Add the certregen::client class to all nodes
[mirror/dsa-puppet.git] / manifests / site.pp
1 Package {
2         require => File['/etc/apt/apt.conf.d/local-recommends']
3 }
4
5 File {
6         owner  => root,
7         group  => root,
8         mode   => '0444',
9         ensure => file,
10 }
11
12 Exec {
13         path => '/usr/bin:/usr/sbin:/bin:/sbin'
14 }
15
16 Service {
17         hasrestart => true,
18         hasstatus  => true,
19 }
20
21 node default {
22         include site
23         include munin
24         include syslog_ng
25         include sudo
26         include ssh
27         include debian_org
28         include monit
29         include time
30         include ssl
31         include hardware
32         include nagios::client
33         include resolv
34         include roles
35         include motd
36         include unbound
37         include bacula::client
38         include autofs
39         include dsa_lvm
40         include grub
41         include multipath
42         include popcon
43         include portforwarder
44         include postgres
45         include haveged
46         include huge_mem
47         include tcp_bbr
48         include certregen::client
49
50         if $::lsbdistcodename == squeeze {
51                 include roles::udldap::client
52         } else {
53                 include roles::pubsub::client
54                 class { 'roles::udldap::client':
55                         ensure => absent
56                 }
57         }
58
59         if getfromhash($site::nodeinfo, 'ganeti') {
60                 include ganeti2
61         }
62
63         if $::kernel == 'Linux' {
64                 include linux
65                 include acpi
66         }
67
68         if $::mta == 'exim4' {
69                 if getfromhash($site::nodeinfo, 'heavy_exim') {
70                         include exim::mx
71                 } else {
72                         include exim
73                 }
74         } elsif $::mta == 'postfix' {
75                 include postfix
76         } else {
77                 include exim
78         }
79
80         if $::apache2 {
81                 include apache2
82         }
83
84         if $::hostname in [geo1,geo2,geo3] {
85                 include named::geodns
86         }
87
88         if $::hostname in [buxtehude,milanollo,lw01,lw02,lw03,lw04,lw09,lw10,senfter,gretchaninov,sibelius] {
89                 include nfs_server
90         }
91
92         if $::brokenhosts {
93                 include hosts
94         }
95
96         if $::samhain {
97                 include samhain
98         }
99
100         if $::hostname in [geo3,wieck] {
101                 include debian_org::radvd
102         }
103
104         if $::spamd {
105                 munin::check { 'spamassassin': }
106         }
107
108         if $::hostname == 'pkgmirror-csail' {
109                 include varnish_pkgmirror
110         }
111 }