snapshot of https://github.com/zulip/zulip.git @ 48c69911c7dd4e03b20552eb3bd77ad8151c1357 (2026-09-15)

puppet/kandra/manifests/profile/prod_app_frontend.pp

@@ -0,0 +1,37 @@
+class kandra::profile::prod_app_frontend inherits kandra::profile::base {
+  include kandra::app_frontend
+  include zulip::hooks::zulip_notify
+
+  Kandra::User_Dotfiles['root'] {
+    keys => 'internal-limited-write-deploy-key',
+  }
+  Kandra::User_Dotfiles['zulip'] {
+    keys => 'internal-limited-write-deploy-key',
+  }
+
+  zulip::sysctl { 'conntrack':
+    comment => 'Increase conntrack kernel table size',
+    key     => 'net.nf_conntrack_max',
+    value   => zulipconf('application_server', 'conntrack_max', 262144),
+  }
+
+  file { '/etc/nginx/sites-available/zulip':
+    ensure  => file,
+    require => [Package['nginx-full'], Exec['generate-default-snakeoil']],
+    owner   => 'root',
+    group   => 'root',
+    mode    => '0644',
+    source  => 'puppet:///modules/kandra/nginx/sites-available/zulip',
+    notify  => Service['nginx'],
+  }
+
+  file { '/etc/nginx/sites-enabled/zulip':
+    ensure  => link,
+    require => Package['nginx-full'],
+    target  => '/etc/nginx/sites-available/zulip',
+    notify  => Service['nginx'],
+  }
+
+  # Prod has our Apple Push Notifications Service private key at
+  # /etc/ssl/django-private/apns-dist.pem
+}