X-Git-Url: https://git.donarmstrong.com/?a=blobdiff_plain;f=manifests%2Fsite.pp;h=163adde0d509ce386c977bd4622c0e0f68973a6f;hb=2e8e944225660df69ce7767e9374995c35c4d748;hp=2a27462999fac338fc22e8135abc87c08f6c840b;hpb=22da90629d012e623abc61a5ee061e4627e89125;p=dsa-puppet.git diff --git a/manifests/site.pp b/manifests/site.pp index 2a274629..163adde0 100644 --- a/manifests/site.pp +++ b/manifests/site.pp @@ -16,10 +16,10 @@ Exec { node default { $localinfo = yamlinfo('*', "/etc/puppet/modules/debian-org/misc/local.yaml") $nodeinfo = nodeinfo($fqdn, "/etc/puppet/modules/debian-org/misc/local.yaml") - $hoster = whohosts($nodeinfo, "/etc/puppet/modules/debian-org/misc/hoster.yaml") - $keyinfo = allnodeinfo("sshRSAHostKey", "ipHostNumber") + $hosterinfo = whohosts($nodeinfo, "/etc/puppet/modules/debian-org/misc/hoster.yaml") + $keyinfo = allnodeinfo("sshRSAHostKey", "ipHostNumber", "purpose") $mxinfo = allnodeinfo("mXRecord") - notice("hoster for ${fqdn} is ${hoster}") + notice("hoster for ${fqdn} is ${hosterinfo}") include munin-node include syslog-ng @@ -43,8 +43,8 @@ node default { case $kvmdomain { "true": { package { acpid: ensure => installed } - case extractnodeinfo($nodeinfo, 'squeeze') { - 'true': { package { acpi-support-base: ensure => installed } } + case getfromhash($nodeinfo, 'squeeze') { + true: { package { acpi-support-base: ensure => installed } } } } } @@ -54,28 +54,35 @@ node default { case $mta { "exim4": { - case extractnodeinfo($nodeinfo, 'heavy_exim') { - 'true': { include exim::mx } + case getfromhash($nodeinfo, 'heavy_exim') { + true: { include exim::mx } default: { include exim } } } } - case extractnodeinfo($nodeinfo, 'muninmaster') { + case getfromhash($nodeinfo, 'puppetmaster') { + true: { include puppetmaster } + } + + case getfromhash($nodeinfo, 'muninmaster') { true: { include munin-node::master } } - case extractnodeinfo($nodeinfo, 'nagiosmaster') { + case getfromhash($nodeinfo, 'nagiosmaster') { true: { include nagios::server } default: { include nagios::client } } case $apache2 { "true": { - case extractnodeinfo($nodeinfo, 'apache2_security_mirror') { + case getfromhash($nodeinfo, 'apache2_security_mirror') { true: { include apache2::security_mirror } - default: { include apache2 } } + case getfromhash($nodeinfo, 'apache2_www_mirror') { + true: { include apache2::www_mirror } + } + include apache2 } } @@ -84,8 +91,8 @@ node default { } - case extractnodeinfo($nodeinfo, 'buildd') { - 'true': { + case getfromhash($nodeinfo, 'buildd') { + true: { include buildd } } @@ -93,13 +100,29 @@ node default { case $hostname { klecker,ravel,senfl,orff,draghi: { include named::authoritative } geo1,geo2,geo3: { include named::geodns } - franck,liszt,master,samosa,schein,spohr,steffani,widor: { include named::recursor } + franck,liszt,master,samosa,spohr,widor: { include named::recursor } + } + case $hostname { + ries: { + include unbound + $runs_local_resolver = true + } + default: { + $runs_local_resolver = false + } + } + case getfromhash($hosterinfo, 'nameservers') { + false: {} + default: { include resolv } } case $kernel { Linux: { include ferm include ferm::per-host + case $rsyncd { + "true": { include ferm::rsync } + } } } @@ -112,9 +135,6 @@ node default { case $brokenhosts { "true": { include hosts } } - case $hoster { - "ubcece", "darmstadt", "ftcollins", "grnet": { include resolv } - } case $portforwarder_user_exists { "true": { include portforwarder } } @@ -122,10 +142,10 @@ node default { include samhain case $hostname { - byrd,schuetz: { + byrd,schuetz,tchaikovsky: { include krb } - draghi,quantz,samosa: { + draghi,quantz: { include krb include afs } @@ -134,6 +154,12 @@ node default { include afs::server } } + + case $hostname { + chopin,geo3,soler,wieck: { + include debian-radvd + } + } } # vim:set et: