4bcb03551c
With the goal to transform this work in a complete puppet module, this patch aims to rename roles to manifests. Signed-off-by: Emilien Macchi <emilien.macchi@enovance.com>
74 lines
2.2 KiB
Puppet
74 lines
2.2 KiB
Puppet
#
|
|
# Copyright (C) 2013 eNovance SAS <licensing@enovance.com>
|
|
#
|
|
# Licensed under the Apache License, Version 2.0 (the "License"); you may
|
|
# not use this file except in compliance with the License. You may obtain
|
|
# a copy of the License at
|
|
#
|
|
# http://www.apache.org/licenses/LICENSE-2.0
|
|
#
|
|
# Unless required by applicable law or agreed to in writing, software
|
|
# distributed under the License is distributed on an "AS IS" BASIS, WITHOUT
|
|
# WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. See the
|
|
# License for the specific language governing permissions and limitations
|
|
# under the License.
|
|
#
|
|
# Operating System
|
|
#
|
|
|
|
class os_common_system{
|
|
|
|
# motd
|
|
file
|
|
{
|
|
'/etc/motd':
|
|
ensure => file,
|
|
mode => '0644',
|
|
content => "
|
|
############################################################################
|
|
# eNovance IT Operations #
|
|
############################################################################
|
|
# #
|
|
# *** RESTRICTED ACCESS *** #
|
|
# Only the authorized users may access this system. #
|
|
# Any attempted unauthorized access or any action affecting the computer #
|
|
# system of eNovance is punishable under articles 323-1 to 323-7 of #
|
|
# French criminal law. #
|
|
# #
|
|
############################################################################
|
|
This node is under the control of Puppet ${::puppetversion}.
|
|
";
|
|
}
|
|
|
|
# APT repositories
|
|
class{ 'os_packages_config': }
|
|
|
|
# DNS
|
|
$datacenter = 'ci'
|
|
class{ 'resolver':
|
|
dcinfo => { ci => $os_params::dns_ips, },
|
|
domainname => $os_params::site_domain,
|
|
searchpath => $os_params::site_domain,
|
|
}
|
|
|
|
# NTP
|
|
class { 'ntp': }
|
|
|
|
# SSH Keys
|
|
#FIXME
|
|
#if $::osfamily == 'Debian' {
|
|
# package { 'enovance-config-sshkeys-dev':
|
|
# ensure => 'installed'
|
|
# }
|
|
#}
|
|
|
|
# Strong root password for all servers
|
|
user { 'root':
|
|
ensure => 'present',
|
|
gid => '0',
|
|
password => $os_params::root_password,
|
|
uid => '0',
|
|
}
|
|
|
|
}
|