diff options
Diffstat (limited to 'code')
| -rw-r--r-- | code/environments/production/manifests/site.pp | 74 |
1 files changed, 73 insertions, 1 deletions
diff --git a/code/environments/production/manifests/site.pp b/code/environments/production/manifests/site.pp index fe324ca..bad2614 100644 --- a/code/environments/production/manifests/site.pp +++ b/code/environments/production/manifests/site.pp @@ -1,3 +1,13 @@ +include apt + +$apt_origins = [ + 'origin=Debian,n=${distro_codename}', + 'origin=Debian,n=${distro_codename}-updates', + 'origin=Debian,n=${distro_codename},l=Debian-Security', + 'origin=IT-Zukunft Schule,n=${distro_codename},l=IT-Zukunft Schule', +] + + class ssh_pubkeys_admins { # Mike Gabriel, IT-Zukunft Schule ssh_authorized_key { 'mike@minobo': @@ -75,23 +85,74 @@ node "disklserver.intern" { key => 'AAAAB3NzaC1yc2EAAAADAQABAAABAQDiLGbx/U9slB9db8PAy8FTRo7/avVvLJUOZzkoBxZa5Edeo+74ezoU2Kv1OxcRJRnSGBe41XDcpLxDS04JMA5xBddUfdq5c+Y1A2SYChUPK1fkrGoKfmGC60dFmEqAQZ33dJhN9rxzQvuvxlmexX8x2TYJC8/jATa+6QuO4chHAFvGo9RLs8hzet5y06fammJDkf0yD6R32GT7q4XMNXilKQ564D1yBJygE6vZx/W3V3l8/QMr6m1lYTTk+W+29IkoxvQBZ6YXKFdnuTVkSYyanafjZwznTFSuBtBZKcgLXFFmyplcB4QlZGvdrrsEJazwwj+pnJeGx0HwV8ePbKxN', user => 'root', } + class { 'unattended_upgrades': + enable => 1, + origins => $apt_origins, + auto => { + 'clean' => 7, + 'reboot' => true, + }, + upgradeable_packages => { + download_only => 1, + debdelta => 1, + }, + } } node "tjener.intern" { class { 'ssh_pubkeys_admins': } class { 'ssh_pubkeys_firedadmins': } class { 'ssh_pubkeys_backupserver': } + class { 'unattended_upgrades': + enable => 1, + origins => $apt_origins, + age => { 'max' => 10 }, + auto => { + 'clean' => 7, + ### WE DON'T REBOOT TJENER + }, + upgradeable_packages => { + download_only => 1, + debdelta => 1, + }, + } } + node "filter.intern" { class { 'ssh_pubkeys_admins': } class { 'ssh_pubkeys_firedadmins': } class { 'ssh_pubkeys_backupserver': } + class { 'unattended_upgrades': + enable => 1, + origins => $apt_origins, + auto => { + 'clean' => 7, + 'reboot' => true, + }, + upgradeable_packages => { + download_only => 1, + debdelta => 1, + }, + } } + # NOT PRESENT node "bibserv.intern" inherits "all_servers" {} node "opsiserver.intern" { class { 'ssh_pubkeys_admins': } class { 'ssh_pubkeys_firedadmins': } class { 'ssh_pubkeys_backupserver': } + class { 'unattended_upgrades': + enable => 1, + origins => $apt_origins, + auto => { + 'clean' => 7, + 'reboot' => true, + }, + upgradeable_packages => { + download_only => 1, + debdelta => 1, + }, + } } # NOT PRESENT node "displayserver.intern" inherits "all_servers" {} # NOT PRESENT node "contentserver.intern" inherits "all_servers" {} @@ -101,4 +162,15 @@ node "opsiserver.intern" { node "default" { class { 'ssh_pubkeys_admins': } class { 'ssh_pubkeys_firedadmins': } -}
\ No newline at end of file + class { 'unattended_upgrades': + enable => 1, + origins => $apt_origins, + auto => { + 'clean' => 7, + }, + upgradeable_packages => { + download_only => 1, + debdelta => 1, + }, + } +} |