X-Git-Url: https://git.adam-barratt.org.uk/?a=blobdiff_plain;f=modules%2Fferm%2Fmanifests%2Finit.pp;h=c07449fb19ac06a210edaea64c82a760f162ae82;hb=a048716e3b9d4dfb5a9dbdcecaea8a59df4a96e7;hp=a8798c82a49654ebf0e68c78d4f61a79f2588f25;hpb=1cff95615ab0baf6f5e8f6db3a5611ab0a232256;p=mirror%2Fdsa-puppet.git diff --git a/modules/ferm/manifests/init.pp b/modules/ferm/manifests/init.pp index a8798c82a..c07449fb1 100644 --- a/modules/ferm/manifests/init.pp +++ b/modules/ferm/manifests/init.pp @@ -6,32 +6,20 @@ class ferm { group => root, mode => 0600, content => template("ferm/ferm-rule.erb"), + notify => Exec["ferm restart"], } } - package { ferm: ensure => installed } - file { + "/etc/ferm": + ensure => directory; "/etc/ferm/dsa.d": - ensure => directory, - require => Package["ferm"]; - "/etc/ferm/conf.d": - ensure => directory, - require => Package["ferm"]; - "/etc/ferm/conf.d/me.conf": - content => template("ferm/me.conf.erb"), - require => Package["ferm"], - notify => Exec["ferm restart"]; - } - - ferm::rule { "dsa-ssh": - description => "Allow SSH from DSA", - rule => "proto tcp dport ssh ACCEPT" + ensure => directory; } - ferm_rule( exec { "ferm restart": - path => "/etc/init.d:/usr/bin:/usr/sbin:/bin:/sbin", + command => "/bin/true", refreshonly => true, } + }