X-Git-Url: https://git.adam-barratt.org.uk/?a=blobdiff_plain;f=modules%2Fferm%2Fmanifests%2Finit.pp;h=6d2d0c62d946b222b0875c044139ca20a0b28c4d;hb=2ee825a91909505b0dcca7d2392207e3bf19b9a8;hp=a977e989953b773a933a43a5864fc46f5883bbb4;hpb=59963405a47cc9a41af273aff5cac242af17a018;p=mirror%2Fdsa-puppet.git diff --git a/modules/ferm/manifests/init.pp b/modules/ferm/manifests/init.pp index a977e9899..6d2d0c62d 100644 --- a/modules/ferm/manifests/init.pp +++ b/modules/ferm/manifests/init.pp @@ -9,6 +9,7 @@ class ferm { # realize (i.e. enable) all @ferm::rule virtual resources Ferm::Rule <| |> + Ferm::Conf <| |> File { mode => '0400' } @@ -24,17 +25,17 @@ class ferm { status => '/bin/true', } - $munin_ips = split(regsubst($v4ips, '([^,]+)', 'ip_\1', 'G'), ',') + $munin_ips = split(regsubst($::v4ips, '([^,]+)', 'ip_\1', 'G'), ',') munin::check { $munin_ips: script => 'ip_', } if $v6ips { - $munin6_ips = split(regsubst($v6ips, '([^,]+)', 'ip_\1', 'G'), ',') + $munin6_ips = split(regsubst($::v6ips, '([^,]+)', 'ip_\1', 'G'), ',') munin::ipv6check { $munin6_ips: } } # get rid of old stuff - $munin6_ip6s = split(regsubst($v6ips, '([^,]+)', 'ip6_\1', 'G'), ',') + $munin6_ip6s = split(regsubst($::v6ips, '([^,]+)', 'ip6_\1', 'G'), ',') munin::check { $munin6_ip6s: ensure => absent } file { '/etc/ferm': @@ -54,6 +55,10 @@ class ferm { file { '/etc/ferm/conf.d': ensure => directory, mode => '0555', + purge => true, + force => true, + recurse => true, + source => 'puppet:///files/empty/', } file { '/etc/default/ferm': source => 'puppet:///modules/ferm/ferm.default',