]> git.donarmstrong.com Git - dsa-puppet.git/blob - modules/vsftpd/manifests/init.pp
add some munin magic
[dsa-puppet.git] / modules / vsftpd / manifests / init.pp
1 class vsftpd {
2
3         package { 'vsftpd':
4                 ensure => installed
5         }
6         package { 'logtail':
7                 ensure => installed
8         }
9
10         service { 'vsftpd':
11                 ensure  => stopped,
12                 require => Package['vsftpd']
13         }
14
15         file { '/etc/vsftpd.conf':
16                 content => "listen=NO\n",
17                 require => Package['vsftpd'],
18                 notify  => Service['vsftpd']
19         }
20
21         munin::check { "vsftpd-${name}":
22                 ensure => absent
23         }
24         munin::check { 'ps_vsftpd':
25                 script => 'ps_'
26         }
27
28         @ferm::rule { 'dsa-ftp':
29                 domain      => '(ip ip6)',
30                 description => 'Allow ftp access',
31                 rule        => '&SERVICE(tcp, 21)',
32         }
33
34         file { '/var/log/ftp':
35                 ensure => directory,
36                 mode   => '0755'
37         }
38         file { '/etc/logrotate.d/vsftpd':
39                 source  => 'puppet:///modules/vsftpd/logrotate.conf',
40                 require => [
41                         Package['vsftpd'],
42                         Package['debian.org']
43                 ]
44         }
45
46 }