diff options
29 files changed, 102 insertions, 97 deletions
diff --git a/manifests/base/host.pp b/manifests/base/host.pp index 96c2e63..6e71f98 100644 --- a/manifests/base/host.pp +++ b/manifests/base/host.pp @@ -14,7 +14,7 @@ class nodo::base::host { class { 'firewall': } # Time - $ntpdate = hiera('nodo::host::ntpdate', true) + $ntpdate = lookup('nodo::host::ntpdate', undef, undef, true) case $ntpdate { false: { class { 'ntp::timezone': } } default: { class { 'ntp::ntpdate': } } diff --git a/manifests/base/physical.pp b/manifests/base/physical.pp index 8c3b1c4..936a21f 100644 --- a/manifests/base/physical.pp +++ b/manifests/base/physical.pp @@ -1,5 +1,5 @@ class nodo::base::physical inherits nodo::base::host { - $smartmontools = hiera('nodo::smartmontools', true) + $smartmontools = lookup('nodo::smartmontools', undef, undef, true) if $smartmontools == true { class { 'smartmontools': } diff --git a/manifests/base/virtual.pp b/manifests/base/virtual.pp index c532620..0e107c0 100644 --- a/manifests/base/virtual.pp +++ b/manifests/base/virtual.pp @@ -10,6 +10,6 @@ class nodo::base::virtual { } nodo::subsystem::monkeysphere { "${::hostname}": - port => hiera('nodo::virtual::ssh_port', '22'), + port => lookup('nodo::virtual::ssh_port', undef, undef, '22'), } } diff --git a/manifests/init.pp b/manifests/init.pp index adbaebc..5baee4d 100644 --- a/manifests/init.pp +++ b/manifests/init.pp @@ -3,29 +3,34 @@ # class nodo( - $role = 'default', - $location = 'default', + $role = $::role, ) { # Default execution path Exec { path => "/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin" } # Fileserver backup - filebucket { server: server => hiera('puppet::daemon::server', "puppet.${::domain}") } + filebucket { server: server => lookup('puppet::daemon::server', undef, undef, "puppet.${::domain}") } File { backup => server } # Include base class include nodo::base + $nodo_role = $role ? { + '' => 'default', + default => $role, + } + # Include role class - if defined("nodo::role::${role}") { - class { "nodo::role::${role}": } + if defined("nodo::role::${nodo_role}") { + class { "nodo::role::${nodo_role}": } } # Include additional classes - $classes = hiera('classes', false) - if $classes != false { - hiera_include('classes') - } + #$classes = lookup('classes', undef, undef, false) + #if $classes != false { + # hiera_include('classes') + #} + lookup('classes', { merge => unique }).include # Declare resources class { "nodo::resources": } diff --git a/manifests/resources.pp b/manifests/resources.pp index 5c014fb..8fe188f 100644 --- a/manifests/resources.pp +++ b/manifests/resources.pp @@ -5,58 +5,58 @@ class nodo::resources { } # Packages - $packages = hiera('packages', {}) + $packages = lookup('packages', undef, undef, {}) create_resources('package', $packages) # Files - $files = hiera('files', {}) + $files = lookup('files', undef, undef, {}) create_resources('file', $files) # File lines - $file_lines = hiera('file_lines', {}) + $file_lines = lookup('file_lines', undef, undef, {}) create_resources('file_line', $file_lines) # Virtual machines - $vms = hiera('virtual::machines', {}) + $vms = lookup('virtual::machines', undef, undef, {}) create_resources('nodo::subsystem::virtual::instance', $vms) # Users - $users = hiera('users', {}) + $users = lookup('users', undef, undef, {}) create_resources('user::manage', $users) # Backup users - $backup_users = hiera('backup::users', {}) + $backup_users = lookup('backup::users', undef, undef, {}) create_resources('backup::user', $backup_users) # Cron entries - $cron = hiera('cron::jobs', {}) + $cron = lookup('cron::jobs', undef, undef, {}) create_resources('cron', $cron) # Hosts - $hosts = hiera('hosts', {}) + $hosts = lookup('hosts', undef, undef, {}) create_resources('host', $hosts) # Nginx entries - $nginx = hiera('nginx::sites', {}) + $nginx = lookup('nginx::sites', undef, undef, {}) create_resources('nginx::site', $nginx) # SSH keys - $sshkeys = hiera('sshkeys', {}) + $sshkeys = lookup('sshkeys', undef, undef, {}) create_resources('sshkey', $sshkeys) # SSH Authorized keys - $ssh_authorized_keys = hiera('ssh_authorized_keys', {}) + $ssh_authorized_keys = lookup('ssh_authorized_keys', undef, undef, {}) create_resources('ssh_authorized_key', $ssh_authorized_keys) # PaX flags - $pax = hiera('nodo::subsystem::grsec::paxctl', {}) + $pax = lookup('nodo::subsystem::grsec::paxctl', undef, undef, {}) create_resources('nodo::subsystem::grsec::paxctl', $pax) # Exec - $execs = hiera('execs', {}) + $execs = lookup('execs', undef, undef, {}) create_resources('exec', $execs) # Repositories - $vcsrepos = hiera('vcsrepos', {}) + $vcsrepos = lookup('vcsrepos', undef, undef, {}) create_resources('vcsrepo', $vcsrepos) } diff --git a/manifests/role/mumble.pp b/manifests/role/mumble.pp index c9b26f2..3765dab 100644 --- a/manifests/role/mumble.pp +++ b/manifests/role/mumble.pp @@ -1,9 +1,9 @@ class nodo::role::mumble inherits nodo::base::virtual { class { 'mumble::ssl': - config_content => hiera('mumble::config_content'), + config_content => lookup('mumble::config_content'), } - $ecdhforce = hiera('nodo::role::mumble::ecdhforce', false) + $ecdhforce = lookup('nodo::role::mumble::ecdhforce', undef, undef, false) if $ecdhforce == true { include mumble::ecdhforce diff --git a/manifests/role/nas.pp b/manifests/role/nas.pp index 7eecbe3..a24ef77 100644 --- a/manifests/role/nas.pp +++ b/manifests/role/nas.pp @@ -31,14 +31,14 @@ class nodo::role::nas( # http://lists.freedesktop.org/archives/avahi/2006-July/000824.html # http://cups.org/documentation.php/doc-1.6/ref-cupsd-conf.html#BrowseLocalProtocols # http://www.dns-sd.org/ServiceTypes.html - $avahi = hiera('nodo::role::nas::avahi', false) + $avahi = lookup('nodo::role::nas::avahi', undef, undef, false) if $avahi == true { include avahi } # DLNA - $dlna = hiera('nodo::role::nas::dlna', false) + $dlna = lookup('nodo::role::nas::dlna', undef, undef, false) if $dlna == true { # See https://wiki.archlinux.org/index.php/MiniDLNA#Automatic_Media_DB_Update @@ -71,7 +71,7 @@ class nodo::role::nas( # http://git.puppet.immerda.ch/?p=module-nfsd.git;a=summary # http://wiki.debian.org/NFSServerSetup # http://www.tldp.org/HOWTO/NFS-HOWTO/ - $nfs = hiera('nodo::role::nas::nfs', false) + $nfs = lookup('nodo::role::nas::nfs', undef, undef, false) if $nfs == true { # Main class @@ -88,7 +88,7 @@ class nodo::role::nas( # https://forum.openwrt.org/viewtopic.php?id=12976 # http://download.pureftpd.org/pub/pure-ftpd/doc/FAQ # http://www.massimilianomarini.com/04/02/2012/how-follow-symbolic-links-pure-ftpd - $ftp = hiera('nodo::role::nas::ftp', false) + $ftp = lookup('nodo::role::nas::ftp', undef, undef, false) if $ftp == true { # Main class @@ -132,15 +132,15 @@ class nodo::role::nas( # http://www.linuxplanet.com/linuxplanet/tutorials/6600/2 # http://forums.fedoraforum.org/showthread.php?t=260519 # http://randombio.com/linuxsetup38.html - $samba = hiera('nodo::role::nas::samba', false) + $samba = lookup('nodo::role::nas::samba', undef, undef, false) if $samba == true { # Main class class { 'samba::server': - workgroup => hiera('nodo::samba::workgroup', 'WORKGROUP'), - server_string => hiera('nodo::samba::server_string', 'Samba Server'), - interfaces => hiera('nodo::samba::interfaces', 'lo eth0'), - security => hiera('nodo::samba::security', 'user'), + workgroup => lookup('nodo::samba::workgroup', undef, undef, 'WORKGROUP'), + server_string => lookup('nodo::samba::server_string', undef, undef, 'Samba Server'), + interfaces => lookup('nodo::samba::interfaces', undef, undef, 'lo eth0'), + security => lookup('nodo::samba::security', undef, undef, 'user'), preferred_master => 'yes', printing => 'cups', printcap_name => 'cups', @@ -153,7 +153,7 @@ class nodo::role::nas( # http://linux-igd.sourceforge.net/documentation.php samba::server::option { # Remote announce won't work since routers don't forward broadcast traffic - #'remote announce': value => hiera('nodo::samba::remote_announce', ''); + #'remote announce': value => lookup('nodo::samba::remote_announce', undef, undef, ''); 'wins support': value => 'yes'; 'domain master': value => 'yes'; } @@ -191,7 +191,7 @@ class nodo::role::nas( # https://github.com/camptocamp/puppet-lighttpd # https://github.com/example42/puppet-lighttpd # http://git.puppet.immerda.ch/?p=module-lighttpd.git;a=summary - $http = hiera('nodo::role::nas::http', false) + $http = lookup('nodo::role::nas::http', undef, undef, false) if $http == true { # Main class @@ -224,7 +224,7 @@ class nodo::role::nas( # # TFTP # - $tftp = hiera('nodo::role::nas::tftp', false) + $tftp = lookup('nodo::role::nas::tftp', undef, undef, false) if $tftp == true { # Main class @@ -239,7 +239,7 @@ class nodo::role::nas( # # Rsync # - $rsync = hiera('nodo::role::nas::rsync', false) + $rsync = lookup('nodo::role::nas::rsync', undef, undef, false) if $rsync == true { include rsync::server @@ -263,7 +263,7 @@ class nodo::role::nas( # # MPD # - $mpd = hiera('nodo::role::nas::mpd', false) + $mpd = lookup('nodo::role::nas::mpd', undef, undef, false) if $mpd == true { include mpd @@ -274,7 +274,7 @@ class nodo::role::nas( # # CherryMusic # - $cherrymusic = hiera('nodo::role::nas::cherrymusic', false) + $cherrymusic = lookup('nodo::role::nas::cherrymusic', undef, undef, false) if $cherrymusic == true { include cherrymusic @@ -283,7 +283,7 @@ class nodo::role::nas( # # Airsonic # - $airsonic = hiera('nodo::role::nas::airsonic', false) + $airsonic = lookup('nodo::role::nas::airsonic', undef, undef, false) if $airsonic == true { include airsonic @@ -295,7 +295,7 @@ class nodo::role::nas( # References # https://github.com/mosen/puppet-cups # https://github.com/camptocamp/puppet-cups - $cups = hiera('nodo::role::nas::cups', false) + $cups = lookup('nodo::role::nas::cups', undef, undef, false) if $cups == true { include firewall::printer @@ -305,7 +305,7 @@ class nodo::role::nas( # # Torrent # - $torrent = hiera('nodo::role::nas::torrent', false) + $torrent = lookup('nodo::role::nas::torrent', undef, undef, false) if $torrent == true { include pyroscope @@ -318,7 +318,7 @@ class nodo::role::nas( # http://packages.debian.org/stable/forked-daapd # http://packages.debian.org/squeeze/mt-daapd # https://github.com/stahnma/puppet-module-daap_server - #$daap = hiera('nodo::role::nas::daap', false) + #$daap = lookup('nodo::role::nas::daap', undef, undef, false) #if $daap == true { # # Main class, but package not available on wheezy diff --git a/manifests/role/web.pp b/manifests/role/web.pp index f315418..7b2c032 100644 --- a/manifests/role/web.pp +++ b/manifests/role/web.pp @@ -1,6 +1,6 @@ class nodo::role::web inherits nodo::base::virtual { # Hidden services - $hidden = hiera('apache::site::hidden', false) + $hidden = lookup('apache::site::hidden', undef, undef, false) if $hidden == true { include onion } @@ -11,14 +11,14 @@ class nodo::role::web inherits nodo::base::virtual { include domain_check ## Reprepro configuration - #$reprepro = hiera('nodo::web::reprepro', false) + #$reprepro = lookup('nodo::web::reprepro', undef, undef, false) #$reprepro_basedir = '/var/reprepro' # #case $reprepro { # true,'enabled': { # class { 'reprepro': # basedir => '/var/reprepro', - # uploaders => hiera('nodo::web::reprepro_uploaders', [ ]), + # uploaders => lookup('nodo::web::reprepro_uploaders', undef, undef, [ ]), # } # # include reprepro::cron diff --git a/manifests/role/yacy.pp b/manifests/role/yacy.pp index d047c83..9cb4199 100644 --- a/manifests/role/yacy.pp +++ b/manifests/role/yacy.pp @@ -5,7 +5,7 @@ class nodo::role::yacy inherits nodo::base::virtual { ensure => installed, } - $yacy_status = hiera('nodo::role::yacy::status', 'running') + $yacy_status = lookup('nodo::role::yacy::status', undef, undef, 'running') service { 'yacy': ensure => $yacy_status, diff --git a/manifests/subsystem/backup.pp b/manifests/subsystem/backup.pp index 8126249..bfdffaa 100644 --- a/manifests/subsystem/backup.pp +++ b/manifests/subsystem/backup.pp @@ -4,20 +4,20 @@ class nodo::subsystem::backup { # class { '::backup': } - $local_backup = hiera('nodo::subsystem::backup::localhost', false) + $local_backup = lookup('nodo::subsystem::backup::localhost', undef, undef, false) # Local encrypted backup case $local_backup { true,enabled,present: { backup::duplicity { "localhost": - encryptkey => hiera('nodo::subsystem::backup::encryptkey', false), - password => hiera('nodo::subsystem::backup::password'), + encryptkey => lookup('nodo::subsystem::backup::encryptkey', undef, undef, false), + password => lookup('nodo::subsystem::backup::password'), } } false,absent: { backup::duplicity { "localhost": - encryptkey => hiera('nodo::subsystem::backup::encryptkey', false), - password => hiera('nodo::subsystem::backup::password', false), + encryptkey => lookup('nodo::subsystem::backup::encryptkey', undef, undef, false), + password => lookup('nodo::subsystem::backup::password', undef, undef, false), ensure => absent, } } @@ -25,10 +25,10 @@ class nodo::subsystem::backup { } # Setup rsync instances - $rsync = hiera('backup::rsync', {}) + $rsync = lookup('backup::rsync', undef, undef, {}) create_resources('backup::rsync', $rsync) # Setup borg instances - $borg = hiera('backup::borg', {}) + $borg = lookup('backup::borg', undef, undef, {}) create_resources('backup::borg', $borg) } diff --git a/manifests/subsystem/dhclient.pp b/manifests/subsystem/dhclient.pp index e67a6e8..e809f1a 100644 --- a/manifests/subsystem/dhclient.pp +++ b/manifests/subsystem/dhclient.pp @@ -1,7 +1,7 @@ class nodo::subsystem::dhclient( - $ensure = hiera('nodo::subsystem::dhclient::ensure', 'present'), - $supersede_domain_name = hiera('nodo::subsystem::dhclient::supersede_domain_name', $::domain), - $supersede_domain_search = hiera('nodo::subsystem::dhclient::supersede_domain_search', $::domain) + $ensure = lookup('nodo::subsystem::dhclient::ensure', undef, undef, 'present'), + $supersede_domain_name = lookup('nodo::subsystem::dhclient::supersede_domain_name', undef, undef, $::domain), + $supersede_domain_search = lookup('nodo::subsystem::dhclient::supersede_domain_search', undef, undef, $::domain) ) { package { 'isc-dhcp-client': ensure => $ensure, diff --git a/manifests/subsystem/hosts.pp b/manifests/subsystem/hosts.pp index 341a827..54d112b 100644 --- a/manifests/subsystem/hosts.pp +++ b/manifests/subsystem/hosts.pp @@ -1,5 +1,5 @@ class nodo::subsystem::hosts( - $custom = hiera('nodo::subsystem::hosts::custom', false) + $custom = lookup('nodo::subsystem::hosts::custom', undef, undef, false) ) { # Sometimes might be useful to manage the whole # hosts file, see http://projects.puppetlabs.com/issues/10704 diff --git a/manifests/subsystem/mail.pp b/manifests/subsystem/mail.pp index d0773e9..2bfd75e 100644 --- a/manifests/subsystem/mail.pp +++ b/manifests/subsystem/mail.pp @@ -1,6 +1,6 @@ class nodo::subsystem::mail { # Email delivery configuration - $mail_delivery = hiera('nodo::subsystem::mail::delivery', 'exim') + $mail_delivery = lookup('nodo::subsystem::mail::delivery', undef, undef, 'exim') # A handy SMTP wrapper include nodo::subsystem::mail::msmtp @@ -15,9 +15,9 @@ class nodo::subsystem::mail { case $mail_delivery { 'tunnel': { - $mail_hostname = hiera('nodo::subsystem::mail::hostname') + $mail_hostname = lookup('nodo::subsystem::mail::hostname') tunnel::autossh::mail { "$mail_hostname": - sshport => hiera('nodo::subsystem::mail::ssh_port'), + sshport => lookup('nodo::subsystem::mail::ssh_port'), } } 'postfix', 'disabled': { } diff --git a/manifests/subsystem/media.pp b/manifests/subsystem/media.pp index b67ddbd..1319e73 100644 --- a/manifests/subsystem/media.pp +++ b/manifests/subsystem/media.pp @@ -3,7 +3,7 @@ class nodo::subsystem::media { class { [ 'nodo::subsystem::media::folders', 'nodo::subsystem::media::groups' ]: } # Make sure basic media exist, no matter if there is an external disk attached - $cache = hiera('nodo::media::folders', '') + $cache = lookup('nodo::media::folders', undef, undef, '') if $cache != '' { file { "${cache}": diff --git a/manifests/subsystem/media/folders.pp b/manifests/subsystem/media/folders.pp index a745a54..8afbca8 100644 --- a/manifests/subsystem/media/folders.pp +++ b/manifests/subsystem/media/folders.pp @@ -1,8 +1,8 @@ class nodo::subsystem::media::folders( - $base = hiera('nodo::subsystem::media::folders::base', '/var/cache/media'), - $cache = hiera('nodo::subsystem::media::folders::cache', directory), - $owner = hiera('nodo::subsystem::media::folders::owner', false), - $group = hiera('nodo::subsystem::media::folders::group', false) + $base = lookup('nodo::subsystem::media::folders::base', undef, undef, '/var/cache/media'), + $cache = lookup('nodo::subsystem::media::folders::cache', undef, undef, directory), + $owner = lookup('nodo::subsystem::media::folders::owner', undef, undef, false), + $group = lookup('nodo::subsystem::media::folders::group', undef, undef, false) ) { # Removable media folders file { [ "/media/usb", "/media/cdrom", "/media/tablet", "/media/phone" ]: diff --git a/manifests/subsystem/monkeysphere.pp b/manifests/subsystem/monkeysphere.pp index 13372ca..ab3bc18 100644 --- a/manifests/subsystem/monkeysphere.pp +++ b/manifests/subsystem/monkeysphere.pp @@ -1,6 +1,6 @@ define nodo::subsystem::monkeysphere( - $port = hiera('nodo::monkeysphere_host::ssh_port', ''), - $mail_recipient = hiera('mail::root_mail_recipient', 'nobody') + $port = lookup('nodo::monkeysphere_host::ssh_port', undef, undef, ''), + $mail_recipient = lookup('mail::root_mail_recipient', undef, undef, 'nobody') ) { include monkeysphere diff --git a/manifests/subsystem/motd.pp b/manifests/subsystem/motd.pp index df671eb..1ce0038 100644 --- a/manifests/subsystem/motd.pp +++ b/manifests/subsystem/motd.pp @@ -1,6 +1,6 @@ class nodo::subsystem::motd( - $message = hiera('nodo::subsystem::motd::message', ''), - $network_name = hiera('nodo::subsystem::motd::network_name', 'Nodo') + $message = lookup('nodo::subsystem::motd::message', undef, undef, ''), + $network_name = lookup('nodo::subsystem::motd::network_name', undef, undef, 'Nodo') ) { if $message != '' { $append = "${message}\n" diff --git a/manifests/subsystem/nas/share.pp b/manifests/subsystem/nas/share.pp index 94f8194..b3e8edc 100644 --- a/manifests/subsystem/nas/share.pp +++ b/manifests/subsystem/nas/share.pp @@ -21,7 +21,7 @@ define nodo::subsystem::nas::share( # # DLNA share # - $dlna = hiera('nodo::role::nas::dlna', false) + $dlna = lookup('nodo::role::nas::dlna', undef, undef, false) if $dlna == true and $dlna_type != '' { minidlna::share { $folder: @@ -35,7 +35,7 @@ define nodo::subsystem::nas::share( # # Samba share # - $samba = hiera('nodo::role::nas::samba', false) + $samba = lookup('nodo::role::nas::samba', undef, undef, false) if $samba == true { samba::server::share { $name: @@ -74,7 +74,7 @@ define nodo::subsystem::nas::share( # # NFS export # - $nfs = hiera('nodo::role::nas::nfs', false) + $nfs = lookup('nodo::role::nas::nfs', undef, undef, false) if $nfs == true { nfs::export { $name: @@ -87,7 +87,7 @@ define nodo::subsystem::nas::share( # # HTTP and FTP symlinks to media assets # - $http = hiera('nodo::role::nas::http', false) + $http = lookup('nodo::role::nas::http', undef, undef, false) if $http == true { file { [ "/var/www/data/${name}", "/home/ftp/${name}" ]: @@ -99,7 +99,7 @@ define nodo::subsystem::nas::share( # # Avahi service # - $avahi = hiera('nodo::role::nas::avahi', false) + $avahi = lookup('nodo::role::nas::avahi', undef, undef, false) if $avahi == true and $nfs == true { file { "/etc/avahi/services/nfs-${name}.service": @@ -113,7 +113,7 @@ define nodo::subsystem::nas::share( } # Make sure basic media exist, no matter which disk is attached - $cache = hiera('nodo::subsystem::media::folders::base', '/var/cache/media') + $cache = lookup('nodo::subsystem::media::folders::base', undef, undef, '/var/cache/media') if $cache != '' and $manage_folder != false { file { [ "${cache}/${name}" ]: diff --git a/manifests/subsystem/resolver.pp b/manifests/subsystem/resolver.pp index cca7609..00fe6c6 100644 --- a/manifests/subsystem/resolver.pp +++ b/manifests/subsystem/resolver.pp @@ -1,8 +1,8 @@ class nodo::subsystem::resolver( - $manage = hiera('nodo::subsystem::resolver::manage', false), - $nameservers = hiera('nodo::subsystem::resolver::nameservers', ''), - $domain = hiera('nodo::subsystem::resolver::domain', $::domain), - $search = hiera('nodo::subsystem::resolver::search', $::fqdn) + $manage = lookup('nodo::subsystem::resolver::manage', undef, undef, false), + $nameservers = lookup('nodo::subsystem::resolver::nameservers', undef, undef, ''), + $domain = lookup('nodo::subsystem::resolver::domain', undef, undef, $::domain), + $search = lookup('nodo::subsystem::resolver::search', undef, undef, $::fqdn) ) { # DNS resolver case $manage { diff --git a/manifests/subsystem/scanner.pp b/manifests/subsystem/scanner.pp index 89b0cc3..b1401cd 100644 --- a/manifests/subsystem/scanner.pp +++ b/manifests/subsystem/scanner.pp @@ -1,4 +1,4 @@ -class nodo::subsystem::scanner($access_list = hiera('nodo::subsystem::scanner::access_list', '')) { +class nodo::subsystem::scanner($access_list = lookup('nodo::subsystem::scanner::access_list', undef, undef, '')) { package { [ 'sane', 'sane-utils' ]: ensure => present, } diff --git a/manifests/subsystem/scanner/client.pp b/manifests/subsystem/scanner/client.pp index 873f8b9..c1eb92d 100644 --- a/manifests/subsystem/scanner/client.pp +++ b/manifests/subsystem/scanner/client.pp @@ -1,4 +1,4 @@ -class nodo::subsystem::scanner::client($server = hiera('nodo::subsystem::scanner::client::hostname', 'localhost')) { +class nodo::subsystem::scanner::client($server = lookup('nodo::subsystem::scanner::client::hostname', undef, undef, 'localhost')) { package { 'sane': ensure => present, } diff --git a/manifests/subsystem/screen/startup.pp b/manifests/subsystem/screen/startup.pp index 15f9b56..1c3a847 100644 --- a/manifests/subsystem/screen/startup.pp +++ b/manifests/subsystem/screen/startup.pp @@ -1,8 +1,8 @@ class nodo::subsystem::screen::startup( - $windows = hiera('nodo::subsystem::screen::startup::windows', [ "${::hostname} 0 bash -c \"tail -F /var/log/*log /var/log/*/*log\"", - "journal 1 journalctl -f", - "top 2 top" ]), - $select = hiera('nodo::subsystem::screen::startup::select', 1) + $windows = lookup('nodo::subsystem::screen::startup::windows', undef, undef, [ "${::hostname} 0 bash -c \"tail -F /var/log/*log /var/log/*/*log\"", + "journal 1 journalctl -f", + "top 2 top" ]), + $select = lookup('nodo::subsystem::screen::startup::select', undef, undef, 1) ) { file { "/etc/screenrc.startup": content => template('nodo/screen/screenrc.erb'), diff --git a/manifests/subsystem/sshd.pp b/manifests/subsystem/sshd.pp index c520c9e..dd0968b 100644 --- a/manifests/subsystem/sshd.pp +++ b/manifests/subsystem/sshd.pp @@ -1,5 +1,5 @@ class nodo::subsystem::sshd { - $manage = hiera('nodo::subsystem::sshd::manage', true) + $manage = lookup('nodo::subsystem::sshd::manage', undef, undef, true) if $manage == true { include ::sshd diff --git a/manifests/subsystem/sysctl/appliance.pp