2 package { 'puppetmaster':
5 file { '/etc/puppet/puppetdb.conf':
6 source => 'puppet:///modules/puppetmaster/puppetdb.conf'
9 ferm::rule { 'dsa-puppet':
10 description => 'Allow puppet access',
12 rule => '&SERVICE_RANGE(tcp, 8140, $HOST_DEBIAN)',
15 file { '/srv/puppet.debian.org/puppet-facts':
18 concat { '/srv/puppet.debian.org/puppet-facts/onionbalance-services.yaml':
20 Concat::Fragment <<| tag == 'onionbalance-services.yaml' |>>
22 file { '/etc/cron.d/puppet-update-fastly-ips': ensure => absent, }
23 file { '/etc/cron.d/update-fastly-ips': ensure => absent, }
24 concat::fragment { 'puppet-crontab---fastly-ips':
25 target => '/etc/cron.d/puppet-crontab',
27 @daily root /usr/local/bin/update-fastly-ips /srv/puppet.debian.org/puppet-facts/fastly_ranges.yaml
30 file { '/usr/local/bin/update-fastly-ips':
31 source => 'puppet:///modules/puppetmaster/update-fastly-ips.sh',