X-Git-Url: https://git.adam-barratt.org.uk/?a=blobdiff_plain;f=modules%2Fferm%2Fmanifests%2Finit.pp;h=6d2d0c62d946b222b0875c044139ca20a0b28c4d;hb=d9ded7c2b82442c2995428d42bb2f65e759d1851;hp=62ad57376daea0c62ec60600c8a67e2f89127fbf;hpb=61b1f29e849df28f2892efc5f98318611e99eeeb;p=mirror%2Fdsa-puppet.git diff --git a/modules/ferm/manifests/init.pp b/modules/ferm/manifests/init.pp index 62ad57376..6d2d0c62d 100644 --- a/modules/ferm/manifests/init.pp +++ b/modules/ferm/manifests/init.pp @@ -9,6 +9,7 @@ class ferm { # realize (i.e. enable) all @ferm::rule virtual resources Ferm::Rule <| |> + Ferm::Conf <| |> File { mode => '0400' } @@ -24,17 +25,17 @@ class ferm { status => '/bin/true', } - $munin_ips = split(regsubst($v4ips, '([^,]+)', 'ip_\1', 'G'), ',') + $munin_ips = split(regsubst($::v4ips, '([^,]+)', 'ip_\1', 'G'), ',') munin::check { $munin_ips: script => 'ip_', } if $v6ips { - $munin6_ips = split(regsubst($v6ips, '([^,]+)', 'ip_\1', 'G'), ',') + $munin6_ips = split(regsubst($::v6ips, '([^,]+)', 'ip_\1', 'G'), ',') munin::ipv6check { $munin6_ips: } } # get rid of old stuff - $munin6_ip6s = split(regsubst($v6ips, '([^,]+)', 'ip6_\1', 'G'), ',') + $munin6_ip6s = split(regsubst($::v6ips, '([^,]+)', 'ip6_\1', 'G'), ',') munin::check { $munin6_ip6s: ensure => absent } file { '/etc/ferm': @@ -54,6 +55,10 @@ class ferm { file { '/etc/ferm/conf.d': ensure => directory, mode => '0555', + purge => true, + force => true, + recurse => true, + source => 'puppet:///files/empty/', } file { '/etc/default/ferm': source => 'puppet:///modules/ferm/ferm.default', @@ -83,11 +88,4 @@ class ferm { require => Package['debian.org'], } - if getfromhash($site::nodeinfo, 'buildd') { - file { '/etc/ferm/conf.d/load_ftp_conntrack.conf': - source => 'puppet:///modules/ferm/conntrack_ftp.conf', - notify => Service['ferm'], - } - } - }