modules/ferm/manifests/init.pp

   1 class ferm {
   2         define rule($domain="ip", $chain="INPUT", $rule, $description="", $prio="00") {
   3                 file { "/etc/ferm/dsa.d/${prio}_${name}":
   4                         ensure  => present,
   5                         owner   => root,
   6                         group   => root,
   7                         mode    => 0400,
   8                         content => template("ferm/ferm-rule.erb"),
   9                         notify  => Exec["ferm restart"],
  10                 }
  11         }
  12
  13         # realize (i.e. enable) all @ferm::rule virtual resources
  14         Rule <| |>
  15
  16         package { ferm: ensure => installed }
  17
  18         file {
  19                 "/etc/ferm/dsa.d":
  20                         ensure => directory,
  21                         purge   => true,
  22                         force   => true,
  23                         recurse => true,
  24                         require => Package["ferm"];
  25                 "/etc/ferm/conf.d":
  26                         ensure => directory,
  27                         require => Package["ferm"];
  28                 "/etc/ferm/ferm.conf":
  29                         source  => "puppet:///ferm/ferm.conf",
  30                         require => Package["ferm"],
  31                         mode    => 0400,
  32                         notify  => Exec["ferm restart"];
  33                 "/etc/ferm/conf.d/me.conf":
  34                         content => template("ferm/me.conf.erb"),
  35                         require => Package["ferm"],
  36                         mode    => 0400,
  37                         notify  => Exec["ferm restart"];
  38                 "/etc/ferm/conf.d/defs.conf":
  39                         source  => "puppet:///ferm/defs.conf",
  40                         require => Package["ferm"],
  41                         mode    => 0400,
  42                         notify  => Exec["ferm restart"];
  43         }
  44
  45         exec { "ferm restart":
  46                 command     => "/etc/init.d/ferm restart",
  47                 refreshonly => true,
  48         }
  49
  50 }