X-Git-Url: https://git.adam-barratt.org.uk/?a=blobdiff_plain;f=modules%2Fferm%2Fmanifests%2Finit.pp;h=904d83a9a21bc261c8b99345866fc66f87c1dedd;hb=97c21cd3ff0b45bdb4bdb92e4054231a7e845328;hp=bb9e81b153b477aaa4fefbcc56d1f92a38b07511;hpb=a9a817d4b2bfcf600d061ad707010af425b30711;p=mirror%2Fdsa-puppet.git diff --git a/modules/ferm/manifests/init.pp b/modules/ferm/manifests/init.pp index bb9e81b15..904d83a9a 100644 --- a/modules/ferm/manifests/init.pp +++ b/modules/ferm/manifests/init.pp @@ -1,3 +1,11 @@ +# = Class: ferm +# +# This class installs ferm and sets up rules +# +# == Sample Usage: +# +# include ferm +# class ferm { # realize (i.e. enable) all @ferm::rule virtual resources Ferm::Rule <| |> @@ -16,17 +24,17 @@ class ferm { status => '/bin/true', } - $munin_ips = split(regsubst($v4ips, '([^,]+)', 'ip_\1', 'G'), ',') + $munin_ips = split(regsubst($::v4ips, '([^,]+)', 'ip_\1', 'G'), ',') munin::check { $munin_ips: script => 'ip_', } if $v6ips { - $munin6_ips = split(regsubst($v6ips, '([^,]+)', 'ip_\1', 'G'), ',') + $munin6_ips = split(regsubst($::v6ips, '([^,]+)', 'ip_\1', 'G'), ',') munin::ipv6check { $munin6_ips: } } # get rid of old stuff - $munin6_ip6s = split(regsubst($v6ips, '([^,]+)', 'ip6_\1', 'G'), ',') + $munin6_ip6s = split(regsubst($::v6ips, '([^,]+)', 'ip6_\1', 'G'), ',') munin::check { $munin6_ip6s: ensure => absent } file { '/etc/ferm': @@ -46,6 +54,10 @@ class ferm { file { '/etc/ferm/conf.d': ensure => directory, mode => '0555', + purge => true, + force => true, + recurse => true, + source => 'puppet:///files/empty/', } file { '/etc/default/ferm': source => 'puppet:///modules/ferm/ferm.default', @@ -55,15 +67,19 @@ class ferm { } file { '/etc/ferm/ferm.conf': source => 'puppet:///modules/ferm/ferm.conf', + notify => Service['ferm'], } file { '/etc/ferm/conf.d/me.conf': content => template('ferm/me.conf.erb'), + notify => Service['ferm'], } file { '/etc/ferm/conf.d/defs.conf': content => template('ferm/defs.conf.erb'), + notify => Service['ferm'], } file { '/etc/ferm/conf.d/interfaces.conf': content => template('ferm/interfaces.conf.erb'), + notify => Service['ferm'], } file { '/etc/logrotate.d/ulogd': source => 'puppet:///modules/ferm/logrotate-ulogd', @@ -71,10 +87,4 @@ class ferm { require => Package['debian.org'], } - if getfromhash($site::nodeinfo, 'buildd') { - file { '/etc/ferm/conf.d/load_ftp_conntrack.conf': - source => 'puppet:///modules/ferm/conntrack_ftp.conf', - } - } - }