Mercurial > repos > other > Puppet

annotate manifests/nodes.pp @ 392:a7eaf17bff26

Find changesets by keywords (author, files, the commit message), revision number or hash, or revset expression.
Block lots of probed user account variants Includes: * New services * More names * Foreign language variants
author IBBoard <dev@ibboard.co.uk>
date Mon, 14 Feb 2022 20:43:50 +0000
parents df5ad1612af7
children e22eee1d79ef
Ignore whitespace changes - Everywhere: Within whitespace: At end of lines:
rev   line source
29
41df236f3fb0 Add trial node config for new site (IPs for test VM)
IBBoard <dev@ibboard.co.uk>
parents: 0
diff changeset
1 node 'clouduk.ibboard.co.uk' {
41df236f3fb0 Add trial node config for new site (IPs for test VM)
IBBoard <dev@ibboard.co.uk>
parents: 0
diff changeset
2 class { 'ibboardvpsnode':
70
c91296a71160 Update IP address of clouduk - test VM should use a different name!
IBBoard <dev@ibboard.co.uk>
parents: 56
diff changeset
3 primary_ip => '213.229.111.243',
29
41df236f3fb0 Add trial node config for new site (IPs for test VM)
IBBoard <dev@ibboard.co.uk>
parents: 0
diff changeset
4 mailserver => 'mail.ibboard.co.uk',
41df236f3fb0 Add trial node config for new site (IPs for test VM)
IBBoard <dev@ibboard.co.uk>
parents: 0
diff changeset
5 imapserver => 'imap.ibboard.co.uk',
35
1bb941522ebf Handle differences in firewalling between ASO (using APF) and most other hosts (using iptables)
IBBoard <dev@ibboard.co.uk>
parents: 29
diff changeset
6 firewall_cmd => 'iptables',
29
41df236f3fb0 Add trial node config for new site (IPs for test VM)
IBBoard <dev@ibboard.co.uk>
parents: 0
diff changeset
7 }
41df236f3fb0 Add trial node config for new site (IPs for test VM)
IBBoard <dev@ibboard.co.uk>
parents: 0
diff changeset
8 }
109
019968cfda31 Add dev machine entry with correct IPs
IBBoard <dev@ibboard.co.uk>
parents: 70
diff changeset
9
019968cfda31 Add dev machine entry with correct IPs
IBBoard <dev@ibboard.co.uk>
parents: 70
diff changeset
10 node 'cloudtest.ibboard.co.uk' {
019968cfda31 Add dev machine entry with correct IPs
IBBoard <dev@ibboard.co.uk>
parents: 70
diff changeset
11 class { 'ibboardvpsnode':
151
1ad747713519 Update test machine IPs to match new DHCP pool
IBBoard <dev@ibboard.co.uk>
parents: 114
diff changeset
12 primary_ip => '192.168.1.78',
109
019968cfda31 Add dev machine entry with correct IPs
IBBoard <dev@ibboard.co.uk>
parents: 70
diff changeset
13 mailserver => 'mail.ibboard.co.uk',
019968cfda31 Add dev machine entry with correct IPs
IBBoard <dev@ibboard.co.uk>
parents: 70
diff changeset
14 imapserver => 'imap.ibboard.co.uk',
019968cfda31 Add dev machine entry with correct IPs
IBBoard <dev@ibboard.co.uk>
parents: 70
diff changeset
15 firewall_cmd => 'iptables',
019968cfda31 Add dev machine entry with correct IPs
IBBoard <dev@ibboard.co.uk>
parents: 70
diff changeset
16 }
019968cfda31 Add dev machine entry with correct IPs
IBBoard <dev@ibboard.co.uk>
parents: 70
diff changeset
17 }
390
df5ad1612af7 Adapt configs to support Ubuntu
IBBoard <dev@ibboard.co.uk>
parents: 355
diff changeset
18 node 'vpsarm.home' {
355
60b13e6d83c5 Add CentOS 8 dev VM node
IBBoard <dev@ibboard.co.uk>
parents: 326
diff changeset
19 class { 'ibboardvpsnode':
390
df5ad1612af7 Adapt configs to support Ubuntu
IBBoard <dev@ibboard.co.uk>
parents: 355
diff changeset
20 primary_ip => '2a00:23c8:a480:3701:5054:ff:fe42:65f9',
355
60b13e6d83c5 Add CentOS 8 dev VM node
IBBoard <dev@ibboard.co.uk>
parents: 326
diff changeset
21 mailserver => 'mail.ibboard.co.uk',
60b13e6d83c5 Add CentOS 8 dev VM node
IBBoard <dev@ibboard.co.uk>
parents: 326
diff changeset
22 imapserver => 'imap.ibboard.co.uk',
60b13e6d83c5 Add CentOS 8 dev VM node
IBBoard <dev@ibboard.co.uk>
parents: 326
diff changeset
23 firewall_cmd => 'iptables',
60b13e6d83c5 Add CentOS 8 dev VM node
IBBoard <dev@ibboard.co.uk>
parents: 326
diff changeset
24 }
60b13e6d83c5 Add CentOS 8 dev VM node
IBBoard <dev@ibboard.co.uk>
parents: 326
diff changeset
25 }
247
308f69ca988c Add config for new server
IBBoard <dev@ibboard.co.uk>
parents: 151
diff changeset
26 node 'ibbvps.vs.mythic-beasts.com' {
308f69ca988c Add config for new server
IBBoard <dev@ibboard.co.uk>
parents: 151
diff changeset
27 class { 'ibboardvpsnode':
308f69ca988c Add config for new server
IBBoard <dev@ibboard.co.uk>
parents: 151
diff changeset
28 primary_ip => '2a00:1098:82:52::1',
284
9431aec4d998 Switch to using IPv6 prefix and IP per site
IBBoard <dev@ibboard.co.uk>
parents: 283
diff changeset
29 proxy_4to6_ip_prefix => '2a00:1098:82:52::01d4', # ::old4 for IPv4!
