X-Git-Url: https://git.adam-barratt.org.uk/?a=blobdiff_plain;f=modules%2Froles%2Fmanifests%2Fsecurity_tracker.pp;h=a5ea890c07f0ba85a93332dd83b1de3e053440b3;hb=d37aae2f20083c472de30925ff3e16a692408a11;hp=1e93e29e88984059e73d2a6640d04a406e7b062a;hpb=bd7d026dba49c5698d3c5c76e4c7a6b99d40d213;p=mirror%2Fdsa-puppet.git

diff --git a/modules/roles/manifests/security_tracker.pp b/modules/roles/manifests/security_tracker.pp
index 1e93e29e8..a5ea890c0 100644
--- a/modules/roles/manifests/security_tracker.pp
+++ b/modules/roles/manifests/security_tracker.pp
@@ -1,44 +1,45 @@
 class roles::security_tracker {
-	include apache2::ssl
-	include apache2::proxy_http
-	include apache2::expires
+  include apache2
+  include apache2::ssl
+  include apache2::proxy_http
+  include apache2::expires
 
-	apache2::module { 'cache_disk':
-		ensure => absent,
-	}
+  apache2::module { 'cache_disk':
+    ensure => absent,
+  }
 
-	# security-tracker abusers
-	#  66.170.99.1  20180706 excessive number of requests
-	#  66.170.99.2  20180706 excessive number of requests
-	@ferm::rule { 'dsa-sectracker-abusers':
-		prio  => "005",
-		rule  => "saddr (66.170.99.1 66.170.99.2) DROP",
-	}
+  # security-tracker abusers
+  #  66.170.99.1  20180706 excessive number of requests
+  #  66.170.99.2  20180706 excessive number of requests
+  ferm::rule { 'dsa-sectracker-abusers':
+    prio => '005',
+    rule => 'saddr (66.170.99.1 66.170.99.2) DROP',
+  }
 
 
-	ssl::service { 'security-tracker.debian.org':
-		notify  => Exec['service apache2 reload'],
-		key => true,
-	}
+  ssl::service { 'security-tracker.debian.org':
+    notify => Exec['service apache2 reload'],
+    key    => true,
+  }
 
-	apache2::site { 'security-tracker.debian.org':
-		site   => 'security-tracker.debian.org',
-		content => template('roles/apache-security-tracker.debian.org.conf.erb')
-	}
+  apache2::site { 'security-tracker.debian.org':
+    site    => 'security-tracker.debian.org',
+    content => template('roles/apache-security-tracker.debian.org.conf.erb')
+  }
 
-	# traffic shaping http traffic
-	#@ferm::rule { 'dsa-security-tracker-shape':
-	#	table => 'mangle',
-	#	chain => 'OUTPUT',
-	#	rule  => "proto tcp sport 443 MARK set-mark 20",
-	#}
+  # traffic shaping http traffic
+  #ferm::rule { 'dsa-security-tracker-shape':
+  #  table => 'mangle',
+  #  chain => 'OUTPUT',
+  #  rule  => 'proto tcp sport 443 MARK set-mark 20',
+  #}
 
-	file { '/usr/local/sbin/traffic-shape':
-		mode   => '0755',
-		content => template('roles/security-tracker/traffic-shape'),
-		notify => Exec['/usr/local/sbin/traffic-shape'],
-	}
-	exec { '/usr/local/sbin/traffic-shape':
-		refreshonly => true
-	}
+  file { '/usr/local/sbin/traffic-shape':
+    mode    => '0755',
+    content => template('roles/security-tracker/traffic-shape'),
+    notify  => Exec['/usr/local/sbin/traffic-shape'],
+  }
+  exec { '/usr/local/sbin/traffic-shape':
+    refreshonly => true
+  }
 }