X-Git-Url: https://git.adam-barratt.org.uk/?a=blobdiff_plain;f=modules%2Fmunin%2Fmanifests%2Finit.pp;h=736fd0d21bc1bec1cdb19c248b4d4e5dea9de3da;hb=fd26356c64527a14c8aeffa7195947c9f41016f4;hp=4f541bfcda2da717593467c39a22990a730033ff;hpb=3a63826fbd692815168b7d2e67d0ff978069fbb3;p=mirror%2Fdsa-puppet.git diff --git a/modules/munin/manifests/init.pp b/modules/munin/manifests/init.pp index 4f541bfcd..736fd0d21 100644 --- a/modules/munin/manifests/init.pp +++ b/modules/munin/manifests/init.pp @@ -1,89 +1,89 @@ +# our munin class class munin { + package { 'munin-node': + ensure => installed + } - package { 'munin-node': - ensure => installed - } + service { 'munin-node': + ensure => running, + require => Package['munin-node'], + } - service { 'munin-node': - ensure => running, - require => Package['munin-node'], - } + file { '/var/log/munin': + ensure => directory, + owner => root, + group => 'www-data', + mode => '0755', + } - file { '/var/log/munin': - ensure => directory, - owner => root, - group => 'www-data', - mode => '0755', - } + file { '/etc/munin/munin-node.conf': + content => template('munin/munin-node.conf.erb'), + require => Package['munin-node'], + notify => Service['munin-node'], + } - file { '/etc/munin/munin-node.conf': - content => template('munin/munin-node.conf.erb'), - require => Package['munin-node'], - notify => Service['munin-node'], - } + file { '/etc/munin/plugin-conf.d/munin-node': + content => template('munin/munin-node.plugin.conf.erb'), + require => Package['munin-node'], + notify => Service['munin-node'], + } - file { '/etc/munin/plugin-conf.d/munin-node': - content => template('munin/munin-node.plugin.conf.erb'), - require => Package['munin-node'], - notify => Service['munin-node'], - } + file { '/etc/logrotate.d/munin-node': + source => 'puppet:///modules/munin/logrotate', + require => Package['munin-node'], + } - file { '/etc/logrotate.d/munin-node': - source => 'puppet:///modules/munin/logrotate', - require => Package['munin-node'], - } + file { '/etc/munin/plugins/df': + ensure => link, + target => '/usr/share/munin/plugins/df', + require => Package['munin-node'], + notify => Service['munin-node'], + } - file { '/etc/munin/plugins/df': - ensure => link, - target => '/usr/share/munin/plugins/df', - require => Package['munin-node'], - notify => Service['munin-node'], - } + file { '/etc/munin/plugins/df_abs': + ensure => file, + source => 'puppet:///modules/munin/df-wrap', + mode => '0555', + require => Package['munin-node'], + notify => Service['munin-node'], + } - file { '/etc/munin/plugins/df_abs': - ensure => file, - source => 'puppet:///modules/munin/df-wrap', - mode => '0555', - require => Package['munin-node'], - notify => Service['munin-node'], - } + file { '/etc/munin/plugins/df_inode': + ensure => link, + target => '/usr/share/munin/plugins/df_inode', + require => Package['munin-node'], + notify => Service['munin-node'], + } - file { '/etc/munin/plugins/df_inode': - ensure => link, - target => '/usr/share/munin/plugins/df_inode', - require => Package['munin-node'], - notify => Service['munin-node'], - } + ferm::rule { 'dsa-munin-v4': + description => 'Allow munin from munin master', + rule => 'proto tcp mod state state (NEW) dport (munin) @subchain \'munin\' { saddr ($HOST_MUNIN_V4 $HOST_NAGIOS_V4) ACCEPT; }', + notarule => true, + } - ferm::rule { 'dsa-munin-v4': - description => 'Allow munin from munin master', - rule => 'proto tcp mod state state (NEW) dport (munin) @subchain \'munin\' { saddr ($HOST_MUNIN_V4 $HOST_NAGIOS_V4) ACCEPT; }', - notarule => true, - } + ferm::rule { 'dsa-munin-v6': + description => 'Allow munin from munin master', + domain => 'ip6', + rule => 'proto tcp mod state state (NEW) dport (munin) @subchain \'munin\' { saddr ($HOST_MUNIN_V6 $HOST_NAGIOS_V6) ACCEPT; }', + notarule => true, + } - ferm::rule { 'dsa-munin-v6': - description => 'Allow munin from munin master', - domain => 'ip6', - rule => 'proto tcp mod state state (NEW) dport (munin) @subchain \'munin\' { saddr ($HOST_MUNIN_V6 $HOST_NAGIOS_V6) ACCEPT; }', - notarule => true, - } + @@munin::master_per_node { $::fqdn: } - @@munin::master_per_node { $::fqdn: } - - package { 'munin-async': - ensure => installed - } - service { 'munin-async': - ensure => running, - require => Package['munin-async'], - } - dsa_systemd::override { 'munin-async': - content => @("EOF"), - [Service] - RestartSec=10 - | EOF - } - file { '/etc/ssh/userkeys/munin-async': - source => 'puppet:///modules/munin/munin-async-authkeys', - } + package { 'munin-async': + ensure => installed + } + service { 'munin-async': + ensure => running, + require => Package['munin-async'], + } + dsa_systemd::override { 'munin-async': + content => @("EOF"), + [Service] + RestartSec=10 + | EOF + } + file { '/etc/ssh/userkeys/munin-async': + source => 'puppet:///modules/munin/munin-async-authkeys', + } }