0GvyOh1CdCHdp3ZIuOF2EBubApdeIVV6bWEsfTvHOqaJa+aejZ0Y4AVpAZdFzA8BgkqhkiG9w0BBwEwHQYJYIZIAWUDBAEqBBApzLJDeFJwYkF53a6laiN/gBDwiIJD7cGFIg477jJyHGsP]
+
+apache::default_vhost: false
+
+site::profile::apache::vhosts:
+  clientsurvey.pixelpark.com:
+    servername: www.clientsurvey.pixelpark.com
+    serveraliases:
+      - clientsurvey.pixelpark.com
+#     - client-survey.pixelpark.com
+    docroot: '/srv/www/clientsurvey.pixelpark.com'
+    ip: 217.66.53.184
+    docroot_owner: 'daniel.pritzkau'
+    docroot_group: 'root'
+    docroot_mode: '0755'
+    port: 80
+    proxy_pass:
+      - { path: /, url: 'http://217.66.53.184:8500/' }
+
+  clientsurvey.pixelpark.com_ssl:
+    servername: clientsurvey.pixelpark.com
+    serveraliases:
+      - clientsurvey.pixelpark.com
+#     - client-survey.pixelpark.com
+    docroot: '/srv/www/clientsurvey.pixelpark.com'
+    ip: 217.66.53.184
+    docroot_owner: 'daniel.pritzkau'
+    docroot_group: 'root'
+    docroot_mode: '0755'
+    port: 443
+    ssl: true
+    ssl_cert: /etc/pki/tls/certs/wildcard.pixelpark.com-cert.pem
+    ssl_chain: /etc/pki/tls/certs/wildcard.pixelpark.com-cert.pem
+    ssl_key: /etc/pki/tls/private/wildcard.pixelpark.com-key.pem
+    proxy_pass:
+      - { path: /, url: 'http://217.66.53.184:8500/' }
diff --git a/customer/pixelpark/web-inhalte.pixelpark.net.yaml b/customer/pixelpark/web-inhalte.pixelpark.net.yaml
new file mode 100644 (file)
index 0000000..412a3b2
--- /dev/null
@@ -0,0 +1,33 @@
+---
+site::role: base
+site::additional_classes:
+  - site::profile::apache
+  - logstash
+
+# Apache Konfiguration
+apache::mpm_module: worker
+apache::mod::worker::maxclients: 1400
+apache::mod::worker::threadsperchild: 60
+apache::mod::worker::maxrequestsperchild: 10000
+
+apache::logroot: '/srv/log/httpd'
+site::profile::apache::pp_vhosts:
+  web-inhalte:
+    docroot: '/srv/www/inhalte'
+    servername: inhalte.pixelpark.net
+    docroot_group: ppk-redaktion
+    docroot_mode: '2775'
+    redirect_status_non_ssl: 'permanent'
+    redirect_dest_non_ssl: 'https://inhalte.pixelpark.net/'
+    ssl_cert: '/etc/pki/tls/certs/wildcard.pixelpark.net-cert.pem'
+    ssl_chain: '/etc/pki/tls/certs/wildcard.pixelpark.net-cert.pem'
+    ssl_key: '/etc/pki/tls/private/wildcard.pixelpark.net-key.pem'
+    headers_ssl:
+      - always set Strict-Transport-Security "max-age=63072000"
+    directories:
+      - directory1:
+        provider: directory
+        path: '/srv/www/inhalte'
+        options:
+          - FollowSymLinks
+          - MultiViews
diff --git a/customer/pixelpark/web01-ar.pixelpark.com.yaml b/customer/pixelpark/web01-ar.pixelpark.com.yaml
new file mode 100644 (file)
index 0000000..a6d1102
--- /dev/null
@@ -0,0 +1,44 @@
+---
+site::role: base
+
+site::additional_classes:
+  - logstash
+
+logstash::filter:
+  - journald
+
+logstash::generic_resource:
+  mesos-master:
+    resource: pipe
+    order: 10 # Input
+    parameters:
+      command: 'journalctl -fl -u mesos-master'
+      type: mesos-master
+      tags: 
+        - 'talos'
+
+  chronos:
+    resource: pipe
+    order: 10 # Input
+    parameters:
+      command: 'journalctl -fl -u chronos'
+      type: chronos
+      tags: 
+        - 'talos'
+
+  marathon:
+    resource: pipe
+    order: 10 # Input
+    parameters:
+      command: 'journalctl -fl -u marathon'
+      type: marathon
+      tags: 
+        - 'talos'
+
+accounts::users:
+  sebastian.kuepers:
+    apply: true
+    sudo: true
+  samuel.bufe:
+    apply: true
+    sudo: true
\ No newline at end of file
diff --git a/customer/pixelpark/web01-mbvd.pixelpark.net.yaml b/customer/pixelpark/web01-mbvd.pixelpark.net.yaml
new file mode 100644 (file)
index 0000000..4c3c2b5
--- /dev/null
@@ -0,0 +1,2 @@
+---
+site::role: base
diff --git a/customer/pixelpark/web01.sparkasse.de.yaml b/customer/pixelpark/web01.sparkasse.de.yaml
new file mode 100644 (file)
index 0000000..3295dda
--- /dev/null
@@ -0,0 +1,4 @@
+---
+site::additional_classes:
+  - repo
+
diff --git a/customer/pixelpark/web02-ar.pixelpark.com.yaml b/customer/pixelpark/web02-ar.pixelpark.com.yaml
new file mode 100644 (file)
index 0000000..38a085f
--- /dev/null
@@ -0,0 +1,34 @@
+---
+site::role: base
+
+site::additional_classes:
+  - logstash
+
+logstash::filter:
+  - journald
+
+logstash::generic_resource:
+  mesos-slave:
+    resource: pipe
+    order: 10 # Input
+    parameters:
+      command: 'journalctl -fl -u mesos-slave'
+      type: mesos-slave
+      tags: 
+        - 'talos'
+  docker:
+    resource: pipe
+    order: 10 # Input
+    parameters:
+      command: 'journalctl -fl -u docker'
+      type: docker
+      tags: 
+        - 'talos'
+
+accounts::users:
+  sebastian.kuepers:
+    apply: true
+    sudo: true
+  samuel.bufe:
+    apply: true
+    sudo: true
\ No newline at end of file
diff --git a/customer/pixelpark/web02.sparkasse.local.yaml b/customer/pixelpark/web02.sparkasse.local.yaml
new file mode 100644 (file)
index 0000000..3295dda
--- /dev/null
@@ -0,0 +1,4 @@
+---
+site::additional_classes:
+  - repo
+
diff --git a/customer/pixelpark/web03-ar.pixelpark.com.yaml b/customer/pixelpark/web03-ar.pixelpark.com.yaml
new file mode 100644 (file)
index 0000000..38a085f
--- /dev/null
@@ -0,0 +1,34 @@
+---
+site::role: base
+
+site::additional_classes:
+  - logstash
+
+logstash::filter:
+  - journald
+
+logstash::generic_resource:
+  mesos-slave:
+    resource: pipe
+    order: 10 # Input
+    parameters:
+      command: 'journalctl -fl -u mesos-slave'
+      type: mesos-slave
+      tags: 
+        - 'talos'
+  docker:
+    resource: pipe
+    order: 10 # Input
+    parameters:
+      command: 'journalctl -fl -u docker'
+      type: docker
+      tags: 
+        - 'talos'
+
+accounts::users:
+  sebastian.kuepers:
+    apply: true
+    sudo: true
+  samuel.bufe:
+    apply: true
+    sudo: true
\ No newline at end of file
diff --git a/customer/pixelpark/web04-ar.pixelpark.com.yaml b/customer/pixelpark/web04-ar.pixelpark.com.yaml
new file mode 100644 (file)
index 0000000..38a085f
--- /dev/null
@@ -0,0 +1,34 @@
+---
+site::role: base
+
+site::additional_classes:
+  - logstash
+
+logstash::filter:
+  - journald
+
+logstash::generic_resource:
+  mesos-slave:
+    resource: pipe
+    order: 10 # Input
+    parameters:
+      command: 'journalctl -fl -u mesos-slave'
+      type: mesos-slave
+      tags: 
+        - 'talos'
+  docker:
+    resource: pipe
+    order: 10 # Input
+    parameters:
+      command: 'journalctl -fl -u docker'
+      type: docker
+      tags: 
+        - 'talos'
+
+accounts::users:
+  sebastian.kuepers:
+    apply: true
+    sudo: true
+  samuel.bufe:
+    apply: true
+    sudo: true
\ No newline at end of file
diff --git a/customer/pixelpark/web05-ar.pixelpark.com.yaml b/customer/pixelpark/web05-ar.pixelpark.com.yaml
new file mode 100644 (file)
index 0000000..38a085f
--- /dev/null
@@ -0,0 +1,34 @@
+---
+site::role: base
+
+site::additional_classes:
+  - logstash
+
+logstash::filter:
+  - journald
+
+logstash::generic_resource:
+  mesos-slave:
+    resource: pipe
+    order: 10 # Input
+    parameters:
+      command: 'journalctl -fl -u mesos-slave'
+      type: mesos-slave
+      tags: 
+        - 'talos'
+  docker:
+    resource: pipe
+    order: 10 # Input
+    parameters:
+      command: 'journalctl -fl -u docker'
+      type: docker
+      tags: 
+        - 'talos'
+
+accounts::users:
+  sebastian.kuepers:
+    apply: true
+    sudo: true
+  samuel.bufe:
+    apply: true
+    sudo: true
\ No newline at end of file
diff --git a/customer/pixelpark/www01-bmwi-de.pixelpark.net.yaml b/customer/pixelpark/www01-bmwi-de.pixelpark.net.yaml
new file mode 100644 (file)
index 0000000..7621a46
--- /dev/null
@@ -0,0 +1,5 @@
+---
+site::role: base
+site::additional_classes:
+  - pp_mcollective
+
diff --git a/customer/pixelpark/www02-bmwi-de.pixelpark.net.yaml b/customer/pixelpark/www02-bmwi-de.pixelpark.net.yaml
new file mode 100644 (file)
index 0000000..4c3c2b5
--- /dev/null
@@ -0,0 +1,2 @@
+---
+site::role: base
diff --git a/customer/pixelpark/xymon.pixelpark.com.yaml b/customer/pixelpark/xymon.pixelpark.com.yaml
new file mode 100644 (file)
index 0000000..690cc7e
--- /dev/null
@@ -0,0 +1,4 @@
+---
+site::additional_classes:
+  - xymon_server
+
diff --git a/customer/pixelpark/zabbixTesting.yaml b/customer/pixelpark/zabbixTesting.yaml
new file mode 100644 (file)
index 0000000..2dea9e3
--- /dev/null
@@ -0,0 +1,9 @@
+---
+#zabbix::agent::server: '217.66.51.48'
+#zabbix::agent::listenport: 10050
+#zabbix::agent::manage_repo: false
+
+zabbix::agent::server: '217.66.51.48,217.66.51.91'
+zabbix::agent::manage_repo: true
+zabbix::repo::version: '2.4'
+
diff --git a/customer/pixeltest/sol4711.pixelpark.com.yaml b/customer/pixeltest/sol4711.pixelpark.com.yaml
new file mode 100644 (file)
index 0000000..4c3c2b5
--- /dev/null
@@ -0,0 +1,2 @@
+---
+site::role: base
diff --git a/customer/ppCloud/atropos.cloud.pixelpark.internal.yaml b/customer/ppCloud/atropos.cloud.pixelpark.internal.yaml
new file mode 100644 (file)
index 0000000..e22ced0
--- /dev/null
@@ -0,0 +1,7 @@
+---
+xymon::modules:
+  - "ipmi"
+  - "net2"
+  - "top"
+  - "lsiRaidctl"
+  - "cloud"
diff --git a/customer/ppCloud/badb.cloud.pixelpark.internal.yaml b/customer/ppCloud/badb.cloud.pixelpark.internal.yaml
new file mode 100644 (file)
index 0000000..56808a7
--- /dev/null
@@ -0,0 +1,7 @@
+---
+xymon::modules:
+  - "ipmi"
+  - "net2"
+  - "top"
+  - "stkRaid"
+  - "cloud"
diff --git a/customer/ppCloud/beowulf.cloud.pixelpark.internal.yaml b/customer/ppCloud/beowulf.cloud.pixelpark.internal.yaml
new file mode 100644 (file)
index 0000000..56808a7
--- /dev/null
@@ -0,0 +1,7 @@
+---
+xymon::modules:
+  - "ipmi"
+  - "net2"
+  - "top"
+  - "stkRaid"
+  - "cloud"
diff --git a/customer/ppCloud/development.yaml b/customer/ppCloud/development.yaml
new file mode 100644 (file)
index 0000000..3d90ce1
--- /dev/null
@@ -0,0 +1,2 @@
+---
+accounts::params::use_www_tree: false
diff --git a/customer/ppCloud/fortuna.pixelpark.net.yaml b/customer/ppCloud/fortuna.pixelpark.net.yaml
new file mode 100644 (file)
index 0000000..5010aef
--- /dev/null
@@ -0,0 +1,4 @@
+---
+xymon::modules:
+  - "top"
+  - "cloud"
diff --git a/customer/ppCloud/frigg.cloud.pixelpark.internal.yaml b/customer/ppCloud/frigg.cloud.pixelpark.internal.yaml
new file mode 100644 (file)
index 0000000..56808a7
--- /dev/null
@@ -0,0 +1,7 @@
+---
+xymon::modules:
+  - "ipmi"
+  - "net2"
+  - "top"
+  - "stkRaid"
+  - "cloud"
diff --git a/customer/ppCloud/furrina.cloud.pixelpark.internal.yaml b/customer/ppCloud/furrina.cloud.pixelpark.internal.yaml
new file mode 100644 (file)
index 0000000..e22ced0
--- /dev/null
@@ -0,0 +1,7 @@
+---
+xymon::modules:
+  - "ipmi"
+  - "net2"
+  - "top"
+  - "lsiRaidctl"
+  - "cloud"
diff --git a/customer/ppCloud/grazien.cloud.pixelpark.internal.yaml b/customer/ppCloud/grazien.cloud.pixelpark.internal.yaml
new file mode 100644 (file)
index 0000000..e22ced0
--- /dev/null
@@ -0,0 +1,7 @@
+---
+xymon::modules:
+  - "ipmi"
+  - "net2"
+  - "top"
+  - "lsiRaidctl"
+  - "cloud"
diff --git a/customer/ppCloud/moros.cloud.pixelpark.internal.yaml b/customer/ppCloud/moros.cloud.pixelpark.internal.yaml
new file mode 100644 (file)
index 0000000..e22ced0
--- /dev/null
@@ -0,0 +1,7 @@
+---
+xymon::modules:
+  - "ipmi"
+  - "net2"
+  - "top"
+  - "lsiRaidctl"
+  - "cloud"
diff --git a/customer/ppCloud/necat.cloud.pixelpark.internal.yaml b/customer/ppCloud/necat.cloud.pixelpark.internal.yaml
new file mode 100644 (file)
index 0000000..56808a7
--- /dev/null
@@ -0,0 +1,7 @@
+---
+xymon::modules:
+  - "ipmi"
+  - "net2"
+  - "top"
+  - "stkRaid"
+  - "cloud"
diff --git a/customer/ppCloud/not.cloud.pixelpark.internal.yaml b/customer/ppCloud/not.cloud.pixelpark.internal.yaml
new file mode 100644 (file)
index 0000000..e22ced0
--- /dev/null
@@ -0,0 +1,7 @@
+---
+xymon::modules:
+  - "ipmi"
+  - "net2"
+  - "top"
+  - "lsiRaidctl"
+  - "cloud"
diff --git a/customer/ppCloud/orlam.cloud.pixelpark.internal.yaml b/customer/ppCloud/orlam.cloud.pixelpark.internal.yaml
new file mode 100644 (file)
index 0000000..56808a7
--- /dev/null
@@ -0,0 +1,7 @@
+---
+xymon::modules:
+  - "ipmi"
+  - "net2"
+  - "top"
+  - "stkRaid"
+  - "cloud"
diff --git a/customer/ppCloud/pothos.cloud.pixelpark.internal.yaml b/customer/ppCloud/pothos.cloud.pixelpark.internal.yaml
new file mode 100644 (file)
index 0000000..56808a7
--- /dev/null
@@ -0,0 +1,7 @@
+---
+xymon::modules:
+  - "ipmi"
+  - "net2"
+  - "top"
+  - "stkRaid"
+  - "cloud"
diff --git a/customer/ppCloud/production.yaml b/customer/ppCloud/production.yaml
new file mode 100644 (file)
index 0000000..c36a34b
--- /dev/null
@@ -0,0 +1,6 @@
+---
+accounts::params::use_www_tree: false
+accounts::users:
+  hastexo:
+    apply: true
+    sudo: true
diff --git a/customer/q_perior/test-www-q-perior.pixelpark.net.yaml b/customer/q_perior/test-www-q-perior.pixelpark.net.yaml
new file mode 100644 (file)
index 0000000..0a32d9e
--- /dev/null
@@ -0,0 +1,83 @@
+---
+site::role: base
+site::additional_classes:
+  - site::profile::wordpress
+  - site::profile::mysql_server
+
+accounts::users:
+  christian.mueller:
+    apply: true
+    groups: apache
+
+site::profile::apache::htdigest:
+  server:
+    www: ENC[PKCS7,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]
+
