$myApacheVhost = hiera('vhosts', {}) class { 'apache': default_mods => false, default_confd_files => false, mpm_module => 'prefork', purge_configs => true, server_signature => 'Off', service_ensure => 'running', default_vhost => false, manage_user => false, manage_group => false, user => 'web', group => 'web', server_tokens => 'prod', } class { '::apache::mod::deflate': types => [ 'text/html text/plain text/xml', 'text/css', 'application/x-javascript application/javascript application/ecmascript', 'application/rss+xml', 'application/json', 'application/vnd.geo+json' ], notes => { 'Input' => 'instream', 'Output' => 'outstrem', 'Ratio' => 'ratio', }, } class { '::apache::mod::php': package_name => "php56u", path => "${::apache::params::lib_path}/libphp5.so" } class { '::apache::mod::ssl': ssl_compression => false, ssl_cryptodevice => 'builtin', ssl_options => [ 'StdEnvVars' ], ssl_openssl_conf_cmd => undef, ssl_honorcipherorder => 'On', ssl_cipher => 'ECDHE-ECDSA-CHACHA20-POLY1305:ECDHE-RSA-CHACHA20-POLY1305:ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES128-GCM-SHA256:ECDHE-ECDSA-AES256-GCM-SHA384:ECDHE-RSA-AES256-GCM-SHA384:DHE-RSA-AES128-GCM-SHA256:DHE-RSA-AES256-GCM-SHA384:ECDHE-ECDSA-AES128-SHA256:ECDHE-RSA-AES128-SHA256:ECDHE-ECDSA-AES128-SHA:ECDHE-RSA-AES256-SHA384:ECDHE-RSA-AES128-SHA:ECDHE-ECDSA-AES256-SHA384:ECDHE-ECDSA-AES256-SHA:ECDHE-RSA-AES256-SHA:DHE-RSA-AES128-SHA256:DHE-RSA-AES128-SHA:DHE-RSA-AES256-SHA256:DHE-RSA-AES256-SHA:ECDHE-ECDSA-DES-CBC3-SHA:ECDHE-RSA-DES-CBC3-SHA:EDH-RSA-DES-CBC3-SHA:AES128-GCM-SHA256:AES256-GCM-SHA384:AES128-SHA256:AES256-SHA256:AES128-SHA:AES256-SHA:DES-CBC3-SHA:!DSS', ssl_pass_phrase_dialog => 'builtin', ssl_random_seed_bytes => '1024', ssl_sessioncachetimeout => '300', ssl_protocol => [ 'all', '-SSLv3', '-SSLv2'], } class { '::apache::mod::negotiation': force_language_priority => 'Prefer', language_priority => [ 'en', 'es', 'ca', 'cs', 'da', 'de', 'el', 'eo' ], } class { 'apache::mod::alias': icons_options => 'None', } apache::mod { 'actions' : } apache::mod { 'cgi' :} apache::mod { 'headers' :} apache::mod { 'include' :} apache::mod { 'perl' :} apache::mod { 'suphp' :} apache::mod { 'mime_magic' :} apache::mod { 'auth_basic' :} apache::mod { 'setenvif' :} apache::mod { 'autoindex' :} apache::namevirtualhost { '80' :} apache::namevirtualhost { '443' :} create_resources('apache::vhost', $myApacheVhost)