X-Git-Url: https://git.adam-barratt.org.uk/?a=blobdiff_plain;f=modules%2Fferm%2Fmanifests%2Finit.pp;h=c07449fb19ac06a210edaea64c82a760f162ae82;hb=a048716e3b9d4dfb5a9dbdcecaea8a59df4a96e7;hp=77ec59715b9930c43067e4e9f94b525c99ea0480;hpb=de87efa8489dee438abcd0f95dd529a300d124a3;p=mirror%2Fdsa-puppet.git diff --git a/modules/ferm/manifests/init.pp b/modules/ferm/manifests/init.pp index 77ec59715..c07449fb1 100644 --- a/modules/ferm/manifests/init.pp +++ b/modules/ferm/manifests/init.pp @@ -6,31 +6,20 @@ class ferm { group => root, mode => 0600, content => template("ferm/ferm-rule.erb"), + notify => Exec["ferm restart"], } } - package { ferm: ensure => installed } - file { + "/etc/ferm": + ensure => directory; "/etc/ferm/dsa.d": - ensure => directory, - require => Package["ferm"]; - "/etc/ferm/conf.d": - ensure => directory, - require => Package["ferm"]; - "/etc/ferm/conf.d/me.conf": - content => template("ferm/me.conf.erb"), - require => Package["ferm"], - notify => Exec["ferm restart"]; - } - - ferm::rule { "dsa-ssh": - description => "Allow SSH from DSA", - rule => "proto tcp dport ssh ACCEPT" + ensure => directory; } exec { "ferm restart": - path => "/etc/init.d:/usr/bin:/usr/sbin:/bin:/sbin", + command => "/bin/true", refreshonly => true, } + }