+mysql::server::root_password: ENC[PKCS7,MIIBiQYJKoZIhvcNAQcDoIIBejCCAXYCAQAxggEhMIIBHQIBADAFMAACAQEwDQYJKoZIhvcNAQEBBQAEggEAYtNpdyVxhBy0uZi92FnWCN2IPlncqNn6jj65EHld3LSkdhBQk12azB9ZA9f1iHUGaWHyChRVZyUQgkgBqJUAHUuD2TX24xtnRHpZXLCehloZYue6zk8t44Rv9e1BvaYWcKrApjAx9lNy7Q0Bw7WsxYf8BlRXx0Jx7sCHNLpjoagBRBkuhrIn9IMgdn2p5l+4PhrCrYgNMij/rqGZrkHWwUc9qmRnV4wTCYOYIH11W3G28qil95wohE8vUqC9EH0/Jvmg2iKkW5R2t9DvKoT9Y+x6ls4odq0xWZIAedWfgpNJqnZ660FKcUuMlR8mBogPl7Tr3InUf/VneSoupr7M0TBMBgkqhkiG9w0BBwEwHQYJYIZIAWUDBAEqBBBgDfdI48hDNvlDtSGXaKXQgCD6JESJ64giFFC4iUbZzJOT0a78cdxcckRBIlxs+ma0mQ==]
+mysql::server::backup::backuppassword: ENC[PKCS7,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]
+site::profile::mysql_server::databases:
+  qperior:
+    user: qperior
+    password: ENC[PKCS7,MIIBeQYJKoZIhvcNAQcDoIIBajCCAWYCAQAxggEhMIIBHQIBADAFMAACAQEwDQYJKoZIhvcNAQEBBQAEggEAoVSmZAyXGTeJsrvl1F4atzCPH5FfcxWY1ClriY6P8QbOCWpsJFAjHLzd79AipdYqALksULov9DbEZa/m3jZrI0yHZh3Lgy8sAw9/4yatHlruhlqlqlrR0S4pe0oHek7WodtdsdLvzlXw8Db2B2VIuyVdX4zuijzjeTv+to9oSxZPe2+1uqRSjPrzgGttOgA0e64oz6WroVszZ4ZC+h+MOlx3EjDn/dGG4qUYKui0iHOb5tgPnVJYPjgsXCNnbEd+7tTuYwxT+nBcF+cVocjUe8lGi6u3ccOUty8adzmIv6jO1ywqUgvmhoxiyFXPwSpfEMBSIZtPqsifzitgNMNwoTA8BgkqhkiG9w0BBwEwHQYJYIZIAWUDBAEqBBC8l3Tj0bGfmQp3mb47BAb5gBA5eLQ53jViTAs6jdYQ9ayz]
+
+apache::mpm_module: worker
+apache::default_vhost: false
+
+repo::remi_php56: true
+
+php::settings:
+  Date/date.timezone: Europe/Berlin
+  PHP/expose_php: 'Off'
+
+php::fpm::pools:
+  www:
+    php_admin_value:
+      memory_limit: 64M
+      upload_max_filesize: 40M
+      post_max_size: 40M
+      max_execution_time: '30'
+
+php::extensions:
+  gd: {}
+  mbstring: {}
+  pdo: {}
+  mcrypt: {}
+  xml: {}
+  mysqlnd: {}
+  opcache: {}
+
+site::profile::wordpress::projects:
+  q-perior:
+    docroot: '/var/www/q-perior'
+    servername: test-www-q-perior.pixelpark.net
+    ssl_cert: '/etc/pki/tls/certs/wildcard.pixelpark.net-cert.pem'
+    ssl_key: '/etc/pki/tls/private/wildcard.pixelpark.net-key.pem'
+    ssl_chain: '/etc/pki/tls/certs/wildcard.pixelpark.net-cert.pem'
+    directories:
+      - directory1:
+        provider: directory
+        path: '/var/www/q-perior'
+        options:
+          - FollowSymLinks
+          - MultiViews
+        allow_override:
+          - All
+        directoryindex: 'index.php'
+      - location1:
+        provider: location
+        path: '/'
+        auth_type: Digest
+        auth_name: server
+        auth_digest_provider: file
+        auth_digest_algorithm: MD5
+        auth_user_file: '/etc/httpd/htdigest'
+        auth_require: 'valid-user'
+        require:
+          - local
+    rewrites:
+      - http_to_https:
+        comment: 'Alles auf https umleiten'
+        rewrite_cond:
+          - '%%{ich-trickse}{HTTPS} !=on'
+        rewrite_rule:
+          - ^(.*)$  https://test-www-q-perior.pixelpark.net$1  [R=301,L]
\ No newline at end of file
diff --git a/customer/sparkasse-microsites/dev-microsites01-sparkasse-de.pixelpark.net.yaml b/customer/sparkasse-microsites/dev-microsites01-sparkasse-de.pixelpark.net.yaml
new file mode 100644 (file)
index 0000000..df5b062
--- /dev/null
@@ -0,0 +1,7 @@
+---
+site::role: base
+site::additional_classes:
+  - site::profile::mysql_server
+  - site::profile::wordpress
+  - logstash
+
diff --git a/customer/sparkasse-microsites/development.yaml b/customer/sparkasse-microsites/development.yaml
new file mode 100644 (file)
index 0000000..1c0dfbb
--- /dev/null
@@ -0,0 +1,42 @@
+---
+
+accounts::users:
+  deploy.vogel:
+    apply: true
+    sudo: true
+
+mysql::server::root_password: ENC[PKCS7,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]
+mysql::server::backup::backuppassword: ENC[PKCS7,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]
+site::profile::mysql_server::databases:
+  wordpress:
+    user: wordpress 
+    password: ENC[PKCS7,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]
+
+mysql::server::remove_default_accounts: true
+  
+apache::mpm_module: worker
+apache::default_vhost: false
+
+site::profile::wordpress::projects:
+  'dev-microsites01-sparkasse-de.pixelpark.net':
+    servername: dev-microsites01-sparkasse-de.pixelpark.net
+    docroot: '/var/www/html/wordpress'
+    ip: 77.74.234.173
+    ssl_cert: '/etc/pki/tls/certs/wildcard.pixelpark.net-cert.pem'
+    ssl_key: '/etc/pki/tls/private/wildcard.pixelpark.net-key.pem'
+    ssl_chain: '/etc/pki/tls/certs/wildcard.pixelpark.net-cert.pem'
+
+php::settings:
+  Date/date.timezone: Europe/Berlin
+php::extensions:
+  gd: {}
+  xml: {}
+  mysql: {}
+  xdebug:
+    provider: pecl
+    zend: true
+
+# because we have pecl packages we must install dev packages
+php::dev: true
+php::pear: true
diff --git a/customer/sparkasse-microsites/microsites01-sparkasse-de.pixelpark.net.yaml b/customer/sparkasse-microsites/microsites01-sparkasse-de.pixelpark.net.yaml
new file mode 100644 (file)
index 0000000..511cef2
--- /dev/null
@@ -0,0 +1,61 @@
+---
+site::role: base
+site::additional_classes:
+  - site::profile::wordpress
+
+apache::mpm_module: worker
+apache::default_vhost: false
+
+site::profile::wordpress::projects:
+  'das-geht-einfacher.sparkasse.de':
+    servername: das-geht-einfacher.de
+    serveraliases:
+      - www.das-geht-einfacher.de
+    ip: 77.74.234.178
+    ssl_cert: '/etc/pki/tls/certs/das-geht-einfacher.de.crt'
+    ssl_key: '/etc/pki/tls/private/das-geht-einfacher.de.key'
+    ssl_chain: '/etc/pki/tls/certs/das-geht-einfacher.de.chain'
+    group: httpd
+    directories:
+      - directory1:
+        provider: directory
+        path: '/var/www/html/das-geht-einfacher.sparkasse.de/'
+        options:
+          - FollowSymLinks
+        allow_override:
+          - None
+      - location_root:
+        provider: location
+        path: '/wp-admin'
+        auth_type: Digest
+        auth_name: www
+        auth_digest_provider: file
+        auth_digest_algorithm: MD5
+        auth_user_file: '/etc/httpd/htdigest'
+        auth_require: 'valid-user'
+      - location_ajax:
+        provider: location
+        path: '/wp-admin/admin-ajax.php'
+
+php::settings:
+  Date/date.timezone: Europe/Berlin
+  PHP/expose_php: 'Off'
+
+php::fpm::pools:
+  www:
+    php_admin_value:
+      memory_limit: 64M
+      upload_max_filesize: 40M
+      post_max_size: 40M
+      max_execution_time: '30'
+
+php::extensions:
+  gd: {}
+  mbstring: {}
+  pdo: {}
+  mcrypt: {}
+  xml: {}
+  pecl-gmagick: {}
+  pspell: {}
+  xmlrpc: {}
+  mysqlnd: {}
diff --git a/customer/spd/common.yaml b/customer/spd/common.yaml
new file mode 100644 (file)
index 0000000..0c3640a
--- /dev/null
@@ -0,0 +1,80 @@
+---
+accounts::users:
+  deploy.vogel:
+    apply: true
+    group: apache
+  service.typo3:
+    apply: true
+    group: apache
+  thomas.bussmeyer:
+    apply: true
+    sudo: true
+    group: apache
+  stephan.vits:
+    apply: true
+    group: apache
+  andreas.pinto-koehler:
+    apply: true
+    group: apache
+  dennis.klein:
+    apply: true
+    group: apache
+  bastian.gutschke:
+    apply: true
+    group: apache
+  romy.pohl:
+    apply: true
+    group: apache
+  nikolai.potapov:
+    apply: true
+    group: apache
+  santiago.nuneznegrillo:
+    apply: true
+    group: apache
+
+site::role: base
+site::additional_classes:
+  - site::profile::typo3
+  - site::profile::mysql_server
+  - apache::mod::headers
+  - logstash
+
+apache::default_vhost: false
+apache::mpm_module: worker
+
+repo::remi_php56: true
+
+php::settings:
+  Date/date.timezone: Europe/Berlin
+  PHP/upload_max_filesize: 100M
+  PHP/post_max_size: 100M
+  PHP/max_execution_time: '240'
+  PHP/max_input_vars: '1500'
+  PHP/memory_limit: '256M'
+  PHP/expose_php: 'Off'
+  PHP/cgi.fix_pathinfo: 0
+  PHP/always_populate_raw_post_data: -1
+
+php::extensions:
+  gd: {}
+  opcache: {}
+  mysqlnd: {}
+  soap: {}
+  mbstring: {}
+  xml: {}
+  suhosin:
+    settings:
+      suhosin.request.max_varname_length: 200
+      suhosin.post.max_name_length: 200
+      suhosin.get.max_name_length: 200
+      suhosin.get.max_value_length: 2000
+      suhosin.executor.include.whitelist: 'phar,vfs'
+  xdebug:
+    provider: pecl
+    settings:
+      xdebug.max_nesting_level: 400
+      xdebug.remote_port: 9001
+      xdebug.idekey: apache
+      xdebug.remote_connect_back: 1
+      xdebug.remote_enable: 1
+    zend: true
diff --git a/customer/spd/development.yaml b/customer/spd/development.yaml
new file mode 100644 (file)
index 0000000..411fd08
--- /dev/null
@@ -0,0 +1,47 @@
+---
+
+mysql::server::root_password: ENC[PKCS7,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]
+mysql::server::backup::backuppassword: ENC[PKCS7,MIIBiQYJKoZIhvcNAQcDoIIBejCCAXYCAQAxggEhMIIBHQIBADAFMAACAQEwDQYJKoZIhvcNAQEBBQAEggEAwCgwT2D2BWtaGWmRwCb/6eoCTP/lKYnumac685tCOeKyRyUBNm46NQ13mHZ21/6nGq5KSKbud1owg41dYSTHIUSnxgjS5aNcBSWn3JGc6HF08A2rGzYjjLV4EbVOLez5cxQcUpXhwr1iNh+jGiAtpzMrlL/v0e+B6d1UpKhyz3PAkW+PASNNOfe8jR6Suh5lOLKKLv+43eRA7w+4pnDtdc9n9TXX5mES3Jwo1GVOF0e76q/B4EM7j3iKmy0/R5qtRitpXG1lqyODZf9qB2TVNaXVDVm0rRENhW1opxXftUQMC/O8E2NkmuUoTam1lkPIjMHDCHE+AHT0YHLKF2peRjBMBgkqhkiG9w0BBwEwHQYJYIZIAWUDBAEqBBAp2qOav6FD0v2ufI90TPD+gCC12mDUNkgUZiw7dLHgTgA6LMQcbrEMOfhU7mTxakHxiQ==]
+site::profile::mysql_server::databases:
+  spd:
+    user: spd
+    password: ENC[PKCS7,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]
+
+php::dev: true
+php::pear: true
+
+site::profile::apache::htdigest:
+  server:
+    www: ENC[PKCS7,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]
+site::profile::typo3::projects:
+  spd:
+    version: '7.6.1'
+    site_path: '/srv/www/www-spd-de.pixelpark.net'
+    db_pass: ENC[PKCS7,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]
+    db_user: spd
+    db_name: spd
+    servername: dev-web01-spd-de.pixelpark.net
+    ssl_cert: '/etc/pki/tls/certs/wildcard.pixelpark.net-cert.pem'
+    ssl_key: '/etc/pki/tls/private/wildcard.pixelpark.net-key.pem'
+    ssl_chain: '/etc/pki/tls/certs/wildcard.pixelpark.net-cert.pem'
+    directories:
+      - location1:
+        provider: location
+        path: '/'
+        auth_type: Digest
+        auth_name: server
+        auth_digest_provider: file
+        auth_digest_algorithm: MD5
+        auth_user_file: '/etc/httpd/htdigest'
+        auth_require: 'valid-user'
+        require:
+          - local
+    rewrites:
+      - SPD-254:
+        comment: 'Alles auf https umleiten.'
+        rewrite_cond:
+          - '%%{ich-trickse}{HTTPS} !=on'
+        rewrite_rule:
+          - ^(.*)$ https://%%{ich-trickse}{HTTP_HOST}$1 [R=301,L]
+    user: service.typo3
+    mode: '2775'
diff --git a/customer/spd/production.yaml b/customer/spd/production.yaml
new file mode 100644 (file)
index 0000000..e71da99
--- /dev/null
@@ -0,0 +1,57 @@
+---
+
+mysql::server::root_password: ENC[PKCS7,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]
+mysql::server::backup::backuppassword: ENC[PKCS7,MIIBiQYJKoZIhvcNAQcDoIIBejCCAXYCAQAxggEhMIIBHQIBADAFMAACAQEwDQYJKoZIhvcNAQEBBQAEggEABVTKakcKuD9TvSL3DRpPJ/XoggFxne5Sfy6MGzwq4UEQXt51bzoK+I+nvzSgqlYTosmIMgbPGpqFI5rCwl+MX3fAhrIg0yGRZOtzxiHXeSQjaF3Z4ZEYp1VOIouSPUrTpUfKzV1ROsGM0s7RDVeDWGElewHwmKI2hCtjHRqUzYlwvJiZ6tsObKfwJcnS4avpkKmhL1NxdsxfPMiqXheAmuT8PwcGy8f6AVc1VWqla3e/RM6S7MahpHXjRYarY0qB7xDoFgHGyQ2rhxEpw+2ookXPu7W7gD+PJdgrmi9t9OtNx6bVqYzQ0tze/Phq+qIjmq+UaWN22PBL/rcALaA0vDBMBgkqhkiG9w0BBwEwHQYJYIZIAWUDBAEqBBBZcBjvlcxizL9TqKXjaOkVgCCd1mLArEoAAohDPE5LXQDBBlJMWxc92w9jwlUczw8mZQ==]
+site::profile::mysql_server::databases:
+  spd:
+    user: spd
+    password: ENC[PKCS7,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]
+
+php::dev: true
+php::pear: true
+
+site::profile::apache::htdigest:
+  - 'www|server|Re6hohzi1ce7aequ'
+site::profile::typo3::projects:
+  spd:
+    version: '7.6.0'
+    site_path: '/var/www/www.spd.de'
+    db_pass: ENC[PKCS7,MIIBiQYJKoZIhvcNAQcDoIIBejCCAXYCAQAxggEhMIIBHQIBADAFMAACAQEwDQYJKoZIhvcNAQEBBQAEggEAgdlgrt+jhKy2FB30ugVEaxoPwWtXcJ8wYdwdg58ceh9u7NA/+oEPdjNm0iGLc44X6coxXlUNvsMNEewEKsOMKtf0fBtrvmGBp6bI4LAG7RLS4AEO0M654Z/7Z8Gdh6c5K5qSdzDp0qSJomLRt+SQJP6k3yXSwWFtzf7VmnQqAzuaUT3gKkCGmdFCjZUT1B9nHBTH5X5J+0VS+Uu7J+jWedml/9rZn9TYoyKejm+tzEmSllcazdbbqoBTsKUufWZGJQR2vXhgoFa42eW8f5VJMh6qTaA5r+t+WXtfGhG04tdpNv2oaNpImfp/vs+Iijd+E23wkfU+Q7Bpr4HvrGoRLDBMBgkqhkiG9w0BBwEwHQYJYIZIAWUDBAEqBBA68uakCy2mL4kQMOK9c3m6gCBWiMngs4gfL53yf7NnfsEuwcg+uf/uZwMNC9Lnmd3nJw==]
+    db_user: spd
+    db_name: spd
+    servername: www01.undreaming.org
+    ssl_cert: '/etc/pki/tls/certs/wildcard.pixelpark.net-cert.pem'
+    ssl_key: '/etc/pki/tls/private/wildcard.pixelpark.net-key.pem'
+    ssl_chain: '/etc/pki/tls/certs/wildcard.pixelpark.net-cert.pem'
+    directories:
+      - directory1:
+        provider: directory
+        path: '/var/www/www.spd.de'
+        options:
+          - Indexes
+          - FollowSymLinks
+          - MultiViews
+        allow_override:
+          - All
+          - Indexes
+        directoryindex: index.php index.html
+      - location1:
+        provider: location
+        path: '/'
+        auth_type: Digest
+        auth_name: server
+        auth_digest_provider: file
+        auth_digest_algorithm: MD5
+        auth_user_file: '/etc/httpd/htdigest'
+        auth_require: 'valid-user'
+        require:
+          - local
+    rewrites:
+      - SPD-254:
+        comment: 'Alles auf https umleiten.'
