aboutsummaryrefslogtreecommitdiff
path: root/manifests/subsystem/sysctl
diff options
context:
space:
mode:
Diffstat (limited to 'manifests/subsystem/sysctl')
-rw-r--r--manifests/subsystem/sysctl/disable_ipv6.pp19
1 files changed, 19 insertions, 0 deletions
diff --git a/manifests/subsystem/sysctl/disable_ipv6.pp b/manifests/subsystem/sysctl/disable_ipv6.pp
new file mode 100644
index 0000000..a6486a0
--- /dev/null
+++ b/manifests/subsystem/sysctl/disable_ipv6.pp
@@ -0,0 +1,19 @@
+# Do not enable ipv6 by default
+# See https://wiki.debian.org/DebianIPv6
+class nodo::subsystem::sysctl::disable_ipv6(
+ $ensure = hiera('nodo::sysctl::disable_ipv6', 'present'),
+) {
+ file { "/etc/sysctl.d/disable_ipv6.conf":
+ owner => "root",
+ group => "root",
+ mode => 0644,
+ ensure => $ensure,
+ source => "puppet:///modules/nodo/etc/sysctl.d/disable_ipv6.conf",
+ }
+
+ exec { "sysctl-disable-ipv6":
+ command => '/sbin/sysctl -p',
+ subscribe => File["/etc/sysctl.d/disable_ipv6.conf"],
+ refreshonly => true,
+ }
+}