X-Git-Url: https://git.adam-barratt.org.uk/?a=blobdiff_plain;f=modules%2Fferm%2Fmanifests%2Fconf.pp;fp=modules%2Fferm%2Fmanifests%2Fconf.pp;h=d7691947b38b5ca418a698f5645b71740ac4de8b;hb=76ca91bce24ecbcbcc4e62a37aa06fd0fb9f96c7;hp=0dffa773d9798bce293bf9f48e5c83ca6fd8819f;hpb=46cee04ab06b23ab6e9e4baba655cf470d10cfc4;p=mirror%2Fdsa-puppet.git

diff --git a/modules/ferm/manifests/conf.pp b/modules/ferm/manifests/conf.pp
index 0dffa773d..d7691947b 100644
--- a/modules/ferm/manifests/conf.pp
+++ b/modules/ferm/manifests/conf.pp
@@ -1,29 +1,41 @@
-define ferm::conf ($content=undef, $source=undef, $ensure=present) {
-
+#
+define ferm::conf (
+	$source=undef,
+	$content=undef,
+	$ensure=present,
+	$prio="xx-10",
+) {
 	include ferm
 
 	case $ensure {
-		present,absent: {}
-		default: { fail ( "Invald ensure `${ensure}' for ${name}" ) }
+		present: {
+			if ! ($source or $content) {
+				fail ( "No configuration found for ${name}" )
+			}
+		}
+		absent:  {}
+		default: { fail ( "Unknown ensure value: '$ensure'" ) }
 	}
 
 	if ($source and $content) {
 		fail ( "Can't define both source and content for ${name}" )
 	}
 
-	$fname = "/etc/ferm/conf.d/${name}.conf"
+	$fname = "/etc/ferm/conf.d/${prio}_${name}.conf"
 
-	if $source {
+	if $content {
 		file { $fname:
-			ensure => $ensure,
-			source => $source,
-			notify => Service['ferm']
+				ensure  => $ensure,
+				mode	=> '0400',
+				content => $content,
+				notify  => Service['ferm'],
 		}
-	} elsif $content {
+	} else {
 		file { $fname:
-			ensure  => $ensure,
-			content => $content,
-			notify => Service['ferm']
+				ensure  => $ensure,
+				mode	=> '0400',
+				source  => $source,
+				notify  => Service['ferm'],
 		}
 	}
 }