From eed6dead26492eaae8b13f66593406cd5a168285 Mon Sep 17 00:00:00 2001
From: Silvio Rhatto <rhatto@riseup.net>
Date: Sun, 20 Jan 2013 16:15:47 -0200
Subject: Adding nodo::host class

---
 manifests/host.pp | 63 +++++++++++++++++++++++++++++++++++++++++++++++++++++++
 1 file changed, 63 insertions(+)
 create mode 100644 manifests/host.pp

(limited to 'manifests/host.pp')

diff --git a/manifests/host.pp b/manifests/host.pp
new file mode 100644
index 0000000..fe1ca61
--- /dev/null
+++ b/manifests/host.pp
@@ -0,0 +1,63 @@
+# Fully capable node able to host other nodes
+class nodo::host inherits nodo {
+  include initramfs
+  include modprobe
+  include firewire
+  include sysctl
+  include utils::physical
+  include resolver
+  include monkeysphere_nodo
+
+  class { 'syslog-ng': }
+
+  # Firewall configuration
+  include firewall
+
+  # Vserver configuration
+  $vserver_vdirbase = "/var/vservers"
+  include vserver::host
+
+  if $use_nagios != false {
+    if $use_nagios_fqdn == true {
+      include nagios::target::fqdn
+    }
+    else {
+      include nagios::target
+    }
+    nagios::service::ping { "$fqdn": }
+  }
+
+  # Time configuration
+  case $ntpdate {
+    false:   { include timezone }
+    default: { include ntpdate  }
+  }
+
+  # SSH Server
+  #
+  # We need to restrict listen address so multiple instances
+  # can live together in the same physical host.
+  #
+  case $sshd_listen_address {
+    '': { $sshd_listen_address = [ "$ipaddress", '127.0.0.1' ] }
+  }
+
+  class { 'sshd':
+    listen_address          => $sshd_listen_address,
+    password_authentication => $sshd_password_authentication,
+    shared_ip               => $sshd_shared_ip,
+    tcp_forwarding          => $sshd_tcp_forwarding,
+    hardened_ssl            => $sshd_hardened_ssl,
+    print_motd              => $sshd_print_motd,
+  }
+
+  backupninja::sys { "sys":
+    ensure => present,
+  }
+
+  # Munin configuration
+  munin_node { "$hostname":
+    port => '4900',
+  }
+
+}
-- 
cgit v1.2.3