+        rewrite_cond:
+          - '%%{ich-trickse}{HTTPS} !=on'
+        rewrite_rule:
+          - ^(.*)$ https://%%{ich-trickse}{HTTP_HOST}$1 [R=301,L]
+    user: service.typo3
+    mode: '2775'
diff --git a/customer/spk-fits/dev-web01.sparkasse.local.yaml b/customer/spk-fits/dev-web01.sparkasse.local.yaml
new file mode 100644 (file)
index 0000000..f8bd59d
--- /dev/null
@@ -0,0 +1,29 @@
+---
+site::additional_classes:
+  - repo
+
+install_web_app::params::version: "rel-1-0-74"
+install_web_app::params::packagename: "pixelpark_temp-immo-frontend"
+install_web_app::params::docroot: "/opt/database/www/htdocs/dev-tmp.s-immobilien.de"
+install_web_app::params::link: "frontend"
+install_web_app::params::inifile: "global_config.php"
+install_web_app::params::config_params:
+  - $global_conf_hostname = "dev-tmp.s-immobilien.de";
+  - $global_conf_webRootAbsURL = "http://dev-tmp.s-immobilien.de/frontend";
+  - $global_conf_webRootOpenCmsAbsURL = "http://dev-tmp.s-immobilien.de";
+  - $global_conf_webRootURL_ssl = "https://dev-tmp.s-immobilien.de";
+  - $global_conf_webRootURL = "http://dev-tmp.s-immobilien.de";
+#install_web_app::params::instance:
+#  instance0:
+#    version: "rel-1-0-74"
+#    packagename: "pp_temp-immo-frontend"
+#    docroot: "/opt/database/www/htdocs/dev-tmp.s-immobilien.de"
+#    link: "frontend"
+#    inifile: "global_config.php"
+#    config_params:
+#      - $global_conf_hostname = "dev-tmp.s-immobilien.de";
+#      - $global_conf_webRootAbsURL = "http://dev-tmp.s-immobilien.de/frontend";
+#      - $global_conf_webRootOpenCmsAbsURL = "http://dev-tmp.s-immobilien.de";
+#      - $global_conf_webRootURL_ssl = "https://dev-tmp.s-immobilien.de";
+#      - $global_conf_webRootURL = "http://dev-tmp.s-immobilien.de";
\ No newline at end of file
diff --git a/customer/spk-pp/dev-innovationen-sparkasse-de.pixelpark.net.yaml b/customer/spk-pp/dev-innovationen-sparkasse-de.pixelpark.net.yaml
new file mode 100644 (file)
index 0000000..4c3c2b5
--- /dev/null
@@ -0,0 +1,2 @@
+---
+site::role: base
diff --git a/customer/spk-pp/innovationen-sparkasse-de.pixelpark.net.yaml b/customer/spk-pp/innovationen-sparkasse-de.pixelpark.net.yaml
new file mode 100644 (file)
index 0000000..4c3c2b5
--- /dev/null
@@ -0,0 +1,2 @@
+---
+site::role: base
diff --git a/customer/spk-spenden/common.yaml b/customer/spk-spenden/common.yaml
new file mode 100644 (file)
index 0000000..87396d5
--- /dev/null
@@ -0,0 +1,34 @@
+accounts::users:
+  tov-user:
+    apply: true
+    sudo: true
+    shell: "bash"
+
+php::settings:
+  Date/date.timezone: Europe/Berlin
+  PHP/expose_php: 'Off'
+  
+memcached::max_memory: 128
+memcached::listen_ip: '127.0.0.1'
+
+php::dev: true
+php::pear: true
+
+php::extensions:
+  gd: {}
+  xml: {}
+  opcache: {}
+  suhosin:
+    settings: 
+      suhosin.request.max_varname_length: 200
+      suhosin.post.max_name_length: 200
+      suhosin.get.max_name_length: 200
+      suhosin.get.max_value_length: 2000
+      suhosin.executor.include.whitelist: 'phar,vfs'
+  intl: {}
+  mcrypt: {}
+  pecl-memcache: {} 
+  pecl-imagick: {}
+  pdo: {}
+  mbstring: {}
+  soap: {}
diff --git a/customer/spk-spenden/dev-einfach-gut-machen-de-spk.pixelpark.net.yaml b/customer/spk-spenden/dev-einfach-gut-machen-de-spk.pixelpark.net.yaml
new file mode 100644 (file)
index 0000000..4c3c2b5
--- /dev/null
@@ -0,0 +1,2 @@
+---
+site::role: base
diff --git a/customer/spk-spenden/einfach-gut-machen-de-spk.pixelpark.net.yaml b/customer/spk-spenden/einfach-gut-machen-de-spk.pixelpark.net.yaml
new file mode 100644 (file)
index 0000000..4c3c2b5
--- /dev/null
@@ -0,0 +1,2 @@
+---
+site::role: base
diff --git a/customer/stadt-koeln/common.yaml b/customer/stadt-koeln/common.yaml
new file mode 100644 (file)
index 0000000..8b7d74d
--- /dev/null
@@ -0,0 +1,5 @@
+---
+accounts::users:
+  service.typo3:
+    apply: true
+    group: httpd
diff --git a/customer/stadt-koeln/www-haushaltsplan-koeln.pixelpark.net.yaml b/customer/stadt-koeln/www-haushaltsplan-koeln.pixelpark.net.yaml
new file mode 100644 (file)
index 0000000..4c3c2b5
--- /dev/null
@@ -0,0 +1,2 @@
+---
+site::role: base
diff --git a/customer/test-cloud/barri.test-cloud.pixelpark.internal.yaml b/customer/test-cloud/barri.test-cloud.pixelpark.internal.yaml
new file mode 100644 (file)
index 0000000..c7bfbb1
--- /dev/null
@@ -0,0 +1,43 @@
+---
+site::role: base
+site::additional_classes:
+  - neutron::agents::vpnaas
+  - zabbix::agent
+  - neutron::agents::lbaas
+  - neutron::agents::metadata
+  - neutron::server::notifications
+  - neutron::agents::metering
+  - neutron::services::fwaas
+  - neutron::agents::l3
+  - neutron::config
+  - neutron::pacemaker_agents
+  - neutron::agents::dhcp
+  - pp_python::pip
+  - neutron::agents::ovs
+  - hosts
+  - neutron::user
+  - neutron::plugins::ovs
+  - logstash
+  - neutron
+
+neutron::agents::ovs::local_ip: 192.168.91.13
+neutron::plugins::ovs::neutron_plugin_ovs:
+  OVS/local_ip:
+    value: 192.168.91.13
+neutron::neutron_config:
+  DEFAULT/host:
+    value: 'network-cluster01.test-cloud.pixelpark.internal'
+
+pacemaker::corosync::cluster_name: 'neutron-cluster-cloud-test-icehouse'
+pacemaker::corosync::cluster_members:
+  - barri.test-cloud.pixelpark.internal
+  - bor.test-cloud.pixelpark.internal
+  
+xymon::modules:
+  - 'cloud-new'
+  - 'ovs-tun'
+  - 'ipmi'
+  - 'raid'
+  
+zabbix::agent::server: '217.66.51.48'
+zabbix::agent::manage_repo: false
diff --git a/customer/test-cloud/beli.test-cloud.pixelpark.internal.yaml b/customer/test-cloud/beli.test-cloud.pixelpark.internal.yaml
new file mode 100644 (file)
index 0000000..49c0dcd
--- /dev/null
@@ -0,0 +1,183 @@
+---
+site::role: base
+site::additional_classes:
+  - galera
+  - nova::conductor
+  - nova::config
+  - heat::api_cloudwatch
+  - nova::api
+  - pp_haproxy::mongodb_member
+  - xymon::check::haproxy
+  - keystone::config
+  - cinder::ceilometer
+  - glance
+  - glance::backend::rbd
+  - neutron::pacemaker
+  - nova::consoleauth
+  - heat::api_cfn
+  - nova
+  - nova::pacemaker
+  - glance::pacemaker
+  - keystone
+  - glance::db::mysql
+  - neutron::server
+  - pp_haproxy
+  - heat::config
+  - zabbix::agent
+  - xymon::check::rabbitmq
+  - mongodb::client
+  - nova::network::neutron
+  - neutron::server::notifications
+  - mongodb
+  - nova::quota
+  - glance::api
+  - cinder::pacemaker_api
+  - heat
+  - heat::db::mysql
+  - glance::client
+  - keystone::db::mysql
+  - cinder::db::mysql
+  - heat::engine
+  - nova::scheduler
+  - keystone::pacemaker
+  - nova::cert
+  - heat::pacemaker
+  - mongodb::replset
+  - neutron::config
+  - glance::notify::rabbitmq
+  - rabbitmq
+  - nova::vncproxy
+  - nova::db::mysql
+  - pp_python::pip
+  - neutron::quota
+  - horizon
+  - neutron
+  - cinder
+  - neutron::plugins::ovs
+  - heat::api
+  - glance::registry
+  - cinder::api
+  - neutron::db::mysql
+
+hosts::hosts:
+  192.168.90.104:
+    interface_up: true
+    interface_device: "bond0:rabbit02"
+    interface_netmask: "255.255.255.0"
+  192.168.90.106:
+    interface_up: true
+    interface_device: "bond0:galera02"
+    interface_netmask: "255.255.255.0"
+  192.168.90.101:
+    interface_up: true
+    interface_device: "bond0:ks02"
+    interface_netmask: "255.255.255.0"
+  192.168.90.109:
+    interface_up: true
+    interface_device: "bond0:glance02"
+    interface_netmask: "255.255.255.0"
+  192.168.90.114:
+    interface_up: true
+    interface_device: "bond0:nt02"
+    interface_netmask: "255.255.255.0"
+  192.168.90.117:
+    interface_up: true
+    interface_device: "bond0:cinder02"
+    interface_netmask: "255.255.255.0"
+  192.168.90.120:
+    interface_up: true
+    interface_device: "bond0:nova02"
+    interface_netmask: "255.255.255.0"
+  192.168.90.123:
+    interface_up: true
+    interface_device: "bond0:hecfn02"
+    interface_netmask: "255.255.255.0"
+  192.168.90.126:
+    interface_up: true
+    interface_device: "bond0:heat02"
+    interface_netmask: "255.255.255.0"
+  192.168.90.129:
+    interface_up: true
+    interface_device: "bond0:heatcw02"
+    interface_netmask: "255.255.255.0"
+  192.168.90.112:
+    interface_up: true
+    interface_device: "bond0:hor02"
+    interface_netmask: "255.255.255.0"
+  192.168.90.138:
+    interface_up: true
+    interface_device: "bond0:mongod02"
+    interface_netmask: "255.255.255.0"
+    
+ntp::servers:
+  - "time01.pixelpark.com iburst"
+  - "time02.pixelpark.com iburst"
+  - "time03.pixelpark.com iburst"
+  
+rabbitmq::environment_variables:
+   RABBITMQ_NODE_IP_ADDRESS: 192.168.90.104
+   RABBITMQ_NODENAME: rabbit@rabbitmq02
+
+pp_rabbitmq::pacemaker::nodename: rabbit@rabbitmq02
+pp_rabbitmq::pacemaker::bind_host: 192.168.90.104
+
+galera::local_ip: 192.168.90.106
+galera::bind_address: 192.168.90.106
+galera::haproxy_server_names: galera02
+mongodb::globals::bind_ip:
+  - 127.0.0.1
+  - 192.168.90.138
+pp_haproxy::mongodb_member::server_names: mongodb02
+pp_haproxy::mongodb_member::ipaddresses: 192.168.90.138
+
+keystone::public_bind_host: keystone02.test-cloud.pixelpark.internal
+keystone::admin_bind_host: keystone02.test-cloud.pixelpark.internal
+keystone::haproxy_server_names_admin: keystone02
+keystone::haproxy_server_names_public: keystone02
+
+neutron::server::bind_host: neutron02.test-cloud.pixelpark.internal
+neutron::server::haproxy_server_names: neutron-server02
+
+glance::api::bind_host: glance02.test-cloud.pixelpark.internal
+glance::api::haproxy_server_names: glance02
+glance::registry::bind_host: glance02.test-cloud.pixelpark.internal
+glance::registry::haproxy_server_names: glance02
+
+cinder::api::bind_host: cinder02.test-cloud.pixelpark.internal
+cinder::api::haproxy_server_names: cinder02
+
+heat::api::bind_host: 'heat02.test-cloud.pixelpark.internal'
+heat::api::haproxy_server_names_heat_api: heat02-api
+heat::api_cloudwatch::bind_host: 'heatcw02.test-cloud.pixelpark.internal'
+heat::api_cloudwatch::haproxy_server_names_heat_api_cloudwatch: heat02-api-cloudwatch
+heat::api_cfn::bind_host: 'heatcfn02.test-cloud.pixelpark.internal'
+heat::api_cfn::haproxy_server_names_heat_api_cfn: heat02-api-cfn
+
+nova::api::api_bind_address: nova02.test-cloud.pixelpark.internal
+nova::api::osapi_bind_address: nova02.test-cloud.pixelpark.internal
+nova::api::metadata_listen: nova02.test-cloud.pixelpark.internal
+nova::api::haproxy_server_names_ec2: nova02
+nova::api::haproxy_server_names_metadata: nova02
+nova::api::haproxy_server_names_osapi: nova02
+
+nova::vncproxy::host: nova02.test-cloud.pixelpark.internal
+nova::vncproxy::haproxy_server_names: nova02
+
+pacemaker::corosync::cluster_name: 'pcs-cluster-cloud-test-icehouse'
+pacemaker::corosync::cluster_members:
+  - nestor.test-cloud.pixelpark.internal
+  - beli.test-cloud.pixelpark.internal
+
+horizon::bind_address: horizon02.test-cloud.pixelpark.internal
+httpd::webserver:
+  test-cloud.pixelpark.net:
+    listens:
+      - 192.168.90.112:80
+
+xymon::modules:
+  - 'cloud-new'
+  - 'hlogin'
+  - 'ipmi'
+  - 'raid'
+  
+  
\ No newline at end of file
diff --git a/customer/test-cloud/bor.test-cloud.pixelpark.internal.yaml b/customer/test-cloud/bor.test-cloud.pixelpark.internal.yaml
new file mode 100644 (file)
index 0000000..b294c96
--- /dev/null
@@ -0,0 +1,40 @@
+---
+site::role: base
+site::additional_classes:
+  - neutron::agents::vpnaas
+  - zabbix::agent
+  - neutron::agents::lbaas
+  - neutron::agents::metadata
+  - neutron::server::notifications
+  - neutron::agents::metering
+  - neutron::services::fwaas
+  - neutron::agents::l3
+  - neutron::config
+  - neutron::pacemaker_agents
+  - neutron::agents::dhcp
+  - pp_python::pip
+  - neutron::agents::ovs
+  - hosts
+  - neutron::user
+  - neutron::plugins::ovs
+  - neutron
+
+neutron::agents::ovs::local_ip: 192.168.91.13
+neutron::plugins::ovs::neutron_plugin_ovs:
+  OVS/local_ip:
+    value: 192.168.91.13
+neutron::neutron_config:
+  DEFAULT/host:
+    value: 'network-cluster01.test-cloud.pixelpark.internal'
+
+pacemaker::corosync::cluster_name: 'neutron-cluster-cloud-test-icehouse'
+pacemaker::corosync::cluster_members:
+  - barri.test-cloud.pixelpark.internal
+  - bor.test-cloud.pixelpark.internal
+
+xymon::modules:
+  - 'cloud-new'
+  - 'ovs-tun'
+  - 'ipmi'
+  - 'raid'
+  
diff --git a/customer/test-cloud/ceph-test.test-cloud.pixelpark.internal.yaml b/customer/test-cloud/ceph-test.test-cloud.pixelpark.internal.yaml
new file mode 100644 (file)
index 0000000..bd8df84
--- /dev/null
@@ -0,0 +1,7 @@
+---
+site::role: base
+site::additional_classes:
+  - zabbix::agent
+
+xymon::modules:
+  - 'ceph-health'
\ No newline at end of file
diff --git a/customer/test-cloud/cloud_icehouse.yaml b/customer/test-cloud/cloud_icehouse.yaml
new file mode 100644 (file)
index 0000000..a5fbf6d
--- /dev/null
@@ -0,0 +1,1654 @@
+---
+accounts::users:
+  ivan.prikhodko:
+    apply: true
+    sudo: true
+  samuel.bufe:
+    apply: true
+    sudo: true
+hosts::hosts:
+# Hosts
+  192.168.90.11:
+    aliases:
+      - nestor.test-cloud.pixelpark.internal
+      - control01.test-cloud.pixelpark.internal
+  192.168.90.12:
+    aliases:
+      - beli.test-cloud.pixelpark.internal
+      - control02.test-cloud.pixelpark.internal
+  192.168.90.13:
+    aliases:
+      - barri.test-cloud.pixelpark.internal
+      - network01.test-cloud.pixelpark.internal
+  192.168.90.14:
+    aliases:
+      - bor.test-cloud.pixelpark.internal
+      - network02.test-cloud.pixelpark.internal
+  192.168.90.15:
+    aliases:
+      - klio.test-cloud.pixelpark.internal
+      - compute01.test-cloud.pixelpark.internal
+
+# Services
+  192.168.90.99:
+    aliases:
+      - api.test-cloud.pixelpark.internal
+  192.168.90.100:
+    aliases:
+      - keystone01.test-cloud.pixelpark.internal
+  192.168.90.101:
+    aliases:
+      - keystone02.test-cloud.pixelpark.internal
+  192.168.90.102:
+    aliases:
+      - keystone.test-cloud.pixelpark.internal
+  192.168.90.103:
+    aliases:
+      - rabbitmq01.test-cloud.pixelpark.internal
+  192.168.90.104:
+    aliases:
+      - rabbitmq02.test-cloud.pixelpark.internal
+  192.168.90.105:
+    aliases:
+      - galera01.test-cloud.pixelpark.internal
+  192.168.90.106:
+    aliases:
+      - galera02.test-cloud.pixelpark.internal
+  192.168.90.107:
+    aliases:
+      - mysql.test-cloud.pixelpark.internal
+  192.168.90.108:
+    aliases:
+      - glance01.test-cloud.pixelpark.internal
+  192.168.90.109:
+    aliases:
+      - glance02.test-cloud.pixelpark.internal
+  192.168.90.110:
+    aliases:
+      - glance.test-cloud.pixelpark.internal
+  192.168.90.111:
+    aliases:
+      - horizon01.test-cloud.pixelpark.internal
+  192.168.90.112:
+    aliases:
+      - horizon02.test-cloud.pixelpark.internal
+  192.168.90.113:
+    aliases:
+      - neutron01.test-cloud.pixelpark.internal
+  192.168.90.114:
+    aliases:
+      - neutron02.test-cloud.pixelpark.internal
+  192.168.90.115:
+    aliases:
+      - neutron.test-cloud.pixelpark.internal
+  192.168.90.116:
+    aliases:
+      - cinder01.test-cloud.pixelpark.internal
+  192.168.90.117:
