manifests/site.pp

   1 Package {
   2         require => File['/etc/apt/apt.conf.d/local-recommends']
   3 }
   4
   5 File {
   6         owner  => root,
   7         group  => root,
   8         mode   => '0444',
   9         ensure => file,
  10 }
  11
  12 Exec {
  13         path => '/usr/bin:/usr/sbin:/bin:/sbin'
  14 }
  15
  16 Service {
  17         hasrestart => true,
  18         hasstatus  => true,
  19 }
  20
  21 node default {
  22         include site
  23         include munin
  24         include syslog-ng
  25         include sudo
  26         include ssh
  27         include debian-org
  28         include monit
  29         include ntp
  30         include ntpdate
  31         include ssl
  32         include motd
  33         include hardware
  34         include nagios::client
  35         include resolv
  36
  37         if $::hostname in [pasquini,tristano] {
  38                 include ganeti2
  39         }
  40
  41         if $::hostname in [finzi,fano,fasch,field] {
  42                 include kfreebsd
  43         }
  44
  45         if $::kvmdomain {
  46                 include acpi
  47         }
  48
  49         if $::mta == 'exim4' {
  50                 if getfromhash($site::nodeinfo, 'heavy_exim') {
  51                         include exim::mx
  52                 } else {
  53                         include exim
  54                 }
  55         } elsif $::hostname == 'bendel' {
  56                 include postfix
  57         }
  58
  59         if $::lsbdistcodename != 'lenny' {
  60                 include unbound
  61         }
  62
  63         if getfromhash($site::nodeinfo, 'puppetmaster') {
  64                 include puppetmaster
  65         }
  66
  67         if getfromhash($site::nodeinfo, 'muninmaster') {
  68                 include munin::master
  69         }
  70
  71         if getfromhash($site::nodeinfo, 'nagiosmaster') {
  72                 include nagios::server
  73         }
  74
  75         if getfromhash($site::nodeinfo, 'buildd') {
  76                 include buildd
  77         }
  78
  79         if $::hostname in [chopin,franck,morricone,bizet] {
  80                 include roles::dakmaster
  81         }
  82
  83         if getfromhash($site::nodeinfo, 'apache2_security_mirror') {
  84                 include roles::security_mirror
  85         }
  86
  87         if getfromhash($site::nodeinfo, 'apache2_www_mirror') {
  88                 include roles::www_mirror
  89         }
  90
  91         if getfromhash($site::nodeinfo, 'apache2_backports_mirror') {
  92                 include roles::backports_mirror
  93         }
  94
  95         if getfromhash($site::nodeinfo, 'apache2_ftp-upcoming_mirror') {
  96                 include roles::ftp-upcoming_mirror
  97         }
  98
  99         if $::apache2 {
 100                 include apache2
 101         }
 102
 103         if $::rsyncd {
 104                 include rsyncd-log
 105         }
 106
 107         if $::hostname in [ravel,senfl,orff,draghi,diamond] {
 108                 include named::authoritative
 109         } elsif $::hostname in [geo1,geo2,geo3] {
 110                 include named::geodns
 111         } elsif $::hostname == 'liszt' {
 112                 include named::recursor
 113         }
 114
 115         if $::kernel == 'Linux' {
 116                 include ferm
 117                 include ferm::per-host
 118                 include entropykey
 119         }
 120
 121         if $::hostname in [diabelli,nono,spohr] {
 122                 include dacs
 123         }
 124
 125         if $::hostname in [beethoven,duarte,spohr,stabile] {
 126                 include nfs-server
 127         }
 128
 129         if $::brokenhosts {
 130                 include hosts
 131         }
 132
 133         if $::portforwarder_user_exists {
 134                 include portforwarder
 135         }
 136
 137         include samhain
 138
 139         if $::hostname in [chopin,geo3,soler,wieck] {
 140                 include debian-org::radvd
 141         }
 142
 143         if ($::postgres84 or $::postgres90) {
 144                 include postgres
 145         }
 146
 147         if $::spamd {
 148                 munin::check { 'spamassassin': }
 149         }
 150
 151         if $::hostname in [chopin,franck,gluck,kassia,klecker,lobos,morricone,ravel,saens,schein,santoro,steffani,valente,villa,wieck,bizet] {
 152                 include vsftpd
 153         }
 154 }