aboutsummaryrefslogtreecommitdiff
path: root/docs/puppet_classes
diff options
context:
space:
mode:
authorTim Meusel <tim@bastelfreak.de>2017-09-18 15:23:36 +0200
committerTim Meusel <tim@bastelfreak.de>2018-03-15 17:06:08 +0100
commit2d355a4c1baadc761d6b12645d0274da8866f722 (patch)
treee6d1a78f9719397ed9ce9144bf4706a3ccd46c48 /docs/puppet_classes
downloadpuppet-ferm-2d355a4c1baadc761d6b12645d0274da8866f722.tar.gz
puppet-ferm-2d355a4c1baadc761d6b12645d0274da8866f722.tar.bz2
initial commit
Diffstat (limited to 'docs/puppet_classes')
-rw-r--r--docs/puppet_classes/ferm.html297
-rw-r--r--docs/puppet_classes/ferm_3A_3Aconfig.html195
-rw-r--r--docs/puppet_classes/ferm_3A_3Ainstall.html125
-rw-r--r--docs/puppet_classes/ferm_3A_3Aservice.html149
4 files changed, 766 insertions, 0 deletions
diff --git a/docs/puppet_classes/ferm.html b/docs/puppet_classes/ferm.html
new file mode 100644
index 0000000..74c4b67
--- /dev/null
+++ b/docs/puppet_classes/ferm.html
@@ -0,0 +1,297 @@
+<!DOCTYPE html>
+<html>
+ <head>
+ <meta charset="utf-8">
+<meta name="viewport" content="width=device-width, initial-scale=1.0">
+<title>
+ Puppet Class: ferm
+
+ &mdash; Documentation by YARD 0.9.12
+
+</title>
+
+ <link rel="stylesheet" href="../css/style.css" type="text/css" charset="utf-8" />
+
+ <link rel="stylesheet" href="../css/common.css" type="text/css" charset="utf-8" />
+
+<script type="text/javascript" charset="utf-8">
+ pathId = "puppet_classes::ferm";
+ relpath = '../';
+</script>
+
+
+ <script type="text/javascript" charset="utf-8" src="../js/jquery.js"></script>
+
+ <script type="text/javascript" charset="utf-8" src="../js/app.js"></script>
+
+
+ </head>
+ <body>
+ <div class="nav_wrap">
+ <iframe id="nav" src="../puppet_class_list.html?1"></iframe>
+ <div id="resizer"></div>
+ </div>
+
+ <div id="main" tabindex="-1">
+ <div id="header">
+ <div id="menu">
+
+ <a href="../_index.html">Index (f)</a> &raquo;
+ <span class='title'><span class='object_link'>Puppet Classes</span></span>
+ &raquo;
+ <span class="title">ferm</span>
+
+</div>
+
+ <div id="search">
+
+ <a class="full_list_link" id="puppet_class_list_link"
+ href="../puppet_class_list.html">
+
+ <svg width="24" height="24">
+ <rect x="0" y="4" width="24" height="4" rx="1" ry="1"></rect>
+ <rect x="0" y="12" width="24" height="4" rx="1" ry="1"></rect>
+ <rect x="0" y="20" width="24" height="4" rx="1" ry="1"></rect>
+ </svg>
+ </a>
+
+</div>
+ <div class="clear"></div>
+ </div>
+
+ <div id="content"><h1>Puppet Class: ferm</h1>
+<div class="box_info">
+
+
+ <dl>
+ <dt>Defined in:</dt>
+ <dd>
+ manifests/init.pp
+ </dd>
+ </dl>
+</div>
+
+<h2>Overview</h2>
+<div class="docstring">
+ <div class="discussion">
+ <p>Class: ferm</p>
+
+<p>This class manages ferm installation and rule generation on modern linux systems</p>
+
+<p>class{&#39;ferm&#39;:
+ manage_service =&gt; true,
+}</p>
+
+ </div>
+</div>
+<div class="tags">
+
+ <div class="examples">
+ <p class="tag_title">Examples:</p>
+
+
+ <p class="example_title"><div class='inline'><p>deploy ferm and start it</p>
+</div></p>
+
+ <pre class="example code"><code></code></pre>
