snapshot of https://github.com/zulip/zulip.git @ 48c69911c7dd4e03b20552eb3bd77ad8151c1357 (2026-09-15)

puppet/kandra/manifests/profile/redis.pp

@@ -0,0 +1,35 @@
+class kandra::profile::redis inherits kandra::profile::base {
+  include zulip::profile::redis
+  include kandra::prometheus::redis
+
+  zulip::sysctl { 'redis-somaxconn':
+    key   => 'net.core.somaxconn',
+    value => '65535',
+  }
+
+  # Need redis_password in its own file for Nagios
+  file { '/var/lib/nagios/redis_password':
+    ensure  => file,
+    mode    => '0600',
+    owner   => 'nagios',
+    group   => 'nagios',
+    content => "${zulip::profile::redis::redis_password}\n",
+  }
+
+  group { 'redistunnel':
+    ensure => present,
+    gid    => '1080',
+  }
+  user { 'redistunnel':
+    ensure     => present,
+    uid        => '1080',
+    gid        => '1080',
+    groups     => ['zulip'],
+    shell      => '/bin/true',
+    home       => '/home/redistunnel',
+    managehome => true,
+  }
+  kandra::user_dotfiles { 'redistunnel':
+    authorized_keys => true,
+  }
+}