Hi puppet list, I'm currently modifying my puppet setup to get it redundant.
I actually have a puppet master, running mongrel behind nginx. It's on a
single machine, with no backup (backup for the service, not the files).
The machine is called puppet.mydomain.com
I want to move it to 2 machines, running mongrel, behind 2 nginx in
failover with heartbeat.
Mongrel --|
Mongrel --|-- Nginx--|
Mongrel --| |
| |
NFS stuff |--Heartbeat IP
| |
Mongrel --| |
Mongrel --|-- Nginx--|
Mongrel --|
(hoping that your mail client does not break this magnificient piece of
ASCII art)
To achieve this I've setup a new machine, called "silicium" and then
mounted /var/lib/puppet via NFS. This dir is a copy of
the /var/lib/puppet from the original "puppet" machine. It has all the
SSL stuff to handle puppet.mydomain.com.
The problem is that I want "silicium.mydomain.com" to be able to handle
requests destinated to "puppet.mydomain.com". The SSL stuff is handled
by nginx so it should not be a problem, but it looks like it is. I think
it runs under its own FQDN, ignoring the "puppet.mydomain.com" pem
files. I tried adding certname=puppet.mydomain.com in the [puppetmaster]
section of puppet.conf but nothing changed.
Any clue ?
Thanks
Nico.
signature.asc
Description: Ceci est une partie de message numériquement signée
