X-Git-Url: https://git.adam-barratt.org.uk/?a=blobdiff_plain;f=modules%2Fsamhain%2Ftemplates%2Fsamhainrc.erb;h=4dc60df3b792c23b58c23fb726fddc862c518df6;hb=6113877e86c27e692312d31506f3f4ae51339607;hp=1757345b6612a85e61331c73f21adb65dce6a7e7;hpb=c76fc3f47458065f4e3aeaa018a58bee01b23222;p=mirror%2Fdsa-puppet.git diff --git a/modules/samhain/templates/samhainrc.erb b/modules/samhain/templates/samhainrc.erb index 1757345b6..4dc60df3b 100644 --- a/modules/samhain/templates/samhainrc.erb +++ b/modules/samhain/templates/samhainrc.erb @@ -67,7 +67,7 @@ # RedefIgnoreNone=(no default) # RedefUser0=(no default) # RedefUser1=(no default) -<% if nodeinfo['buildd'] -%> +<% if scope.lookupvar('site::nodeinfo')['buildd'] -%> IgnoreMissing=/etc/lvm/archive/.*.vg <% end -%> @@ -91,6 +91,7 @@ file=/etc/network/run/ifstate file=/var/state/samhain/samhain_file file=/etc/bind/zones/db.debian.net file=/etc/exim4/bsmtp +file=/etc/fake-hwclock.data <% if classes.include?("named::geodns") -%> file=/etc/bind file=/etc/bind/named.conf.acl @@ -125,17 +126,19 @@ file=/etc/exim4/ssl file=/etc/apt file=/etc/apt/apt.conf.d file=/etc/apt/sources.list.d +file=/etc/apt/preferences.d file=/etc/default file=/etc/logrotate.d file=/etc/nagios file=/etc/nagios/nrpe.d file=/etc/nagios/obsolete-packages-ignore.d file=/etc/bind/geodns -<% if nodeinfo['nagiosmaster'] -%> +<% if scope.lookupvar('site::nodeinfo')['nagiosmaster'] -%> file=/etc/nagios3/puppetconf.d <% end -%> file=/etc/puppet file=/etc/cron.d +file=/etc/cron.weekly file=/usr/lib/nagios/plugins file=/usr/sbin file=/etc/monit @@ -143,11 +146,12 @@ file=/etc/monit/monit.d file=/etc/pam.d file=/etc/sysctl.d file=/etc/syslog-ng +file=/etc/stunnel file=/etc/ferm/ file=/etc/ferm/conf.d file=/etc/ferm/dsa.d file=/etc/rc.local -<% if nodeinfo.has_key?('squeeze') and nodeinfo['squeeze'] %> +<% unless scope.lookupvar('::lsbdistcodename') == 'lenny' %> file=/etc/unbound <% end -%> file=/etc/dsa @@ -156,9 +160,10 @@ file=/etc/dsa ## ## for these files, changes in signature, timestamps, and size are ignored ## -file=/var/run/utmp file=/etc/motd +# is on tmpfs, ignore. +#file=/var/run/utmp ##################################################################### @@ -213,7 +218,7 @@ file=/var/log/syslog ## This file might be created or removed by the system sometimes. ## file=/etc/resolv.conf -<% if nodeinfo['buildd'] -%> +<% if scope.lookupvar('site::nodeinfo')['buildd'] -%> file=/etc/dupload.conf <% end -%> file=/etc/resolv.conf.pcmcia.save @@ -262,7 +267,7 @@ file=/etc/ssh/sshd_config file=/etc/dsa/cron.ignore.dsa-puppet-stuff <%= out="" -if nodeinfo['heavy_exim'] +if scope.lookupvar('site::nodeinfo')['heavy_exim'] out = ' file=/etc/exim4/surbl_whitelist.txt file=/etc/exim4/exim_surbl.pl @@ -319,15 +324,20 @@ file=/etc/apt/preferences file=/etc/apt/sources.list.d/volatile.list file=/etc/apt/sources.list.d/security.list file=/etc/apt/sources.list.d/buildd.list +file=/etc/apt/sources.list.d/buildd.debian.org.list