manifests/site.pp

   1 Package {
   2         noop    => true,
   3         require => File['/etc/apt/apt.conf.d/local-recommends']
   4 }
   5
   6 File {
   7         noop   => true,
   8         owner  => root,
   9         group  => root,
  10         mode   => '0444',
  11         ensure => file,
  12 }
  13
  14 Exec {
  15         noop => true,
  16         path => '/usr/bin:/usr/sbin:/bin:/sbin'
  17 }
  18
  19 Service {
  20         noop       => true,
  21         hasrestart => true,
  22         hasstatus  => true,
  23 }
  24
  25 node default {
  26         include site
  27         include munin
  28         include syslog-ng
  29         include sudo
  30         include ssh
  31         include debian-org
  32         include monit
  33         include apt-keys
  34         include ntp
  35         include ntpdate
  36         include ssl
  37         include motd
  38         include hardware
  39         include nagios::client
  40         include resolv
  41
  42         if $::hostname in [finzi,fano,fasch,field] {
  43                 include kfreebsd
  44         }
  45
  46         if $::kvmdomain {
  47                 include acpi
  48         }
  49
  50         if $::mta == 'exim4' {
  51                 if getfromhash($site::nodeinfo, 'heavy_exim') {
  52                         include exim::mx
  53                 } else {
  54                         include exim
  55                 }
  56         }
  57
  58         if $::lsbdistcodename != 'lenny' {
  59                 include unbound
  60         }
  61
  62         if getfromhash($site::nodeinfo, 'puppetmaster') {
  63                 include puppetmaster
  64         }
  65
  66         if getfromhash($site::nodeinfo, 'muninmaster') {
  67                 include munin::master
  68         }
  69
  70         if getfromhash($site::nodeinfo, 'nagiosmaster') {
  71                 include nagios::server
  72         }
  73
  74         if getfromhash($site::nodeinfo, 'buildd') {
  75                 include buildd
  76         }
  77
  78         if $::hostname in [chopin,franck,morricone,bizet] {
  79                 include roles::dakmaster
  80         }
  81
  82         if getfromhash($site::nodeinfo, 'apache2_security_mirror') {
  83                 include roles::security_mirror
  84         }
  85
  86         if getfromhash($site::nodeinfo, 'apache2_www_mirror') {
  87                 include roles::www_mirror
  88         }
  89
  90         if getfromhash($site::nodeinfo, 'apache2_backports_mirror') {
  91                 include roles::backports_mirror
  92         }
  93
  94         if getfromhash($site::nodeinfo, 'apache2_ftp-upcoming_mirror') {
  95                 include roles::ftp-upcoming_mirror
  96         }
  97
  98         if $::apache2 {
  99                 include apache2
 100         }
 101
 102         if $::rsyncd {
 103                 include rsyncd-log
 104         }
 105
 106         if $::hostname in [ravel,senfl,orff,draghi,diamond] {
 107                 include named::authoritative
 108         } elsif $::hostname in [geo1,geo2,geo3] {
 109                 include named::geodns
 110         } elsif $::hostname == 'liszt' {
 111                 include named::recursor
 112         }
 113
 114         if $::kernel == 'Linux' {
 115                 include ferm
 116                 include ferm::per-host
 117                 include entropykey
 118         }
 119
 120         if $::hostname in [diabelli,nono,spohr] {
 121                 include dacs
 122         }
 123
 124         if $::hostname in [beethoven,duarte,spohr,stabile] {
 125                 include nfs-server
 126         }
 127
 128         if $::brokenhosts {
 129                 include hosts
 130         }
 131
 132         if $::portforwarder_user_exists {
 133                 include portforwarder
 134         }
 135
 136         include samhain
 137
 138         if $::hostname in [chopin,geo3,soler,wieck] {
 139                 include debian-org::radvd
 140         }
 141
 142         if ($::postgres84 or $::postgres90) {
 143                 include postgres
 144         }
 145
 146         if $::spamd {
 147                 munin::check { 'spamassassin': }
 148         }
 149
 150         if $::vsftpd {
 151                 package { 'logtail':
 152                         ensure => installed
 153                 }
 154                 munin::check { 'vsftpd': }
 155                 munin::check { 'ps_vsftpd':
 156                         script => 'ps_'
 157                 }
 158         }
 159 }