puppet/manifests/nodes.pp

# svn, big important server
node valstar {
# Location: IELO datacenter (marseille)
#
# TODO:
# - GIT server
# - setup youri
# - setup maintainers database (with web interface)
# - mirroring (Nanar)
#
    include default_mageia_server
    timezone::timezone { "Europe/Paris": }
    include rsyncd
    include main_mirror
    include openldap::master 
    include subversion::client
    include subversion::server
    include puppet::master
    include ssh::auth
    include ssh::auth::keymaster
    include buildsystem::mainnode
    include buildsystem::mgacreatehome

    include access_classes::committers
    include restrictshell::allow_git
    include restrictshell::allow_svn
    include restrictshell::allow_pkgsubmit
    # disabled the ldap key here instead of disabling for the
    # whole module ( see r698 )
    #include openssh::ssh_keys_from_ldap

    include repositories::subversion
    include repositories::git

    include websites::svn

    subversion::snapshot { "/etc/puppet":
        source => "svn://svn.mageia.org/svn/adm/puppet/"
    }
}

# web apps
node alamut {
# Location: IELO datacenter (marseille)
#
# TODO:
# - Review board
# - nagios
# - api
# - mail server
# - mailing list server
# - wiki
# - pastebin
# - LDAP slave
# 
    include default_mageia_server_no_smtp
    include postgresql::server
    timezone::timezone { "Europe/Paris": }

    include catdap
    include websites::donate
    include mga-mirrors
    include epoll
    include transifex
    include bugzilla
    include sympa::server
    include postfix::primary_smtp

    # temporary, just the time the vm is running there
    host { 'friteuse':
        ip => '192.168.122.131',
        host_aliases => [ "friteuse.$domain", "forums.$domain" ],
        ensure => 'present',
    }

    apache::vhost_redirect_ssl { "forums.$domain": }
    apache::vhost_redirect { "forum.$domain":
        url => "https://forums.$domain/",
    }
    apache::vhost_redirect { "ssl_forum.$domain":
        url => "https://forums.$domain/",
        vhost => "forum.$domain",
        use_ssl => true,
    }

    # connect to ssl so the proxy do not shoke if trying to 
    # enforce ssl ( note that this has not been tested, maybe this
    # is uneeded )
    apache::vhost_reverse_proxy { "ssl_forums.$domain":
        url => "https://forums.$domain/",
        vhost => "forums.$domain",
        use_ssl => true,
    }


    include libvirtd::kvm
    include lists
    include dns::server 
    include repositories::mirror
    include viewvc
    include xymon::server
    apache::vhost_simple { "xymon.$domain":
        location => "/var/lib/xymon/www",
    }
}

# buildnode
node jonund {
# Location: IELO datacenter (marseille)
#
    include default_mageia_server
    include buildsystem::buildnode
    timezone::timezone { "Europe/Paris": }
    include shorewall
    include shorewall::default_firewall
    include testvm
}

node ecosse {
# Location: IELO datacenter (marseille)
#
    include default_mageia_server
    include buildsystem::buildnode
    timezone::timezone { "Europe/Paris": }
}

# backup server
node fiona {
# Location: IELO datacenter (marseille)
#
# TODO:
# - buy the server
# - install the server in datacenter
# - install a backup system
    include default_mageia_server
} 

# gandi-vm
node krampouezh {
# Location: gandi VM
#
# TODO:
# - secondary MX
# - LDAP slave (for external traffic maybe)
#
    #include default_mageia_server
    include default_mageia_server_no_smtp
    include postfix::secondary_smtp
    include blog::base
    include mysql::server
    include dns::server 
    timezone::timezone { "Europe/Paris": }
# Other services running on this server :
# - meetbot
}

node champagne {
# Location: gandi VM
#
# TODO:
# - setup mageia.org web site
# - setup blog
# - setup planet
#
    include default_mageia_server
    timezone::timezone { "Europe/Paris": }
    include blog::champagne
    include planet
    include websites::static
}

node friteuse {
# Location: VM hosted by nfrance (toulouse)
# 
# TODO:
# - setup forum

    include default_mageia_server
    timezone::timezone { "Europe/Paris": }
    include forums
}

node rabbit {
# Location: Server offered by Dedibox (paris)
# 
# - used to create isos ( and live, and so on )
# 
    include default_mageia_server
    timezone::timezone { "Europe/Paris": }
    include bcd::base
    include draklive::base
    include access_classes::iso_makers
    include openssh::ssh_keys_from_ldap
    include mirror::mirrormageia
    include releasekey::base

