A simple htpasswd file management using Puppet

I just came across a task, that I thought would be the usual daily duty for every Puppet administrator: Managing users in a htpasswd file.

For whatever reason, this is neither supported in the fairly official Apache module nor via a puppet user resource – or it isn’t documented well.

However, the apache module contains a puppet function to generate the hash, that is used inside a htpasswd file, so I quickly wrapped up a profile and a template to make management of htpasswd files possible. Check out the files in this gist and include them in your local profiles module.

You can also configure these through hiera then:

profiles::htpasswd::filename: "/etc/apache2/mypasswd"
profiles::htpasswd::accounts:
  bob: "eyaml-scrambledbobpassword"
  daisy: "eyaml-scrambleddaisypassword"