+    aliases:
+      - cinder02.test-cloud.pixelpark.internal
+  192.168.90.118:
+    aliases:
+      - cinder.test-cloud.pixelpark.internal
+  192.168.90.119:
+    aliases:
+      - nova01.test-cloud.pixelpark.internal
+  192.168.90.120:
+    aliases:
+      - nova02.test-cloud.pixelpark.internal
+  192.168.90.121:
+    aliases:
+      - nova.test-cloud.pixelpark.internal
+  192.168.90.122:
+    aliases:
+      - heatcfn01.test-cloud.pixelpark.internal
+  192.168.90.123:
+    aliases:
+      - heatcfn02.test-cloud.pixelpark.internal
+  192.168.90.124:
+    aliases:
+      - heatcfn.test-cloud.pixelpark.internal
+  192.168.90.125:
+    aliases:
+      - heat01.test-cloud.pixelpark.internal
+  192.168.90.126:
+    aliases:
+      - heat02.test-cloud.pixelpark.internal
+  192.168.90.127:
+    aliases:
+      - heat.test-cloud.pixelpark.internal
+  192.168.90.128:
+    aliases:
+      - heatcw01.test-cloud.pixelpark.internal
+  192.168.90.129:
+    aliases:
+      - heatcw02.test-cloud.pixelpark.internal
+  192.168.90.130:
+    aliases:
+      - heatcw.test-cloud.pixelpark.internal
+  192.168.90.131:
+    aliases:
+      - ceilometer01.test-cloud.pixelpark.internal
+  192.168.90.132:
+    aliases:
+      - ceilometer02.test-cloud.pixelpark.internal
+  192.168.90.133:
+    aliases:
+      - ceilometer.test-cloud.pixelpark.internal
+  192.168.90.134:
+    aliases:
+      - trove01.test-cloud.pixelpark.internal
+  192.168.90.135:
+    aliases:
+      - trove02.test-cloud.pixelpark.internal
+  192.168.90.136:
+    aliases:
+      - trove.test-cloud.pixelpark.internal
+  192.168.90.137:
+    aliases:
+      - mongodb01.test-cloud.pixelpark.internal
+  192.168.90.138:
+    aliases:
+      - mongodb02.test-cloud.pixelpark.internal
+  192.168.90.139:
+    aliases:
+      - mongodb.test-cloud.pixelpark.internal
+  192.168.90.201:
+    aliases:
+      - network-cluster01.test-cloud.pixelpark.internal
+  217.66.54.195:
+    aliases:
+      - metadata.test-cloud.pixelpark.net
+
+repo::enable_pixel: true
+repo::enable_cloud: true
+
+ntp::servers:
+  - "control01.test-cloud.pixelpark.internal iburst"
+  - "control02.test-cloud.pixelpark.internal iburst"
+
+rabbitmq::erlang_cookie: FSXOFSBDAFOVLIUSZTRL
+# no special package source
+rabbitmq::package_source: ""
+rabbitmq::package_provider: yum
+rabbitmq::wipe_db_on_cookie_change: true
+rabbitmq::default_pass: sUTrsaeSKduY33io
+rabbitmq::config_cluster: true
+rabbitmq::cluster_nodes:
+  - rabbitmq01
+  - rabbitmq02
+
+pp_rabbitmq::pacemaker::port: '5672'
+pp_rabbitmq::pacemaker::config_file: '/etc/rabbitmq/rabbitmq'
+
+galera::galera_servers:
+  - 192.168.90.105
+  - 192.168.90.106
+galera::galera_master: "nestor.test-cloud.pixelpark.internal"
+galera::vendor_type: "mariadb"
+galera::configure_repo: false
+galera::root_password: "ha0HXets4Qbk"
+galera::haproxy_listening_service: test-cloud-mysql
+galera::pacemaker::primitives:
+  mariadb_service:
+    primitive_class: 'systemd'
+    primitive_type: 'mysqld'
+    operations:
+      monitor:
+        interval: 10s
+      start:
+        interval: '0'
+        timeout: 60s
+      stop:
+        interval: '0'
+        timeout: 60s
+
+
+pp_haproxy::haproxy_listen:
+  test-cloud-mysql:
+    ports:
+      - '3306'
+    ipaddress: mysql.test-cloud.pixelpark.internal
+    mode: tcp
+    options:
+      option:
+        - tcpka
+        - mysql-check user haproxy
+      balance:
+        - roundrobin
+  test-cloud-glance-api:
+    ports:
+      - '9292'
+    ipaddress: glance.test-cloud.pixelpark.internal
+    mode: http
+    options:
+      http-check:
+        - expect status 401
+      option:
+        - httpchk /v1
+      balance:
+        - roundrobin
+  test-cloud-glance-registry:
+    ports:
+      - '9191'
+    ipaddress: glance.test-cloud.pixelpark.internal
+    mode: http
+    options:
+      http-check:
+        - expect status 401
+      option:
+        - httpchk /v1
+      balance:
+        - roundrobin
+  test-cloud-admin_page:
+    ipaddress: 0.0.0.0
+    ports:
+      - '8080'
+    mode: http
+    options:
+      stats:
+        - 'uri /'
+  test-cloud-keystone-public:
+    ports:
+      - '5000'
+    ipaddress: keystone.test-cloud.pixelpark.internal
+    mode: http
+    options:
+      option:
+        - httpchk /v2.0
+      balance:
+        - roundrobin
+  test-cloud-keystone-admin:
+    ports:
+      - '35357'
+    ipaddress: keystone.test-cloud.pixelpark.internal
+    mode: http
+    options:
+      option:
+        - httpchk /v2.0
+      balance:
+        - roundrobin
+  test-cloud-cinder:
+    ports:
+      - '8776'
+    ipaddress: cinder.test-cloud.pixelpark.internal
+    mode: http
+    options:
+      option:
+        - httpchk /
+      balance:
+        - roundrobin
+  test-cloud-nova-osapi:
+    ports:
+      - '8774'
+    ipaddress: nova.test-cloud.pixelpark.internal
+    mode: http
+    options:
+      option:
+        - httpchk /
+      balance:
+        - roundrobin
+  test-cloud-nova-metadata:
+    ports:
+      - '8775'
+    ipaddress: metadata.test-cloud.pixelpark.net
+    mode: http
+    options:
+      option:
+        - httpchk /
+      balance:
+        - roundrobin
+  test-cloud-nova-ec2:
+    ports:
+      - '8773'
+    ipaddress: nova.test-cloud.pixelpark.internal
+    mode: tcp
+    options:
+      option:
+        - tcpka
+      balance:
+        - roundrobin
+  test-cloud-heat-api-cfn:
+    ports:
+      - '8000'
+    ipaddress: heatcfn.test-cloud.pixelpark.internal
+    mode: tcp
+    options:
+      option:
+        - tcpka
+      balance:
+        - roundrobin
+  test-cloud-heat-api-cloudwatch:
+    ports:
+      - '8003'
+    ipaddress: heatcw.test-cloud.pixelpark.internal
+    mode: tcp
+    options:
+      option:
+        - tcpka
+      balance:
+        - roundrobin
+  test-cloud-heat-api:
+    ports:
+      - '8004'
+    ipaddress: heat.test-cloud.pixelpark.internal
+    mode: tcp
+    options:
+      option:
+        - tcpka
+      balance:
+        - roundrobin
+  test-cloud-neutron-server:
+    ports:
+      - '9696'
+    ipaddress: neutron.test-cloud.pixelpark.internal
+    mode: tcp
+    options:
+      option:
+        - tcpka
+      balance:
+        - roundrobin
+  test-cloud-mongodb-server:
+    ports:
+      - '27017'
+    ipaddress: mongodb.test-cloud.pixelpark.internal
+    mode: tcp
+    options:
+      option:
+        - tcplog
+      balance:
+        - roundrobin
+
+pp_haproxy::ips:
+  keystone:
+    primitive_class: ocf
+    primitive_type: IPaddr2
+    provided_by: heartbeat
+    parameters:
+      ip: 192.168.90.102
+      cidr_netmask: '24'
+      iflabel: 'keystone'
+    operations:
+      monitor:
+        interval: 10s
+  mysql:
+    primitive_class: ocf
+    primitive_type: IPaddr2
+    provided_by: heartbeat
+    parameters:
+      ip: 192.168.90.107
+      cidr_netmask: '24'
+      iflabel: 'mysql'
+    operations:
+      monitor:
+        interval: 10s
+  glance:
+    primitive_class: ocf
+    primitive_type: IPaddr2
+    provided_by: heartbeat
+    parameters:
+      ip: 192.168.90.110
+      cidr_netmask: '24'
+      iflabel: 'glance'
+    operations:
+      monitor:
+        interval: 10s
+  neutron:
+    primitive_class: ocf
+    primitive_type: IPaddr2
+    provided_by: heartbeat
+    parameters:
+      ip: 192.168.90.115
+      cidr_netmask: '24'
+      iflabel: 'neutron'
+    operations:
+      monitor:
+        interval: 10s
+  cinder:
+    primitive_class: ocf
+    primitive_type: IPaddr2
+    provided_by: heartbeat
+    parameters:
+      ip: 192.168.90.118
+      cidr_netmask: '24'
+      iflabel: 'cinder'
+    operations:
+      monitor:
+        interval: 10s
+  nova:
+    primitive_class: ocf
+    primitive_type: IPaddr2
+    provided_by: heartbeat
+    parameters:
+      ip: 192.168.90.121
+      cidr_netmask: '24'
+      iflabel: 'nova'
+    operations:
+      monitor:
+        interval: 10s
+  heatcfn:
+    primitive_class: ocf
+    primitive_type: IPaddr2
+    provided_by: heartbeat
+    parameters:
+      ip: 192.168.90.124
+      cidr_netmask: '24'
+      iflabel: 'heatcfn'
+    operations:
+      monitor:
+        interval: 10s
+  heat:
+    primitive_class: ocf
+    primitive_type: IPaddr2
+    provided_by: heartbeat
+    parameters:
+      ip: 192.168.90.127
+      cidr_netmask: '24'
+      iflabel: 'heat'
+    operations:
+      monitor:
+        interval: 10s
+  heatcw:
+    primitive_class: ocf
+    primitive_type: IPaddr2
+    provided_by: heartbeat
+    parameters:
+      ip: 192.168.90.130
+      cidr_netmask: '24'
+      iflabel: 'heatcw'
+    operations:
+      monitor:
+        interval: 10s
+  ceilometer:
+    primitive_class: ocf
+    primitive_type: IPaddr2
+    provided_by: heartbeat
+    parameters:
+      ip: 192.168.90.133
+      cidr_netmask: '24'
+      iflabel: 'ceilo'
+    operations:
+      monitor:
+        interval: 10s
+  trove:
+    primitive_class: ocf
+    primitive_type: IPaddr2
+    provided_by: heartbeat
+    parameters:
+      ip: 192.168.90.136
+      cidr_netmask: '24'
+      iflabel: 'trove'
+    operations:
+      monitor:
+        interval: 10s
+  mongodb:
+    primitive_class: ocf
+    primitive_type: IPaddr2
+    provided_by: heartbeat
+    parameters:
+      ip: 192.168.90.139
+      cidr_netmask: '24'
+      iflabel: 'mongodb'
+    operations:
+      monitor:
+        interval: 10s
+  p_ip_metadata:
+    primitive_class: ocf
+    primitive_type: IPaddr2
+    provided_by: heartbeat
+    parameters:
+      ip: 217.66.54.195
+      cidr_netmask: '27'
+      nic: bond0.552
+      iflabel: 'mdata'
+    operations:
+      monitor:
+        interval: 10s
+  p_route_public_subnet:
+    primitive_class: ocf
+    primitive_type: Route
+    provided_by: heartbeat
+    parameters:
+      destination: "217.66.54.192/27"
+      device: "bond0.552"
+      table: "public"
+    operations:
+      monitor:
+        interval: 10s
+  p_route_public_net:
+    primitive_class: ocf
+    primitive_type: Route
+    provided_by: heartbeat
+    parameters:
+      destination: "0.0.0.0/0"
+      gateway: "217.66.54.193"
+      source: "217.66.54.195"
+      table: "public"
+    operations:
+      monitor:
+        interval: 10s
+
+keystone::db::mysql::host: mysql.test-cloud.pixelpark.internal
+keystone::db::mysql::password: Up650IOYMrKU2IJS
+keystone::db::mysql::dbname: keystone
+keystone::db::mysql::user: keystonedbadmin
+keystone::db::mysql::charset: utf8
+keystone::db::mysql::collate: utf8_unicode_ci
+keystone::db::mysql::allowed_hosts: '%'
+keystone::manage_service: false
+keystone::admin_token: "BddzFyrxggraJKo4"
+keystone::compute_port: '8774'
+keystone::admin_port: '35357'
+keystone::token_expiration: 86400
+keystone::public_port: '5000'
+keystone::verbose: true
+keystone::debug: true
+keystone::log_file: keystone.log
+keystone::catalog_type: sql
+keystone::sql_connection: "mysql://keystonedbadmin:Up650IOYMrKU2IJS@mysql.test-cloud.pixelpark.internal/keystone"
+keystone::token_provider: keystone.token.providers.uuid.Provider
+keystone::token_driver: keystone.token.backends.sql.Token
+keystone::public_endpoint: http://keystone.test-cloud.pixelpark.internal:%(public_port)s/
+keystone::admin_endpoint: http://keystone.test-cloud.pixelpark.internal:%(admin_port)s/
+keystone::rabbit_hosts:
+  - rabbitmq01.test-cloud.pixelpark.internal:5672
+  - rabbitmq02.test-cloud.pixelpark.internal:5672
+keystone::rabbit_userid: guest
+keystone::rabbit_password: sUTrsaeSKduY33io
+keystone::haproxy_listening_service_admin: test-cloud-keystone-admin
+keystone::haproxy_listening_service_public: test-cloud-keystone-public
+keystone::config::keystone_config:
+  DEFAULT/tcp_keepalive:
+    value: true
+  DEFAULT/tcp_keepidle:
+    value: 600
+  DEFAULT/rabbit_max_retries:
+    value: 10
+  DEFAULT/rpc_backend:
+    value: rabbit
+  DEFAULT/keystone_ec2_url:
+    value: "http://keystone.test-cloud.pixelpark.internal:5000/v2.0/ec2tokens"
+  DEFAULT/keystone_ec2_insecure:
+    value: true
+  DEFAULT/fatal_deprecations:
+    value: false
+  DEFAULT/policy_file:
+    value: /opt/openstack/keystone/etc/policy.json
+  DEFAULT/use_stderr:
+    value: false
+  database/use_db_reconnect:
+    value: true
+  ec2/driver:
+    value: keystone.contrib.ec2.backends.kvs.Ec2
+  endpoint_filter/driver:
+    value: keystone.contrib.endpoint_filter.backends.sql.EndpointFilter
+  endpoint_filter/return_all_endpoints_if_no_filter:
+    value: true
+  paste_deploy/config_file:
+    value: /opt/openstack/keystone/etc/keystone-paste.ini
+keystone::pacemaker::primitives:
+  keystone_service:
+    primitive_class: ocf
+    primitive_type: keystone
+    provided_by: openstack
+    parameters:
+      binary: /opt/openstack/keystone/bin/keystone-all
+      config: /opt/openstack/keystone/etc/keystone.conf
+    operations:
+      monitor:
+        interval: 10s
+      start:
+        interval: '0'
+        timeout: 60s
+      stop:
+        interval: '0'
+        timeout: 60s
+# Neutron
+neutron::verbose: true
+neutron::debug: true
+#neutron::core_plugin: neutron.plugins.ml2.plugin.Ml2Plugin
+neutron::core_plugin: neutron.plugins.openvswitch.ovs_neutron_plugin.OVSNeutronPluginV2
+#neutron::service_plugins:
+#  - router
+#  - firewall
+#  - lbaas
+#  - vpnaas
+#  - metering
+neutron::auth_strategy: 'keystone'
+neutron::dhcp_lease_duration: 86400
+neutron::root_helper: 'sudo /opt/openstack/neutron/bin/neutron-rootwrap /opt/openstack/neutron/etc/rootwrap.conf'
+neutron::control_exchange: neutron
+neutron::rpc_backend: neutron.openstack.common.rpc.impl_kombu
+neutron::rabbit_password: sUTrsaeSKduY33io
+neutron::rabbit_hosts:
+  - rabbitmq01.test-cloud.pixelpark.internal:5672
+  - rabbitmq02.test-cloud.pixelpark.internal:5672
+neutron::rabbit_user: guest
+neutron::rabbit_virtual_host: '/'
+#neutron::log_file: 'server.log'
+neutron::log_dir: '/var/log/neutron'
+neutron::quota_network: 1
+neutron::quota_subnet: 1
+neutron::quota_port: -1
+neutron::quota_router: 1
+neutron::quota_floatingip: 15
+neutron::quota_security_group: -1,
+neutron::quota_security_group_rule: -1
+neutron::neutron_config:
+  DEFAULT/use_stderr:
+    value: false
+  DEFAULT/policy_file:
+    value: /opt/openstack/neutron/etc/policy.json
+neutron::config::server_config:
+  DEFAULT/lock_path:
+    value: '$state_path/lock'
+  DEFAULT/api_paste_config:
+    value: '/opt/openstack/neutron/etc/api-paste.ini'
+  DEFAULT/notification_driver:
+    value: 'neutron.openstack.common.notifier.rpc_notifier'
+  DEFAULT/notification_topics:
+    value: notifications
+  DEFAULT/loadbalancer_pool_scheduler_driver:
+    value: neutron.services.loadbalancer.agent_scheduler.ChanceScheduler
+  DEFAULT/network_auto_schedule:
+    value: true
+  DEFAULT/use_stderr:
+    value: false
+  DEFAULT/policy_file:
+    value: '/opt/openstack/neutron/etc/policy.json'
+
+neutron::server::manage_service: false
+neutron::server::bind_port: '9696'
+neutron::server::bind_host: network-cluster01.test-cloud.pixelpark.internal
+neutron::server::auth_password: J6F2ahdtrtZ5oLKM
