X-Git-Url: https://git.adam-barratt.org.uk/?a=blobdiff_plain;f=modules%2Fferm%2Fmanifests%2Fper-host.pp;h=374da37228803e3c7bd8a658ebefd5b20e85552f;hb=6fca7a50094f0b830cb900eaa55dc749c9eef4e6;hp=40ff44df383e194e7b31731f0be0347301f158e3;hpb=be7b8100265114c92feb2d87f8057c993b865602;p=mirror%2Fdsa-puppet.git diff --git a/modules/ferm/manifests/per-host.pp b/modules/ferm/manifests/per-host.pp index 40ff44df3..374da3722 100644 --- a/modules/ferm/manifests/per-host.pp +++ b/modules/ferm/manifests/per-host.pp @@ -1,17 +1,17 @@ class ferm::per-host { - case $hostname { + case $::hostname { ancina,zandonai,zelenka: { include ferm::zivit } } - case $hostname { - chopin,franck,gluck,kassia,klecker,lobos,morricone,ravel,ries,rietz,saens,schein,santoro,steffani,valente,villa,wieck,stabile: { + case $::hostname { + chopin,franck,gluck,kassia,klecker,lobos,morricone,ravel,ries,rietz,saens,schein,santoro,steffani,valente,villa,wieck,stabile,bizet: { include ferm::ftp } } - case $hostname { + case $::hostname { piatti,samosa: { @ferm::rule { "dsa-udd-stunnel": description => "port 8080 for udd stunnel", @@ -19,9 +19,19 @@ class ferm::per-host { } } danzi: { - @ferm::rule { "dsa-postgres-danzi": - description => "Allow postgress access", - rule => "&SERVICE_RANGE(tcp, 5433, ( 206.12.19.0/24 ))" + @ferm::rule { + "dsa-postgres-danzi": + description => "Allow postgress access", + rule => "&SERVICE_RANGE(tcp, 5433, ( 206.12.19.0/24 ))" + ; + "dsa-postgres2-danzi": + description => "Allow postgress access2", + rule => "&SERVICE_RANGE(tcp, 5437, ( 206.12.19.0/24 ))" + ; + "dsa-postgres3-danzi": + description => "Allow postgress access2", + rule => "&SERVICE_RANGE(tcp, 5436, ( 206.12.19.0/24 ))" + ; } } @@ -88,7 +98,7 @@ class ferm::per-host { rule => "&SERVICE(tcp, 6523)" } } - liszt: { + bendel,liszt: { @ferm::rule { "smtp": domain => "(ip ip6)", description => "Allow smtp access", @@ -211,7 +221,7 @@ class ferm::per-host { } # redirect snapshot into varnish - case $hostname { + case $::hostname { sibelius: { @ferm::rule { "dsa-snapshot-varnish": rule => '&SERVICE(tcp, 6081)', @@ -233,6 +243,10 @@ class ferm::per-host { } } } + + if $::rsyncd == 'true' { + include ferm::rsync + } } # vim:set et: