ssh setup for weblog sync

[mirror/dsa-puppet.git] / modules / munin / manifests / init.pp

diff --git a/modules/munin/manifests/init.pp b/modules/munin/manifests/init.pp
index b4a5398..714ca93 100644 (file)
--- a/modules/munin/manifests/init.pp
+++ b/modules/munin/manifests/init.pp
@@ -55,13 +55,13 @@ class munin {
                notify  => Service['munin-node'],
        }
 
-       @ferm::rule { 'dsa-munin-v4':
+       ferm::rule { 'dsa-munin-v4':
                description     => 'Allow munin from munin master',
                rule            => 'proto tcp mod state state (NEW) dport (munin) @subchain \'munin\' { saddr ($HOST_MUNIN_V4 $HOST_NAGIOS_V4) ACCEPT; }',
                notarule        => true,
        }
 
-       @ferm::rule { 'dsa-munin-v6':
+       ferm::rule { 'dsa-munin-v6':
                description     => 'Allow munin from munin master',
                domain          => 'ip6',
                rule            => 'proto tcp mod state state (NEW) dport (munin) @subchain \'munin\' { saddr ($HOST_MUNIN_V6 $HOST_NAGIOS_V6) ACCEPT; }',
@@ -85,6 +85,16 @@ class munin {
        package { 'munin-async':
                ensure => installed
        }
+       service { 'munin-async':
+               ensure  => running,
+               require => Package['munin-async'],
+       }
+       dsa_systemd::override { 'munin-async':
+               content  => @("EOF"),
+                       [Service]
+                       RestartSec=10
+                       | EOF
+       }
        file { '/etc/ssh/userkeys/munin-async':
                source => 'puppet:///modules/munin/munin-async-authkeys',
        }