Signed-off-by: Stephen Gran <steve@lobefin.net>
node default {
$localinfo = yamlinfo('*', "/etc/puppet/modules/debian-org/misc/local.yaml")
node default {
$localinfo = yamlinfo('*', "/etc/puppet/modules/debian-org/misc/local.yaml")
- $nodeinfo = nodeinfo($fqdn, "/etc/puppet/modules/debian-org/misc/local.yaml")
+ $nodeinfo = nodeinfo($::fqdn, "/etc/puppet/modules/debian-org/misc/local.yaml")
$allnodeinfo = allnodeinfo("sshRSAHostKey ipHostNumber", "purpose mXRecord physicalHost purpose")
$allnodeinfo = allnodeinfo("sshRSAHostKey ipHostNumber", "purpose mXRecord physicalHost purpose")
- notice( sprintf("hoster for %s is %s", $fqdn, getfromhash($nodeinfo, 'hoster', 'name') ) )
+ notice( sprintf("hoster for %s is %s", $::fqdn, getfromhash($nodeinfo, 'hoster', 'name') ) )
include munin-node
include syslog-ng
include munin-node
include syslog-ng
include ntp
include ntpdate
include ssl
include ntp
include ntpdate
include ssl
finzi,fano,fasch,field: { include kfreebsd }
}
finzi,fano,fasch,field: { include kfreebsd }
}
- case $smartarraycontroller {
- "true": { include debian-proliant }
- }
- case $kvmdomain {
- "true": {
- case $debarchitecture {
- kfreebsd-amd64,kfreebsd-i386: {
- }
- default: {
- package { acpid: ensure => installed }
- case $lsbdistcodename {
- 'lenny': { }
- default: { package { acpi-support-base: ensure => installed } }
- }
- }
- }
- }
+ if $::smartarraycontroller {
+ include debian-proliant
+ }
+
+ if $::productname == 'PowerEdge 2850' {
+ include megactl
- case $mptraid {
- "true": { include "raidmpt" }
+
+ if $::mptraid {
+ include raidmpt
- case $productname {
- "PowerEdge 2850": { include megactl }
+
+ if $::kvmdomain {
+ include acpi
- case $mta {
- "exim4": {
- case getfromhash($nodeinfo, 'heavy_exim') {
- true: { include exim::mx }
- default: { include exim }
- }
+ if $::mta == 'exim4' {
+ case getfromhash($nodeinfo, 'heavy_exim') {
+ true: { include exim::mx }
+ default: { include exim }
- case getfromhash($nodeinfo, 'puppetmaster') {
- true: { include puppetmaster }
+ if getfromhash($nodeinfo, 'puppetmaster') {
+ include puppetmaster
- case getfromhash($nodeinfo, 'muninmaster') {
- true: { include munin-node::master }
+ if getfromhash($nodeinfo, 'muninmaster') {
+ include munin-node::master
}
case getfromhash($nodeinfo, 'nagiosmaster') {
}
case getfromhash($nodeinfo, 'nagiosmaster') {
default: { include nagios::client }
}
default: { include nagios::client }
}
- case $apache2 {
- "true": {
- case getfromhash($nodeinfo, 'apache2_security_mirror') {
- true: { include apache2::security_mirror }
- }
- case getfromhash($nodeinfo, 'apache2_www_mirror') {
- true: { include apache2::www_mirror }
- }
- case getfromhash($nodeinfo, 'apache2_backports_mirror') {
- true: { include apache2::backports_mirror }
- }
- case getfromhash($nodeinfo, 'apache2_ftp-upcoming_mirror') {
- true: { include apache2::ftp-upcoming_mirror }
- }
- include apache2
+ if $::apache2 {
+ if getfromhash($nodeinfo, 'apache2_security_mirror') {
+ include apache2::security_mirror
+ }
+ if getfromhash($nodeinfo, 'apache2_www_mirror') {
+ include apache2::www_mirror
+ }
+ if getfromhash($nodeinfo, 'apache2_backports_mirror') {
+ include apache2::backports_mirror
+ if getfromhash($nodeinfo, 'apache2_ftp-upcoming_mirror') {
+ include apache2::ftp-upcoming_mirror
+ }
+ include apache2
- case $rsyncd {
- "true": { include rsyncd-log }
+ if $::rsyncd {
+ include rsyncd-log
- case getfromhash($nodeinfo, 'buildd') {
- true: {
- include buildd
- }
+ if getfromhash($nodeinfo, 'buildd') {
+ include buildd
ravel,senfl,orff,draghi,diamond: { include named::authoritative }
ravel,senfl,orff,draghi,diamond: { include named::authoritative }
- geo1,geo2,geo3: { include named::geodns }
- liszt: { include named::recursor }
+ geo1,geo2,geo3: { include named::geodns }
+ liszt: { include named::recursor }
franck,master,lobos,samosa,spohr,widor: { include unbound }
}
franck,master,lobos,samosa,spohr,widor: { include unbound }
}
- case $lsbdistcodename {
- 'lenny': { }
- default: { include unbound }
+
