X-Git-Url: https://git.adam-barratt.org.uk/?a=blobdiff_plain;f=modules%2Fferm%2Ftemplates%2Fme.conf.erb;h=3de244eb3f7cc5d711cbcb9b68bcaf8f5e8e8848;hb=3a18a2560244c20c7aa4fa4b8378821318f22f6b;hp=797560bbf86e60f81bf26161e1cad5d87b006954;hpb=d892d0b75a53c834aa87e4fd6e57d8b3d76a10a1;p=mirror%2Fdsa-puppet.git diff --git a/modules/ferm/templates/me.conf.erb b/modules/ferm/templates/me.conf.erb index 797560bbf..3de244eb3 100644 --- a/modules/ferm/templates/me.conf.erb +++ b/modules/ferm/templates/me.conf.erb @@ -7,11 +7,11 @@ out = [] restricted_purposes = {'kvm host', 'central syslog server', 'puppet master', 'jumphost'} -restrict_ssh = %w{lebrun logtest01 geo1 geo2 geo3 beethoven tchaikovsky schroeder rossini draghi} +restrict_ssh = %w{lebrun geo1 geo2 geo3 beethoven tchaikovsky schroeder rossini draghi} -if (nodeinfo['ldap'].has_key?('purpose')) then - restricted_purposes.each do |purp| - if nodeinfo['ldap']['purpose'].include?(purp) then +if (scope.lookupvar('site::nodeinfo')['ldap'].has_key?('purpose')) then + scope.lookupvar('site::nodeinfo')['ldap']['purpose'].each do |purp| + if restricted_purposes.include?(purp) then restrict_ssh << hostname end end @@ -49,7 +49,7 @@ out << "@def $SSH_V6_SOURCES = (#{ssh6allowed.join(' ')});" smtp4allowed = [] smtp6allowed = [] -if not nodeinfo['smarthost'].empty? +if not scope.lookupvar('site::nodeinfo')['smarthost'].empty? smtp4allowed << %w{$HOST_MAILRELAY_V4 $HOST_NAGIOS_V4} smtp6allowed << %w{$HOST_MAILRELAY_V6 $HOST_NAGIOS_V6} end