Enable TCP BBR on a bunch of hosts. Not all for now, but maybe we should. (re:...
[mirror/dsa-puppet.git] / manifests / site.pp
1 Package {
2         require => File['/etc/apt/apt.conf.d/local-recommends']
3 }
4
5 File {
6         owner  => root,
7         group  => root,
8         mode   => '0444',
9         ensure => file,
10 }
11
12 Exec {
13         path => '/usr/bin:/usr/sbin:/bin:/sbin'
14 }
15
16 Service {
17         hasrestart => true,
18         hasstatus  => true,
19 }
20
21 node default {
22         include site
23         include munin
24         include syslog_ng
25         include sudo
26         include ssh
27         include debian_org
28         include monit
29         include time
30         include ssl
31         include hardware
32         include nagios::client
33         include resolv
34         include roles
35         include motd
36         include unbound
37         include bacula::client
38         include autofs
39         include dsa_lvm
40         include grub
41         include multipath
42         include popcon
43         include portforwarder
44         include postgres
45         include haveged
46         include huge_mem
47         include tcp_bbr
48
49         if $::lsbdistcodename == squeeze {
50                 include roles::udldap::client
51         } else {
52                 include roles::pubsub::client
53                 class { 'roles::udldap::client':
54                         ensure => absent
55                 }
56         }
57
58         if $::hostname in [ubc-bl7,ubc-bl3,ubc-bl2,ubc-bl6,ubc-bl8,ubc-bl4,byrd,clementi,czerny,bm-bl1,bm-bl2,bm-bl3,bm-bl4,bm-bl5,bm-bl6,bm-bl7,bm-bl8,bm-bl9,bm-bl10,bm-bl11,bm-bl12,bm-bl13,bm-bl14,csail-node01,csail-node02,grnet-node01,grnet-node02,ubc-enc2bl01,ubc-enc2bl02,ubc-enc2bl09,ubc-enc2bl10,conova-node01,conova-node02] {
59                 include ganeti2
60         }
61
62         if $::kernel == 'Linux' {
63                 include linux
64                 include acpi
65         } elsif $::kernel == 'GNU/kFreeBSD' {
66                 include kfreebsd
67         }
68
69         if $::mta == 'exim4' {
70                 if getfromhash($site::nodeinfo, 'heavy_exim') {
71                         include exim::mx
72                 } else {
73                         include exim
74                 }
75         } elsif $::mta == 'postfix' {
76                 include postfix
77         } else {
78                 include exim
79         }
80
81         if $::apache2 {
82                 include apache2
83         }
84
85         if $::hostname in [geo1,geo2,geo3] {
86                 include named::geodns
87         }
88
89         if $::hostname in [buxtehude,milanollo,lw01,lw02,lw03,lw04,senfter,gretchaninov,sibelius] {
90                 include nfs_server
91         }
92
93         if $::brokenhosts {
94                 include hosts
95         }
96
97         if $::samhain {
98                 include samhain
99         }
100
101         if $::hostname in [geo3,wieck] {
102                 include debian_org::radvd
103         }
104
105         if $::spamd {
106                 munin::check { 'spamassassin': }
107         }
108
109         if $::hostname == 'pkgmirror-csail' {
110                 include varnish
111         }
112 }