b/manifests/subsystem/sysctl/appliance.pp index 23b1e96..2657542 100644 --- a/manifests/subsystem/sysctl/appliance.pp +++ b/manifests/subsystem/sysctl/appliance.pp @@ -1,4 +1,4 @@ -class nodo::subsystem::sysctl::appliance($kernel_panic = hiera('nodo::sysctl::appliance', '20')) { +class nodo::subsystem::sysctl::appliance($kernel_panic = lookup('nodo::sysctl::appliance', undef, undef, '20')) { file { "/etc/sysctl.d/kernel.panic.conf": owner => "root", group => "root", diff --git a/manifests/subsystem/sysctl/disable_ipv6.pp b/manifests/subsystem/sysctl/disable_ipv6.pp index 2404d8f..2c384c3 100644 --- a/manifests/subsystem/sysctl/disable_ipv6.pp +++ b/manifests/subsystem/sysctl/disable_ipv6.pp @@ -1,7 +1,7 @@ # Do not enable ipv6 by default # See https://wiki.debian.org/DebianIPv6 class nodo::subsystem::sysctl::disable_ipv6( - $ensure = hiera('nodo::sysctl::disable_ipv6', 'present'), + $ensure = lookup('nodo::sysctl::disable_ipv6', undef, undef, 'present'), ) { file { "/etc/sysctl.d/disable_ipv6.conf": owner => "root", diff --git a/manifests/subsystem/sysctl/tcp_challenge_ack_limit.pp b/manifests/subsystem/sysctl/tcp_challenge_ack_limit.pp index c1f6650..ca90e27 100644 --- a/manifests/subsystem/sysctl/tcp_challenge_ack_limit.pp +++ b/manifests/subsystem/sysctl/tcp_challenge_ack_limit.pp @@ -3,7 +3,7 @@ # http://coolnerd.co/2016/08/researchers-announce-linux-kernel-network-snooping-bug-naked-security/ # https://nakedsecurity.sophos.com/2016/08/12/researchers-announce-linux-kernel-network-snooping-bug/ class nodo::subsystem::sysctl::tcp_challenge_ack_limit( - $ensure = hiera('nodo::sysctl::tcp_challenge_ack_limit', 'present'), + $ensure = lookup('nodo::sysctl::tcp_challenge_ack_limit', undef, undef, 'present'), ) { file { "/etc/sysctl.d/tcp_challenge_ack_limit.conf": owner => "root", diff --git a/manifests/subsystem/udev/network.pp b/manifests/subsystem/udev/network.pp index 2e42519..734c025 100644 --- a/manifests/subsystem/udev/network.pp +++ b/manifests/subsystem/udev/network.pp @@ -1,5 +1,5 @@ class nodo::subsystem::udev::network { - $role = hiera('nodo::role', 'default') + $role = lookup('nodo::role', undef, undef, 'default') file { '/etc/udev/rules.d/70-persistent-net.rules': ensure => present, diff --git a/manifests/utils/java.pp b/manifests/utils/java.pp index 59e26a3..09a79a6 100644 --- a/manifests/utils/java.pp +++ b/manifests/utils/java.pp @@ -18,7 +18,7 @@ class nodo::utils::java ( # Java alternative file { "/etc/alternatives/java": ensure => $ensure ? { - 'present','installed','latest' => hiera('nodo::utils::java::alternative', '/usr/lib/jvm/java-6-openjdk-amd64/jre/bin/java'), + 'present','installed','latest' => lookup('nodo::utils::java::alternative', undef, undef, '/usr/lib/jvm/java-6-openjdk-amd64/jre/bin/java'), default => undef, }, owner => root, diff --git a/manifests/utils/multimedia.pp b/manifests/utils/multimedia.pp index ed40c11..3b87dc3 100644 --- a/manifests/utils/multimedia.pp +++ b/manifests/utils/multimedia.pp @@ -51,6 +51,6 @@ class nodo::utils::multimedia inherits nodo::utils::multimedia::minimal { } # Flash implementation (deprecated) - #$flash = hiera('nodo::utils::multimedia::flash', 'gnash') + #$flash = lookup('nodo::utils::multimedia::flash', undef, undef, 'gnash') #class { "nodo::utils::multimedia::${flash}": } } |