285
c0e989d32b5c Go back to IPv6, not hostnames, for up-stream
IBBoard <dev@ibboard.co.uk>
parents: 284
diff changeset
30 proxy_upstream => ['2a00:1098::82:1000:3b:1:1', '2a00:1098::80:1000:3b:1:1'],
326
63e0b5149cfb Add fallback relays to Postfix
IBBoard <dev@ibboard.co.uk>
parents: 313
diff changeset
31 nat64_ranges => ['2a00:1098:0:80:1000:3a::/96', '2a00:1098:0:82:1000:3a::/96'],
247
308f69ca988c Add config for new server
IBBoard <dev@ibboard.co.uk>
parents: 151
diff changeset
32 mailserver => 'mail.ibboard.co.uk',
308f69ca988c Add config for new server
IBBoard <dev@ibboard.co.uk>
parents: 151
diff changeset
33 imapserver => 'imap.ibboard.co.uk',
326
63e0b5149cfb Add fallback relays to Postfix
IBBoard <dev@ibboard.co.uk>
parents: 313
diff changeset
34 mailrelays => ['mx.mythic-beasts.com'],
247
308f69ca988c Add config for new server
IBBoard <dev@ibboard.co.uk>
parents: 151
diff changeset
35 firewall_cmd => 'iptables',
308f69ca988c Add config for new server
IBBoard <dev@ibboard.co.uk>
parents: 151
diff changeset
36 }
251
7307c3d59ce7 Enable console over admin shell via serial
IBBoard <dev@ibboard.co.uk>
parents: 247
diff changeset
37 # If the console fails to start, you may need to run "restorecon /etc/systemd/system/getty.target.wants/*"
7307c3d59ce7 Enable console over admin shell via serial
IBBoard <dev@ibboard.co.uk>
parents: 247
diff changeset
38 # to reset the SELinux context of the file
7307c3d59ce7 Enable console over admin shell via serial
IBBoard <dev@ibboard.co.uk>
parents: 247
diff changeset
39 service { 'serial-getty@ttyS0':
7307c3d59ce7 Enable console over admin shell via serial
IBBoard <dev@ibboard.co.uk>
parents: 247
diff changeset
40 ensure => 'running',
7307c3d59ce7 Enable console over admin shell via serial
IBBoard <dev@ibboard.co.uk>
parents: 247
diff changeset
41 enable => 'true',
7307c3d59ce7 Enable console over admin shell via serial
IBBoard <dev@ibboard.co.uk>
parents: 247
diff changeset
42 }
279
e36b7f4f85f2 Start to support IPv6 servers
IBBoard <dev@ibboard.co.uk>
parents: 251
diff changeset
43 firewall { '090 Allow SSH (IPv4-to-IPv6)':
e36b7f4f85f2 Start to support IPv6 servers
IBBoard <dev@ibboard.co.uk>
parents: 251
diff changeset
44 dport => 22,
285
c0e989d32b5c Go back to IPv6, not hostnames, for up-stream
IBBoard <dev@ibboard.co.uk>
parents: 284
diff changeset
45 source => '2a00:1098:0:82:1000:0:5d5d:826a',
279
e36b7f4f85f2 Start to support IPv6 servers
IBBoard <dev@ibboard.co.uk>
parents: 251
diff changeset
46 proto => 'tcp',
e36b7f4f85f2 Start to support IPv6 servers
IBBoard <dev@ibboard.co.uk>
parents: 251
diff changeset
47 action => 'accept',
e36b7f4f85f2 Start to support IPv6 servers
IBBoard <dev@ibboard.co.uk>
parents: 251
diff changeset
48 }
247
308f69ca988c Add config for new server
IBBoard <dev@ibboard.co.uk>
parents: 151
diff changeset
49 }