X-Git-Url: https://git.adam-barratt.org.uk/?a=blobdiff_plain;f=modules%2Fsamhain%2Ftemplates%2Fsamhainrc.erb;h=25e4622e73bb4f89841140693a88165854dd96ac;hb=a53edf5d1d18057fb465344e2edcb8b4adffe034;hp=7cb67a7f901a8ec4296683d395e37c9d9230202a;hpb=188ca3ce42a4b446cc153adbf364eeb12fd278f3;p=mirror%2Fdsa-puppet.git diff --git a/modules/samhain/templates/samhainrc.erb b/modules/samhain/templates/samhainrc.erb index 7cb67a7f9..25e4622e7 100644 --- a/modules/samhain/templates/samhainrc.erb +++ b/modules/samhain/templates/samhainrc.erb @@ -67,9 +67,7 @@ # RedefIgnoreNone=(no default) # RedefUser0=(no default) # RedefUser1=(no default) -<% if scope.lookupvar('site::nodeinfo')['buildd'] -%> IgnoreMissing=/etc/lvm/archive/.*.vg -<% end -%> [Attributes] ## @@ -78,6 +76,7 @@ IgnoreMissing=/etc/lvm/archive/.*.vg file=/etc/mtab file=/etc/ssh_random_seed file=/etc/asound.conf +file=/etc/bacula/bacula-fd.conf file=/etc/localtime file=/etc/ioctl.save file=/etc/passwd.backup @@ -103,6 +102,9 @@ file=/etc/bind/geodns/recvconf.files file=/etc/bind/named.conf.options <% end -%> file=/etc/apache2/conf.d/puppet-builddlist +<% if classes.include?("roles::static_mirror") -%> +file=/etc/apache2/sites-available/static-vhosts-simple +<% end -%> # # There are files in /etc that might change, thus changing the directory @@ -117,10 +119,12 @@ file=/etc/spamassassin/sa-update-keys # These are the directories for the files we handle with puppet file=/etc/apache2/conf.d files=/etc/apache2/mods-enabled +file=/etc/bacula file=/etc/samhain file=/etc/munin file=/etc/munin/plugins file=/etc/munin/plugin-conf.d +file=/etc/munin/munin-conf.d file=/etc/exim4 file=/etc/exim4/ssl file=/etc/apt @@ -144,6 +148,7 @@ file=/usr/sbin file=/etc/monit file=/etc/monit/monit.d file=/etc/pam.d +file=/etc/schroot/default file=/etc/sysctl.d file=/etc/syslog-ng file=/etc/stunnel @@ -151,10 +156,12 @@ file=/etc/ferm/ file=/etc/ferm/conf.d file=/etc/ferm/dsa.d file=/etc/rc.local -<% unless scope.lookupvar('::lsbdistcodename') == 'lenny' %> file=/etc/unbound -<% end -%> file=/etc/dsa +<% if scope.lookupvar('site::nodeinfo')['static_mirror'] or scope.lookupvar('site::nodeinfo')['static_source'] or scope.lookupvar('site::nodeinfo')['static_master'] -%> +file=/etc/ssh/userkeys +file=/etc/ssh/userkeys/staticsync +<% end -%> [LogFiles] ## @@ -236,12 +243,16 @@ file=/etc/blkid.tab.old file=/etc/resolv.conf.dhclient-new # We handle these files with puppet - please to not be bothering us +file=/etc/nsswitch.conf file=/etc/timezone file=/etc/motd.tail +file=/etc/update-motd.d/ +file=/etc/update-motd.d/puppet-motd file=/etc/ntp.conf file=/etc/samhain/samhainrc file=/etc/munin/munin-node.conf file=/etc/munin/plugin-conf.d/munin-node +dir=2/etc/munin/munin-conf.d file=/etc/userdir-ldap.confc file=/etc/exim4/blacklist file=/etc/exim4/host_blacklist @@ -256,6 +267,7 @@ file=/etc/exim4/rbllist file=/etc/exim4/rhsbllist file=/etc/exim4/submission-domains file=/etc/exim4/virtualdomains +file=/etc/exim4/email-virtualdomains file=/etc/exim4/whitelist