X-Git-Url: https://git.adam-barratt.org.uk/?a=blobdiff_plain;f=manifests%2Fsite.pp;h=d19223be942d77c7179edf634b9f1dfeaa3784ff;hb=a28110e982ed24eb929e0942bc8291f8afeb5022;hp=4f4d14aa6f6d839d5e22c180e4f3b4039d134d9e;hpb=77852967490817e2946cb08ae2157427264fdeab;p=mirror%2Fdsa-puppet.git diff --git a/manifests/site.pp b/manifests/site.pp index 4f4d14aa6..d19223be9 100644 --- a/manifests/site.pp +++ b/manifests/site.pp @@ -14,70 +14,98 @@ Exec { } node default { + $localinfo = yamlinfo('*', "/etc/puppet/modules/debian-org/misc/local.yaml") + $nodeinfo = nodeinfo($fqdn, "/etc/puppet/modules/debian-org/misc/local.yaml") + $hoster = whohosts($nodeinfo, "/etc/puppet/modules/debian-org/misc/hoster.yaml") + $keyinfo = allnodeinfo("sshRSAHostKey", "ipHostNumber") + notice("hoster for ${fqdn} is ${hoster}") + + $mxinfo = allnodeinfo("mXRecord") + include munin-node include sudo + include ssh include debian-org include monit include apt-keys - - $nodeinfo = nodeinfo($fqdn, "/etc/puppet/modules/debian-org/misc/local.yaml") + include ntp include motd - include samhain + + case $hostname { + finzi,fano,fasch,field: { include kfreebsd } + } case $smartarraycontroller { "true": { include debian-proliant } - default: {} + } + case $kvmdomain { + "true": { package { acpid: ensure => installed } } + } + case $mptraid { + "true": { include "raidmpt" } } case $mta { "exim4": { case extractnodeinfo($nodeinfo, 'heavy_exim') { - "true": { include exim::mx } + true: { include exim::mx } default: { include exim } } } - default: {} } + case extractnodeinfo($nodeinfo, 'muninmaster') { + true: { include munin-node::master } + } - case $hostname { - spohr: { - include nagios::server - } - default: { - include nagios::client - } + case extractnodeinfo($nodeinfo, 'nagiosmaster') { + true: { include nagios::server } + default: { include nagios::client } } case $apache2 { - "true": { case $hostname { - carver,rore,draghi,tartini,samosa,duarte,piatti: { include apache2 } - default: {} - } } - default: {} + "true": { + case extractnodeinfo($nodeinfo, 'apache2_security_mirror') { + true: { include apache2::security_mirror } + default: { include apache2 } + } + } } - case $hostname { - ancina,arcadelt,argento,brahms,goedel,goetz,lafayette,malo,murphy,praetorius,puccini,paer: - { include buildd } - default: {} + case extractnodeinfo($nodeinfo, 'buildd') { + true: { include buildd } } -# maybe wait for rietz to be upgraded to lenny -# case $hostname { -# rietz,raff,klecker: -# { include named-secondary } -# default: {} -# } - -# case $hostname { -# geo1,geo2,geo3: -# { include geodns } -# default: {} -# } -} + case $hostname { + klecker,ravel,senfl,orff: { include named::secondary } + geo1,geo2,geo3: { include named::geodns } + bartok: { include named::recursor } + } + + case $hostname { + senfl: { include rsync } + } -node penalosa inherits default { - include hosts + case $hostname { + logtest01,geo1,geo2,geo3,bartok,senfl,beethoven,piatti: { include ferm } + } + case $hostname { + piatti: { + @ferm::rule { "dsa-udd-stunnel": + description => "port 8080 for udd stunnel", + rule => "proto tcp saddr ( 192.25.206.16 70.103.162.29 217.196.43.134 ) dport 8080 ACCEPT;" + } + } + } + case $brokenhosts { + "true": { include hosts } + } + case $hoster { + "ubcece", "darmstadt", "ftcollins", "grnet": { include resolv } + } + case $portforwarder_user_exists { + "true": { include portforwarder } + } + include samhain }