+neutron::server::auth_type: keystone
+neutron::server::auth_host: 'keystone.test-cloud.pixelpark.internal'
+neutron::server::auth_port: '35357'
+neutron::server::auth_tenant: service
+neutron::server::auth_user: neutron
+neutron::server::auth_protocol: http
+neutron::server::database_connection: 'mysql://neutrondbadmin:n8qX0Un7F5RIYUID@mysql.test-cloud.pixelpark.internal/neutron'
+# TODO: folgenden parameter beachten
+neutron::server::sync_db: false
+neutron::server::haproxy_listening_service: test-cloud-neutron-server
+neutron::server::notifications::notify_nova_on_port_status_changes: true
+neutron::server::notifications::notify_nova_on_port_data_changes: true
+neutron::server::notifications::nova_url: 'http://nova.test-cloud.pixelpark.internal:8774/v2'
+neutron::server::notifications::nova_admin_auth_url: 'http://keystone.test-cloud.pixelpark.internal:35357/v2.0'
+neutron::server::notifications::nova_admin_username: nova
+neutron::server::notifications::nova_admin_tenant_name: service
+neutron::server::notifications::nova_admin_password: J6F2ahdtrtZ5oLKM
+neutron::server::notifications::nova_region_name: regionone
+neutron::server::notifications::nova_admin_tenant_id: 1bc94e90c3044dfab7778011cd1a0a4d
+neutron::db::mysql::password: n8qX0Un7F5RIYUID
+neutron::db::mysql::dbname: neutron
+neutron::db::mysql::user: neutrondbadmin
+neutron::db::mysql::host: mysql.test-cloud.pixelpark.internal
+neutron::db::mysql::allowed_hosts: '%'
+neutron::db::mysql::charset: utf8
+neutron::db::mysql::collate: utf8_unicode_ci
+neutron::pacemaker::primitives:
+  neutron-server:
+    primitive_class: 'systemd'
+    primitive_type: 'neutron-server'
+    operations:
+      monitor:
+        interval: 10s
+      start:
+        interval: '0'
+        timeout: 60s
+      stop:
+        interval: '0'
+        timeout: 60s
+# Neutron DHCP Agent
+neutron::agents::dhcp::manage_service: false
+neutron::agents::dhcp::enabled: false
+neutron::agents::dhcp::debug: true
+neutron::agents::dhcp::interface_driver: 'neutron.agent.linux.interface.OVSInterfaceDriver'
+neutron::agents::dhcp::dhcp_driver: 'neutron.agent.linux.dhcp.Dnsmasq'
+neutron::agents::dhcp::root_helper: 'sudo /opt/openstack/neutron/bin/neutron-rootwrap /opt/openstack/neutron/etc/neutron/rootwrap.conf'
+neutron::agents::dhcp::use_namespaces: true
+neutron::agents::dhcp::dnsmasq_config_file: '/opt/openstack/neutron/etc/dnsmasq-neutron.conf'
+neutron::agents::dhcp::dhcp_delete_namespaces: true
+neutron::agents::dhcp::enable_isolated_metadata: false
+neutron::agents::dhcp::manage_service: false
+neutron::config::dhcp_agent_config:
+  DEFAULT/ovs_integration_bridge:
+    value: br-int
+  DEFAULT/ovs_use_veth:
+    value: true
+  DEFAULT/dhcp_domain:
+    value: test-cloud.pixelpark.internal
+  keystone_authtoken/auth_host:
+    value: keystone.test-cloud.pixelpark.internal
+  keystone_authtoken/admin_tenant_name:
+    value: service
+  keystone_authtoken/admin_user:
+    value: neutron
+  keystone_authtoken/admin_password:
+    value: J6F2ahdtrtZ5oLKM
+
+# Neutron L3 Agent
+neutron::agents::l3::manage_service: false
+neutron::agents::l3::enabled: false
+neutron::agents::l3::debug: true
+neutron::agents::l3::external_network_bridge: br-ex
+neutron::agents::l3::use_namespaces: true
+neutron::agents::l3::interface_driver: 'neutron.agent.linux.interface.OVSInterfaceDriver'
+neutron::agents::l3::router_id: '9bcaec1a-f41b-4b12-b23f-eae836873d97'
+neutron::agents::l3::gateway_external_network_id: 'ad8098ae-4e93-4568-8964-34c7451703b4'
+neutron::agents::l3::send_arp_for_ha: 0
+neutron::agents::l3::manage_service: false
+neutron::config::l3_agent_config:
+  DEFAULT/ovs_use_veth:
+    value: true
+  keystone_authtoken/auth_host:
+    value: keystone.test-cloud.pixelpark.internal
+  keystone_authtoken/admin_tenant_name:
+    value: service
+  keystone_authtoken/admin_user:
+    value: neutron
+  keystone_authtoken/admin_password:
+    value: J6F2ahdtrtZ5oLKM
+  DEFAULT/host:
+    value: network-cluster01.test-cloud.pixelpark.internal
+
+# Neutron lbaas Agent
+neutron::agents::lbaas::manage_service: false
+neutron::agents::lbaas::enabled: false
+neutron::agents::lbaas::debug: true
+neutron::agents::lbaas::interface_driver: 'neutron.agent.linux.interface.OVSInterfaceDriver'
+neutron::agents::lbaas::device_driver: 'neutron.services.loadbalancer.drivers.haproxy.namespace_driver.HaproxyNSDriver'
+neutron::agents::lbaas::manage_haproxy_package: false
+neutron::config::lbaas_agent_config:
+  DEFAULT/ovs_use_veth:
+    value: true
+  keystone_authtoken/auth_host:
+    value: keystone.test-cloud.pixelpark.internal
+  keystone_authtoken/admin_tenant_name:
+    value: service
+  keystone_authtoken/admin_user:
+    value: neutron
+  keystone_authtoken/admin_password:
+    value: J6F2ahdtrtZ5oLKM
+# Neutron ML Plugin
+neutron::plugins::ml2::enable_security_group: true
+neutron::plugins::ml2::type_drivers:
+  - gre
+neutron::plugins::ml2::tenant_network_types:
+  - gre
+neutron::plugins::ml2::mechanism_drivers:
+  - openvswitch
+neutron::plugins::ml2::tunnel_id_ranges:
+  - '1:1000'
+neutron::plugins::enable_security_group: true
+
+# Neutron Metadata Agent
+neutron::agents::metadata::manage_service: false
+neutron::agents::metadata::enabled: false
+neutron::agents::metadata::auth_password: J6F2ahdtrtZ5oLKM
+neutron::agents::metadata::shared_secret: rohd3HaeQu2Eex7I
+neutron::agents::metadata::debug: true
+neutron::agents::metadata::auth_tenant: service
+neutron::agents::metadata::auth_region: regionone
+neutron::agents::metadata::auth_url: 'http://keystone.test-cloud.pixelpark.internal:35357/v2.0'
+neutron::agents::metadata::metadata_ip: 217.66.54.195
+
+neutron::agents::metering::manage_service: false
+neutron::agents::metering::debug: true
+
+# Neutron OVS Agent
+neutron::agents::ovs::manage_service: false
+neutron::agents::ovs::enabled: false
+neutron::agents::ovs::tunnel_types:
+  - gre
+neutron::agents::ovs::enable_tunneling: true
+neutron::agents::ovs::neutron_plugin_ovs:
+neutron::plugins::ovs::neutron_plugin_ovs:
+  OVS/enable_tunneling:
+    value: true
+
+
+# Neutron OVS Plugin
+neutron::plugins::ovs::enable_tunneling: true
+neutron::plugins::ovs::tenant_network_type: gre
+
+#Neutron vpnaas Agent
+neutron::agents::vpnaas::manage_service: false
+neutron::agents::vpnaas::enabled: false
+
+# Neutron Pacemaker
+neutron::pacemaker::primitives:
+  neutron-server:
+    primitive_class: systemd
+    primitive_type: neutron-server
+    operations:
+      monitor:
+        interval: 10s
+        timeout: 30s
+      start:
+        interval: "0"
+        timeout: 60s
+      stop:
+        interval: "0"
+        timeout: 60s
+
+# Neutron Pacemaker fuer die Network Nodes
+neutron::pacemaker_agents::primitives:
+  neutron-dhcp-agent:
+    primitive_class: 'systemd'
+    primitive_type: 'neutron-dhcp-agent'
+    operations:
+      monitor:
+        interval: '10s'
+        timeout: '30s'
+      start:
+        interval: '0'
+        timeout: '60s'
+      stop:
+        interval: '0'
+        timeout: '60s'
+#  Disable Agent bis dieser auch funktioniert
+#  
+#  neutron-fwaas-agent:
+#    primitive_class: 'systemd'
+#    primitive_type: 'neutron-fwaas-agent'
+#    operations:
+#      monitor:
+#        interval: '10s'
+#        timeout: '30s'
+#      start:
+#        interval: '0'
+#        timeout: '60s'
+#      stop:
+#        interval: '0'
+#        timeout: '60s'
+  neutron-l3-agent:
+    primitive_class: 'systemd'
+    primitive_type: 'neutron-l3-agent'
+    operations:
+      monitor:
+        interval: '10s'
+        timeout: '30s'
+      start:
+        interval: '0'
+        timeout: '60s'
+      stop:
+        interval: '0'
+        timeout: '60s'
+  neutron-lbaas-agent:
+    primitive_class: 'systemd'
+    primitive_type: 'neutron-lbaas-agent'
+    operations:
+      monitor:
+        interval: '10s'
+        timeout: '30s'
+      start:
+        interval: '0'
+        timeout: '60s'
+      stop:
+        interval: '0'
+        timeout: '60s'
+  neutron-metadata-agent:
+    primitive_class: 'systemd'
+    primitive_type: 'neutron-metadata-agent'
+    operations:
+      monitor:
+        interval: '10s'
+        timeout: '30s'
+      start:
+        interval: '0'
+        timeout: '60s'
+      stop:
+        interval: '0'
+        timeout: '60s'
+  neutron-metering-agent:
+    primitive_class: 'systemd'
+    primitive_type: 'neutron-metering-agent'
+    operations:
+      monitor:
+        interval: '10s'
+        timeout: '30s'
+      start:
+        interval: '0'
+        timeout: '60s'
+      stop:
+        interval: '0'
+        timeout: '60s'
+  neutron-openvswitch-agent:
+    primitive_class: 'systemd'
+    primitive_type: 'neutron-openvswitch-agent'
+    operations:
+      monitor:
+        interval: '10s'
+        timeout: '30s'
+      start:
+        interval: '0'
+        timeout: '60s'
+      stop:
+        interval: '0'
+        timeout: '60s'
+  neutron-vpn-agent:
+    primitive_class: 'systemd'
+    primitive_type: 'neutron-vpn-agent'
+    operations:
+      monitor:
+        interval: '10s'
+        timeout: '30s'
+      start:
+        interval: '0'
+        timeout: '60s'
+      stop:
+        interval: '0'
+        timeout: '60s'
+neutron::pacemaker_agents::service_ips:
+  network-cluster01:
+    primitive_class: 'ocf'
+    primitive_type: 'IPaddr2'
+    provided_by: 'heartbeat'
+    parameters:
+      ip: '192.168.90.201'
+      cidr_netmask: '24'
+      iflabel: 'netcl01'
+    operations:
+      monitor: 
+        interval: '10s'
+  neutron-data-net:
+    primitive_class: 'ocf'
+    primitive_type: 'IPaddr2'
+    provided_by: 'heartbeat'
+    parameters:
+      ip: '192.168.91.13'
+      cidr_netmask: '24'
+      iflabel: 'data'
+      nic: 'bond0'
+    operations:
+      monitor: 
+        interval: '10s'
+  neutron-ext-net:
+    primitive_class: 'ocf'
+    primitive_type: 'IPaddr2'
+    provided_by: 'heartbeat'
+    parameters:
+      ip: '217.66.54.196'
+      cidr_netmask: '27'
+      nic: 'br-ex'
+    operations:
+      monitor: 
+        interval: '10s'
+
+# Heat
+heat::auth_uri: 'http://keystone.test-cloud.pixelpark.internal:35357/v2.0'
+heat::verbose: true
+heat::debug: true
+heat::keystone_host: keystone.test-cloud.pixelpark.internal
+heat::keystone_port: '35357'
+heat::keystone_protocol: http
+heat::keystone_user: heat
+heat::keystone_tenant: service
+heat::keystone_password: J6F2ahdtrtZ5oLKM
+heat::keystone_ec2_uri: 'http://ec2.cloud-test.pixelpark.internal:5000/v2.0/ec2tokens'
+heat::rpc_backend: 'heat.openstack.common.rpc.impl_kombu'
+heat::rabbit_hosts:
+  - rabbitmq01.test-cloud.pixelpark.internal:5672
+  - rabbitmq02.test-cloud.pixelpark.internal:5672
+heat::rabbit_userid: guest
+heat::rabbit_password: sUTrsaeSKduY33io
+heat::rabbit_virtual_host: '/'
+heat::sql_connection: 'mysql://heatdbadmin:Bh710IOPLrND4DVO@mysql.test-cloud.pixelpark.internal/heat'
+heat::database_idle_timeout: 3600
+heat::api_cfn::bind_port: '8000'
+heat::api_cfn::manage_service: false
+heat::api_cfn::haproxy_listening_service_heat_api_cfn: test-cloud-heat-api-cfn
+heat::api_cloudwatch::bind_port: '8003'
+heat::api_cloudwatch::manage_service: false
+heat::api_cloudwatch::haproxy_listening_service_heat_api_cloudwatch: test-cloud-heat-api-cloudwatch
+heat::api::bind_port: '8004'
+heat::api::haproxy_listening_service_heat_api: test-cloud-heat-api
+heat::engine::auth_encryption_key: eiPhuu9Equooph0T
+heat::engine::manage_service: false
+heat::config::api_config:
+  DEFAULT/environment_dir:
+    value: '/opt/openstack/heat/etc/heat/environment.d'
+  DEFAULT/use_stderr:
+    value: false
+  DEFAULT/notification_driver:
+    value: heat.openstack.common.notifier.rpc_notifier
+  DEFAULT/policy_file:
+    value: '/opt/openstack/heat/etc/heat/policy.json'
+  DEFAULT/use_stderr:
+    value: false
+heat::db::mysql::password: Bh710IOPLrND4DVO
+heat::db::mysql::dbname: heat
+heat::db::mysql::user: heatdbadmin
+heat::db::mysql::host: mysql.test-cloud.pixelpark.internal
+heat::db::mysql::allowed_hosts: '%'
+heat::db::mysql::charset: utf8
+heat::db::mysql::collate: utf8_unicode_ci
+heat::pacemaker::primitives:
+  heat-api:
+    primitive_class: 'systemd'
+    primitive_type: 'heat-api'
+    operations:
+      monitor:
+        interval: 10s
+      start:
+        interval: '0'
+        timeout: 60s
+      stop:
+        interval: '0'
+        timeout: 60s
+  heat-engine:
+    primitive_class: 'systemd'
+    primitive_type: 'heat-engine'
+    operations:
+      monitor:
+        interval: 10s
+      start:
+        interval: '0'
+        timeout: 60s
+      stop:
+        interval: '0'
+        timeout: 60s
+  heat-api-cfn:
+    primitive_class: 'systemd'
+    primitive_type: 'heat-api-cfn'
+    operations:
+      monitor:
+        interval: 10s
+      start:
+        interval: '0'
+        timeout: 60s
+      stop:
+        interval: '0'
+        timeout: 60s
+  heat-api-cloudwatch:
+    primitive_class: 'systemd'
+    primitive_type: 'heat-api-cloudwatch'
+    operations:
+      monitor:
+        interval: 10s
+      start:
+        interval: '0'
+        timeout: 60s
+      stop:
+        interval: '0'
+        timeout: 60s
+# Glance
+# api config
+glance::client::ensure: absent
+glance::api::keystone_password: J6F2ahdtrtZ5oLKM
+glance::api::manage_service: false
+glance::api::verbose: true
+glance::api::debug: true
+glance::api::bind_port: '9292'
+glance::api::backlog: 4096
+glance::api::log_file: '/var/log/glance/api.log'
+glance::api::log_dir: '/var/log/glance' # Kommt in der Konfig nicht vor
+glance::api::registry_host: glance.test-cloud.pixelpark.internal
+glance::api::registry_port: 9191
+glance::api::auth_host: keystone.test-cloud.pixelpark.internal
+glance::api::auth_url: 'http://keystone.test-cloud.pixelpark.internal:35357/v2.0'
+glance::api::auth_port: '35357'
+glance::api::auth_uri: false # kommt nicht in der Konfig vor
+glance::api::auth_protocol: http
+glance::api::pipeline: keystone
+glance::api::keystone_tenant: service
+glance::api::keystone_user: glance
+glance::api::show_image_direct_url: false # kommt nicht in der Konfig vor
+glance::api::database_connection: 'mysql://glancedbadmin:S4EJh]j9H9TywZOw@mysql.test-cloud.pixelpark.internal/glance'
+glance::api::database_idle_timeout: 3600 # kommt nicht in der Konfig vor
+glance::api::image_cache_dir: '/var/lib/glance/image-cache/'
+glance::api::haproxy_listening_service: test-cloud-glance-api
+
+glance::backend::rbd::rbd_store_user: glance
+glance::backend::rbd::rbd_store_ceph_conf: '/etc/ceph/ceph.conf'
+glance::backend::rbd::rbd_store_pool: images
+glance::backend::rbd::rbd_store_chunk_size: 8 # kommt nicht in der Konfig vor
+#glance::backend::swift::swift_store_user: 'jdoe:jdoe'
+#glance::backend::swift::swift_store_key: a86850deb2742ec3cb41518e26aa2d89
+#glance::backend::swift::swift_store_auth_address: '127.0.0.1:5000/v2.0/'
+#glance::backend::swift::swift_store_container: glance
+#glance::backend::swift::swift_store_auth_version: 2