+
+ </div>
+<p class="tag_title">Parameters:</p>
+<ul class="param">
+
+ <li>
+
+ <span class='name'>manage_service</span>
+
+
+ <span class='type'>(<tt>Boolean</tt>)</span>
+
+
+
+ &mdash;
+ <div class='inline'><p>disable/enable the management of the ferm daemon
+Default value: false
+Allowed values: (true|false)</p>
+</div>
+
+ </li>
+
+ <li>
+
+ <span class='name'>manage_configfile</span>
+
+
+ <span class='type'>(<tt>Boolean</tt>)</span>
+
+
+
+ &mdash;
+ <div class='inline'><p>disable/enable the management of the ferm default config
+Default value: false
+Allowed values: (true|false)</p>
+</div>
+
+ </li>
+
+ <li>
+
+ <span class='name'>configfile</span>
+
+
+ <span class='type'>(<tt>Stdlib::Absolutepath</tt>)</span>
+
+
+
+ &mdash;
+ <div class='inline'><p>path to the config file
+Default value: /etc/ferm.conf
+Allowed values: Stdlib::Absolutepath</p>
+</div>
+
+ </li>
+
+ <li>
+
+ <span class='name'>forward_policy</span>
+
+
+ <span class='type'>(<tt>Ferm::Policies</tt>)</span>
+
+
+
+ &mdash;
+ <div class='inline'><p>default policy for the FORWARD chain
+Default value: DROP
+Allowed values: (ACCEPT|DROP|REJECT)</p>
+</div>
+
+ </li>
+
+ <li>
+
+ <span class='name'>output_policy</span>
+
+
+ <span class='type'>(<tt>Ferm::Policies</tt>)</span>
+
+
+
+ &mdash;
+ <div class='inline'><p>default policy for the OUTPUT chain
+Default value: ACCEPT
+Allowed values: (ACCEPT|DROP|REJECT)</p>
+</div>
+
+ </li>
+
+ <li>
+
+ <span class='name'>input_policy</span>
+
+
+ <span class='type'>(<tt>Ferm::Policies</tt>)</span>
+
+
+
+ &mdash;
+ <div class='inline'><p>default policy for the INPUT chain
+Default value: DROP
+Allowed values: (ACCEPT|DROP|REJECT)</p>
+</div>
+
+ </li>
+
+ <li>
+
+ <span class='name'>rules</span>
+
+
+ <span class='type'>(<tt>Hash</tt>)</span>
+
+
+
+ &mdash;
+ <div class='inline'><p>a hash that holds all data for ferm::rule
+Default value: Empty Hash
+Allowed value: Any Hash</p>
+</div>
+
+ </li>
+
+</ul>
+
+
+</div><div class="method_details_list">
+ <table class="source_code">
+ <tr>
+ <td>
+ <pre class="lines">
+
+
+31
+32
+33
+34
+35
+36
+37
+38
+39
+40
+41
+42
+43
+44
+45
+46
+47
+48
+49
+50
+51
+52
+53
+54
+55</pre>
+ </td>
+ <td>
+ <pre class="code"><span class="info file"># File 'manifests/init.pp', line 31</span>
+
+class ferm (
+ Boolean $manage_service,
+ Boolean $manage_configfile,
+ Stdlib::Absolutepath $configfile,
+ Ferm::Policies $forward_policy,
+ Ferm::Policies $output_policy,
+ Ferm::Policies $input_policy,
+ Hash $rules,
+) {
+ contain ferm::install
+ contain ferm::config
+ contain ferm::service
+
+ Class[&#39;ferm::install&#39;]
+ -&gt; Class[&#39;ferm::config&#39;]
+ ~&gt; Class[&#39;ferm::service&#39;]
+
+ $rules.each |$rulename, $attributes| {
+ ferm::rule{$rulename:
+ * =&gt; $attributes,
+ }
+ }
+ # import all exported resources with ferm rules for this node
+ Ferm::Rule &lt;&lt;| tag == $trusted[&#39;certname&#39;] |&gt;&gt;
+}</pre>
+ </td>
+ </tr>
+ </table>
+</div>
+</div>
+
+ <div id="footer">
+ Generated by <a href="http://yardoc.org" title="Yay! A Ruby Documentation Tool" target="_parent">yard</a>.
