X-Git-Url: https://git.adam-barratt.org.uk/?a=blobdiff_plain;f=modules%2Fferm%2Fmanifests%2Finit.pp;h=a6dcf1e70a667aced5f71c4f67e72f5df9e6772d;hb=99ed9a8b3de0955483a1036b6520accf8c02f755;hp=d49d9f8cf9adafce724fab4fa1a89e0994fd5433;hpb=03cb41852972efb8e1df55852b173d1cc4b47e3c;p=mirror%2Fdsa-puppet.git diff --git a/modules/ferm/manifests/init.pp b/modules/ferm/manifests/init.pp index d49d9f8cf..a6dcf1e70 100644 --- a/modules/ferm/manifests/init.pp +++ b/modules/ferm/manifests/init.pp @@ -1,5 +1,5 @@ class ferm { - define rule($domain="ip", $chain="INPUT", $rule, $description="", $prio="00") { + define rule($domain="ip", $table="filter", $chain="INPUT", $rule, $description="", $prio="00", $notarule=false) { file { "/etc/ferm/dsa.d/${prio}_${name}": ensure => present, @@ -26,16 +26,20 @@ class ferm { force => true, recurse => true, source => "puppet:///files/empty/", + notify => Exec["ferm restart"], require => Package["ferm"]; + "/etc/ferm": + ensure => directory, + mode => 0755; "/etc/ferm/conf.d": ensure => directory, require => Package["ferm"]; "/etc/default/ferm": - source => "puppet:///ferm/ferm.default", + source => "puppet:///modules/ferm/ferm.default", require => Package["ferm"], notify => Exec["ferm restart"]; "/etc/ferm/ferm.conf": - source => "puppet:///ferm/ferm.conf", + source => "puppet:///modules/ferm/ferm.conf", require => Package["ferm"], mode => 0400, notify => Exec["ferm restart"]; @@ -55,8 +59,8 @@ class ferm { mode => 0400, notify => Exec["ferm restart"]; "/etc/logrotate.d/ulogd": - source => "puppet:///ferm/logrotate-ulogd", - require => Package["logrotate"], + source => "puppet:///modules/ferm/logrotate-ulogd", + require => Package["debian.org"], ; } @@ -66,11 +70,11 @@ class ferm { $munin_ips: script => "ip_"; } - case extractnodeinfo($nodeinfo, 'buildd') { - 'true': { + case getfromhash($nodeinfo, 'buildd') { + true: { file { "/etc/ferm/conf.d/load_ftp_conntrack.conf": - source => "puppet:///ferm/conntrack_ftp.conf", + source => "puppet:///modules/ferm/conntrack_ftp.conf", require => Package["ferm"], notify => Exec["ferm restart"]; }