+#glance::backend::swift::swift_store_create_container_on_put: false
+#glance::backend::swift::swift_store_large_object_size: 5120
+#glance::backend::swift::swift_store_large_object_chunk_size: 200
+
+glance::notify::rabbitmq::rabbit_password: sUTrsaeSKduY33io
+glance::notify::rabbitmq::rabbit_userid: guest
+glance::notify::rabbitmq::rabbit_hosts:
+  - rabbitmq01.test-cloud.pixelpark.internal:5672
+  - rabbitmq02.test-cloud.pixelpark.internal:5672
+glance::notify::rabbitmq::rabbit_virtual_host: '/'
+glance::notify::rabbitmq::rabbit_use_ssl: false
+glance::notify::rabbitmq::rabbit_notification_exchange: 'glance'
+glance::notify::rabbitmq::rabbit_notification_topic: 'notifications'
+glance::notify::rabbitmq::amqp_durable_queues: false
+
+glance::registry::keystone_password: J6F2ahdtrtZ5oLKM
+glance::registry::manage_service: false
+glance::registry::verbose: true
+glance::registry::debug: true
+glance::registry::bind_port: '9191'
+glance::registry::log_file: '/var/log/glance/registry.log'
+glance::registry::log_dir: '/var/log/glance'
+glance::registry::database_connection: 'mysql://glancedbadmin:S4EJh]j9H9TywZOw@mysql.test-cloud.pixelpark.internal/glance'
+glance::registry::database_idle_timeout: 3600
+glance::registry::auth_type: keystone
+glance::registry::auth_host: keystone.test-cloud.pixelpark.internal
+glance::registry::auth_port: '35357'
+glance::registry::auth_protocol: http
+glance::registry::keystone_tenant: service
+glance::registry::keystone_user: glance
+glance::registry::pipeline: keystone
+glance::registry::haproxy_listening_service: test-cloud-glance-registry
+
+glance::db::mysql::host: mysql.test-cloud.pixelpark.internal
+glance::db::mysql::password: S4EJh]j9H9TywZOw
+glance::db::mysql::dbname: glance
+glance::db::mysql::user: glancedbadmin
+glance::db::mysql::allowed_hosts: '%'
+glance::db::mysql::charset: utf8
+glance::db::mysql::collate: utf8_unicode_ci
+
+glance::config::api_config:
+  DEFAULT/auth_region:
+    value: regionone
+  DEFAULT/auth_strategy:
+    value: keystone
+  DEFAULT/disk_formats:
+    value: 'ami,ari,aki,vhd,vmdk,raw,qcow2,vdi,iso'
+  DEFAULT/container_formats:
+    value: 'ami,ari,aki,bare,ovf,ova'
+  DEFAULT/allow_anonymous_access:
+    value: false
+  DEFAULT/admin_role:
+    value: admin
+  DEFAULT/delayed_delete:
+    value: false
+  DEFAULT/use_stderr:
+    value: false
+
+glance::config::registry_config:
+  DEFAULT/admin_role:
+    value: admin
+  DEFAULT/limit_param_default:
+    value: 25
+  DEFAULT/api_limit_max:
+    value: 1000
+  DEFAULT/backlog:
+    value: 4096
+  DEFAULT/use_stderr:
+    value: false
+
+glance::pacemaker::primitives:
+  glance-api:
+    primitive_class: 'systemd'
+    primitive_type: 'glance-api'
+    operations:
+      monitor:
+        interval: 10s
+      start:
+        interval: '0'
+        timeout: 60s
+      stop:
+        interval: '0'
+        timeout: 60s
+  glance-registry:
+    primitive_class: 'systemd'
+    primitive_type: 'glance-registry'
+    operations:
+      monitor:
+        interval: 10s
+      start:
+        interval: '0'
+        timeout: 60s
+      stop:
+        interval: '0'
+        timeout: 60s
+
+# Cinder
+cinder::api::manage_service: false
+cinder::api::keystone_password: J6F2ahdtrtZ5oLKM
+cinder::api::keystone_tenant: service
+cinder::api::keystone_user: cinder
+cinder::api::keystone_auth_host: 'keystone.test-cloud.pixelpark.internal'
+cinder::api::keystone_auth_port: '35357'
+cinder::api::keystone_auth_protocol: http
+cinder::api::keystone_auth_uri: 'http://keystone.test-cloud.pixelpark.internal:5000/v2.0'
+cinder::api::service_port: '5000'
+cinder::api::haproxy_listening_service: test-cloud-cinder
+
+cinder::config::cinder_config:
+  DEFAULT/policy_file:
+    value: '/opt/openstack/cinder/etc/policy.json'
+  DEFAULT/use_stderr:
+    value: false
+
+cinder::control_exchange: cinder
+cinder::database_connection: 'mysql://cinderdbadmin:d5zLLPgtK85YskG7@mysql.test-cloud.pixelpark.internal:3306/cinder'
+cinder::rpc_backend: 'cinder.openstack.common.rpc.impl_kombu'
+cinder::rabbit_hosts:
+  - 'rabbitmq01.test-cloud.pixelpark.internal:5672'
+  - 'rabbitmq02.test-cloud.pixelpark.internal:5672'
+cinder::rabbit_userid: guest
+cinder::rabbit_password: 'sUTrsaeSKduY33io'
+cinder::api_paste_config: '/opt/openstack/cinder/etc/api-paste.ini'
+cinder::log_dir: '/var/log/cinder'
+cinder::verbose: true
+cinder::debug: true
+cinder::scheduler::manage_service: false
+
+cinder::backend::rbd::rbd_pool: volumes
+cinder::backend::rbd::rbd_user: cinder
+
+cinder::db::mysql::password: d5zLLPgtK85YskG7
+cinder::db::mysql::dbname: cinder
+cinder::db::mysql::user: cinderdbadmin
+cinder::db::mysql::host: mysql.test-cloud.pixelpark.internal
+cinder::db::mysql::allowed_hosts: '%'
+cinder::db::mysql::charset: utf8
+cinder::db::mysql::collate: utf8_unicode_ci
+
+cinder::glance::glance_api_servers:
+  - 'glance01.test-cloud.pixelpark.internal:9292'
+  - 'glance02.test-cloud.pixelpark.internal:9292'
+  
+cinder::config:cinder_config: '/opt/openstack/cinder/etc/cinder.conf'
+cinder::config:cinder_config:api_paste_ini_config: '/opt/openstack/cinder/etc/api-paste.ini'
+
+cinder::quota::quota_volumes: 25
+cinder::quota::quota_snapshots: 25
+cinder::quota::quota_gigabytes: 300
+
+cinder::type_set::os_tenant_name: service
+cinder::type_set::os_username: cinder
+cinder::type_set::os_password: J6F2ahdtrtZ5oLKM
+cinder::type_set::os_auth_url: 'http://keystone.test-cloud.pixelpark.internal:5000/v2.0'
+
+cinder::volume::manage_service: false
+cinder::volume::rbd::rbd_pool: volumes
+cinder::volume::rbd::rbd_user: cinder
+cinder::volume::rbd::rbd_secret_uuid: '__musst_set__'
+
+cinder::backup::manage_service: false
+cinder::backup::ceph::backup_ceph_user: cinder-backup
+
+
+cinder::pacemaker_api::primitives:
+  cinder-api:
+    primitive_class: 'systemd'
+    primitive_type: 'cinder-api'
+    operations:
+      monitor:
+        interval: 10s
+      start:
+        interval: '0'
+        timeout: 60s
+      stop:
+        interval: '0'
+        timeout: 60s
+cinder::pacemaker::primitives:
+  cinder-scheduler:
+    primitive_class: 'systemd'
+    primitive_type: 'cinder-scheduler'
+    operations:
+      monitor:
+        interval: 10s
+      start:
+        interval: '0'
+        timeout: 60s
+      stop:
+        interval: '0'
+        timeout: 60s
+  cinder-volume:
+    primitive_class: 'systemd'
+    primitive_type: 'cinder-volume'
+    operations:
+      monitor:
+        interval: 10s
+      start:
+        interval: '0'
+        timeout: 60s
+      stop:
+        interval: '0'
+        timeout: 60s
+  cinder-backup:
+    primitive_class: 'systemd'
+    primitive_type: 'cinder-backup'
+    operations:
+      monitor:
+        interval: 10s
+      start:
+        interval: '0'
+        timeout: 60s
+      stop:
+        interval: '0'
+        timeout: 60s
+
+nova::database_connection: 'mysql://novadbadmin:qfg8qGKUSiKugx3k@mysql.test-cloud.pixelpark.internal/nova'
+nova::rabbit_hosts: 
+  - 'rabbitmq01.test-cloud.pixelpark.internal'
+  - 'rabbitmq02.test-cloud.pixelpark.internal'
+nova::rabbit_port: '5672'
+nova::rabbit_password: 'sUTrsaeSKduY33io'
+nova::rabbit_userid: 'guest'
+nova::glance_api_servers: 'glance01.test-cloud.pixelpark.internal:9292,glance02.test-cloud.pixelpark.internal:9292'
+nova::verbose: true
+nova::log_dir: '/var/log/nova'
+nova::debug: true
+nova::rootwrap_config: '/opt/openstack/nova/etc/rootwrap.conf'
+nova::auth_strategy: keystone
+nova::notify_on_state_change: vm_and_task_state
+nova::vncproxy::host: '217.66.54.195'
+nova::config::nova_config:
+  DEFAULT/pybasedir:
+    value: '/opt/openstack/nova/lib/python2.7/site-packages'
+  DEFAULT/bindir:
+    value: '/opt/openstack/nova/bin'
+  DEFAULT/policy_file:
+    value: '/opt/openstack/nova/etc/policy.json'
+  DEFAULT/api_paste_config:
+    value: '/opt/openstack/nova/etc/api-paste.ini'
+  DEFAULT/enable_instance_password:
+    value: false
+  DEFAULT/allow_resize_to_same_host:
+    value: true
+  DEFAULT/allow_migrate_to_same_host:
+    value: true
+  DEFAULT/resume_guests_state_on_host_boot:
+    value: true
+  DEFAULT/reboot_timeout:
+    value: 300
+  DEFAULT/reserved_host_memory_mb:
+    value: 2048
+  DEFAULT/linuxnet_interface_driver:
+    value: 'nova.network.linux_net.LinuxOVSInterfaceDriver'
+  DEFAULT/use_stderr:
+    value: false
+  DEFAULT/vnc_keymap:
+    value: 'de'
+  DEFAULT/os_region_name:
+    value: regionone
+  DEFAULT/metadata_host:
+    value: metadata.test-cloud.pixelpark.net
+  keystone_authtoken/identity_uri:
+    value: "http://keystone.test-cloud.pixelpark.internal:35357/"
+
+nova::compute::enabled: true
+nova::compute::vncserver_proxyclient_address: 217.66.54.195
+nova::compute::vncproxy_base_url: 'http://217.66.54.195:6081/console'
+nova::compute::instance_usage_audit: true
+nova::compute::libvirt::vncserver_listen: 0.0.0.0
+nova::compute::instance_usage_audit_period: hour
+nova::keystone::auth::password: J6F2ahdtrtZ5oLKM
+nova::keystone::auth::public_protocol: http
+nova::keystone::auth::public_address: keystone.test-cloud.pixelpark.internal
+nova::keystone::auth::compute_port: '5000'
+nova::keystone::auth::compute_version: 'v2.0'
+nova::api::auth_host: keystone.test-cloud.pixelpark.internal
+nova::api::auth_port: '35357'
+nova::api::auth_version: v2.0
+nova::api::admin_tenant_name: service
+nova::api::admin_user: nova
+nova::api::admin_password: J6F2ahdtrtZ5oLKM
+nova::api::haproxy_listening_service: test-cloud-nova-api
+nova::api::neutron_metadata_proxy_shared_secret: rohd3HaeQu2Eex7I
+nova::api::haproxy_listening_service_ec2: test-cloud-nova-ec2
+nova::api::haproxy_listening_service_metadata: test-cloud-nova-metadata
+nova::api::haproxy_listening_service_osapi: test-cloud-nova-osapi
+nova::network::neutron::neutron_url: 'http://neutron.test-cloud.pixelpark.internal:9696'
+nova::network::neutron::neutron_admin_username: neutron
+nova::network::neutron::neutron_admin_password: J6F2ahdtrtZ5oLKM
+nova::network::neutron::neutron_admin_tenant_name: service
+nova::network::neutron::neutron_admin_auth_url: 'http://keystone.test-cloud.pixelpark.internal:35357/v2.0'
+nova::network::neutron::firewall_driver: nova.virt.firewall.NoopFirewallDriver
+nova::network::neutron::neutron_region_name: regionone
+nova::network::flatdhcp::dhcp_domain: cloud.pixelpark.internal
+nova::scheduler::filter::cpu_allocation_ratio: 32.0
+nova::scheduler::filter::ram_allocation_ratio: 2.0
+nova::scheduler::manage_service: false
+nova::scheduler::enabled: true
+nova::client::ensure: absent
+nova::db::mysql::user: novadbadmin
+nova::db::mysql::password: qfg8qGKUSiKugx3k
+nova::vncproxy::manage_service: false
+nova::consoleauth::manage_service: false
+nova::conductor::manage_service: false
+nova::cert::manage_service: false
+nova::pacemaker::primitives:
+  nova-api-ec2:
+    primitive_class: 'systemd'
+    primitive_type: 'nova-api-ec2'
+    operations:
+      monitor:
+        interval: 10s
+      start:
+        interval: '0'
+        timeout: 60s
+      stop:
+        interval: '0'
+        timeout: 60s
+  nova-api-metadata:
+    primitive_class: 'systemd'
+    primitive_type: 'nova-api-metadata'
+    operations:
+      monitor:
+        interval: 10s
+      start:
+        interval: '0'
+        timeout: 60s
+      stop:
+        interval: '0'
+        timeout: 60s
+  nova-api-os-compute:
+    primitive_class: 'systemd'
+    primitive_type: 'nova-api-os-compute'
+    operations:
+      monitor:
+        interval: 10s
+      start:
+        interval: '0'
+        timeout: 60s
+      stop:
+        interval: '0'
+        timeout: 60s
+  nova-cert:
+    primitive_class: 'systemd'
+    primitive_type: 'nova-cert'
+    operations:
+      monitor:
+        interval: 10s
+      start:
+        interval: '0'
+        timeout: 60s
+      stop:
+        interval: '0'
+        timeout: 60s
+  nova-conductor:
+    primitive_class: 'systemd'
+    primitive_type: 'nova-conductor'
+    operations:
+      monitor:
+        interval: 10s
+      start:
+        interval: '0'
+        timeout: 60s
+      stop:
+        interval: '0'
+        timeout: 60s
+  nova-consoleauth:
+    primitive_class: 'systemd'
+    primitive_type: 'nova-consoleauth'
+    operations:
+      monitor:
+        interval: 10s
+      start:
+        interval: '0'
+        timeout: 60s
+      stop:
+        interval: '0'
+        timeout: 60s
+  nova-console:
+    primitive_class: 'systemd'
+    primitive_type: 'nova-console'
+    operations:
+      monitor:
+        interval: 10s
+      start:
+        interval: '0'
+        timeout: 60s
+      stop:
+        interval: '0'
+        timeout: 60s
+  nova-novncproxy:
+    primitive_class: 'systemd'
+    primitive_type: 'nova-novncproxy'
+    operations:
+      monitor:
+        interval: 10s
+      start:
+        interval: '0'
+        timeout: 60s
+      stop:
+        interval: '0'
+        timeout: 60s
+  nova-scheduler:
+    primitive_class: 'systemd'
+    primitive_type: 'nova-scheduler'
+    operations:
+      monitor:
+        interval: 10s
+      start:
+        interval: '0'
+        timeout: 60s
+      stop:
+        interval: '0'
+        timeout: 60s
+nova::pacemaker_compute::primitives:
+  nova-compute:
+    primitive_class: 'systemd'
+    primitive_type: 'nova-compute'
+    operations:
+      monitor:
+        interval: 10s
+      start:
+        interval: '0'
+        timeout: 60s
+      stop:
+        interval: '0'
+        timeout: 60s
+
+mongodb::globals::manage_package_repo: false
+mongodb::globals::client_package_name: mongodb
+mongodb::globals::server_package_name: mongodb-server
+mongodb::globals::version: 2.4.6-1.fc20
+mongodb::replset: rsmain
+mongodb::replset::sets:
+  rsmain:
+    members:
+      - "mongodb01.test-cloud.pixelpark.internal:27017"
+      - "mongodb02.test-cloud.pixelpark.internal:27017"
+      
+pp_haproxy::mongodb_member::listening_service: test-cloud-mongodb-server
+
+pacemaker::stonith::disable: true
+# Horizon
+horizon::fqdn:
+  - test-cloud.pixelpark.net
+  - horizon01.test-cloud.pixelpark.internal
+  - horizon02.test-cloud.pixelpark.internal
+horizon::secret_key: 'test'
+horizon::cache_server_ip: 127.0.0.1
+horizon::cache_server_port: '11211'
+horizon::horizon_app_links: false
+horizon::keystone_url: 'http://keystone.test-cloud.pixelpark.internal:5000/v2.0'
+horizon::keystone_default_role: Member
+horizon::openstack_endpoint_type: 'publicURL'
+horizon::django_debug: false
+horizon::api_result_limit: 1000
+horizon::log_level: DEBUG
+horizon::help_url: 'http://docs.openstack.org'
+horizon::configure_apache: true
+horizon::bind_address: horizon01.test-cloud.pixelpark.internal
+horizon::servername: test-cloud.pixelpark.net
+#  $listen_ssl              = false,
+#  $ssl_redirect            = true,
+#  $horizon_cert            = undef,
+#  $horizon_key             = undef,
+#  $horizon_ca              = undef,
+#  $file_upload_temp_dir    = '/tmp',
+
+# Ceilometer
+ceilometer::metering_secret: 'ZtfXQ2Kk8X4LqRE[GKUzWuVnbEratgyj'
+ceilometer::notification_topics:
