aboutsummaryrefslogtreecommitdiff
path: root/manifests/nodo.pp
blob: dcdbedd6d4475f258c2c3e4c685250ee883e64c5 (plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
class nodo {
  include lsb
  include puppetd
  include backup
  include sudo
  include users::admin
  include motd
  include utils
  include cron
  include hosts
  include locales
  include tunnel
  include profile
  include domain

  # Set timezone and ntp config
  #
  # We config those here but leave class inclusion elsewhere
  # as ntp config differ from server to vserver.
  #
  $ntp_timezone = "Brazil/East"
  $ntp_pool     = "south-america.pool.ntp.org"
  $ntp_servers  = [ 'a.ntp.br', 'b.ntp.br', 'c.ntp.br' ]

  # Email delivery configuration
  case $mail_delivery {
    'tunnel': {              
      tunnel::mail { "$mail_hostname":
        sshport   => "$mail_ssh_port",
      }
    }
    'postfix': { }
    '','exim',default: { include exim::tls }
  }

  # Apt configuration
  if $use_apt != false {
    # TODO: remove this in the future after all old nodes
    #       have applied the catalog.
    file { '/etc/apt/sources.list.d/debian-backports.list':
      ensure => absent,
    }

    include apt
    include apt::unattended_upgrades

    if $apt_domain_source == true {
      apt::sources_list { "$domain.list":
        source => "puppet:///modules/site-apt/sources.list.d/$domain.list",
      }
    }
  }

  # Default SSH configuration
  $sshd_password_authentication = "yes"
  $sshd_shared_ip               = "yes"
  $sshd_tcp_forwarding          = "yes"
  $sshd_hardened_ssl            = "yes"
  $sshd_print_motd              = "yes"

  file { "/etc/hostname":
    owner   => "root",
    group   => "root",
    mode    => 0644,
    ensure  => present,
    content => "$fqdn\n",
  }

  file { "/etc/rc.local":
    source  => "puppet://$server/modules/nodo/etc/rc.local",
    owner   => "root",
    group   => "root",
    mode    => 0755,
    ensure  => present,
  }
}