modules/nfs-server/manifests/init.pp

   1 class nfs-server {
   2
   3         package { [
   4                         'nfs-common',
   5                         'nfs-kernel-server'
   6                 ]:
   7                         ensure => installed
   8         }
   9
  10         service { 'nfs-common':
  11                 hasstatus   => false,
  12                 status      => '/bin/true',
  13                 refreshonly => true,
  14         }
  15         service { 'nfs-kernel-server':
  16                 hasstatus   => false,
  17                 status      => '/bin/true',
  18                 refreshonly => true,
  19         }
  20
  21         @ferm::rule { 'dsa-portmap':
  22                 domain      => '(ip ip6)',
  23                 description => 'Allow portmap access',
  24                 rule        => '&TCP_UDP_SERVICE(111)'
  25         }
  26         @ferm::rule { 'dsa-nfs':
  27                 domain      => '(ip ip6)',
  28                 description => 'Allow nfsd access',
  29                 rule        => '&TCP_UDP_SERVICE(2049)'
  30         }
  31         @ferm::rule { 'dsa-status':
  32                 domain      => '(ip ip6)',
  33                 description => 'Allow statd access',
  34                 rule        => '&TCP_UDP_SERVICE(10000)'
  35         }
  36         @ferm::rule { 'dsa-mountd':
  37                 domain      => '(ip ip6)',
  38                 description => 'Allow mountd access',
  39                 rule        => '&TCP_UDP_SERVICE(10002)'
  40         }
  41         @ferm::rule { 'dsa-lockd':
  42                 domain      => '(ip ip6)',
  43                 description => 'Allow lockd access',
  44                 rule        => '&TCP_UDP_SERVICE(10003)'
  45         }
  46
  47         file { '/etc/default/nfs-common':
  48                 source  => 'puppet:///modules/nfs-server/nfs-common.default',
  49                 require => Package['nfs-common'],
  50                 notify  => Service['nfs-common'],
  51         }
  52         file { '/etc/default/nfs-kernel-server':
  53                 source  => 'puppet:///modules/nfs-server/nfs-kernel-server.default',
  54                 require => Package['nfs-kernel-server'],
  55                 notify  => Service['nfs-kernel-server'],
  56         }
  57         file { '/etc/modprobe.d/lockd.local':
  58                 source => 'puppet:///modules/nfs-server/lockd.local.modprobe'
  59         }
  60 }