X-Git-Url: https://git.adam-barratt.org.uk/?a=blobdiff_plain;f=manifests%2Fsite.pp;h=d19223be942d77c7179edf634b9f1dfeaa3784ff;hb=a28110e982ed24eb929e0942bc8291f8afeb5022;hp=5ffb7a95806ad6309bd071b21f5dc9cdec04dd17;hpb=a3afca653f670c4037f487e7ddc870fc6877545b;p=mirror%2Fdsa-puppet.git diff --git a/manifests/site.pp b/manifests/site.pp index 5ffb7a958..d19223be9 100644 --- a/manifests/site.pp +++ b/manifests/site.pp @@ -17,6 +17,7 @@ node default { $localinfo = yamlinfo('*', "/etc/puppet/modules/debian-org/misc/local.yaml") $nodeinfo = nodeinfo($fqdn, "/etc/puppet/modules/debian-org/misc/local.yaml") $hoster = whohosts($nodeinfo, "/etc/puppet/modules/debian-org/misc/hoster.yaml") + $keyinfo = allnodeinfo("sshRSAHostKey", "ipHostNumber") notice("hoster for ${fqdn} is ${hoster}") $mxinfo = allnodeinfo("mXRecord") @@ -30,7 +31,10 @@ node default { include ntp include motd - include samhain + + case $hostname { + finzi,fano,fasch,field: { include kfreebsd } + } case $smartarraycontroller { "true": { include debian-proliant } @@ -38,50 +42,70 @@ node default { case $kvmdomain { "true": { package { acpid: ensure => installed } } } + case $mptraid { + "true": { include "raidmpt" } + } case $mta { "exim4": { case extractnodeinfo($nodeinfo, 'heavy_exim') { - "true": { include exim::mx } + true: { include exim::mx } default: { include exim } } } } - case $hostname { - spohr: { - include nagios::server - } - default: { - include nagios::client - } + case extractnodeinfo($nodeinfo, 'muninmaster') { + true: { include munin-node::master } + } + + case extractnodeinfo($nodeinfo, 'nagiosmaster') { + true: { include nagios::server } + default: { include nagios::client } } case $apache2 { "true": { case extractnodeinfo($nodeinfo, 'apache2_security_mirror') { - "true": { include apache2::security_mirror } + true: { include apache2::security_mirror } default: { include apache2 } } } } case extractnodeinfo($nodeinfo, 'buildd') { - "true": { include buildd } + true: { include buildd } } -# maybe wait for rietz to be upgraded to lenny case $hostname { - rietz,raff,klecker: { include named::secondary } + klecker,ravel,senfl,orff: { include named::secondary } + geo1,geo2,geo3: { include named::geodns } + bartok: { include named::recursor } + } + + case $hostname { + senfl: { include rsync } } case $hostname { - geo1,geo2,geo3: { include named::geodns } + logtest01,geo1,geo2,geo3,bartok,senfl,beethoven,piatti: { include ferm } + } + case $hostname { + piatti: { + @ferm::rule { "dsa-udd-stunnel": + description => "port 8080 for udd stunnel", + rule => "proto tcp saddr ( 192.25.206.16 70.103.162.29 217.196.43.134 ) dport 8080 ACCEPT;" + } + } } case $brokenhosts { "true": { include hosts } } case $hoster { - "ubcece", "darmstadt": { include resolv } + "ubcece", "darmstadt", "ftcollins", "grnet": { include resolv } } + case $portforwarder_user_exists { + "true": { include portforwarder } + } + include samhain }