X-Git-Url: https://git.adam-barratt.org.uk/?a=blobdiff_plain;f=modules%2Fferm%2Ftemplates%2Fme.conf.erb;h=72e65f422d1e423815a6591bbb50ce1e8924484e;hb=836eff39ec561176cd00cc2d7b4e66e9668a25ee;hp=d0a9aa5d2a49387321fdd5276aba9c4baf6c7540;hpb=1f8aabaac29905ff9ada274836ed482e8aa0c270;p=mirror%2Fdsa-puppet.git diff --git a/modules/ferm/templates/me.conf.erb b/modules/ferm/templates/me.conf.erb index d0a9aa5d2..72e65f422 100644 --- a/modules/ferm/templates/me.conf.erb +++ b/modules/ferm/templates/me.conf.erb @@ -8,7 +8,7 @@ nodeinfo = scope.lookupvar('site::nodeinfo') out = [] restricted_purposes = ['kvm host', 'central syslog server', 'puppet master', 'jumphost'] -restrict_ssh = %w{lebrun beethoven tchaikovsky schroeder draghi adayevskaya} +restrict_ssh = %w{tchaikovsky draghi adayevskaya} if (nodeinfo['ldap'].has_key?('purpose')) then nodeinfo['ldap']['purpose'].each do |purp| @@ -33,12 +33,7 @@ if restrict_ssh.include?(hostname) then ssh4allowed << %w{$DSA_IPS $HOST_NAGIOS_V4 $HOST_MUNIN_V4 $HOST_DB_V4} ssh6allowed << %w{$DSA_V6_IPS $HOST_NAGIOS_V6 $HOST_MUNIN_V6 $HOST_DB_V6} - if %w{lebrun schroeder}.include?(hostname) then - out << '@def $CARNET = ( 193.198.184.8/29 161.53.160.133 161.53.160.90 161.53.11.222 161.53.12.134 161.53.12.142 161.53.12.143 );' - ssh4allowed << '$CARNET' - ssh4allowed << '$BUILDD_SSH_ACCESS' - end - if %w{beethoven draghi}.include?(hostname) then + if %w{draghi}.include?(hostname) then ssh4allowed << '$HOST_DEBIAN_V4' ssh6allowed << '$HOST_DEBIAN_V6' end