@ferm::rule { 'dsa-nagios-v4':
description => 'Allow nrpe from nagios master',
- rule => 'proto tcp mod state state (NEW) dport (5666) @subchain 'nagios' { saddr (\$HOST_NAGIOS_V4) ACCEPT; }',
+ rule => 'proto tcp mod state state (NEW) dport (5666) @subchain \'nagios\' { saddr ($HOST_NAGIOS_V4) ACCEPT; }',
notarule => true,
}
@ferm::rule { 'dsa-nagios-v6':
description => 'Allow nrpe from nagios master',
domain => 'ip6',
- rule => 'proto tcp mod state state (NEW) dport (5666) @subchain 'nagios' { saddr (\$HOST_NAGIOS_V6) ACCEPT; }',
+ rule => 'proto tcp mod state state (NEW) dport (5666) @subchain \'nagios\' { saddr ($HOST_NAGIOS_V6) ACCEPT; }',
notarule => true,
}
}
file { '/etc/nagios/':
ensure => directory,
+ recurse => remote,
+ source => 'puppet:///files/empty/',
require => Package['nagios-nrpe-server'],
notify => Service['nagios-nrpe-server'],
}
file { '/etc/nagios/nrpe.cfg':
content => template('nagios/nrpe.cfg.erb'),
+ notify => Service['nagios-nrpe-server'],
}
file { '/etc/nagios/nrpe.d':
ensure => directory,
- mode => '0755',
+ recurse => remote,
+ source => 'puppet:///files/empty/',
+ notify => Service['nagios-nrpe-server'],
}
file { '/etc/nagios/nrpe.d/debianorg.cfg':
content => template('nagios/inc-debian.org.erb'),
+ notify => Service['nagios-nrpe-server'],
}
file { '/etc/nagios/nrpe.d/nrpe_dsa.cfg':
source => 'puppet:///modules/nagios/dsa-nagios/generated/nrpe_dsa.cfg',
+ notify => Service['nagios-nrpe-server'],
}
file { '/etc/nagios/obsolete-packages-ignore':
source => 'puppet:///modules/nagios/common/obsolete-packages-ignore',