]> git.donarmstrong.com Git - dsa-puppet.git/blob - modules/dacs/manifests/init.pp
ensure persence of the log directory
[dsa-puppet.git] / modules / dacs / manifests / init.pp
1 class dacs {
2     package {
3         "dacs": ensure => installed;
4         "libapache2-mod-dacs": ensure => installed;
5     }
6
7     file {
8         "/var/log/dacs":
9              ensure  => directory,
10              owner   => www-data,
11              group   => root,
12              mode    => 750,
13              purge   => true
14              ;
15         "/etc/dacs/federations":
16              ensure  => directory,
17              owner   => root,
18              group   => www-data,
19              mode    => 750,
20              purge   => true
21              ;
22
23         "/etc/dacs/federations/debian.org/":
24              ensure  => directory,
25              owner   => root,
26              group   => www-data,
27              mode    => 750,
28              purge   => true
29              ;
30
31         "/etc/dacs/federations/debian.org/DEBIAN":
32              ensure  => directory,
33              owner   => root,
34              group   => www-data,
35              mode    => 750,
36              purge   => true
37              ;
38
39         "/etc/dacs/federations/debian.org/DEBIAN/acls":
40              ensure  => directory,
41              owner   => root,
42              group   => www-data,
43              mode    => 750,
44              purge   => true
45              ;
46         
47         "/etc/dacs/federations/debian.org/DEBIAN/groups":
48              ensure  => directory,
49              owner   => root,
50              group   => www-data,
51              mode    => 750,
52              purge   => true
53              ;
54
55         "/etc/dacs/federations/debian.org/DEBIAN/groups/DACS":
56              ensure  => directory,
57              owner   => root,
58              group   => www-data,
59              mode    => 750,
60              purge   => true
61              ;
62
63         "/etc/dacs/federations/site.conf":
64              source  => [ "puppet:///modules/dacs/per-host/$fqdn/site.conf",
65                           "puppet:///modules/dacs/common/site.conf" ],
66              mode    => 640,
67              owner   => root,
68              group   => www-data
69              ;
70
71         "/etc/dacs/federations/debian.org/DEBIAN/dacs.conf":
72              source  => [ "puppet:///modules/dacs/per-host/$fqdn/dacs.conf",
73                           "puppet:///modules/dacs/common/dacs.conf" ],
74              mode    => 640,
75              owner   => root,
76              group   => www-data
77              ;
78
79         "/etc/dacs/federations/debian.org/DEBIAN/acls/revocations":
80              source  => [ "puppet:///modules/dacs/per-host/$fqdn/revocations",
81                           "puppet:///modules/dacs/common/revocations" ],
82              mode    => 640,
83              owner   => root,
84              group   => www-data
85              ;
86
87         "/etc/dacs/federations/debian.org/DEBIAN/groups/DACS/jurisdictions.grp":
88              source  => [ "puppet:///modules/dacs/per-host/$fqdn/jurisdictions.grp",
89                           "puppet:///modules/dacs/common/jurisdictions.grp" ],
90              mode    => 640,
91              owner   => root,
92              group   => www-data
93              ;
94
95         "/etc/dacs/federations/debian.org/DEBIAN/acls/acl-noauth.0":
96              source  => [ "puppet:///modules/dacs/per-host/$fqdn/acl-noauth.0",
97                           "puppet:///modules/dacs/common/acl-noauth.0" ],
98              mode    => 640,
99              owner   => root,
100              group   => www-data,
101              notify  => Exec["dacsacl"]
102              ;
103
104         "/etc/dacs/federations/debian.org/DEBIAN/acls/acl-private.0":
105              source  => [ "puppet:///modules/dacs/per-host/$fqdn/acl-private.0",
106                           "puppet:///modules/dacs/common/acl-private.0" ],
107              mode    => 640,
108              owner   => root,
109              group   => www-data,
110              notify  => Exec["dacsacl"]
111              ;
112
113         "/etc/dacs/federations/debian.org/federation_keyfile":
114              source  => "puppet:///modules/dacs/private/debian.org_federation_keyfile",
115              mode    => 640,
116              owner   => root,
117              group   => www-data
118              ;
119
120         "/etc/dacs/federations/debian.org/DEBIAN/jurisdiction_keyfile":
121              source  => "puppet:///modules/dacs/private/DEBIAN_jurisdiction_keyfile",
122              mode    => 640,
123              owner   => root,
124              group   => www-data
125              ;
126
127     }
128
129     exec {
130         "dacsacl":
131             command     => "dacsacl -sc /etc/dacs/federations/site.conf -c /etc/dacs/federations/debian.org/DEBIAN/dacs.conf -uj DEBIAN && chown root:www-data /etc/dacs/federations/debian.org/DEBIAN/acls/INDEX",
132             refreshonly => true,
133     }
134
135
136 }
137 # vim:set et:
138 # vim:set sts=4 ts=4:
139 # vim:set shiftwidth=4: