X-Git-Url: https://git.adam-barratt.org.uk/?a=blobdiff_plain;f=manifests%2Fsite.pp;h=bcf57b835e69df84a395ec28da8a6ef2c36946ee;hb=7aada4511d012b71f8378d2b5c0f35dc7a2a6dea;hp=57a38ab780cddafdeeb949e21cafd0d85aa3af1c;hpb=e1791ee946f49fc43d9988aef2fab290f2269186;p=mirror%2Fdsa-puppet.git diff --git a/manifests/site.pp b/manifests/site.pp index 57a38ab78..bcf57b835 100644 --- a/manifests/site.pp +++ b/manifests/site.pp @@ -77,29 +77,24 @@ node default { case extractnodeinfo($nodeinfo, 'buildd') { 'true': { include buildd - case $kernel { - Linux: { - include ferm - } - } } } case $hostname { klecker,ravel,senfl,orff: { include named::secondary } geo1,geo2,geo3: { include named::geodns } - bartok,schein,steffani,ries,franck: { include named::recursor } + bartok,schein,steffani,ries,franck,liszt,master: { include named::recursor } } case $hostname { - ries,franck,powell,logtest01,geo1,geo2,geo3,bartok,senfl,beethoven,piatti,saens,villa,lobos,raff,gluck,schein,wieck,steffani,ball,handel,tchaikovsky,heininen,nielsen,kokkonen,kaufmann: { include ferm } - } - - case $hostname { - agricola,albeniz,gabrielli,merulo,paer,pergolesi,pescetti,smetana,sperger,zee,zelenka: { include ferm } - } - case $hostname { - busoni,englund,orff,duarte,grieg,soler,krenek,lindberg,morricone,respighi,scelsi,valente,vitry,vivaldi,wolkenstein,rietz,unger: { include ferm } + bellini,cilea,merikanto,petterson,sibelius: {} + default: { + case $kernel { + Linux: { + include ferm + } + } + } } case $hostname { @@ -130,7 +125,7 @@ node default { rule => "&SERVICE(tcp, 873)" } } - saens,villa,lobos,raff,gluck,schein,wieck,steffani,ries,rietz,franck,morricone,valente: { + saens,villa,lobos,raff,gluck,schein,wieck,steffani,ries,rietz,franck,morricone,valente,klecker: { @ferm::rule { "dsa-ftp": domain => "(ip ip6)", description => "Allow ftp access", @@ -197,6 +192,13 @@ node default { rule => "&SERVICE(tcp, 873)" } } + liszt: { + @ferm::rule { "smtp": + domain => "(ip ip6)", + description => "Allow smtp access", + rule => "&SERVICE(tcp, 25)" + } + } } case $brokenhosts { "true": { include hosts }