modules/puppetmaster/manifests/init.pp

   1 class puppetmaster {
   2
   3         package { 'puppetmaster':
   4                 ensure => installed,
   5         }
   6         file { '/etc/puppet/hiera.yaml':
   7                 source => 'puppet:///modules/puppetmaster/hiera.yaml'
   8         }
   9         file { '/etc/puppet/puppetdb.conf':
  10                 source => 'puppet:///modules/puppetmaster/puppetdb.conf'
  11         }
  12
  13         #ferm::rule { 'dsa-puppet':
  14         #       description     => 'Allow puppet access',
  15         #       rule            => '&SERVICE_RANGE(tcp, 8140, $HOST_DEBIAN_V4)'
  16         #}
  17         #ferm::rule { 'dsa-puppet-v6':
  18         #       domain          => 'ip6',
  19         #       description     => 'Allow puppet access',
  20         #       rule            => '&SERVICE_RANGE(tcp, 8140, $HOST_DEBIAN_V6)'
  21         #}
  22
  23         file { '/srv/puppet.debian.org/puppet-facts':
  24                 ensure => directory
  25         }
  26         concat { '/srv/puppet.debian.org/puppet-facts/onionbalance-services.yaml':
  27         }
  28         Concat::Fragment <<| tag == "onionbalance-services.yaml" |>>
  29
  30         file { '/etc/cron.d/puppet-update-fastly-ips': ensure => absent, }
  31         file { '/etc/cron.d/update-fastly-ips': ensure => absent, }
  32         concat::fragment { 'dsa-puppet-stuff---fastly-ips':
  33                 target => '/etc/cron.d/dsa-puppet-stuff',
  34                 content  => @(EOF)
  35                         @daily  root    /usr/local/bin/update-fastly-ips /srv/puppet.debian.org/puppet-facts/fastly_ranges.yaml
  36                         | EOF
  37         }
  38         file { '/usr/local/bin/update-fastly-ips':
  39                 source => 'puppet:///modules/puppetmaster/update-fastly-ips.sh',
  40                 mode   => '0555',
  41         }
  42 }