3 package { 'puppetmaster':
6 file { '/etc/puppet/hiera.yaml':
7 source => 'puppet:///modules/puppetmaster/hiera.yaml'
9 file { '/etc/puppet/puppetdb.conf':
10 source => 'puppet:///modules/puppetmaster/puppetdb.conf'
13 @ferm::rule { 'dsa-puppet':
14 description => 'Allow puppet access',
15 rule => '&SERVICE_RANGE(tcp, 8140, $HOST_DEBIAN_V4)'
17 @ferm::rule { 'dsa-puppet-v6':
19 description => 'Allow puppet access',
20 rule => '&SERVICE_RANGE(tcp, 8140, $HOST_DEBIAN_V6)'
23 file { '/srv/puppet.debian.org/puppet-facts':
26 concat { '/srv/puppet.debian.org/puppet-facts/onionbalance-services.yaml':
28 Concat::Fragment <<| tag == "onionbalance-services.yaml" |>>
30 file { '/etc/cron.d/puppet-update-fastly-ips': ensure => absent, }
31 file { '/etc/cron.d/update-fastly-ips': ensure => absent, }
32 concat::fragment { 'dsa-puppet-stuff---fastly-ips':
33 target => '/etc/cron.d/dsa-puppet-stuff',
35 @daily root /usr/local/bin/update-fastly-ips /srv/puppet.debian.org/puppet-facts/fastly_ranges.yaml
38 file { '/usr/local/bin/update-fastly-ips':
39 source => 'puppet:///modules/puppetmaster/update-fastly-ips.sh',