+  - 'notifications'
+  - 'glance_notifications'
+ceilometer::debug: true
+ceilometer::verbose: true
+ceilometer::use_syslog: false
+ceilometer::rpc_backend: 'ceilometer.openstack.common.rpc.impl_kombu'
+ceilometer::rabbit_hosts:
+  - rabbitmq01.test-cloud.pixelpark.internal:5672
+  - rabbitmq02.test-cloud.pixelpark.internal:5672
+ceilometer::rabbit_userid: guest
+ceilometer::rabbit_password: 'sUTrsaeSKduY33io'
+ceilometer::rabbit_virtual_host: '/'
+ceilometer::db::database_connection: 'mongodb://ceilometer:7JdY4JW3qjBUGD5p@mongodb.test-cloud.pixelpark.internal:27017/ceilometer'
+ceilometer::api::keystone_host: 'keystone.test-cloud.pixelpark.internal'
+ceilometer::api::keystone_port: '35357'
+ceilometer::api::keystone_protocol: http
+ceilometer::api::keystone_user: ceilometer
+ceilometer::api::keystone_tenant: service
+ceilometer::api::keystone_password: J6F2ahdtrtZ5oLKM
+ceilometer::api::keystone_auth_uri: http://keystone.test-cloud.pixelpark.internal:5000/
+ceilometer::api::host: ceilometer.test-cloud.pixelpark.internal
+ceilometer::api::port: '8777'
+ceilometer::alarm::evaluator::evaluation_interval: '60'
+ceilometer::alarm::evaluator::evaluation_service: 'ceilometer.alarm.service.SingletonAlarmService'
+ceilometer::alarm::evaluator::partition_rpc_topic: alarm_partition_coordination
+ceilometer::alarm::evaluator::record_history: true
+ceilometer::agent::auth::auth_password: J6F2ahdtrtZ5oLKM
+ceilometer::agent::auth::auth_url: 'http://keystone.test-cloud.pixelpark.internal:5000/v2.0'
+ceilometer::agent::auth::auth_region: regionone
+ceilometer::agent::auth::auth_user: ceilometer
+ceilometer::agent::auth::auth_tenant_name: service
+ceilometer::agent::auth::auth_tenant_id: '2030be3e9816467ba45e288e357b64b5'
+ceilometer::config::ceilometer_config:
+  DEFAULT/auth_strategy:
+    value: keystone
+#Corosync
+pacemaker::corosync::bind_address: 192.168.90.0
+pacemaker::corosync::multicast_address: 224.0.91.1
+
+httpd::webserver:
+  test-cloud.pixelpark.net:
+    modules:
+      - mpm_worker
+      - unixd
+      - access_compat
+      - filter
+      - authz_core
+      - authn_core
+    worker: true
+    manage_service: false
+    service_pacemaker: true
+    
+xymon::check::rabbitmq::members:
+  - rabbitmq01.test-cloud.pixelpark.internal:5672
+  - rabbitmq02.test-cloud.pixelpark.internal:5672
+xymon::check::rabbitmq::password: 'sUTrsaeSKduY33io'
+xymon::check::rabbitmq::user: 'guest'
+
+xymon::check::haproxy::members:
+  - nestor.test-cloud.pixelpark.internal:8080
+  - beli.test-cloud.pixelpark.internal:8080
+  
+xymon::modules:
+  - 'net2'
+
+zabbix::agent::manage_repo: false
+zabbix::agent::server: '217.66.51.48'
+
+
diff --git a/customer/test-cloud/control03.test-cloud.pixelpark.internal.yaml b/customer/test-cloud/control03.test-cloud.pixelpark.internal.yaml
new file mode 100644 (file)
index 0000000..4c3c2b5
--- /dev/null
@@ -0,0 +1,2 @@
+---
+site::role: base
diff --git a/customer/test-cloud/klio.test-cloud.pixelpark.internal.yaml b/customer/test-cloud/klio.test-cloud.pixelpark.internal.yaml
new file mode 100644 (file)
index 0000000..dd25268
--- /dev/null
@@ -0,0 +1,28 @@
+---
+site::role: base
+site::additional_classes:
+  - ceilometer::config
+  - zabbix::agent
+  - nova::network::neutron
+  - nova::compute::neutron
+  - nova::compute::libvirt
+  - nova::config
+  - nova
+  - nova::compute
+  - ceilometer::agent::auth
+  - pp_python::pip
+  - ceilometer
+  - hosts
+  - ceilometer::agent::compute
+  - nova::migration::libvirt
+  - neutron::agents::ovs
+  - neutron
+
+neutron::agents::ovs::local_ip: 192.168.91.15
+
+xymon::modules:
+  - 'cloud-new'
+  - 'ovs-tun'
+  - 'ipmi'
+  - 'raid'
+
diff --git a/customer/test-cloud/nestor.test-cloud.pixelpark.internal.yaml b/customer/test-cloud/nestor.test-cloud.pixelpark.internal.yaml
new file mode 100644 (file)
index 0000000..6ea7887
--- /dev/null
@@ -0,0 +1,182 @@
+---
+site::role: base
+site::additional_classes:
+  - galera
+  - nova::conductor
+  - nova::config
+  - heat::api_cloudwatch
+  - nova::api
+  - pp_haproxy::mongodb_member
+  - xymon::check::haproxy
+  - keystone::config
+  - cinder::ceilometer
+  - glance
+  - glance::backend::rbd
+  - neutron::pacemaker
+  - nova::consoleauth
+  - heat::api_cfn
+  - nova
+  - nova::pacemaker
+  - glance::pacemaker
+  - keystone
+  - glance::db::mysql
+  - neutron::server
+  - pp_haproxy
+  - heat::config
+  - zabbix::agent
+  - xymon::check::rabbitmq
+  - mongodb::client
+  - nova::network::neutron
+  - neutron::server::notifications
+  - mongodb
+  - nova::quota
+  - glance::api
+  - cinder::pacemaker_api
+  - heat
+  - heat::db::mysql
+  - glance::client
+  - keystone::db::mysql
+  - cinder::db::mysql
+  - heat::engine
+  - nova::scheduler
+  - keystone::pacemaker
+  - nova::cert
+  - heat::pacemaker
+  - mongodb::replset
+  - neutron::config
+  - glance::notify::rabbitmq
+  - rabbitmq
+  - nova::vncproxy
+  - nova::db::mysql
+  - pp_python::pip
+  - neutron::quota
+  - horizon
+  - neutron
+  - cinder
+  - neutron::plugins::ovs
+  - heat::api
+  - glance::registry
+  - cinder::api
+  - neutron::db::mysql
+
+hosts::hosts:
+  192.168.90.103:
+    interface_up: true
+    interface_device: "bond0:rabbit01"
+    interface_netmask: "255.255.255.0"
+  192.168.90.105:
+    interface_up: true
+    interface_device: "bond0:galera01"
+    interface_netmask: "255.255.255.0"
+  192.168.90.100:
+    interface_up: true
+    interface_device: "bond0:ks01"
+    interface_netmask: "255.255.255.0"
+  192.168.90.108:
+    interface_up: true
+    interface_device: "bond0:glance01"
+    interface_netmask: "255.255.255.0"
+  192.168.90.113:
+    interface_up: true
+    interface_device: "bond0:nt01"
+    interface_netmask: "255.255.255.0"
+  192.168.90.116:
+    interface_up: true
+    interface_device: "bond0:cinder01"
+    interface_netmask: "255.255.255.0"
+  192.168.90.119:
+    interface_up: true
+    interface_device: "bond0:nova01"
+    interface_netmask: "255.255.255.0"
+  192.168.90.122:
+    interface_up: true
+    interface_device: "bond0:hecfn01"
+    interface_netmask: "255.255.255.0"
+  192.168.90.125:
+    interface_up: true
+    interface_device: "bond0:heat01"
+    interface_netmask: "255.255.255.0"
+  192.168.90.128:
+    interface_up: true
+    interface_device: "bond0:heatcw01"
+    interface_netmask: "255.255.255.0"
+  192.168.90.111:
+    interface_up: true
+    interface_device: "bond0:hor01"
+    interface_netmask: "255.255.255.0"
+  192.168.90.137:
+    interface_up: true
+    interface_device: "bond0:mongod01"
+    interface_netmask: "255.255.255.0"
+    
+ntp::servers:
+  - "time01.pixelpark.com iburst"
+  - "time02.pixelpark.com iburst"
+  - "time03.pixelpark.com iburst"
+  
+rabbitmq::environment_variables:
+   RABBITMQ_NODE_IP_ADDRESS: 192.168.90.103
+   RABBITMQ_NODENAME: rabbit@rabbitmq01
+
+pp_rabbitmq::pacemaker::nodename: rabbit@rabbitmq01
+pp_rabbitmq::pacemaker::bind_host: 192.168.90.103
+
+galera::local_ip: 192.168.90.105
+galera::bind_address: 192.168.90.105
+galera::haproxy_server_names: galera01
+mongodb::globals::bind_ip: 
+  - 192.168.90.137
+  - 127.0.0.1
+pp_haproxy::mongodb_member::server_names: mongodb01
+pp_haproxy::mongodb_member::ipaddresses: 192.168.90.137
+
+keystone::public_bind_host: keystone01.test-cloud.pixelpark.internal
+keystone::admin_bind_host: keystone01.test-cloud.pixelpark.internal
+keystone::haproxy_server_names_admin: keystone01
+keystone::haproxy_server_names_public: keystone01
+
+neutron::server::bind_host: neutron01.test-cloud.pixelpark.internal
+neutron::server::haproxy_server_names: neutron-server01
+
+glance::api::bind_host: glance01.test-cloud.pixelpark.internal
+glance::api::haproxy_server_names: glance01
+glance::registry::bind_host: glance01.test-cloud.pixelpark.internal
+glance::registry::haproxy_server_names: glance01
+
+cinder::api::bind_host: cinder01.test-cloud.pixelpark.internal
+cinder::api::haproxy_server_names: cinder01
+
+heat::api::bind_host: 'heat01.test-cloud.pixelpark.internal'
+heat::api_cloudwatch::bind_host: 'heatcw01.test-cloud.pixelpark.internal'
+heat::api_cfn::bind_host: 'heatcfn01.test-cloud.pixelpark.internal'
+heat::api_cloudwatch::haproxy_server_names_heat_api_cloudwatch: heat01-api-cloudwatch
+heat::api_cfn::haproxy_server_names_heat_api_cfn: heat01-api-cfn
+heat::api::haproxy_server_names_heat_api: heat01-api
+
+nova::api::api_bind_address: nova01.test-cloud.pixelpark.internal
+nova::api::osapi_bind_address: nova01.test-cloud.pixelpark.internal
+nova::api::metadata_listen: nova01.test-cloud.pixelpark.internal
+nova::api::haproxy_server_names_ec2: nova01
+nova::api::haproxy_server_names_metadata: nova01
+nova::api::haproxy_server_names_osapi: nova01
+
+nova::vncproxy::host: nova01.test-cloud.pixelpark.internal
+nova::vncproxy::haproxy_server_names: nova01
+
+pacemaker::corosync::cluster_name: 'pcs-cluster-cloud-test-icehouse'
+pacemaker::corosync::cluster_members:
+  - nestor.test-cloud.pixelpark.internal
+  - beli.test-cloud.pixelpark.internal
+
+horizon::bind_address: horizon01.test-cloud.pixelpark.internal
+httpd::webserver:
+  test-cloud.pixelpark.net:
+    listens:
+      - 192.168.90.111:80
+
+xymon::modules:
+  - 'cloud-new'
+  - 'hlogin'
+  - 'ipmi'
+  - 'raid'
+  
diff --git a/customer/vrr/common.yaml b/customer/vrr/common.yaml
new file mode 100644 (file)
index 0000000..e0e4d01
--- /dev/null
@@ -0,0 +1,25 @@
+---
+accounts::users:
+  michael.fricke:
+    apply: true
+    sudo: true
+    shell: bash
+  matthias.schmidt:
+    apply: true
+    sudo: true
+    shell: bash
+  uwe.zillessen:
+    apply: true
+    sudo: true
+    shell: bash
+site::role: base
+site::additional_classes:
+#  - site::profile::apache_php
+  - java
+site::additional_packages:
+  ImageMagick: {}
+  tomcat: {}
+repo::remi_php56: true
+php::settings:
+  Date/date.timezone: Europe/Berlin
+  PHP/expose_php: 'Off'
diff --git a/customer/vrr/dev-web01-vrr-de.pixelpark.net.yaml b/customer/vrr/dev-web01-vrr-de.pixelpark.net.yaml
new file mode 100644 (file)
index 0000000..3b8739a
--- /dev/null
@@ -0,0 +1,352 @@
+---
+site::profile::apache::htdigest:
+  - www|server|u6RvgE0OqOfP
+site::profile::apache_php::vhosts:
+  dev-www-vrr-de:
+    docroot: /srv/www/dev-www-vrr-de
+    port: 80
+    docroot_owner: root
+    servername: dev-www-vrr-de.pixelpark.net
+    custom_fragment: 'ProxyPassMatch ^/(.*\.php(/.*)?)$ fcgi://127.0.0.1:9000/srv/www/dev-www-vrr-de/$1'
+    directories:
+      - directory_root:
+        provider: directory
+        path: /srv/www/dev-www-vrr-de
+        options:
+          - FollowSymLinks
+          - MultiViews
+        allow_override:
+          - All
+      - location_root:
+        provider: location
+        path: '/'
+        auth_type: Digest
+        auth_name: server
+        auth_digest_provider: file
+        auth_digest_algorithm: MD5
+        auth_user_file: '/etc/httpd/htdigest'
+        auth_require: 'valid-user'
+    setenv:
+      - 'ORACLE_HOME /usr/lib/oracle/11.2/client64'
+      - 'LD_LIBRARY_PATH /usr/lib/oracle/11.2/client64/lib'
+  dev-www-vrr-de_ssl:
+    docroot: /srv/www/dev-www-vrr-de
+    port: 443
+    ssl: true
+    ssl_cert: /etc/pki/tls/certs/wildcard.pixelpark.net-cert.pem
+    ssl_chain: /etc/pki/tls/certs/wildcard.pixelpark.net-cert.pem
+    ssl_key: /etc/pki/tls/private/wildcard.pixelpark.net-key.pem
+    docroot_owner: root
+    servername: dev-www-vrr-de.pixelpark.net
+    custom_fragment: 'ProxyPassMatch ^/(.*\.php(/.*)?)$ fcgi://127.0.0.1:9000/srv/www/dev-www-vrr-de/$1'
+    directories:
+      - directory_root:
+        provider: directory
+        path: /srv/www/dev-www-vrr-de
+        options:
+          - FollowSymLinks
+          - MultiViews
+        allow_override:
+          - All
+      - location_root:
+        provider: location
+        path: '/'
+        auth_type: Digest
+        auth_name: server
+        auth_digest_provider: file
+        auth_digest_algorithm: MD5
+        auth_user_file: '/etc/httpd/htdigest'
+        auth_require: 'valid-user'
+    setenv:
+      - 'ORACLE_HOME /usr/lib/oracle/11.2/client64'
+      - 'LD_LIBRARY_PATH /usr/lib/oracle/11.2/client64/lib'
+  dev-red-vrr-de:
+    docroot: /srv/www/dev-red-vrr-de
+    port: 80
+    docroot_owner: root
+    servername: dev-red-vrr-de.pixelpark.net
+    custom_fragment: 'ProxyPassMatch ^/(.*\.php(/.*)?)$ fcgi://127.0.0.1:9000/srv/www/dev-red-vrr-de/$1'
+    directories:
+      - directory_root:
+        provider: directory
+        path: /srv/www/dev-red-vrr-de
+        options:
+          - FollowSymLinks
+          - MultiViews
+        allow_override:
+          - All
+      - location_root:
+        provider: location
+        path: '/'
+        auth_type: Digest
+        auth_name: server
+        auth_digest_provider: file
+        auth_digest_algorithm: MD5
+        auth_user_file: '/etc/httpd/htdigest'
+        auth_require: 'valid-user'
+    setenv:
+      - 'ORACLE_HOME /usr/lib/oracle/11.2/client64'
+      - 'LD_LIBRARY_PATH /usr/lib/oracle/11.2/client64/lib'
+  dev-red-vrr-de_ssl:
+    docroot: /srv/www/dev-red-vrr-de
+    port: 443
+    ssl: true
+    ssl_cert: /etc/pki/tls/certs/wildcard.pixelpark.net-cert.pem
+    ssl_chain: /etc/pki/tls/certs/wildcard.pixelpark.net-cert.pem
+    ssl_key: /etc/pki/tls/private/wildcard.pixelpark.net-key.pem
+    docroot_owner: root
+    servername: dev-red-vrr-de.pixelpark.net
+    custom_fragment: 'ProxyPassMatch ^/(.*\.php(/.*)?)$ fcgi://127.0.0.1:9000/srv/www/dev-red-vrr-de/$1'
+    directories:
+      - directory_root:
+        provider: directory
+        path: /srv/www/dev-red-vrr-de
+        options:
+          - FollowSymLinks
+          - MultiViews
+        allow_override:
+          - All
+      - location_root:
+        provider: location
+        path: '/'
+        auth_type: Digest
+        auth_name: server
+        auth_digest_provider: file
+        auth_digest_algorithm: MD5
+        auth_user_file: '/etc/httpd/htdigest'
+        auth_require: 'valid-user'
+    setenv:
+      - 'ORACLE_HOME /usr/lib/oracle/11.2/client64'
+      - 'LD_LIBRARY_PATH /usr/lib/oracle/11.2/client64/lib'
+  dev-red-vrrint-de:
+    docroot: /srv/www/dev-red-vrrint-de
+    port: 80
+    docroot_owner: root
+    servername: dev-red-vrrint-de.pixelpark.net
+    custom_fragment: 'ProxyPassMatch ^/(.*\.php(/.*)?)$ fcgi://127.0.0.1:9000/srv/www/dev-red-vrrint-de/$1'
+    directories:
+      - directory_root:
+        provider: directory
+        path: /srv/www/dev-red-vrrint-de
+        options:
+          - FollowSymLinks
+          - MultiViews
+        allow_override:
+          - All
+      - location_root:
+        provider: location
+        path: '/'
+        auth_type: Digest
+        auth_name: server
+        auth_digest_provider: file
+        auth_digest_algorithm: MD5
+        auth_user_file: '/etc/httpd/htdigest'
+        auth_require: 'valid-user'
+    setenv:
+      - 'ORACLE_HOME /usr/lib/oracle/11.2/client64'
+      - 'LD_LIBRARY_PATH /usr/lib/oracle/11.2/client64/lib'
