]> git.donarmstrong.com Git - dsa-puppet.git/blob - modules/dacs/manifests/init.pp
aaad0c4cf26f34b459041730b4988660e0a965f9
[dsa-puppet.git] / modules / dacs / manifests / init.pp
1 class dacs {
2     package {
3         "dacs": ensure => installed;
4         "libapache2-mod-dacs": ensure => installed;
5     }
6
7     file {
8         "/etc/dacs/federations":
9              ensure  => directory,
10              owner   => root,
11              group   => www-data,
12              mode    => 750,
13              purge   => true
14              ;
15
16         "/etc/dacs/federations/debian.org/":
17              ensure  => directory,
18              owner   => root,
19              group   => www-data,
20              mode    => 750,
21              purge   => true
22              ;
23
24         "/etc/dacs/federations/debian.org/DEBIAN":
25              ensure  => directory,
26              owner   => root,
27              group   => www-data,
28              mode    => 750,
29              purge   => true
30              ;
31
32         "/etc/dacs/federations/debian.org/DEBIAN/acls":
33              ensure  => directory,
34              owner   => root,
35              group   => www-data,
36              mode    => 750,
37              purge   => true
38              ;
39         
40         "/etc/dacs/federations/debian.org/DEBIAN/groups":
41              ensure  => directory,
42              owner   => root,
43              group   => www-data,
44              mode    => 750,
45              purge   => true
46              ;
47
48         "/etc/dacs/federations/debian.org/DEBIAN/groups/DACS":
49              ensure  => directory,
50              owner   => root,
51              group   => www-data,
52              mode    => 750,
53              purge   => true
54              ;
55
56         "/etc/dacs/federations/site.conf":
57              source  => [ "puppet:///modules/dacs/per-host/$fqdn/site.conf",
58                           "puppet:///modules/dacs/common/site.conf" ],
59              mode    => 640,
60              owner   => root,
61              group   => www-data
62              ;
63
64         "/etc/dacs/federations/debian.org/DEBIAN/dacs.conf":
65              source  => [ "puppet:///modules/dacs/per-host/$fqdn/dacs.conf",
66                           "puppet:///modules/dacs/common/dacs.conf" ],
67              mode    => 640,
68              owner   => root,
69              group   => www-data
70              ;
71
72         "/etc/dacs/federations/debian.org/DEBIAN/acls/revocations":
73              source  => [ "puppet:///modules/dacs/per-host/$fqdn/revocations",
74                           "puppet:///modules/dacs/common/revocations" ],
75              mode    => 640,
76              owner   => root,
77              group   => www-data
78              ;
79
80         "/etc/dacs/federations/debian.org/DEBIAN/groups/DACS/jurisdictions.grp":
81              source  => [ "puppet:///modules/dacs/per-host/$fqdn/jurisdictions.grp",
82                           "puppet:///modules/dacs/common/jurisdictions.grp" ],
83              mode    => 640,
84              owner   => root,
85              group   => www-data
86              ;
87
88         "/etc/dacs/federations/debian.org/DEBIAN/acls/acl-noauth.0":
89              source  => [ "puppet:///modules/dacs/per-host/$fqdn/acl-noauth.0",
90                           "puppet:///modules/dacs/common/acl-noauth.0" ],
91              mode    => 640,
92              owner   => root,
93              group   => www-data,
94              notify  => Exec["dacsacl"]
95              ;
96
97         "/etc/dacs/federations/debian.org/DEBIAN/acls/acl-private.0":
98              source  => [ "puppet:///modules/dacs/per-host/$fqdn/acl-private.0",
99                           "puppet:///modules/dacs/common/acl-private.0" ],
100              mode    => 640,
101              owner   => root,
102              group   => www-data,
103              notify  => Exec["dacsacl"]
104              ;
105
106         "/etc/dacs/federations/debian.org/federation_keyfile":
107              source  => "puppet:///modules/dacs/private/debian.org_federation_keyfile",
108              mode    => 640,
109              owner   => root,
110              group   => www-data
111              ;
112
113         "/etc/dacs/federations/debian.org/DEBIAN/jurisdiction_keyfile":
114              source  => "puppet:///modules/dacs/private/DEBIAN_jurisdiction_keyfile",
115              mode    => 640,
116              owner   => root,
117              group   => www-data
118              ;
119
120     }
121
122     exec {
123         "dacsacl":
124             command     => "dacsacl -sc /etc/dacs/federations/site.conf -c /etc/dacs/federations/debian.org/DEBIAN/dacs.conf -uj DEBIAN && chown root:www-data /etc/dacs/federations/debian.org/DEBIAN/acls/INDEX",
125             refreshonly => true,
126     }
127
128
129 }
130 # vim:set et:
131 # vim:set sts=4 ts=4:
132 # vim:set shiftwidth=4: