]> git.donarmstrong.com Git - dsa-puppet.git/blob - modules/vsftpd/manifests/init.pp
s/-/./
[dsa-puppet.git] / modules / vsftpd / manifests / init.pp
1 class vsftpd {
2
3         package { 'vsftpd':
4                 ensure => installed
5         }
6         package { 'logtail':
7                 ensure => installed
8         }
9
10         service { 'vsftpd':
11                 ensure  => stopped,
12                 require => Package['vsftpd']
13         }
14
15         file { '/etc/vsftpd.conf':
16                 content => "listen=NO\n",
17                 require => Package['vsftpd'],
18                 notify  => Service['vsftpd']
19         }
20
21         munin::check { 'vsftpd': }
22         munin::check { 'ps_vsftpd':
23                 script => 'ps_'
24         }
25
26         @ferm::rule { 'dsa-ftp':
27                 domain      => '(ip ip6)',
28                 description => 'Allow ftp access',
29                 rule        => '&SERVICE(tcp, 21)',
30         }
31
32         file { '/var/log/ftp':
33                 ensure => directory,
34                 mode   => '0755'
35         }
36         file { '/etc/logrotate.d/vsftpd':
37                 source  => 'puppet:///modules/vsftpd/logrotate.conf',
38                 require => [
39                         Package['vsftpd'],
40                         Package['debian.org']
41                 ]
42         }
43
44 }