+  dev-red-vrrint-de_ssl:
+    docroot: /srv/www/dev-red-vrrint-de
+    port: 443
+    ssl: true
+    ssl_cert: /etc/pki/tls/certs/wildcard.pixelpark.net-cert.pem
+    ssl_chain: /etc/pki/tls/certs/wildcard.pixelpark.net-cert.pem
+    ssl_key: /etc/pki/tls/private/wildcard.pixelpark.net-key.pem
+    docroot_owner: root
+    servername: dev-red-vrrint-de.pixelpark.net
+    custom_fragment: 'ProxyPassMatch ^/(.*\.php(/.*)?)$ fcgi://127.0.0.1:9000/srv/www/dev-red-vrrint-de/$1'
+    directories:
+      - directory_root:
+        provider: directory
+        path: /srv/www/dev-red-vrrint-de
+        options:
+          - FollowSymLinks
+          - MultiViews
+        allow_override:
+          - All
+      - location_root:
+        provider: location
+        path: '/'
+        auth_type: Digest
+        auth_name: server
+        auth_digest_provider: file
+        auth_digest_algorithm: MD5
+        auth_user_file: '/etc/httpd/htdigest'
+        auth_require: 'valid-user'
+    setenv:
+      - 'ORACLE_HOME /usr/lib/oracle/11.2/client64'
+      - 'LD_LIBRARY_PATH /usr/lib/oracle/11.2/client64/lib'
+  dev-www-vrrint-de:
+    docroot: /srv/www/dev-www-vrrint-de
+    port: 80
+    docroot_owner: root
+    servername: dev-www-vrrint-de.pixelpark.net
+    custom_fragment: 'ProxyPassMatch ^/(.*\.php(/.*)?)$ fcgi://127.0.0.1:9000/srv/www/dev-www-vrrint-de/$1'
+    directories:
+      - directory_root:
+        provider: directory
+        path: /srv/www/dev-www-vrrint-de
+        options:
+          - FollowSymLinks
+          - MultiViews
+        allow_override:
+          - All
+      - location_root:
+        provider: location
+        path: '/'
+        auth_type: Digest
+        auth_name: server
+        auth_digest_provider: file
+        auth_digest_algorithm: MD5
+        auth_user_file: '/etc/httpd/htdigest'
+        auth_require: 'valid-user'
+    setenv:
+      - 'ORACLE_HOME /usr/lib/oracle/11.2/client64'
+      - 'LD_LIBRARY_PATH /usr/lib/oracle/11.2/client64/lib'
+  dev-www-vrrint-de_ssl:
+    docroot: /srv/www/dev-www-vrrint-de
+    port: 443
+    ssl: true
+    ssl_cert: /etc/pki/tls/certs/wildcard.pixelpark.net-cert.pem
+    ssl_chain: /etc/pki/tls/certs/wildcard.pixelpark.net-cert.pem
+    ssl_key: /etc/pki/tls/private/wildcard.pixelpark.net-key.pem
+    docroot_owner: root
+    servername: dev-www-vrrint-de.pixelpark.net
+    custom_fragment: 'ProxyPassMatch ^/(.*\.php(/.*)?)$ fcgi://127.0.0.1:9000/srv/www/dev-www-vrrint-de/$1'
+    directories:
+      - directory_root:
+        provider: directory
+        path: /srv/www/dev-www-vrrint-de
+        options:
+          - FollowSymLinks
+          - MultiViews
+        allow_override:
+          - All
+      - location_root:
+        provider: location
+        path: '/'
+        auth_type: Digest
+        auth_name: server
+        auth_digest_provider: file
+        auth_digest_algorithm: MD5
+        auth_user_file: '/etc/httpd/htdigest'
+        auth_require: 'valid-user'
+    setenv:
+      - 'ORACLE_HOME /usr/lib/oracle/11.2/client64'
+      - 'LD_LIBRARY_PATH /usr/lib/oracle/11.2/client64/lib'
+  dev-red-vrrmc-de:
+    docroot: /srv/www/dev-red-vrrmc-de
+    port: 80
+    docroot_owner: root
+    servername: dev-red-vrrmc-de.pixelpark.net
+    custom_fragment: 'ProxyPassMatch ^/(.*\.php(/.*)?)$ fcgi://127.0.0.1:9000/srv/www/dev-red-vrrmc-de/$1'
+    directories:
+      - directory_root:
+        provider: directory
+        path: /srv/www/dev-red-vrrmc-de
+        options:
+          - FollowSymLinks
+          - MultiViews
+        allow_override:
+          - All
+      - location_root:
+        provider: location
+        path: '/'
+        auth_type: Digest
+        auth_name: server
+        auth_digest_provider: file
+        auth_digest_algorithm: MD5
+        auth_user_file: '/etc/httpd/htdigest'
+        auth_require: 'valid-user'
+    setenv:
+      - 'ORACLE_HOME /usr/lib/oracle/11.2/client64'
+      - 'LD_LIBRARY_PATH /usr/lib/oracle/11.2/client64/lib'
+  dev-red-vrrmc-de_ssl:
+    docroot: /srv/www/dev-red-vrrmc-de
+    port: 443
+    ssl: true
+    ssl_cert: /etc/pki/tls/certs/wildcard.pixelpark.net-cert.pem
+    ssl_chain: /etc/pki/tls/certs/wildcard.pixelpark.net-cert.pem
+    ssl_key: /etc/pki/tls/private/wildcard.pixelpark.net-key.pem
+    docroot_owner: root
+    servername: dev-red-vrrmc-de.pixelpark.net
+    custom_fragment: 'ProxyPassMatch ^/(.*\.php(/.*)?)$ fcgi://127.0.0.1:9000/srv/www/dev-red-vrrmc-de/$1'
+    directories:
+      - directory_root:
+        provider: directory
+        path: /srv/www/dev-red-vrrmc-de
+        options:
+          - FollowSymLinks
+          - MultiViews
+        allow_override:
+          - All
+      - location_root:
+        provider: location
+        path: '/'
+        auth_type: Digest
+        auth_name: server
+        auth_digest_provider: file
+        auth_digest_algorithm: MD5
+        auth_user_file: '/etc/httpd/htdigest'
+        auth_require: 'valid-user'
+    setenv:
+      - 'ORACLE_HOME /usr/lib/oracle/11.2/client64'
+      - 'LD_LIBRARY_PATH /usr/lib/oracle/11.2/client64/lib'
+  dev-www-vrrmc-de:
+    docroot: /srv/www/dev-www-vrrmc-de
+    port: 80
+    docroot_owner: root
+    servername: dev-www-vrrmc-de.pixelpark.net
+    custom_fragment: 'ProxyPassMatch ^/(.*\.php(/.*)?)$ fcgi://127.0.0.1:9000/srv/www/dev-www-vrrmc-de/$1'
+    directories:
+      - directory_root:
+        provider: directory
+        path: /srv/www/dev-www-vrrmc-de
+        options:
+          - FollowSymLinks
+          - MultiViews
+        allow_override:
+          - All
+      - location_root:
+        provider: location
+        path: '/'
+        auth_type: Digest
+        auth_name: server
+        auth_digest_provider: file
+        auth_digest_algorithm: MD5
+        auth_user_file: '/etc/httpd/htdigest'
+        auth_require: 'valid-user'
+    setenv:
+      - 'ORACLE_HOME /usr/lib/oracle/11.2/client64'
+      - 'LD_LIBRARY_PATH /usr/lib/oracle/11.2/client64/lib'
+  dev-www-vrrmc-de_ssl:
+    docroot: /srv/www/dev-www-vrrmc-de
+    port: 443
+    ssl: true
+    ssl_cert: /etc/pki/tls/certs/wildcard.pixelpark.net-cert.pem
+    ssl_chain: /etc/pki/tls/certs/wildcard.pixelpark.net-cert.pem
+    ssl_key: /etc/pki/tls/private/wildcard.pixelpark.net-key.pem
+    docroot_owner: root
+    servername: dev-www-vrrmc-de.pixelpark.net
+    custom_fragment: 'ProxyPassMatch ^/(.*\.php(/.*)?)$ fcgi://127.0.0.1:9000/srv/www/dev-www-vrrmc-de/$1'
+    directories:
+      - directory_root:
+        provider: directory
+        path: /srv/www/dev-www-vrrmc-de
+        options:
+          - FollowSymLinks
+          - MultiViews
+        allow_override:
+          - All
+      - location_root:
+        provider: location
+        path: '/'
+        auth_type: Digest
+        auth_name: server
+        auth_digest_provider: file
+        auth_digest_algorithm: MD5
+        auth_user_file: '/etc/httpd/htdigest'
+        auth_require: 'valid-user'
+    setenv:
+      - 'ORACLE_HOME /usr/lib/oracle/11.2/client64'
+      - 'LD_LIBRARY_PATH /usr/lib/oracle/11.2/client64/lib'
diff --git a/customer/webstats/webstats01.pixelpark.net.yaml b/customer/webstats/webstats01.pixelpark.net.yaml
new file mode 100644 (file)
index 0000000..4c3c2b5
--- /dev/null
@@ -0,0 +1,2 @@
+---
+site::role: base
diff --git a/customer/webstats/webstats02.pixelpark.net.yaml b/customer/webstats/webstats02.pixelpark.net.yaml
new file mode 100644 (file)
index 0000000..4c3c2b5
--- /dev/null
@@ -0,0 +1,2 @@
+---
+site::role: base
diff --git a/modules/apache.yaml b/modules/apache.yaml
new file mode 100644 (file)
index 0000000..b11257c
--- /dev/null
@@ -0,0 +1,23 @@
+---
+
+apache::mod::status::allow_from:
+  - '127.0.0.1'
+  - '::1'
+  - '217.66.51.0/24'
+
+apache::mod::info::allow_from:
+  - '127.0.0.1'
+  - '::1'
+  - '217.66.51.0/24'
+
+apache::server_signature: 'Off'
+apache::server_tokens: 'Prod'
+
+apache::mod::ssl::ssl_cipher: 'AES256+EECDH:AES256+EDH:AES128+EECDH:AES128+EDH'
+
+
+apache::log_formats:
+  lb_combined: '%%{ich-trickse}{X-Forwarded-For}i %l %u %t \"%r\" %>s %b \"%%{ich-trickse}{Referer}i\" \"%%{ich-trickse}{User-Agent}i\"'
+  urchin: '%h %v %u %t \"%r\" %>s %b \"%%{ich-trickse}{Referer}i\" \"%%{ich-trickse}{User-Agent}i\" \"%%{ich-trickse}{Cookie}i\"'
+  urchinpp: '%%{ich-trickse}{Client-IP}i %v %u %t \"%r\" %>s %b \"%%{ich-trickse}{Referer}i\" \"%%{ich-trickse}{User-Agent}i\" \"%%{ich-trickse}{Cookie}i\"'
+  urchinpp_xf4: '%%{ich-trickse}{X-Forwarded-For}i %v %u %t \"%r\" %>s %b \"%%{ich-trickse}{Referer}i\" \"%%{ich-trickse}{User-Agent}i\" \"%%{ich-trickse}{Cookie}i\"'
diff --git a/modules/epel.yaml b/modules/epel.yaml
new file mode 100644 (file)
index 0000000..bf4b75b
--- /dev/null
@@ -0,0 +1,4 @@
+---
+
+epel::epel_baseurl: "https://repo.pixelpark.com/Linux/yum/epel/%{operatingsystemmajrelease}/$basearch"
+epel::epel_mirrorlist: absent
\ No newline at end of file
diff --git a/modules/galera.yaml b/modules/galera.yaml
new file mode 100644 (file)
index 0000000..37950da
--- /dev/null
@@ -0,0 +1,7 @@
+---
+# Epel ist managed by Epel Module
+galera::repo::epel_needed: false
+galera::repo::yum_mariadb_baseurl: "http://repo.pixelpark.com/Linux/yum/mariadb/10.0/centos/%{operatingsystemmajrelease}/%{architecture}/"
+galera::repo::yum_mariadb_gpgkey: "http://repo.pixelpark.com/Linux/yum/mariadb/RPM-GPG-KEY-MariaDB"
+# At the Moment this is a free Port, we can set it in /etc/services. With a non free Port i have problems
+galera::status::port: 9220
diff --git a/modules/mcollective.yaml b/modules/mcollective.yaml
new file mode 100644 (file)
index 0000000..f6adcfb
--- /dev/null
@@ -0,0 +1,12 @@
+mcollective::connector: rabbitmq
+mcollective::securityprovider: ssl
+mcollective::classesfile: "%{puppet_vardir}/state/classes.txt"
+mcollective::middleware_hosts:
+  - messageq01.pixelpark.com
+mcollective::middleware_password: ENC[PKCS7,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]
+mcollective::middleware_ssl: true
+
+mcollective::ssl_ca_cert: "%{puppet_vardir}/ssl/certs/ca.pem"
+mcollective::ssl_server_public: puppet:///mco_dir/mcollective-servers-cert.pem
+mcollective::ssl_server_private: puppet:///mco_dir/mcollective-servers-key.pem
+mcollective::ssl_client_certs: puppet:///mco_dir/clients
\ No newline at end of file
diff --git a/modules/mysql.yaml b/modules/mysql.yaml
new file mode 100644 (file)
index 0000000..f27d764
--- /dev/null
@@ -0,0 +1,14 @@
+---
+
+mysql::server::remove_default_accounts: true
+
+
+mysql::server::backup::backupuser: backup
+mysql::server::backup::backuppassword: ENC[PKCS7,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]
+mysql::server::backup::backupdir: /srv/backup/mysql
+mysql::server::backup::backuprotate: 3
+
+mysql::server::backup::file_per_database: true
+mysql::server::backup::time:
+  - '21'
+  - '30'
\ No newline at end of file
diff --git a/modules/nginx.yaml b/modules/nginx.yaml
new file mode 100644 (file)
index 0000000..88b8ca8
--- /dev/null
@@ -0,0 +1,2 @@
+---
+nginx::config::server_tokens: 'off'
diff --git a/modules/ntp.yaml b/modules/ntp.yaml
new file mode 100644 (file)
index 0000000..d16258f
--- /dev/null
@@ -0,0 +1,5 @@
+---
+ntp::servers:
+  - time01.pixelpark.com
+  - time02.pixelpark.com
+  - time03.pixelpark.com
\ No newline at end of file
diff --git a/modules/php.yaml b/modules/php.yaml
new file mode 100644 (file)
index 0000000..5a7b797
--- /dev/null
@@ -0,0 +1,4 @@
+---
+php::settings:
+  Date/date.timezone: Europe/Berlin
+  PHP/expose_php: 'Off'
\ No newline at end of file
diff --git a/modules/repo.yaml b/modules/repo.yaml
new file mode 100644 (file)
index 0000000..c980b8c
--- /dev/null
@@ -0,0 +1,24 @@
+---
+repo::redhat::oel7::ol7latest_baseurl: 'https://repo.pixelpark.com/Linux/yum/OracleLinux/OL7/latest/$basearch/'
+repo::redhat::oel7::ol7_u0_base_baseurl: 'https://repo.pixelpark.com/Linux/yum/OracleLinux/OL7/0/base/$basearch/'
+repo::redhat::oel7::ol7_u1_base_baseurl: 'https://repo.pixelpark.com/Linux/yum/OracleLinux/OL7/1/base/$basearch/'
+repo::redhat::oel7::ol7_UEKR3_baseurl: 'https://repo.pixelpark.com/Linux/yum/OracleLinux/OL7/UEKR3/$basearch/'
+repo::redhat::oel7::ol7_optional_latest_baseurl: 'https://repo.pixelpark.com/Linux/yum/OracleLinux/OL7/optional/latest/$basearch/'
+repo::redhat::oel7::ol7_addons_baseurl: 'https://repo.pixelpark.com/Linux/yum/OracleLinux/OL7/addons/$basearch/'
+repo::redhat::oel7::ol7_MySQL56_baseurl: 'https://repo.pixelpark.com/Linux/yum/OracleLinux/OL7/MySQL56/community/$basearch/'
+repo::redhat::oel7::ol7_MySQL55_baseurl: 'https://repo.pixelpark.com/Linux/yum/OracleLinux/OL7/MySQL55/community/$basearch/'
+
+repo::redhat::remi::remi_baseurl: 'https://repo.pixelpark.com/Linux/yum/remi/%{operatingsystemmajrelease}/remi/$basearch'
+repo::redhat::remi::remi_php55_baseurl: 'https://repo.pixelpark.com/Linux/yum/remi/%{operatingsystemmajrelease}/php55/$basearch'
+repo::redhat::remi::remi_php56_baseurl: 'https://repo.pixelpark.com/Linux/yum/remi/%{operatingsystemmajrelease}/php56/$basearch'
+repo::redhat::remi::remi_safe_baseurl: 'https://repo.pixelpark.com/Linux/yum/remi/%{operatingsystemmajrelease}/safe/$basearch'
+
+repo::redhat::puppetlabs::puppetlabs_products_baseurl: 'https://repo.pixelpark.com/Linux/yum/puppetlabs/el/%{operatingsystemmajrelease}/products/$basearch'
+repo::redhat::puppetlabs::puppetlabs_deps_baseurl: 'https://repo.pixelpark.com/Linux/yum/puppetlabs/el/%{operatingsystemmajrelease}/dependencies/$basearch'
+repo::redhat::puppetlabs::puppetlabs_devel_baseurl: 'https://repo.pixelpark.com/Linux/yum/puppetlabs/el/%{operatingsystemmajrelease}/devel/$basearch'
+
+repo::redhat::centos::base_baseurl: 'https://repo.pixelpark.com/Linux/yum/centos/$releasever/os/$basearch/'
+repo::redhat::centos::updates_baseurl: 'https://repo.pixelpark.com/Linux/yum/centos/$releasever/updates/$basearch/'
+repo::redhat::centos::extra_baseurl: 'https://repo.pixelpark.com/Linux/yum/centos/$releasever/extras/$basearch/'
+
+repo::redhat::passenger::baseurl: 'https://repo.pixelpark.com/Linux/yum/phusionpassenger/el/$releasever/$basearch'
\ No newline at end of file
diff --git a/modules/ruby.yaml b/modules/ruby.yaml
new file mode 100644 (file)
index 0000000..9b44547
--- /dev/null
@@ -0,0 +1,5 @@
+---
+ruby::gemrc::gem_command:
+  gem:
+    - 'no-ri'
+    - 'no-rdoc'
diff --git a/modules/rvm.yaml b/modules/rvm.yaml
new file mode 100644 (file)
index 0000000..4100844
--- /dev/null
@@ -0,0 +1,2 @@
+---
+rvm::key_server: 'hkp://keys.gnupg.net:80'
\ No newline at end of file
diff --git a/modules/zabbix.yaml b/modules/zabbix.yaml
new file mode 100644 (file)
index 0000000..97ba37b
--- /dev/null
@@ -0,0 +1,9 @@
+---
+
+zabbix::agent::server: 217.66.51.48
+zabbix::agent::hostname: "%{fqdn}"
+zabbix::agent::serveractive: 217.66.51.48
+
+# Fix some versions
+zabbix::repo::zabbix_version: 2.4
+zabbix::agent::zabbix_version: 2.4
\ No newline at end of file
diff --git a/tier/production.yaml b/tier/production.yaml
new file mode 100644 (file)
index 0000000..ed97d53
--- /dev/null
@@ -0,0 +1 @@
+---