manifests/site.pp

   1 Package {
   2         require => File['/etc/apt/apt.conf.d/local-recommends']
   3 }
   4
   5 File {
   6         owner   => root,
   7         group   => root,
   8         mode    => '0444',
   9         ensure  => file,
  10 }
  11
  12 Exec {
  13         path => '/usr/bin:/usr/sbin:/bin:/sbin'
  14 }
  15
  16 Service {
  17         hasrestart => true,
  18         hasstatus  => true,
  19 }
  20
  21 node default {
  22         include site
  23         include munin
  24         include syslog-ng
  25         include sudo
  26         include ssh
  27         include debian-org
  28         include monit
  29         include apt-keys
  30         include ntp
  31         include ntpdate
  32         include ssl
  33         include motd
  34         include hardware
  35         include nagios::client
  36         include resolv
  37
  38         if $::hostname in [finzi,fano,fasch,field] {
  39                 include kfreebsd
  40         }
  41
  42         if $::kvmdomain {
  43                 include acpi
  44         }
  45
  46         if $::mta == 'exim4' {
  47                 if getfromhash($site::nodeinfo, 'heavy_exim') {
  48                         include exim::mx
  49                 } else {
  50                         include exim
  51                 }
  52         }
  53
  54         if $::lsbdistcodename != 'lenny' {
  55                 include unbound
  56         }
  57
  58         if getfromhash($site::nodeinfo, 'puppetmaster') {
  59                 include puppetmaster
  60         }
  61
  62         if getfromhash($site::nodeinfo, 'muninmaster') {
  63                 include munin::master
  64         }
  65
  66         if getfromhash($site::nodeinfo, 'nagiosmaster') {
  67                 include nagios::server
  68         }
  69
  70         if getfromhash($site::nodeinfo, 'buildd') {
  71                 include buildd
  72         }
  73
  74         if $::hostname in [chopin,franck,morricone,bizet] {
  75                 include roles::dakmaster
  76         }
  77
  78         if getfromhash($site::nodeinfo, 'apache2_security_mirror') {
  79                 include roles::security_mirror
  80         }
  81
  82         if getfromhash($site::nodeinfo, 'apache2_www_mirror') {
  83                 include roles::www_mirror
  84         }
  85
  86         if getfromhash($site::nodeinfo, 'apache2_backports_mirror') {
  87                 include roles::backports_mirror
  88         }
  89
  90         if getfromhash($site::nodeinfo, 'apache2_ftp-upcoming_mirror') {
  91                 include roles::ftp-upcoming_mirror
  92         }
  93
  94         if $::apache2 {
  95                 include apache2
  96         }
  97
  98         if $::rsyncd {
  99                 include rsyncd-log
 100         }
 101
 102         if $::hostname in [ravel,senfl,orff,draghi,diamond] {
 103                 include named::authoritative
 104         } elsif $::hostname in [geo1,geo2,geo3] {
 105                 include named::geodns
 106         } elsif $::hostname == 'liszt' {
 107                 include named::recursor
 108         }
 109
 110         if $::kernel == 'Linux' {
 111                 include ferm
 112                 include ferm::per-host
 113                 include entropykey
 114         }
 115
 116         if $::hostname in [diabelli,nono,spohr] {
 117                 include dacs
 118         }
 119
 120         if $::hostname in [beethoven,duarte,spohr,stabile] {
 121                 include nfs-server
 122         }
 123
 124         if $::brokenhosts {
 125                 include hosts
 126         }
 127
 128         if $::portforwarder_user_exists {
 129                 include portforwarder
 130         }
 131
 132         include samhain
 133
 134         if $::hostname in [chopin,geo3,soler,wieck] {
 135                 include debian-org::radvd
 136         }
 137
 138         if ($::postgres84 or $::postgres90) {
 139                 include postgres
 140         }
 141
 142         if $::spamd {
 143                 munin::check { 'spamassassin': }
 144         }
 145
 146         if $::vsftpd {
 147                 package { 'logtail':
 148                         ensure => installed
 149                 }
 150                 munin::check { 'vsftpd': }
 151                 munin::check { 'ps_vsftpd':
 152                         script => 'ps_'
 153                 }
 154         }
 155 }