+</div>
+
+ </div>
+ </body>
+</html> \ No newline at end of file
diff --git a/docs/puppet_classes/ferm_3A_3Aconfig.html b/docs/puppet_classes/ferm_3A_3Aconfig.html
new file mode 100644
index 0000000..3d9813e
--- /dev/null
+++ b/docs/puppet_classes/ferm_3A_3Aconfig.html
@@ -0,0 +1,195 @@
+<!DOCTYPE html>
+<html>
+ <head>
+ <meta charset="utf-8">
+<meta name="viewport" content="width=device-width, initial-scale=1.0">
+<title>
+ Puppet Class: ferm::config
+
+ &mdash; Documentation by YARD 0.9.12
+
+</title>
+
+ <link rel="stylesheet" href="../css/style.css" type="text/css" charset="utf-8" />
+
+ <link rel="stylesheet" href="../css/common.css" type="text/css" charset="utf-8" />
+
+<script type="text/javascript" charset="utf-8">
+ pathId = "puppet_classes::ferm::config";
+ relpath = '../';
+</script>
+
+
+ <script type="text/javascript" charset="utf-8" src="../js/jquery.js"></script>
+
+ <script type="text/javascript" charset="utf-8" src="../js/app.js"></script>
+
+
+ </head>
+ <body>
+ <div class="nav_wrap">
+ <iframe id="nav" src="../puppet_class_list.html?1"></iframe>
+ <div id="resizer"></div>
+ </div>
+
+ <div id="main" tabindex="-1">
+ <div id="header">
+ <div id="menu">
+
+ <a href="../_index.html">Index (f)</a> &raquo;
+ <span class='title'><span class='object_link'>Puppet Classes</span></span>
+ &raquo;
+ <span class="title">ferm::config</span>
+
+</div>
+
+ <div id="search">
+
+ <a class="full_list_link" id="puppet_class_list_link"
+ href="../puppet_class_list.html">
+
+ <svg width="24" height="24">
+ <rect x="0" y="4" width="24" height="4" rx="1" ry="1"></rect>
+ <rect x="0" y="12" width="24" height="4" rx="1" ry="1"></rect>
+ <rect x="0" y="20" width="24" height="4" rx="1" ry="1"></rect>
+ </svg>
+ </a>
+
+</div>
+ <div class="clear"></div>
+ </div>
+
+ <div id="content"><h1>Puppet Class: ferm::config</h1>
+<div class="box_info">
+
+
+ <dl>
+ <dt>Defined in:</dt>
+ <dd>
+ manifests/config.pp
+ </dd>
+ </dl>
+</div>
+
+<h2>Overview</h2>
+<div class="docstring">
+ <div class="discussion">
+ <p>This class handles the configuration file. Avoid modifying private classes.</p>
+
+ </div>
+</div>
+<div class="tags">
+
+
+</div><div class="method_details_list">
+ <table class="source_code">
+ <tr>
+ <td>
+ <pre class="lines">
+
+
+3
+4
+5
+6
+7
+8
+9
+10
+11
+12
+13
+14
+15
+16
+17
+18
+19
+20
+21
+22
+23
+24
+25
+26
+27
+28
+29
+30
+31
+32
+33
+34
+35
+36
+37
+38
+39
+40
+41
+42
+43
+44
+45
+46</pre>
+ </td>
+ <td>
+ <pre class="code"><span class="info file"># File 'manifests/config.pp', line 3</span>
+
+class ferm::config {
+
+ # this is a private class
+ assert_private(&quot;You&#39;re not supposed to do that!&quot;)
+
+ # copy static files to ferm
+ # on a long term point of view, we want to package this
+ file{&#39;/etc/ferm.d&#39;:
+ ensure =&gt; &#39;directory&#39;,
+ }
+ -&gt; file{&#39;/etc/ferm.d/definitions&#39;:
+ ensure =&gt; &#39;directory&#39;,
+ }
+ -&gt; file{&#39;/etc/ferm.d/chains&#39;:
+ ensure =&gt; &#39;directory&#39;,
+ }
+
+ if $ferm::manage_configfile {
+ concat{$ferm::configfile:
+ ensure =&gt; &#39;present&#39;,
+ }
+ concat::fragment{&#39;ferm_header.conf&#39;:
+ target =&gt; $ferm::configfile,
+ content =&gt; epp(&quot;${module_name}/ferm_header.conf.epp&quot;),
+ order =&gt; &#39;01&#39;,
+ }
+
+ concat::fragment{&#39;ferm.conf&#39;:
+ target =&gt; $ferm::configfile,
+ content =&gt; epp(&quot;${module_name}/ferm.conf.epp&quot;),
+ order =&gt; &#39;50&#39;,
+ }
+ }
+
+ ferm::chain{&#39;INPUT&#39;:
+ policy =&gt; $ferm::input_policy,
+ }
+ ferm::chain{&#39;FORWARD&#39;:
+ policy =&gt; $ferm::forward_policy,
+ }
+ ferm::chain{&#39;OUTPUT&#39;:
+ policy =&gt; $ferm::output_policy,
+ }
+}</pre>
+ </td>
+ </tr>
+ </table>
+</div>
+</div>
+
+ <div id="footer">
+ Generated by <a href="http://yardoc.org" title="Yay! A Ruby Documentation Tool" target="_parent">yard</a>.
