12:41 a.m.
commit d28248b55862f1d709c81b9e743804d4b2bb1feb
Author: Xavier Lamien <laxathom(a)lxtnow.net>
Date: Sat Sep 7 02:40:49 2013 +0200
Might be good to add the module dir to the git tree, no?! :/
modules/default-setup/manifests/init.pp | 76 +++++++++++++++++++++++++++++++
1 files changed, 76 insertions(+), 0 deletions(-)
---
diff --git a/modules/default-setup/manifests/init.pp
b/modules/default-setup/manifests/init.pp
new file mode 100644
index 0000000..5a00a7a
--- /dev/null
+++ b/modules/default-setup/manifests/init.pp
@@ -0,0 +1,76 @@
+# This is default post-setup for non-yet managed fas hosts.
+
+class default::setup {
+ # I'm not sure this need to be installed on all hosts.
+ Apache_Httpd {
+ welcome => false,
+ serversignature => 'Off',
+ }
+
+ Iptables {
+ # matthias (ovh + office)
+ hosts_ssh => [ '94.23.230.197', '80.169.244.43' ],
+ knock => true,
+ knockone => '666',
+ knocktwo => '3615',
+ }
+ Ip6tables {
+ # matthias (ovh)
+ hosts_ssh => [ '2001:41d0:2:69c5::bb1e' ],
+ knock => true,
+ knockone => '666',
+ knocktwo => '3615',
+ }
+
+ # Non privileged user we want on all nodes, for various things
+ user { 'rpmfusion':
+ comment => 'RPM Fusion User',
+ managehome => true,
+ }
+ file { '/home/rpmfusion/.ssh':
+ require => User['rpmfusion'],
+ ensure => directory,
+ owner => 'rpmfusion', group => 'rpmfusion', mode =>
'0700',
+ }
+ file { '/home/rpmfusion/.ssh/authorized_keys':
+ owner => 'rpmfusion', group => 'rpmfusion', mode =>
'0600',
+ content => '# WARNING: This file is managed by puppet (from site.pp).
+ # WARNING: Do not manually edit it here, all changes will be discarded.
+ ssh-rsa
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
matthias
+ ssh-dss
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
xavier
+ ssh-rsa
AAAAB3NzaC1yc2EAAAADAQABAAACAQDnYiQsnoAJpqmZXzlq5Vv8TbfIQnV8IEYMyWZs0eU2Otec7QbCBJPchDKHVezEIPt+nHgSOg9QSE3OlVA4rhNrkxDnuxO9jwiSQmz8ayvlvig1hjp3C/GJmpM2sjljPA33YVTcOjFSab0GC7EIWF6mWQyDWHTvbdy9R4VRRy5jX4R6Hs3hLtNZs15UYAScLsmFitZKoW3TeIW1fTTuAM2p8h/KaMjMyQSiRrGQ97HTxipahLU2hjYiLMzgg3Xcfnnvi8I2Af8+c11Uy4bxQnMP4Ya40LbTc70oSYdb+VXjCBRXSAw+8K1vvX02ex/Wq5MsDdmQy7JzEb3M8vIMGU7E3I7UI3zRkXmwOKN9Vv8Jn7LxM/sgtixzC6qmwU420r6hRxmXT6H9uZRRX0UteCTxSdu0af+hTdjLd7fxm4L5EVYbm8btqfCpQuXPBesRCNvzvuMsIjdM9PvcTTNO1Sr8Zce+lAZLlddmPguCLIMcNrHl3HO0C+QnGWwQWWijViWsBBkuQs6QyxxKbEOt3RHhSa418te1GthcSzLF1xBoJ2KO8FrWeLQKL6HSq5HlbSQmhymlyRWCnfXhecjqrW+v1poowXPxlcPTRiK5ZCJ0s126IC70ANPQYwMTj5L+gLWGsn/sz0fHEC5b78Dbbuj9LkD2N6KmbqJgM7afx7zDjQ==
nchauvet
+ ssh-rsa
AAAAB3NzaC1yc2EAAAABIwAAAQEAp9/HaNnRFXbIM83lRhZjAed9TNrK9yKMc+WxeKbJygIW4k4R57VJg0E5hTDEdnNa2tIJI06dQf4LWpu5SoovMHOoLymKXoSLQmuacklEbjvG712JcqV8JVkdFqNYBBxvD5nqjE0stEHSG4YeFvKID8e66tjAb15gy0SDmq/e8/WK6BTQcR239qtHdsnkLnWvKHmPJFtitVjceMUqAWB7ZBx5Q8dn2b6b/bZHBwK4yxOSTCM15AWpv/c+PYpEakcB8GFDAkOl4IsFFngG2LAVRhM5kdFhiLztNN+T0T7Apd+DZYLgwGbJ5zEFLMwIt2xa82ZdNbaIE30ky46q3eKl4Q==
nchauvet-old
+ ',
+ }
+
+ # Let's avoid an internal DNS server for now
+ host { 'puppet.ovh.rpmfusion.lan':
+ ip => '192.168.230.11',
+ host_aliases => 'puppet',
+ }
+ host { 'bugzilla.ovh.rpmfusion.lan':
+ ip => '192.168.230.12',
+ host_aliases => 'bugzilla',
+ }
+ host { 'builder1.ovh.rpmfusion.lan':
+ ip => '192.168.230.13',
+ host_aliases => [ 'builder1', 'builder1.rpmfusion.org' ],
+ }
+ host { 'old02.ovh.rpmfusion.lan':
+ ip => '192.168.230.14',
+ host_aliases => 'old02',
+ }
+ host { 'old03.ovh.rpmfusion.lan':
+ ip => '192.168.230.15',
+ host_aliases => [ 'old03', 'buildsys.rpmfusion.org' ],
+ }
+
+ # Common puppet client configuration for all nodes
+ class { 'puppet::agent':
+ forcenoop => true,
+ service => false,
+ cron_enable => true,
+ cron_silent => false,
+ puppet_server => 'puppet.ovh.rpmfusion.lan',
+ }
+}