aboutsummaryrefslogtreecommitdiff
path: root/manifests/nodo.pp
diff options
context:
space:
mode:
authorSilvio Rhatto <rhatto@riseup.net>2013-01-22 18:11:54 -0200
committerSilvio Rhatto <rhatto@riseup.net>2013-01-22 18:11:54 -0200
commit40c517b334bd99fec985959f97e48c775ae6da3a (patch)
treee501f0cceb8effed2ec3ca1769b07bcf744291dc /manifests/nodo.pp
parent0f8e1addb8b7e45577221a34cedb8389500eab28 (diff)
downloadpuppet-nodo-40c517b334bd99fec985959f97e48c775ae6da3a.tar.gz
puppet-nodo-40c517b334bd99fec985959f97e48c775ae6da3a.tar.bz2
Moving all sshd declarations to nodo class
Diffstat (limited to 'manifests/nodo.pp')
-rw-r--r--manifests/nodo.pp28
1 files changed, 21 insertions, 7 deletions
diff --git a/manifests/nodo.pp b/manifests/nodo.pp
index 873c075..8d746d0 100644
--- a/manifests/nodo.pp
+++ b/manifests/nodo.pp
@@ -40,12 +40,6 @@ class nodo {
# Apt configuration
if $use_apt != false {
- # TODO: remove this in the future after all old nodes
- # have applied the catalog.
- file { '/etc/apt/sources.list.d/debian-backports.list':
- ensure => absent,
- }
-
class { 'apt':
include_src => hiera('nodo::apt_include_src', false),
use_next_release => hiera('nodo::apt_use_next_release', false),
@@ -85,6 +79,26 @@ class nodo {
$sshd_hardened_ssl = "yes"
$sshd_print_motd = "yes"
+ # SSH Server
+ #
+ # We need to restrict listen address so multiple instances
+ # can live together in the same physical host.
+ #
+ case $sshd_listen_address {
+ '': { $sshd_listen_address = [ "$ipaddress", '127.0.0.1' ] }
+ }
+
+ class { 'sshd':
+ listen_address => $sshd_listen_address,
+ password_authentication => $sshd_password_authentication,
+ shared_ip => $sshd_shared_ip,
+ tcp_forwarding => $sshd_tcp_forwarding,
+ hardened_ssl => $sshd_hardened_ssl,
+ print_motd => $sshd_print_motd,
+ ports => $sshd_ports,
+ use_pam => $sshd_use_pam,
+ }
+
file { "/etc/hostname":
owner => "root",
group => "root",
@@ -94,7 +108,7 @@ class nodo {
}
file { "/etc/rc.local":
- source => "puppet://$server/modules/nodo/etc/rc.local",
+ source => "puppet:///modules/nodo/etc/rc.local",
owner => "root",
group => "root",
mode => 0755,