modules/puppetmaster/manifests/init.pp

   1 class puppetmaster {
   2
   3         package { 'puppetmaster':
   4                 ensure => installed,
   5         }
   6         file { '/etc/puppet/hiera.yaml':
   7                 source => 'puppet:///modules/puppetmaster/hiera.yaml'
   8         }
   9         file { '/etc/puppet/puppetdb.conf':
  10                 source => 'puppet:///modules/puppetmaster/puppetdb.conf'
  11         }
  12
  13         @ferm::rule { 'dsa-puppet':
  14                 description     => 'Allow puppet access',
  15                 rule            => '&SERVICE_RANGE(tcp, 8140, $HOST_DEBIAN_V4)'
  16         }
  17         @ferm::rule { 'dsa-puppet-v6':
  18                 domain          => 'ip6',
  19                 description     => 'Allow puppet access',
  20                 rule            => '&SERVICE_RANGE(tcp, 8140, $HOST_DEBIAN_V6)'
  21         }
  22
  23         file { '/srv/puppet.debian.org/puppet-facts':
  24                 ensure => directory
  25         }
  26         concat { '/srv/puppet.debian.org/puppet-facts/onionbalance-services.yaml':
  27         }
  28         Concat::Fragment <<| tag == "onionbalance-services.yaml" |>>
  29
  30         file { '/etc/cron.d/update-fastly-ips':
  31                 source => 'puppet:///modules/puppetmaster/update-fastly-ips.cron'
  32         }
  33         file { '/usr/local/bin/update-fastly-ips':
  34                 source => 'puppet:///modules/puppetmaster/update-fastly-ips.sh',
  35                 mode   => '0555',
  36         }
  37 }