]> git.donarmstrong.com Git - dsa-puppet.git/blob - manifests/site.pp
do not run an authority on draghi
[dsa-puppet.git] / manifests / site.pp
1 Package {
2         require => File['/etc/apt/apt.conf.d/local-recommends']
3 }
4
5 File {
6         owner  => root,
7         group  => root,
8         mode   => '0444',
9         ensure => file,
10 }
11
12 Exec {
13         path => '/usr/bin:/usr/sbin:/bin:/sbin'
14 }
15
16 Service {
17         hasrestart => true,
18         hasstatus  => true,
19 }
20
21 node default {
22         include site
23         include munin
24         include syslog-ng
25         include sudo
26         include ssh
27         include debian-org
28         include monit
29         include ntp
30         include ntpdate
31         include ssl
32         include hardware
33         include nagios::client
34         include resolv
35         include roles
36         include motd
37         include unbound
38         include bacula::client
39         include autofs
40         include lvm
41         include multipath
42
43         if $::hostname in [pasquini,tristano,bertali,boito,rossini,salieri,dijkstra,luchesi,byrd,clementi,czerny,bm-bl1,bm-bl2,bm-bl3,bm-bl4,bm-bl5,bm-bl6,bm-bl7,bm-bl8,bm-bl9,bm-bl10,bm-bl11,bm-bl12,bm-bl13,bm-bl14] {
44                 include ganeti2
45         }
46
47
48         if $::hostname == 'dinis' {
49                 include bacula::director
50         } else {
51                 package { 'bacula-console':
52                         ensure => purged;
53                 }
54
55                 file { '/etc/bacula/bconsole.conf':
56                         ensure => absent;
57                 }
58         }
59
60         if $::hostname == 'backuphost' {
61                 include bacula::storage
62         }
63
64         if $::kernel == Linux {
65                 include linux
66                 if $::kvmdomain {
67                         include acpi
68                 }
69         } elsif $::kernel == 'GNU/kFreeBSD' {
70                 include kfreebsd
71         }
72
73         if $::mta == 'exim4' {
74                 if getfromhash($site::nodeinfo, 'heavy_exim') {
75                         include exim::mx
76                 } else {
77                         include exim
78                 }
79         } elsif $::mta == 'postfix' {
80                 include postfix
81         } else {
82                 include exim
83         }
84
85         if $::apache2 {
86                 include apache2
87         }
88
89         if $::hostname in [ravel,senfl,orff,diamond,rietz,denis] {
90                 include named::authoritative
91         } elsif $::hostname in [geo1,geo2,geo3] {
92                 include named::geodns
93         }
94         if $::hostname in [orff, denis] {
95                 include dnsextras::entries
96         }
97
98         if $::hostname in [diabelli,nono] {
99                 include dacs
100         }
101
102         if $::hostname in [stabile,beach,glinka,milanollo,rautavaara] {
103                 include nfs-server
104         }
105
106         if $::hostname == 'vieuxtemps' {
107                 include varnish
108         }
109
110         if $::brokenhosts {
111                 include hosts
112         }
113
114         if $::portforwarder_user_exists {
115                 include portforwarder
116         }
117
118         if $::samhain {
119                 include samhain
120         }
121
122         if $::hostname in [chopin,geo3,soler,wieck] {
123                 include debian-org::radvd
124         }
125
126         if ($::postgres) {
127                 include postgres
128         }
129
130         if $::spamd {
131                 munin::check { 'spamassassin': }
132         }
133
134         if $::hoster {
135                 if $::hoster in [ynic] {
136                         include lldp
137                 }
138         }
139 }