file=/etc/exim4/local-settings.conf file=/etc/exim4/ssl/ca.crt @@ -265,6 +277,10 @@ file=/etc/exim4/ssl/thishost.key file=/etc/ssh/ssh_config file=/etc/ssh/sshd_config file=/etc/dsa/cron.ignore.dsa-puppet-stuff +file=/etc/vsftpd.conf +file=/etc/aliases +file=/etc/multipath.conf +file=/etc/static-components.conf <%= out="" if scope.lookupvar('site::nodeinfo')['heavy_exim'] @@ -325,6 +341,10 @@ file=/etc/apt/sources.list.d/volatile.list file=/etc/apt/sources.list.d/security.list file=/etc/apt/sources.list.d/buildd.list file=/etc/apt/sources.list.d/buildd.debian.org.list +file=/etc/apt/sources.list.d/buildd.debian.org-proposed.list +file=/etc/apt/sources.list.d/buildd.debian.org-experimental.list +file=/etc/apt/sources.list.d/geoip.list +file=/etc/apt/sources.list.d/backports.debian.org.list file=/etc/apt/sources.list.d/debian.org.list file=/etc/apt/sources.list.d/db.debian.org.list file=/etc/apt/sources.list.d/debian.restricted.list @@ -337,7 +357,6 @@ file=/etc/apt/preferences.d/buildd file=/etc/puppet/puppet.conf file=/etc/default/puppet file=/etc/default/postgrey -file=/etc/default/schroot file=/etc/default/syslog-ng file=/etc/logrotate.d/exim4-paniclog file=/etc/logrotate.d/exim4-base @@ -369,6 +388,7 @@ file=/usr/lib/nagios/plugins/dsa-check-raid-sw file=/usr/lib/nagios/plugins/dsa-update-samhain-status file=/etc/sudoers file=/etc/stunnel/puppet-ekeyd-peer.pem +file=/etc/stunnel/puppet-ekeyd.conf file=/etc/sysctl.d/mmap_min_addr.conf file=/etc/pam.d/sudo file=/etc/monit/monitrc @@ -377,6 +397,9 @@ file=/etc/monit/monit.d/00debian.org file=/etc/cron.d/dsa-puppet-stuff file=/etc/cron.d/dsa-buildd file=/etc/cron.weekly/stunnel-ekey-restart +file=/etc/default/schroot +file=/etc/schroot/default/nssdatabases + <% if scope.lookupvar('site::nodeinfo')['nagiosmaster'] -%> file=/etc/nagios3/puppetconf.d/auto-hostgroups.cfg file=/etc/nagios3/puppetconf.d/auto-hosts.cfg @@ -400,20 +423,30 @@ dir=1/etc/bind/geodns dir=1/etc/bind file=/etc/bind/named.conf.debian-zones <% end -%> -<% if scope.lookupvar('::fqdn') == "dijkstra.debian.org" -%> -dir=4/etc/dsa-kvm -<% end -%> -<% if scope.lookupvar('site::nodeinfo')['buildd'] -%> -dir=3/etc/lvm -<% end -%> +dir=3/etc/lvm/archive +dir=3/etc/lvm/backup dir=1/etc/ferm/dsa.d +dir=1/etc/ferm/conf.d dir=3/etc/facter file=/etc/ferm/conf.d/me.conf file=/etc/ferm/conf.d/defs.conf file=/etc/ferm/ferm.conf dir=2/etc/ssl/debian -<% unless scope.lookupvar('::lsbdistcodename') == 'lenny' %> +dir=1/etc/ssl/certs +dir=1/etc/ssl/servicecerts file=/etc/unbound/unbound.conf +<% if scope.lookupvar('::fqdn') == "draghi.debian.org" -%> +file=/etc/openvpn/deb-mgmt-clients.pool +<% end -%> + + +<% if scope.lookupvar('site::nodeinfo')['puppetmaster'] %> + +# Damn you rails apps and your shoddy packaging +file=/usr/share/puppet-dashboard/public/stylesheets +file=/usr/share/puppet-dashboard/public/javascripts +file=/usr/share/puppet-dashboard/public/stylesheets/all.css +file=/usr/share/puppet-dashboard/public/javascripts/all.js <% end -%> [IgnoreNone]