# Регистрируем имя хоста в /etc/hosts
hostnamectl set-hostname foreman-test.domain.alt && echo "$(hostname -i) foreman-test.domain.alt" >>/etc/hosts
# Обновляем систему
apt-get update && apt-get dist-upgrade -y  && reboot

# Установка пакетов postgresql puppet puppetserver foreman
apt-get install postgresql15-server puppet puppetserver java-17-openjdk foreman puppet-theforeman-foreman puppet-puppetserver-foreman -y

# Инициализация и запуск postgresql
/etc/init.d/postgresql initdb && systemctl enable --now postgresql && sleep 5


# Настройка puppet
touch /etc/puppet/autosign.conf ; chmod 664 /etc/puppet/autosign.conf

cat > /etc/puppet/auth.conf <<EOF
path /puppet/v3/environment_classes
method find
allow *
EOF

cat > /etc/puppet/foreman.yaml <<EOF
---
# Update for your Foreman and Puppet master hostname(s)
:url: "https://foreman-test.domain.alt:2345"
:ssl_ca: "/etc/puppet/ssl/certs/ca.pem"
:ssl_cert: "/etc/puppet/ssl/certs/foreman-test.domain.alt.pem"
:ssl_key: "/etc/puppet/ssl/private_keys/foreman-test.domain.alt.pem"
# Advanced settings
#:puppetdir: "/opt/puppetlabs/server/data/puppetserver"
:puppetdir: "/var/lib/puppetserver"
:puppetuser: "puppet"
:facts: true
:timeout: 10
:threads: null
EOF

#Запуск puppetserver и puppet
systemctl enable puppetserver; systemctl start puppetserver
systemctl enable puppet; systemctl start puppet

# Запуск puppet агента
puppet agent -t

# Запуск настройки конфигурации foreman
railsctl setup foreman || echo "Ошибка подготовки"


# Расширение файла конфигурации foreman
cat >> /etc/foreman/settings.yml <<EOF
:trusted_hosts: [foreman-test.domain.alt,localhost]
:host_details_ui: false
:restrict_registered_smart_proxies: false
EOF

# Запуск foremfn
systemctl enable --now foreman


#Установка smart-proxy
apt-get install smart-proxy -y

# Настройка плагинов smart-proxy
cat > /etc/smart-proxy/config/settings.d/puppet.yml <<EOF
---
# Can be true, false, or http/https to enable just one of the protocols
:enabled: true
# valid providers:
#   puppet_proxy_mcollective (uses mco puppet)
#   puppet_proxy_ssh         (run puppet over ssh)
#   puppet_proxy_salt        (uses salt puppet.run)
#   puppet_proxy_customrun   (calls a custom command with args)
#:use_provider: puppet_proxy_customrun
:puppet_version: $(rpm -q --qf '%{VERSION}' puppet)
EOF

cat > /etc/smart-proxy/config/settings.d/puppet_proxy_puppet_api.yml <<EOF
---
#
# URL of the puppet master itself for API requests.
:puppet_url: https://foreman-test.domain.alt:8140
#
# SSL certificates used to access the CA API.
:puppet_ssl_ca: /etc/puppet/ssl/certs/ca.pem
:puppet_ssl_cert: /etc/puppet/ssl/certs/foreman-test.domain.alt.pem
:puppet_ssl_key: /etc/puppet/ssl/private_keys/foreman-test.domain.alt.pem
# Smart Proxy api timeout when Puppet's environment classes api is used and classes cache is disabled
:api_timeout: 30
EOF

cat > /etc/smart-proxy/config/settings.d/puppetca.yml <<EOF
---
#
# PuppetCA management
# Can be true, false, or http/https to enable just one of the protocols
#
:enabled: true
# valid providers:
#   - puppetca_hostname_whitelisting (verify CSRs based on a hostname whitelist)
#   - puppetca_token_whitelisting (verify CSRs based on a token whitelist)
:use_provider: puppetca_hostname_whitelisting
# Puppet version used
:puppet_version: $(rpm -q --qf '%{VERSION}' puppet)
EOF
cat > /etc/smart-proxy/config/settings.d/puppetca_http_api.yml <<EOF
---
#
# URL of the puppet master itself for API requests.
:puppet_url: https://foreman-test.domain.alt:8140
#
# SSL certificates used to access the CA API.
:puppet_ssl_ca: /etc/puppet/ssl/certs/ca.pem
:puppet_ssl_cert: /etc/puppet/ssl/certs/foreman-test.domain.alt.pem
:puppet_ssl_key: /etc/puppet/ssl/private_keys/foreman-test.domain.alt.pem
EOF

cat > /etc/smart-proxy/config/settings.d/puppetca_hostname_whitelisting.yml <<EOF
---
#
# Configuration of the PuppetCA hostname_whitelisting provider
#
:autosignfile: /etc/puppet/autosign.conf
EOF

cat > /etc/smart-proxy/config/settings.d/facts.yml <<EOF
---
# Can be true, false, or http/https to enable just one of the protocols
:enabled: true
EOF

cat > /etc/smart-proxy/config/settings.d/logs.yml <<EOF
---
# Can be true, false, or http/https to enable just one of the protocols
:enabled: true

# Log buffer configuration is in core file (settings.yml)
EOF

cat >> /etc/smart-proxy/config/settings.yml <<EOF
:trusted_hosts: [foreman-test.domain.alt,localhost]
:foreman_url: https://foreman-test.domain.alt:2345
:foreman_ssl_ca: /etc/foreman/ssl_key.pem
:foreman_ssl_cert: /etc/foreman/ssl_cert.pem
:foreman_ssl_key: /etc/foreman/ssl_key.pem
EOF

# Запускаем сервис smart-proxy

systemctl enable --now smart-proxy && sleep 5

# Через Веб интерфейс добавляем smart-proxy в foreman
# адрес smart-proxy http://foreman-test.domain.alt:8000
# После чего требуется изменения для согласования puppet и foreman

cat >> /etc/puppet/puppet.conf <<EOF
[master]
   autosign = /etc/puppet/autosign.conf { mode = 0664 }
   ca = true
   certname = foreman-test.domain.alt
   logdir = /var/log/puppetserver
   parser = current
   rundir = /var/run/puppetserver
   ssldir = /etc/puppet/ssl
   strict_variables = false
   vardir = /var/lib/puppetserver/server_data
   external_nodes = /usr/lib/puppet-modules/theforeman-puppetserver-foreman/files/enc.rb
   node_terminus = exec
   report = true
EOF

# Перезапускаем связанные с foreman сервисы и проверяем их статус
systemctl restart puppetserver puppet foreman smart-proxy && systemctl status puppetserver puppet foreman smart-proxy