3 # This class installs ferm and sets up rules
10 # realize (i.e. enable) all @ferm::rule virtual resources
14 File { mode => '0400' }
23 # Remove instead of purge ulogd because it deletes log files on purge.
29 status => '/bin/true',
33 command => "service ferm reload",
38 $munin_ips = getfromhash($site::nodeinfo, 'misc', 'v4addrs')
39 .map |$addr| { "ip_${addr}" }
41 munin::check { $munin_ips: script => 'ip_', }
43 $munin6_ips = getfromhash($site::nodeinfo, 'misc', 'v6addrs')
44 .map |$addr| { "ip_${addr}" }
45 munin::ipv6check { $munin6_ips: }
49 notify => Exec['ferm reload'],
50 require => Package['ferm'],
53 file { '/etc/ferm/dsa.d':
59 source => 'puppet:///files/empty/',
61 file { '/etc/ferm/conf.d':
67 source => 'puppet:///files/empty/',
69 file { '/etc/default/ferm':
70 source => 'puppet:///modules/ferm/ferm.default',
71 require => Package['ferm'],
72 notify => Exec['ferm reload'],
75 file { '/etc/ferm/ferm.conf':
76 content => template('ferm/ferm.conf.erb'),
77 notify => Exec['ferm reload'],
79 file { '/etc/ferm/conf.d/00-init.conf':
80 content => template('ferm/00-init.conf.erb'),
81 notify => Exec['ferm reload'],
83 file { '/etc/ferm/conf.d/me.conf':
84 content => template('ferm/me.conf.erb'),
85 notify => Exec['ferm reload'],
87 file { '/etc/ferm/conf.d/defs.conf':
88 content => template('ferm/defs.conf.erb'),
89 notify => Exec['ferm reload'],
92 file { '/etc/ferm/conf.d/50-munin-interfaces.conf':
93 content => template('ferm/conf.d-munin-interfaces.conf.erb'),
94 notify => Exec['ferm reload'],
96 @ferm::rule { 'dsa-munin-interfaces-in':
98 description => 'munin accounting',
100 domain => '(ip ip6)',
101 rule => 'daddr ($MUNIN_IPS) NOP'
103 @ferm::rule { 'dsa-munin-interfaces-out':
105 description => 'munin accounting',
107 domain => '(ip ip6)',
108 rule => 'saddr ($MUNIN_IPS) NOP'
111 file { '/etc/ferm/dsa.d/010-base.conf':
112 content => template('ferm/dsa.d-010-base.conf.erb'),
113 notify => Exec['ferm reload'],
116 augeas { 'logrotate_ulogd2':
117 context => '/files/etc/logrotate.d/ulogd2',
119 'set rule/schedule daily',
120 'set rule/delaycompress delaycompress',
121 'set rule/rotate 10',
122 'set rule/ifempty notifempty',
125 file { '/etc/logrotate.d/ulogd':
128 file { '/etc/logrotate.d/ulogd.dpkg-bak':
131 file { '/etc/logrotate.d/ulogd.dpkg-dist':