diff options
Diffstat (limited to 'puppet/hiera')
-rw-r--r-- | puppet/hiera/bootstrap.yaml | 44 | ||||
-rw-r--r-- | puppet/hiera/common.yaml | 50 | ||||
-rw-r--r-- | puppet/hiera/hiera.yaml | 19 |
3 files changed, 113 insertions, 0 deletions
diff --git a/puppet/hiera/bootstrap.yaml b/puppet/hiera/bootstrap.yaml new file mode 100644 index 0000000..ce72bfb --- /dev/null +++ b/puppet/hiera/bootstrap.yaml @@ -0,0 +1,44 @@ +--- +# +# Puppet Bootstrap Configuration Parameters. +# +# This file is responsible to set custom values to your new puppet repository +# to reflect the custom configuration for your infrastructure. +# +# This configuration is useful mostly after you cloned the puppet-boostrap module +# and want to configure it to boostrap a whole puppetmaster infrastructure. +# + +# The base domain for your infrastructure. +bootstrap::base_domain: 'vagrantup.com' + +# +# Root password. +# +# Use "mkpasswd -m sha-512" to generate root and first user's passwords. +bootstrap::root::password: '' + +# +# First user account +# +# Do not include "ssh-rsa " into the sshkey definition. +bootstrap::first_user: '' +bootstrap::first_user::password: '' +bootstrap::first_user::sshkey: '' +bootstrap::first_user::email: '' + +# +# First nodes +# + +# Hostname of the first server +bootstrap:first_hostname: '' + +# Create manifests and config for the first nodes? +bootstrap::first_nodes: false + +# MySQL password +mysql::server::rootpw: '' + +# Puppet master db password +nodo::role::master::db_password: '' diff --git a/puppet/hiera/common.yaml b/puppet/hiera/common.yaml new file mode 100644 index 0000000..d7e35a1 --- /dev/null +++ b/puppet/hiera/common.yaml @@ -0,0 +1,50 @@ +--- +# +# General +# +nodo::subsystem::apt::include_src: false +nodo::subsystem::apt::use_next_release: false +nodo::subsystem::monitor::use_nagios: false +nodo::subsystem::monitor::address: "%{::fqdn}" + +# +# Firewall +# +firewall::ssl_ratelimit: "s:ssl:200/min:20" +firewall::local_net: false +firewall::local::manage_host: true +firewall::local::manage_iface: false + +# +# Mail +# +mail::sympa::subdomain: "listas" +mail::sympa::lang: "pt_BR" + +# +# Monitoring +# +nodo::munin_node::allow: '127.0.0.1:192.168.0.[0-9]*:192.168.1.[0-9]*' + +# +# Wordpress +# +wordpress::locale: 'pt_BR' + +# +# Timezone and ntp +# +ntp::zone: "Brazil/East" +ntp::pool: "south-america.pool.ntp.org" +ntp::servers: + - 'a.ntp.br' + - 'b.ntp.br' + - 'c.ntp.br' + +# +# Nameservers +# +# OpenDNS +nodo::subsystem::resolver::nameservers: + - '208.67.222.222' + - '208.67.220.220' diff --git a/puppet/hiera/hiera.yaml b/puppet/hiera/hiera.yaml new file mode 100644 index 0000000..0a23dec --- /dev/null +++ b/puppet/hiera/hiera.yaml @@ -0,0 +1,19 @@ +--- +:backends: + - yaml +:yaml: + # Right now vagrant and puppet are not fully supporting + # a relative datadir. For it to work, we were forced to + # create a manifests/hiera symlink. This should be + # reconsidered in the future. + :datadir: hiera +:hierarchy: + - '%{::environment}/domain/%{::domain}/node/%{::clientcert}' + - '%{::environment}/domain/%{::domain}/role/%{::role}' + - '%{::environment}/domain/%{::domain}/location/%{::location}' + - '%{::environment}/domain/%{::domain}/%{::domain}' + - '%{::environment}/location/%{::location}' + - '%{::environment}/virtual/%{::virtual}' + - '%{::environment}/role/%{::role}' + - bootstrap + - common |