file=/etc/apt/sources.list.d/debian.org.list +file=/etc/apt/sources.list.d/db.debian.org.list file=/etc/apt/sources.list.d/debian.restricted.list file=/etc/apt/sources.list.d/debian.list file=/etc/apt/sources.list.d/backports.org.list +file=/etc/apt/apt.conf.d/local-compression file=/etc/apt/apt.conf.d/local-recommends file=/etc/apt/apt.conf.d/local-pdiffs +file=/etc/apt/preferences.d/buildd file=/etc/puppet/puppet.conf file=/etc/default/puppet file=/etc/default/postgrey +file=/etc/default/schroot file=/etc/default/syslog-ng file=/etc/logrotate.d/exim4-paniclog file=/etc/logrotate.d/exim4-base @@ -358,6 +368,7 @@ file=/usr/lib/nagios/plugins/dsa-check-raid-areca file=/usr/lib/nagios/plugins/dsa-check-raid-sw file=/usr/lib/nagios/plugins/dsa-update-samhain-status file=/etc/sudoers +file=/etc/stunnel/puppet-ekeyd-peer.pem file=/etc/sysctl.d/mmap_min_addr.conf file=/etc/pam.d/sudo file=/etc/monit/monitrc @@ -365,7 +376,8 @@ file=/etc/monit/monit.d/01puppet file=/etc/monit/monit.d/00debian.org file=/etc/cron.d/dsa-puppet-stuff file=/etc/cron.d/dsa-buildd -<% if nodeinfo['nagiosmaster'] -%> +file=/etc/cron.weekly/stunnel-ekey-restart +<% if scope.lookupvar('site::nodeinfo')['nagiosmaster'] -%> file=/etc/nagios3/puppetconf.d/auto-hostgroups.cfg file=/etc/nagios3/puppetconf.d/auto-hosts.cfg file=/etc/nagios3/puppetconf.d/auto-services.cfg @@ -373,11 +385,12 @@ file=/etc/nagios3/puppetconf.d/auto-dependencies.cfg file=/etc/nagios3/puppetconf.d/auto-hostextinfo.cfg file=/etc/nagios3/puppetconf.d/auto-serviceextinfo.cfg file=/etc/nagios3/puppetconf.d/auto-servicegroups.cfg +file=/etc/nagios3/puppetconf.d/contacts.cfg <% end -%> -<% if nodeinfo['muninmaster'] -%> +<% if scope.lookupvar('site::nodeinfo')['muninmaster'] -%> file=/etc/munin/munin.conf <% end -%> -<% if nodeinfo['puppetmaster'] -%> +<% if scope.lookupvar('site::nodeinfo')['puppetmaster'] -%> dir=8/etc/puppet <% end -%> <% if classes.include?('named::geodns') -%> @@ -387,18 +400,20 @@ dir=1/etc/bind/geodns dir=1/etc/bind file=/etc/bind/named.conf.debian-zones <% end -%> -<% if fqdn == "dijkstra.debian.org" -%> +<% if scope.lookupvar('::fqdn') == "dijkstra.debian.org" -%> dir=4/etc/dsa-kvm <% end -%> -<% if nodeinfo['buildd'] -%> +<% if scope.lookupvar('site::nodeinfo')['buildd'] -%> dir=3/etc/lvm <% end -%> dir=1/etc/ferm/dsa.d +dir=1/etc/ferm/conf.d +dir=3/etc/facter file=/etc/ferm/conf.d/me.conf file=/etc/ferm/conf.d/defs.conf file=/etc/ferm/ferm.conf dir=2/etc/ssl/debian -<% if nodeinfo.has_key?('squeeze') and nodeinfo['squeeze'] %> +<% unless scope.lookupvar('::lsbdistcodename') == 'lenny' %> file=/etc/unbound/unbound.conf <% end -%> @@ -843,14 +858,9 @@ SetMailNum = 10 ## Recipient (max. 8) # -SetMailAddress=samhain-reports@debian.org +SetMailAddress=samhain-reports@<%= fqdn -%> -## Mail relay (IP address) -<% if nodeinfo['smarthost'].empty? -%> -SetMailRelay = master.debian.org -<% else -%> SetMailRelay = localhost -<% end -%> ## Custom subject format #