class varnish { package { 'varnish': ensure => installed, } service { 'varnish': ensure => running, } include apache2::dynamic @ferm::rule { 'dsa-varnish': domain => '(ip ip6)', description => 'Allow http access', rule => '&SERVICE(tcp, 80)' } file { '/etc/default/varnish': source => 'puppet:///modules/varnish/varnish.default', require => Package['varnish'], notify => Service['varnish'], mode => '0444', } file { '/etc/varnish/default.vcl': source => 'puppet:///modules/varnish/default.vcl', require => Package['varnish'], notify => Service['varnish'], mode => '0444', } }