redhat.pp

# @summary Manage NGINX package installation on RedHat based systems
# @api private
class nginx::package::redhat {
  $package_name             = $nginx::package_name
  $package_source           = $nginx::package_source
  $package_ensure           = $nginx::package_ensure
  $package_flavor           = $nginx::package_flavor
  $passenger_package_ensure = $nginx::passenger_package_ensure
  $passenger_package_name   = $nginx::passenger_package_name
  $manage_repo              = $nginx::manage_repo
  $purge_passenger_repo     = $nginx::purge_passenger_repo

  #Install the CentOS-specific packages on that OS, otherwise assume it's a RHEL
  #clone and provide the Red Hat-specific package. This comes into play when not
  #on RHEL or CentOS and $manage_repo is set manually to 'true'.
  $_os = $facts['os']['name'] ? {
    'centos'         => 'centos',
    'VirtuozzoLinux' => 'centos',
    default          => 'rhel'
  }

  $want_module_hotfixes = if versioncmp(fact('os.release.full'), '8.0') >= 0 {
    '1'
  } else {
    'absent'
  }

  if $manage_repo {
    case $package_source {
      'nginx', 'nginx-stable': {
        yumrepo { 'nginx-release':
          baseurl         => "https://nginx.org/packages/${_os}/${facts['os']['release']['major']}/\$basearch/",
          descr           => 'nginx repo',
          enabled         => '1',
          gpgcheck        => '1',
          priority        => '1',
          gpgkey          => 'https://nginx.org/keys/nginx_signing.key',
          before          => Package['nginx'],
          module_hotfixes => $want_module_hotfixes,
        }

        if $purge_passenger_repo {
          yumrepo { 'passenger':
            ensure => absent,
            before => Package['nginx'],
          }
        }
      }
      'nginx-mainline': {
        yumrepo { 'nginx-release':
          baseurl         => "https://nginx.org/packages/mainline/${_os}/${facts['os']['release']['major']}/\$basearch/",
          descr           => 'nginx repo',
          enabled         => '1',
          gpgcheck        => '1',
          priority        => '1',
          gpgkey          => 'https://nginx.org/keys/nginx_signing.key',
          before          => Package['nginx'],
          module_hotfixes => $want_module_hotfixes,
        }

        if $purge_passenger_repo {
          yumrepo { 'passenger':
            ensure => absent,
            before => Package['nginx'],
          }
        }
      }
      'passenger': {
        if ($facts['os']['name'] in ['RedHat', 'CentOS', 'VirtuozzoLinux', 'Rocky', 'AlmaLinux']) and ($facts['os']['release']['major'] in ['6', '7', '8', '9']) {
          # 2019-11: Passenger changed their gpg key from: `https://packagecloud.io/phusion/passenger/gpgkey`
          # to: `https://oss-binaries.phusionpassenger.com/auto-software-signing-gpg-key.txt`
          # Find the latest key by opening: https://oss-binaries.phusionpassenger.com/yum/definitions/el-passenger.repo

          # Also note: Since 6.0.5 there are no nginx packages in the phusion EL7 repository, and nginx packages are expected to come from epel instead
          yumrepo { 'passenger':
            baseurl         => "https://oss-binaries.phusionpassenger.com/yum/passenger/el/${facts['os']['release']['major']}/\$basearch",
            descr           => 'passenger repo',
            enabled         => '1',
            gpgcheck        => '0',
            repo_gpgcheck   => '1',
            priority        => '1',
            gpgkey          => 'https://oss-binaries.phusionpassenger.com/auto-software-signing-gpg-key.txt',
            before          => Package['nginx'],
            module_hotfixes => $want_module_hotfixes,
          }

          yumrepo { 'nginx-release':
            ensure => absent,
            before => Package['nginx'],
          }

          package { $passenger_package_name:
            ensure  => $passenger_package_ensure,
            require => Yumrepo['passenger'],
          }
        } else {
          fail("${facts['os']['name']} version ${facts['os']['release']['major']} is unsupported with \$package_source 'passenger'")
        }
      }
      default: {
        fail("\$package_source must be 'nginx-stable', 'nginx-mainline', or 'passenger'. It was set to '${package_source}'")
      }
    }
  }

  package { 'nginx':
    ensure => $package_ensure,
    name   => $package_name,
  }
}