aboutsummaryrefslogtreecommitdiff
path: root/manifests/base.pp
blob: 69dc50fd74b2183f930cb1ef25dc036e076bfe4b (plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
class shorewall::base {
    package { 'shorewall':
        ensure => present,
    }

    # This file has to be managed in place, so shorewall can find it
    file { "/etc/shorewall/shorewall.conf":
      # use OS specific defaults, but use Default if no other is found
      source => [
            "puppet://$server/files/shorewall/${fqdn}/shorewall.conf.$operatingsystem",
            "puppet://$server/files/shorewall/${fqdn}/shorewall.conf",
            "puppet://$server/files/shorewall/shorewall.conf.$operatingsystem.$lsbdistcodename",
            "puppet://$server/files/shorewall/shorewall.conf.$operatingsystem",
            "puppet://$server/files/shorewall/shorewall.conf",
            "puppet://$server/shorewall/shorewall.conf.$operatingsystem.$lsbdistcodename",
            "puppet://$server/shorewall/shorewall.conf.$operatingsystem",
            "puppet://$server/shorewall/shorewall.conf.Default"
        ],
        require => Package[shorewall],
        notify => Service[shorewall],
        owner => root, group => 0, mode => 0644;
    }

    service{shorewall:
        ensure  => running,
        enable  => true,
        hasstatus => true,
        hasrestart => true,
        subscribe => [
            Exec["concat_/var/lib/puppet/modules/shorewall/zones"],
            Exec["concat_/var/lib/puppet/modules/shorewall/interfaces"],
            Exec["concat_/var/lib/puppet/modules/shorewall/hosts"],
            Exec["concat_/var/lib/puppet/modules/shorewall/policy"],
            Exec["concat_/var/lib/puppet/modules/shorewall/rules"],
            Exec["concat_/var/lib/puppet/modules/shorewall/masq"],
            Exec["concat_/var/lib/puppet/modules/shorewall/proxyarp"],
            Exec["concat_/var/lib/puppet/modules/shorewall/nat"],
            Exec["concat_/var/lib/puppet/modules/shorewall/blacklist"],
            Exec["concat_/var/lib/puppet/modules/shorewall/rfc1918"],
            Exec["concat_/var/lib/puppet/modules/shorewall/routestopped"],
            Exec["concat_/var/lib/puppet/modules/shorewall/params"]
        ],
        require => Package[shorewall],
    }
}