X-Git-Url: https://git.adam-barratt.org.uk/?a=blobdiff_plain;f=modules%2Fferm%2Ftemplates%2Fme.conf.erb;h=33d0335e721f215943a9ab58d220752d1a61fefd;hb=703c296014e23beedfb75c1d45b4ad3f7a56e26a;hp=829d71aae82b9fe55da53dc79bede6e3176df92f;hpb=1ef0cf361b9785b0c2ffb0562636ac57eed122f2;p=mirror%2Fdsa-puppet.git diff --git a/modules/ferm/templates/me.conf.erb b/modules/ferm/templates/me.conf.erb index 829d71aae..33d0335e7 100644 --- a/modules/ferm/templates/me.conf.erb +++ b/modules/ferm/templates/me.conf.erb @@ -26,8 +26,8 @@ should_restrict = restrict_ssh.include?(@hostname) if should_restrict then # draghi makes for a nice jumphost - ssh4allowed << %w{$DSA_IPS $HOST_NAGIOS_V4 $HOST_MUNIN_V4 82.195.75.106} - ssh6allowed << %w{$DSA_V6_IPS $HOST_NAGIOS_V6 $HOST_MUNIN_V6 2001:41b8:202:deb:1a1a:0:52c3:4b6a} + ssh4allowed << %w{$DSA_IPS $HOST_NAGIOS_V4 82.195.75.106} + ssh6allowed << %w{$DSA_V6_IPS $HOST_NAGIOS_V6 2001:41b8:202:deb:1a1a:0:52c3:4b6a} if %w{draghi}.include?(@hostname) then ssh4allowed << '$HOST_DEBIAN_V4' @@ -48,21 +48,5 @@ out << "@def $SSH_SOURCES = ( $SSH_SOURCES #{ssh4allowed.join(' ')});" out << "@def $SSH_V6_SOURCES = ( $SSH_V6_SOURCES #{ssh6allowed.join(' ')});" - - -smtp4allowed = [] -smtp6allowed = [] - -if not nodeinfo['smarthost'].empty? - smtp4allowed << %w{$HOST_MAILRELAY_V4 $HOST_NAGIOS_V4} - smtp6allowed << %w{$HOST_MAILRELAY_V6 $HOST_NAGIOS_V6} -end - -smtp4allowed.length == 0 and smtp4allowed << '0.0.0.0/0' -smtp6allowed.length == 0 and smtp6allowed << '::/0' - -out << "@def $SMTP_SOURCES = (#{smtp4allowed.join(' ')});" -out << "@def $SMTP_V6_SOURCES = (#{smtp6allowed.join(' ')});" - out.join("\n") %>