Package {
- require => File["/etc/apt/apt.conf.d/local-recommends"]
+ require => File['/etc/apt/apt.conf.d/local-recommends']
}
File {
- owner => root,
- group => root,
- mode => 444,
- ensure => file,
+ owner => root,
+ group => root,
+ mode => '0444',
+ ensure => file,
}
Exec {
- path => "/usr/bin:/usr/sbin:/bin:/sbin"
+ path => '/usr/bin:/usr/sbin:/bin:/sbin'
}
-node default {
- $localinfo = yamlinfo('*', "/etc/puppet/modules/debian-org/misc/local.yaml")
- $nodeinfo = nodeinfo($fqdn, "/etc/puppet/modules/debian-org/misc/local.yaml")
- $allnodeinfo = allnodeinfo("sshRSAHostKey ipHostNumber", "purpose mXRecord physicalHost purpose")
- notice( sprintf("hoster for %s is %s", $fqdn, getfromhash($nodeinfo, 'hoster', 'name') ) )
-
- include munin-node
- include syslog-ng
- include sudo
- include ssh
- include debian-org
- include monit
- include apt-keys
- include ntp
- include ntpdate
- include ssl
-
- include motd
-
- case $hostname {
- finzi,fano,fasch,field: { include kfreebsd }
- }
-
- case $smartarraycontroller {
- "true": { include debian-proliant }
- }
- case $kvmdomain {
- "true": {
- case $debarchitecture {
- kfreebsd-amd64,kfreebsd-i386: {
- }
- default: {
- package { acpid: ensure => installed }
- case $lsbdistcodename {
- 'lenny': { }
- default: { package { acpi-support-base: ensure => installed } }
- }
- }
- }
- }
- }
- case $mptraid {
- "true": { include "raidmpt" }
- }
- case $productname {
- "PowerEdge 2850": { include megactl }
- }
-
- case $mta {
- "exim4": {
- case getfromhash($nodeinfo, 'heavy_exim') {
- true: { include exim::mx }
- default: { include exim }
- }
- }
- }
-
- case getfromhash($nodeinfo, 'puppetmaster') {
- true: { include puppetmaster }
- }
-
- case getfromhash($nodeinfo, 'muninmaster') {
- true: { include munin-node::master }
- }
-
- case getfromhash($nodeinfo, 'nagiosmaster') {
- true: { include nagios::server }
- default: { include nagios::client }
- }
-
- case $apache2 {
- "true": {
- case getfromhash($nodeinfo, 'apache2_security_mirror') {
- true: { include apache2::security_mirror }
- }
- case getfromhash($nodeinfo, 'apache2_www_mirror') {
- true: { include apache2::www_mirror }
- }
- case getfromhash($nodeinfo, 'apache2_backports_mirror') {
- true: { include apache2::backports_mirror }
- }
- case getfromhash($nodeinfo, 'apache2_ftp-upcoming_mirror') {
- true: { include apache2::ftp-upcoming_mirror }
- }
- include apache2
- }
- }
-
- case $rsyncd {
- "true": { include rsyncd-log }
- }
-
-
- case getfromhash($nodeinfo, 'buildd') {
- true: {
- include buildd
- }
- }
-
- case $hostname {
- ravel,senfl,orff,draghi,diamond: { include named::authoritative }
- geo1,geo2,geo3: { include named::geodns }
- liszt: { include named::recursor }
- }
- case $hostname {
- franck,master,lobos,samosa,spohr,widor: { include unbound }
- }
- case $lsbdistcodename {
- 'lenny': { }
- default: { include unbound }
- }
- include resolv
-
- case $kernel {
- Linux: {
- include ferm
- include ferm::per-host
- case $rsyncd {
- "true": { include ferm::rsync }
- }
- }
- }
-
- case $hostname {
- diabelli,rossini: { include dacs}
- }
-
- case $hostname {
- beethoven,duarte,ravel,spohr,stabile: {
- include nfs-server
- }
- }
-
- case $brokenhosts {
- "true": { include hosts }
- }
- case $portforwarder_user_exists {
- "true": { include portforwarder }
- }
-
- include samhain
-
- case $hostname {
- byrd,schuetz,tchaikovsky,draghi,quantz,lamb,locke,rautavaara,rietz: {
- include krb
- }
- }
-
- case $hostname {
- chopin,geo3,soler,wieck: {
- include debian-radvd
- }
- }
-
- case $kernel {
- Linux: { include entropykey }
- }
- if $::postgres84 == "true" {
- include postgres
- } elsif $::postgres90 == "true" {
- include postgres
- }
+Service {
+ hasrestart => true,
+ hasstatus => true,
}
-# vim:set et:
-# vim:set sts=4 ts=4:
-# vim:set shiftwidth=4:
+node default {
+ include site
+ include munin
+ include syslog-ng
+ include sudo
+ include ssh
+ include debian-org
+ include monit
+ include ntp
+ include ntpdate
+ include ssl
+ include motd
+ include hardware
+ include nagios::client
+ include resolv
+ include roles
+ include unbound
+ include bacula::client
+
+ if $::hostname in [pasquini,tristano,bertali,boito,byrd,clementi] {
+ include ganeti2
+ }
+
+ if $::hostname == 'dinis' {
+ include bacula::director
+ } else {
+ package { 'bacula-console':
+ ensure => purged;
+ }
+
+ file { '/etc/bacula/bconsole.conf':
+ ensure => absent;
+ }
+ }
+
+ if $::hostname == 'beethoven' {
+ include bacula::storage
+ }
+
+ if $::kernel == Linux {
+ include linux
+ if $::kvmdomain {
+ include acpi
+ }
+ } elsif $::kernel == 'GNU/kFreeBSD' {
+ include kfreebsd
+ }
+
+ if $::mta == 'exim4' {
+ if getfromhash($site::nodeinfo, 'heavy_exim') {
+ include exim::mx
+ } else {
+ include exim
+ }
+ } elsif $::mta == 'postfix' {
+ include postfix
+ } else {
+ include exim
+ }
+
+ if $::apache2 {
+ include apache2
+ }
+
+ if $::hostname in [ravel,senfl,orff,draghi,diamond] {
+ include named::authoritative
+ } elsif $::hostname in [geo1,geo2,geo3] {
+ include named::geodns
+ }
+
+ if $::hostname in [diabelli,nono,spohr] {
+ include dacs
+ }
+
+ if $::hostname in [beethoven,spohr,stabile,beach] {
+ include nfs-server
+ }
+
+ if $::brokenhosts {
+ include hosts
+ }
+
+ if $::portforwarder_user_exists {
+ include portforwarder
+ }
+
+ include samhain
+
+ if $::hostname in [chopin,geo3,soler,wieck] {
+ include debian-org::radvd
+ }
+
+ if ($::postgres84 or $::postgres90) {
+ include postgres
+ }
+
+ if $::hostname in ['beethoven', 'berlioz', 'biber', 'diabelli', 'dinis', 'draghi', 'widor', 'wolkenstein'] {
+ @@bacula::node { $::fqdn: }
+ }
+
+ if $::spamd {
+ munin::check { 'spamassassin': }
+ }
+}