+ if $::lsbdistcodename != 'lenny' {
+ include unbound
- case $kernel {
- Linux: {
- include ferm
- include ferm::per-host
- case $rsyncd {
- "true": { include ferm::rsync }
- }
- }
+ if $::kernel == 'Linux' {
+ include ferm
+ include ferm::per-host
diabelli,nono,spohr: { include dacs }
}
diabelli,nono,spohr: { include dacs }
}
beethoven,duarte,spohr,stabile: {
include nfs-server
}
}
beethoven,duarte,spohr,stabile: {
include nfs-server
}
}
- case $brokenhosts {
- "true": { include hosts }
+ if $::brokenhosts {
+ include hosts
- case $portforwarder_user_exists {
- "true": { include portforwarder }
+
+ if $::portforwarder_user_exists {
+ include portforwarder
byrd,schuetz,tchaikovsky,draghi,quantz,lamb,locke,rautavaara,rietz: {
include krb
}
}
byrd,schuetz,tchaikovsky,draghi,quantz,lamb,locke,rautavaara,rietz: {
include krb
}
}
chopin,geo3,soler,wieck: {
include debian-radvd
}
}
chopin,geo3,soler,wieck: {
include debian-radvd
}
}
- case $kernel {
- Linux: { include entropykey }
+ if $::kernel == 'Linux' {
+ include entropykey
if $::postgres84 == "true" {
include postgres
} elsif $::postgres90 == "true" {
if $::postgres84 == "true" {
include postgres
} elsif $::postgres90 == "true" {
--- /dev/null
+class acpi {
+ if $debarchitecture not in ['kfreebsd-amd64', kfreebsd-i386'] {
+ package {
+ acpid: ensure => installed
+ }
+
+ if $lsbdistcodename != 'lenny' {
+ package {
+ acpi-support-base: ensure => installed
+ }
+ }
+ }
+}
-class apache2::backports_mirror inherits apache2 {
+class apache2::backports_mirror {
+ include apache2
file {
"/etc/apache2/sites-available/backports.debian.org":
source => [ "puppet:///modules/apache2/per-host/$fqdn/etc/apache2/sites-available/backports.debian.org",
file {
"/etc/apache2/sites-available/backports.debian.org":
source => [ "puppet:///modules/apache2/per-host/$fqdn/etc/apache2/sites-available/backports.debian.org",
-class apache2::ftp-upcoming_mirror inherits apache2 {
+class apache2::ftp-upcoming_mirror {
+ include apache2
file {
"/etc/apache2/sites-available/ftp-upcoming.debian.org":
source => [ "puppet:///modules/apache2/per-host/$fqdn/etc/apache2/sites-available/ftp-upcoming.debian.org",
file {
"/etc/apache2/sites-available/ftp-upcoming.debian.org":
source => [ "puppet:///modules/apache2/per-host/$fqdn/etc/apache2/sites-available/ftp-upcoming.debian.org",
-class apache2::security_mirror inherits apache2 {
+class apache2::security_mirror {
+ include apache2
file {
"/etc/apache2/sites-available/security.debian.org":
source => [ "puppet:///modules/apache2/per-host/$fqdn/etc/apache2/sites-available/security.debian.org",
file {
"/etc/apache2/sites-available/security.debian.org":
source => [ "puppet:///modules/apache2/per-host/$fqdn/etc/apache2/sites-available/security.debian.org",
-class apache2::www_mirror inherits apache2 {
+class apache2::www_mirror {
+ include apache2
file {
"/etc/apache2/sites-available/www.debian.org":
source => [ "puppet:///modules/apache2/per-host/$fqdn/etc/apache2/sites-available/www.debian.org",
file {
"/etc/apache2/sites-available/www.debian.org":
source => [ "puppet:///modules/apache2/per-host/$fqdn/etc/apache2/sites-available/www.debian.org",
ancina,zandonai,zelenka: {
include ferm::zivit
}
}
ancina,zandonai,zelenka: {
include ferm::zivit
}
}
chopin,franck,gluck,kassia,klecker,lobos,morricone,ravel,ries,rietz,saens,schein,santoro,steffani,valente,villa,wieck,stabile,bizet: {
include ferm::ftp
}
}
chopin,franck,gluck,kassia,klecker,lobos,morricone,ravel,ries,rietz,saens,schein,santoro,steffani,valente,villa,wieck,stabile,bizet: {
include ferm::ftp
}
}
piatti,samosa: {
@ferm::rule { "dsa-udd-stunnel":
description => "port 8080 for udd stunnel",
piatti,samosa: {
@ferm::rule { "dsa-udd-stunnel":
description => "port 8080 for udd stunnel",
}
# redirect snapshot into varnish
}
# redirect snapshot into varnish
sibelius: {
@ferm::rule { "dsa-snapshot-varnish":
rule => '&SERVICE(tcp, 6081)',
sibelius: {
@ferm::rule { "dsa-snapshot-varnish":
rule => '&SERVICE(tcp, 6081)',
+
+ if $::rsyncd {
+ include ferm::rsync
+ }