manifests/site.pp

   1 Package {
   2     require => File["/etc/apt/apt.conf.d/local-recommends"]
   3 }
   4
   5 File {
   6     owner   => root,
   7     group   => root,
   8     mode    => 444,
   9     ensure  => file,
  10 }
  11
  12 Exec {
  13     path => "/usr/bin:/usr/sbin:/bin:/sbin"
  14 }
  15
  16 node default {
  17     $localinfo = yamlinfo('*', "/etc/puppet/modules/debian-org/misc/local.yaml")
  18     $nodeinfo  = nodeinfo($fqdn, "/etc/puppet/modules/debian-org/misc/local.yaml")
  19     $hoster    = whohosts($nodeinfo, "/etc/puppet/modules/debian-org/misc/hoster.yaml")
  20     $keyinfo   = allnodeinfo("sshRSAHostKey", "ipHostNumber")
  21     notice("hoster for ${fqdn} is ${hoster}")
  22
  23     $mxinfo   = allnodeinfo("mXRecord")
  24
  25     include munin-node
  26     include sudo
  27     include ssh
  28     include debian-org
  29     include monit
  30     include apt-keys
  31     include ntp
  32
  33     include motd
  34
  35     case $hostname {
  36         finzi,fano,fasch,field:    { include kfreebsd }
  37     }
  38
  39     case $smartarraycontroller {
  40         "true":    { include debian-proliant }
  41     }
  42     case $kvmdomain {
  43         "true":    { package { acpid: ensure => installed } }
  44     }
  45     case $mptraid {
  46         "true":    { include "raidmpt" }
  47     }
  48
  49     case $mta {
  50         "exim4":   {
  51              case extractnodeinfo($nodeinfo, 'heavy_exim') {
  52                   true:    { include exim::mx }
  53                   default: { include exim }
  54              }
  55         }
  56     }
  57
  58     case extractnodeinfo($nodeinfo, 'muninmaster') {
  59         true: { include munin-node::master }
  60     }
  61
  62     case extractnodeinfo($nodeinfo, 'nagiosmaster') {
  63         true:    { include nagios::server }
  64         default: { include nagios::client }
  65     }
  66
  67     case $apache2 {
  68          "true":  {
  69               case extractnodeinfo($nodeinfo, 'apache2_security_mirror') {
  70                      true:    { include apache2::security_mirror }
  71                      default: { include apache2 }
  72               }
  73          }
  74     }
  75
  76     case extractnodeinfo($nodeinfo, 'buildd') {
  77          true:  { include buildd }
  78     }
  79
  80     case $hostname {
  81         klecker,ravel,senfl,orff: { include named::secondary }
  82         geo1,geo2,geo3:           { include named::geodns }
  83         bartok:                   { include named::recursor }
  84     }
  85
  86     case extractnodeinfo($nodeinfo, 'apache2_security_mirror') {
  87         true: { include rsync }
  88         true: { include ftp }
  89     }
  90
  91     case $hostname {
  92         senfl: { include rsync }
  93     }
  94
  95     case $hostname {
  96         logtest01,geo1,geo2,geo3,bartok,senfl,beethoven,piatti,saens: { include ferm }
  97     }
  98     case $hostname {
  99         piatti: {
 100            @ferm::rule { "dsa-udd-stunnel":
 101                description  => "port 8080 for udd stunnel",
 102                rule         => "&SERVICE_RANGE(tcp, http-alt, ( 192.25.206.16 70.103.162.29 217.196.43.134 ))"
 103            }
 104         }
 105
 106     }
 107     case $brokenhosts {
 108         "true":    { include hosts }
 109     }
 110     case $hoster {
 111         "ubcece", "darmstadt", "ftcollins", "grnet":  { include resolv }
 112     }
 113     case $portforwarder_user_exists {
 114         "true":    { include portforwarder }
 115     }
 116     include samhain
 117 }