manifests/site.pp

   1 Package {
   2         require => File['/etc/apt/apt.conf.d/local-recommends']
   3 }
   4
   5 File {
   6         owner  => root,
   7         group  => root,
   8         mode   => '0444',
   9         ensure => file,
  10 }
  11
  12 Exec {
  13         path => '/usr/bin:/usr/sbin:/bin:/sbin'
  14 }
  15
  16 Service {
  17         hasrestart => true,
  18         hasstatus  => true,
  19 }
  20
  21 node default {
  22         include site
  23         include munin
  24         include syslog-ng
  25         include sudo
  26         include ssh
  27         include debian-org
  28         include monit
  29         include ntp
  30         include ntpdate
  31         include ssl
  32         include motd
  33         include hardware
  34         include nagios::client
  35         include resolv
  36
  37         if $::hostname in [finzi,fano,fasch,field] {
  38                 include kfreebsd
  39         }
  40
  41         if $::kvmdomain {
  42                 include acpi
  43         }
  44
  45         if $::mta == 'exim4' {
  46                 if getfromhash($site::nodeinfo, 'heavy_exim') {
  47                         include exim::mx
  48                 } else {
  49                         include exim
  50                 }
  51         }
  52
  53         if $::lsbdistcodename != 'lenny' {
  54                 include unbound
  55         }
  56
  57         if getfromhash($site::nodeinfo, 'puppetmaster') {
  58                 include puppetmaster
  59         }
  60
  61         if getfromhash($site::nodeinfo, 'muninmaster') {
  62                 include munin::master
  63         }
  64
  65         if getfromhash($site::nodeinfo, 'nagiosmaster') {
  66                 include nagios::server
  67         }
  68
  69         if getfromhash($site::nodeinfo, 'buildd') {
  70                 include buildd
  71         }
  72
  73         if $::hostname in [chopin,franck,morricone,bizet] {
  74                 include roles::dakmaster
  75         }
  76
  77         if getfromhash($site::nodeinfo, 'apache2_security_mirror') {
  78                 include roles::security_mirror
  79         }
  80
  81         if getfromhash($site::nodeinfo, 'apache2_www_mirror') {
  82                 include roles::www_mirror
  83         }
  84
  85         if getfromhash($site::nodeinfo, 'apache2_backports_mirror') {
  86                 include roles::backports_mirror
  87         }
  88
  89         if getfromhash($site::nodeinfo, 'apache2_ftp-upcoming_mirror') {
  90                 include roles::ftp-upcoming_mirror
  91         }
  92
  93         if $::apache2 {
  94                 include apache2
  95         }
  96
  97         if $::rsyncd {
  98                 include rsyncd-log
  99         }
 100
 101         if $::hostname in [ravel,senfl,orff,draghi,diamond] {
 102                 include named::authoritative
 103         } elsif $::hostname in [geo1,geo2,geo3] {
 104                 include named::geodns
 105         } elsif $::hostname == 'liszt' {
 106                 include named::recursor
 107         }
 108
 109         if $::kernel == 'Linux' {
 110                 include ferm
 111                 include ferm::per-host
 112                 include entropykey
 113         }
 114
 115         if $::hostname in [diabelli,nono,spohr] {
 116                 include dacs
 117         }
 118
 119         if $::hostname in [beethoven,duarte,spohr,stabile] {
 120                 include nfs-server
 121         }
 122
 123         if $::brokenhosts {
 124                 include hosts
 125         }
 126
 127         if $::portforwarder_user_exists {
 128                 include portforwarder
 129         }
 130
 131         include samhain
 132
 133         if $::hostname in [chopin,geo3,soler,wieck] {
 134                 include debian-org::radvd
 135         }
 136
 137         if ($::postgres84 or $::postgres90) {
 138                 include postgres
 139         }
 140
 141         if $::spamd {
 142                 munin::check { 'spamassassin': }
 143         }
 144
 145         if $::vsftpd {
 146                 package { 'logtail':
 147                         ensure => installed
 148                 }
 149                 munin::check { 'vsftpd': }
 150                 munin::check { 'ps_vsftpd':
 151                         script => 'ps_'
 152                 }
 153         }
 154 }