+</div>
+
+ </div>
+ </body>
+</html> \ No newline at end of file
diff --git a/docs/puppet_classes/ferm_3A_3Ainstall.html b/docs/puppet_classes/ferm_3A_3Ainstall.html
new file mode 100644
index 0000000..c6e1b12
--- /dev/null
+++ b/docs/puppet_classes/ferm_3A_3Ainstall.html
@@ -0,0 +1,125 @@
+<!DOCTYPE html>
+<html>
+ <head>
+ <meta charset="utf-8">
+<meta name="viewport" content="width=device-width, initial-scale=1.0">
+<title>
+ Puppet Class: ferm::install
+
+ &mdash; Documentation by YARD 0.9.12
+
+</title>
+
+ <link rel="stylesheet" href="../css/style.css" type="text/css" charset="utf-8" />
+
+ <link rel="stylesheet" href="../css/common.css" type="text/css" charset="utf-8" />
+
+<script type="text/javascript" charset="utf-8">
+ pathId = "puppet_classes::ferm::install";
+ relpath = '../';
+</script>
+
+
+ <script type="text/javascript" charset="utf-8" src="../js/jquery.js"></script>
+
+ <script type="text/javascript" charset="utf-8" src="../js/app.js"></script>
+
+
+ </head>
+ <body>
+ <div class="nav_wrap">
+ <iframe id="nav" src="../puppet_class_list.html?1"></iframe>
+ <div id="resizer"></div>
+ </div>
+
+ <div id="main" tabindex="-1">
+ <div id="header">
+ <div id="menu">
+
+ <a href="../_index.html">Index (f)</a> &raquo;
+ <span class='title'><span class='object_link'>Puppet Classes</span></span>
+ &raquo;
+ <span class="title">ferm::install</span>
+
+</div>
+
+ <div id="search">
+
+ <a class="full_list_link" id="puppet_class_list_link"
+ href="../puppet_class_list.html">
+
+ <svg width="24" height="24">
+ <rect x="0" y="4" width="24" height="4" rx="1" ry="1"></rect>
+ <rect x="0" y="12" width="24" height="4" rx="1" ry="1"></rect>
+ <rect x="0" y="20" width="24" height="4" rx="1" ry="1"></rect>
+ </svg>
+ </a>
+
+</div>
+ <div class="clear"></div>
+ </div>
+
+ <div id="content"><h1>Puppet Class: ferm::install</h1>
+<div class="box_info">
+
+
+ <dl>
+ <dt>Defined in:</dt>
+ <dd>
+ manifests/install.pp
+ </dd>
+ </dl>
+</div>
+
+<h2>Overview</h2>
+<div class="docstring">
+ <div class="discussion">
+ <p>This class handles the configuration file. Avoid modifying private classes.</p>
+
+ </div>
+</div>
+<div class="tags">
+
+
+</div><div class="method_details_list">
+ <table class="source_code">
+ <tr>
+ <td>
+ <pre class="lines">
+
+
+3
+4
+5
+6
+7
+8
+9
+10
+11</pre>
+ </td>
+ <td>
+ <pre class="code"><span class="info file"># File 'manifests/install.pp', line 3</span>
+
+class ferm::install {
+
+ # this is a private class
+ assert_private(&quot;You&#39;re not supposed to do that!&quot;)
+
+ package{&#39;ferm&#39;:
+ ensure =&gt; &#39;latest&#39;,
+ }
+}</pre>
+ </td>
+ </tr>
+ </table>
+</div>
+</div>
+
+ <div id="footer">
+ Generated by <a href="http://yardoc.org" title="Yay! A Ruby Documentation Tool" target="_parent">yard</a>.
