remove portforwarder files if we do not have a portforwarding user
[mirror/dsa-puppet.git] / manifests / site.pp
1 Package {
2         require => File['/etc/apt/apt.conf.d/local-recommends']
3 }
4
5 File {
6         owner  => root,
7         group  => root,
8         mode   => '0444',
9         ensure => file,
10 }
11
12 Exec {
13         path => '/usr/bin:/usr/sbin:/bin:/sbin'
14 }
15
16 Service {
17         hasrestart => true,
18         hasstatus  => true,
19 }
20
21 node default {
22         include site
23         include munin
24         include syslog_ng
25         include sudo
26         include ssh
27         include debian_org
28         include monit
29         include time
30         include ssl
31         include hardware
32         include nagios::client
33         include resolv
34         include roles
35         include motd
36         include unbound
37         include bacula::client
38         include autofs
39         include dsa_lvm
40         include grub
41         include multipath
42         include popcon
43         include portforwarder
44
45         if $::lsbdistcodename == squeeze {
46                 include roles::udldap::client
47         } else {
48                 include roles::pubsub::client
49                 class { 'roles::udldap::client':
50                         ensure => absent
51                 }
52         }
53
54         if $::hostname in [ubc-bl7,ubc-bl3,ubc-bl2,ubc-bl6,ubc-bl8,ubc-bl4,byrd,clementi,czerny,bm-bl1,bm-bl2,bm-bl3,bm-bl4,bm-bl5,bm-bl6,bm-bl7,bm-bl8,bm-bl9,bm-bl10,bm-bl11,bm-bl12,bm-bl13,bm-bl14,csail-node01,csail-node02,grnet-node01,grnet-node02,ubc-enc2bl01,ubc-enc2bl02,ubc-enc2bl09,ubc-enc2bl10] {
55                 include ganeti2
56         }
57
58         if $::hostname == 'dinis' {
59                 include bacula::director
60         } else {
61                 package { 'bacula-console':
62                         ensure => purged;
63                 }
64
65                 file { '/etc/bacula/bconsole.conf':
66                         ensure => absent;
67                 }
68         }
69
70         if $::hostname == 'storace' {
71                 include bacula::storage
72         }
73
74         if $::kernel == 'Linux' {
75                 include linux
76                 include acpi
77         } elsif $::kernel == 'GNU/kFreeBSD' {
78                 include kfreebsd
79         }
80
81         if $::mta == 'exim4' {
82                 if getfromhash($site::nodeinfo, 'heavy_exim') {
83                         include exim::mx
84                 } else {
85                         include exim
86                 }
87         } elsif $::mta == 'postfix' {
88                 include postfix
89         } else {
90                 include exim
91         }
92
93         if $::apache2 {
94                 include apache2
95         }
96
97         if $::hostname in [geo1,geo2,geo3] {
98                 include named::geodns
99         }
100
101         if $::hostname in [buxtehude,milanollo,lw01,lw02,lw03,lw04,senfter,gretchaninov] {
102                 include nfs-server
103         }
104
105         if $::brokenhosts {
106                 include hosts
107         }
108
109         if $::samhain {
110                 include samhain
111         }
112
113         if $::hostname in [geo3,wieck] {
114                 include debian_org::radvd
115         }
116
117         if ($::postgres) {
118                 include postgres
119         }
120
121         if $::spamd {
122                 munin::check { 'spamassassin': }
123         }
124
125         if $::hostname == 'pkgmirror-csail' {
126                 include varnish
127         }
128 }