2 # realize (i.e. enable) all @ferm::rule virtual resources
5 File { mode => '0400' }
16 status => '/bin/true',
19 $munin_ips = split(regsubst($v4ips, '([^,]+)', 'ip_\1', 'G'), ',')
21 munin::check { $munin_ips: script => 'ip_', }
24 $munin6_ips = split(regsubst($v6ips, '([^,]+)', 'ip_\1', 'G'), ',')
25 munin::ipv6check { $munin6_ips: }
28 # get rid of old stuff
29 $munin6_ip6s = split(regsubst($v6ips, '([^,]+)', 'ip6_\1', 'G'), ',')
30 munin::check { $munin6_ip6s: ensure => absent }
34 notify => Service['ferm'],
35 require => Package['ferm'],
38 file { '/etc/ferm/dsa.d':
44 source => 'puppet:///files/empty/',
46 file { '/etc/ferm/conf.d':
50 file { '/etc/default/ferm':
51 source => 'puppet:///modules/ferm/ferm.default',
52 require => Package['ferm'],
53 notify => Service['ferm'],
56 file { '/etc/ferm/ferm.conf':
57 source => 'puppet:///modules/ferm/ferm.conf',
58 notify => Service['ferm'],
60 file { '/etc/ferm/conf.d/me.conf':
61 content => template('ferm/me.conf.erb'),
62 notify => Service['ferm'],
64 file { '/etc/ferm/conf.d/defs.conf':
65 content => template('ferm/defs.conf.erb'),
66 notify => Service['ferm'],
68 file { '/etc/ferm/conf.d/interfaces.conf':
69 content => template('ferm/interfaces.conf.erb'),
70 notify => Service['ferm'],
72 file { '/etc/logrotate.d/ulogd':
73 source => 'puppet:///modules/ferm/logrotate-ulogd',
75 require => Package['debian.org'],
78 if getfromhash($site::nodeinfo, 'buildd') {
79 file { '/etc/ferm/conf.d/load_ftp_conntrack.conf':
80 source => 'puppet:///modules/ferm/conntrack_ftp.conf',
81 notify => Service['ferm'],