manifests/site.pp

   1 Package {
   2     require => File["/etc/apt/apt.conf.d/local-recommends"]
   3 }
   4
   5 File {
   6     owner   => root,
   7     group   => root,
   8     mode    => 444,
   9     ensure  => file,
  10 }
  11
  12 Exec {
  13     path => "/usr/bin:/usr/sbin:/bin:/sbin"
  14 }
  15
  16 node default {
  17     $localinfo = yamlinfo('*', "/etc/puppet/modules/debian-org/misc/local.yaml")
  18     $nodeinfo  = nodeinfo($fqdn, "/etc/puppet/modules/debian-org/misc/local.yaml")
  19     $hoster    = whohosts($nodeinfo, "/etc/puppet/modules/debian-org/misc/hoster.yaml")
  20     $keyinfo   = allnodeinfo("sshRSAHostKey", "ipHostNumber")
  21     notice("hoster for ${fqdn} is ${hoster}")
  22
  23     $mxinfo   = allnodeinfo("mXRecord")
  24
  25     include munin-node
  26     include sudo
  27     include ssh
  28     include debian-org
  29     include monit
  30     include apt-keys
  31     include ntp
  32     include ssl
  33
  34     include motd
  35
  36     case $hostname {
  37         finzi,fano,fasch,field:    { include kfreebsd }
  38     }
  39
  40     case $smartarraycontroller {
  41         "true":    { include debian-proliant }
  42     }
  43     case $kvmdomain {
  44         "true":    { package { acpid: ensure => installed } }
  45     }
  46     case $mptraid {
  47         "true":    { include "raidmpt" }
  48     }
  49
  50     case $mta {
  51         "exim4":   {
  52              case extractnodeinfo($nodeinfo, 'heavy_exim') {
  53                   'true':  { include exim::mx }
  54                   default: { include exim }
  55              }
  56         }
  57     }
  58
  59     case extractnodeinfo($nodeinfo, 'muninmaster') {
  60         true: { include munin-node::master }
  61     }
  62
  63     case extractnodeinfo($nodeinfo, 'nagiosmaster') {
  64         true:    { include nagios::server }
  65         default: { include nagios::client }
  66     }
  67
  68     case $apache2 {
  69          "true":  {
  70               case extractnodeinfo($nodeinfo, 'apache2_security_mirror') {
  71                      true:    { include apache2::security_mirror }
  72                      default: { include apache2 }
  73               }
  74          }
  75     }
  76
  77     case extractnodeinfo($nodeinfo, 'buildd') {
  78          'true':  {
  79              include buildd
  80          }
  81     }
  82
  83     case $hostname {
  84         klecker,ravel,senfl,orff: { include named::secondary }
  85         geo1,geo2,geo3:           { include named::geodns }
  86         bartok,schein,steffani,ries,franck,liszt,master:   { include named::recursor }
  87     }
  88
  89     case $hostname {
  90         cilea,merikanto,ravel,sibelius: {}
  91         default: {
  92              case $kernel {
  93                  Linux: {
  94                      include ferm
  95                  }
  96              }
  97          }
  98     }
  99     include ferm::per-host
 100
 101     case $brokenhosts {
 102         "true":    { include hosts }
 103     }
 104     case $hoster {
 105         "ubcece", "darmstadt", "ftcollins", "grnet":  { include resolv }
 106     }
 107     case $portforwarder_user_exists {
 108         "true":    { include portforwarder }
 109     }
 110     include samhain
 111 }