manifests/site.pp

   1 Package {
   2         noop    => true,
   3         require => File['/etc/apt/apt.conf.d/local-recommends']
   4 }
   5
   6 File {
   7         noop   => true,
   8         owner  => root,
   9         group  => root,
  10         mode   => '0444',
  11         ensure => file,
  12 }
  13
  14 Exec {
  15         noop => true,
  16         path => '/usr/bin:/usr/sbin:/bin:/sbin'
  17 }
  18
  19 Service {
  20         noop       => true,
  21         hasrestart => true,
  22         hasstatus  => true,
  23 }
  24
  25 node default {
  26         include site
  27         include munin
  28         include syslog-ng
  29         include sudo
  30         include ssh
  31         include debian-org
  32         include monit
  33         include ntp
  34         include ntpdate
  35         include ssl
  36         include motd
  37         include hardware
  38         include nagios::client
  39         include resolv
  40
  41         if $::hostname in [finzi,fano,fasch,field] {
  42                 include kfreebsd
  43         }
  44
  45         if $::kvmdomain {
  46                 include acpi
  47         }
  48
  49         if $::mta == 'exim4' {
  50                 if getfromhash($site::nodeinfo, 'heavy_exim') {
  51                         include exim::mx
  52                 } else {
  53                         include exim
  54                 }
  55         }
  56
  57         if $::lsbdistcodename != 'lenny' {
  58                 include unbound
  59         }
  60
  61         if getfromhash($site::nodeinfo, 'puppetmaster') {
  62                 include puppetmaster
  63         }
  64
  65         if getfromhash($site::nodeinfo, 'muninmaster') {
  66                 include munin::master
  67         }
  68
  69         if getfromhash($site::nodeinfo, 'nagiosmaster') {
  70                 include nagios::server
  71         }
  72
  73         if getfromhash($site::nodeinfo, 'buildd') {
  74                 include buildd
  75         }
  76
  77         if $::hostname in [chopin,franck,morricone,bizet] {
  78                 include roles::dakmaster
  79         }
  80
  81         if getfromhash($site::nodeinfo, 'apache2_security_mirror') {
  82                 include roles::security_mirror
  83         }
  84
  85         if getfromhash($site::nodeinfo, 'apache2_www_mirror') {
  86                 include roles::www_mirror
  87         }
  88
  89         if getfromhash($site::nodeinfo, 'apache2_backports_mirror') {
  90                 include roles::backports_mirror
  91         }
  92
  93         if getfromhash($site::nodeinfo, 'apache2_ftp-upcoming_mirror') {
  94                 include roles::ftp-upcoming_mirror
  95         }
  96
  97         if $::apache2 {
  98                 include apache2
  99         }
 100
 101         if $::rsyncd {
 102                 include rsyncd-log
 103         }
 104
 105         if $::hostname in [ravel,senfl,orff,draghi,diamond] {
 106                 include named::authoritative
 107         } elsif $::hostname in [geo1,geo2,geo3] {
 108                 include named::geodns
 109         } elsif $::hostname == 'liszt' {
 110                 include named::recursor
 111         }
 112
 113         if $::kernel == 'Linux' {
 114                 include ferm
 115                 include ferm::per-host
 116                 include entropykey
 117         }
 118
 119         if $::hostname in [diabelli,nono,spohr] {
 120                 include dacs
 121         }
 122
 123         if $::hostname in [beethoven,duarte,spohr,stabile] {
 124                 include nfs-server
 125         }
 126
 127         if $::brokenhosts {
 128                 include hosts
 129         }
 130
 131         if $::portforwarder_user_exists {
 132                 include portforwarder
 133         }
 134
 135         include samhain
 136
 137         if $::hostname in [chopin,geo3,soler,wieck] {
 138                 include debian-org::radvd
 139         }
 140
 141         if ($::postgres84 or $::postgres90) {
 142                 include postgres
 143         }
 144
 145         if $::spamd {
 146                 munin::check { 'spamassassin': }
 147         }
 148
 149         if $::vsftpd {
 150                 package { 'logtail':
 151                         ensure => installed
 152                 }
 153                 munin::check { 'vsftpd': }
 154                 munin::check { 'ps_vsftpd':
 155                         script => 'ps_'
 156                 }
 157         }
 158 }