modules/ntp/manifests/init.pp

   1 class ntp {
   2
   3         package { 'ntp':
   4                 ensure => installed
   5         }
   6
   7         service { 'ntp':
   8                 ensure  => running,
   9                 require => Package['ntp']
  10         }
  11
  12         @ferm::rule { 'dsa-ntp':
  13                 domain      => '(ip ip6)',
  14                 description => 'Allow ntp access',
  15                 rule        => '&SERVICE(udp, 123)'
  16         }
  17
  18         file { '/var/lib/ntp':
  19                 ensure  => directory,
  20                 owner   => ntp,
  21                 group   => ntp,
  22                 mode    => '0755',
  23                 require => Package['ntp']
  24         }
  25         file { '/etc/ntp.conf':
  26                 content => template('ntp/ntp.conf'),
  27                 notify  => Service['ntp'],
  28                 require => Package['ntp']
  29         }
  30         file { '/etc/ntp.keys.d':
  31                 ensure  => directory,
  32                 group   => ntp,
  33                 mode    => '0750',
  34                 notify  => Service['ntp'],
  35                 require => Package['ntp']
  36         }
  37
  38         if getfromhash($site::nodeinfo, 'timeserver') {
  39                 include ntp::timeserver
  40         } else {
  41                 include ntp::client
  42         }
  43 }