+</div>
+
+ </div>
+ </body>
+</html> \ No newline at end of file
diff --git a/docs/puppet_classes/ferm_3A_3Aservice.html b/docs/puppet_classes/ferm_3A_3Aservice.html
new file mode 100644
index 0000000..cfa5022
--- /dev/null
+++ b/docs/puppet_classes/ferm_3A_3Aservice.html
@@ -0,0 +1,149 @@
+<!DOCTYPE html>
+<html>
+ <head>
+ <meta charset="utf-8">
+<meta name="viewport" content="width=device-width, initial-scale=1.0">
+<title>
+ Puppet Class: ferm::service
+
+ &mdash; Documentation by YARD 0.9.12
+
+</title>
+
+ <link rel="stylesheet" href="../css/style.css" type="text/css" charset="utf-8" />
+
+ <link rel="stylesheet" href="../css/common.css" type="text/css" charset="utf-8" />
+
+<script type="text/javascript" charset="utf-8">
+ pathId = "puppet_classes::ferm::service";
+ relpath = '../';
+</script>
+
+
+ <script type="text/javascript" charset="utf-8" src="../js/jquery.js"></script>
+
+ <script type="text/javascript" charset="utf-8" src="../js/app.js"></script>
+
+
+ </head>
+ <body>
+ <div class="nav_wrap">
+ <iframe id="nav" src="../puppet_class_list.html?1"></iframe>
+ <div id="resizer"></div>
+ </div>
+
+ <div id="main" tabindex="-1">
+ <div id="header">
+ <div id="menu">
+
+ <a href="../_index.html">Index (f)</a> &raquo;
+ <span class='title'><span class='object_link'>Puppet Classes</span></span>
+ &raquo;
+ <span class="title">ferm::service</span>
+
+</div>
+
+ <div id="search">
+
+ <a class="full_list_link" id="puppet_class_list_link"
+ href="../puppet_class_list.html">
+
+ <svg width="24" height="24">
+ <rect x="0" y="4" width="24" height="4" rx="1" ry="1"></rect>
+ <rect x="0" y="12" width="24" height="4" rx="1" ry="1"></rect>
+ <rect x="0" y="20" width="24" height="4" rx="1" ry="1"></rect>
+ </svg>
+ </a>
+
+</div>
+ <div class="clear"></div>
+ </div>
+
+ <div id="content"><h1>Puppet Class: ferm::service</h1>
+<div class="box_info">
+
+
+ <dl>
+ <dt>Defined in:</dt>
+ <dd>
+ manifests/service.pp
+ </dd>
+ </dl>
+</div>
+
+<h2>Overview</h2>
+<div class="docstring">
+ <div class="discussion">
+ <p>This class handles the configuration file. Avoid modifying private classes.</p>
+
+ </div>
+</div>
+<div class="tags">
+
+
+</div><div class="method_details_list">
+ <table class="source_code">
+ <tr>
+ <td>
+ <pre class="lines">
+
+
+3
+4
+5
+6
+7
+8
+9
+10
+11
+12
+13
+14
+15
+16
+17
+18
+19
+20
+21
+22
+23</pre>
+ </td>
+ <td>
+ <pre class="code"><span class="info file"># File 'manifests/service.pp', line 3</span>
+
+class ferm::service {
+
+ # this is a private class
+ assert_private(&quot;You&#39;re not supposed to do that!&quot;)
+
+ if $ferm::manage_service {
+ service{&#39;ferm&#39;:
+ ensure =&gt; &#39;running&#39;,
+ enable =&gt; true,
+ }
+
+ # on Ubuntu, we can&#39;t start the service, unless we set ENABLED=true in /etc/default/ferm...
+ if ($facts[&#39;os&#39;][&#39;name&#39;] == &#39;Ubuntu&#39;) {
+ file_line{&#39;enable_ferm&#39;:
+ path =&gt; &#39;/etc/default/ferm&#39;,
+ line =&gt; &#39;ENABLED=&quot;yes&quot;&#39;,
+ match =&gt; &#39;ENABLED=&#39;,
+ }
+ }
+ }
+}</pre>
+ </td>
+ </tr>
+ </table>
+</div>
+</div>
+
+ <div id="footer">
+ Generated by <a href="http://yardoc.org" title="Yay! A Ruby Documentation Tool" target="_parent">yard</a>.
+</div>
+
+ </div>
+ </body>
+</html> \ No newline at end of file