    # for testing iso quickly
    include libvirtd::kvm
    libvirtd::group_access { "mga-iso_makers": }
}
1	misc	4	# svn, big important server
2			node valstar {
3	boklm	49	# Location: IELO datacenter (marseille)
4			#
5			# TODO:
6			# - GIT server
7			# - setup youri
8			# - setup maintainers database (with web interface)
9			# - mirroring (Nanar)
10			#
11	misc	24	include default_mageia_server
12	misc	44	timezone::timezone { "Europe/Paris": }
13	nanardon	21	include rsyncd
14	misc	875	include main_mirror
15	misc	53	include openldap::master
16	misc	101	include subversion::client
17	dmorgan	131	include subversion::server
18	misc	155	include puppet::master
19	blino	370	include ssh::auth
20			include ssh::auth::keymaster
21	blino	371	include buildsystem::mainnode
22	boklm	696	include buildsystem::mgacreatehome
23	misc	13
24	misc	788	include access_classes::committers
25	misc	900	include restrictshell::allow_git
26	misc	440	include restrictshell::allow_svn
27	blino	499	include restrictshell::allow_pkgsubmit
28	misc	801	# disabled the ldap key here instead of disabling for the
29			# whole module ( see r698 )
30			#include openssh::ssh_keys_from_ldap
31	misc	440
32	misc	753	include repositories::subversion
33	misc	900	include repositories::git
34	misc	676
35	misc	956	include websites::svn
36
37	misc	101	subversion::snapshot { "/etc/puppet":
38	misc	456	source => "svn://svn.mageia.org/svn/adm/puppet/"
39	misc	6	}
40	misc	4	}
41	boklm	3
42	misc	4	# web apps
43			node alamut {
44	boklm	49	# Location: IELO datacenter (marseille)
45			#
46			# TODO:
47	dmorgan	186	# - Review board
48	boklm	49	# - nagios
49			# - api
50			# - mail server
51			# - mailing list server
52			# - wiki
53	misc	193	# - pastebin
54	boklm	49	# - LDAP slave
55			#
56	misc	558	include default_mageia_server_no_smtp
57	misc	526	include postgresql::server
58	misc	44	timezone::timezone { "Europe/Paris": }
59	misc	92
60			include catdap
61	misc	665	include websites::donate
62	nanardon	102	include mga-mirrors
63	nanardon	119	include epoll
64	dmorgan	178	include transifex
65	dmorgan	289	include bugzilla
66	misc	558	include sympa::server
67			include postfix::primary_smtp
68	misc	882
69			# temporary, just the time the vm is running there
70			host { 'friteuse':
71			ip => '192.168.122.131',
72	misc	1163	host_aliases => [ "friteuse.$domain", "forums.$domain" ],
73	misc	882	ensure => 'present',
74			}
75	misc	1163
76	boklm	1318	apache::vhost_redirect_ssl { "forums.$domain": }
77	boklm	1322	apache::vhost_redirect { "forum.$domain":
78	boklm	1320	url => "https://forums.$domain/",
79			}
80	boklm	1322	apache::vhost_redirect { "ssl_forum.$domain":
81	boklm	1320	url => "https://forums.$domain/",
82			vhost => "forum.$domain",
83			use_ssl => true,
84			}
85	misc	1163
86	misc	1171	# connect to ssl so the proxy do not shoke if trying to
87			# enforce ssl ( note that this has not been tested, maybe this
88			# is uneeded )
89	misc	1163	apache::vhost_reverse_proxy { "ssl_forums.$domain":
90	misc	1171	url => "https://forums.$domain/",
91	misc	1163	vhost => "forums.$domain",
92			use_ssl => true,
93			}
94
95
96	misc	984	include libvirtd::kvm
97	misc	743	include lists
98	misc	775	include dns::server
99	misc	889	include repositories::mirror
100	misc	892	include viewvc
101	buchan	1251	include xymon::server
102	buchan	1252	apache::vhost_simple { "xymon.$domain":
103			location => "/var/lib/xymon/www",
104			}
105	boklm	3	}
106
107	misc	4	# buildnode
108			node jonund {
109	boklm	49	# Location: IELO datacenter (marseille)
110			#
111	misc	193	include default_mageia_server
112	blino	346	include buildsystem::buildnode
113	misc	44	timezone::timezone { "Europe/Paris": }
114	boklm	250	include shorewall
115	boklm	244	include shorewall::default_firewall
116	boklm	358	include testvm
117	misc	4	}
118	boklm	3
119	misc	4	node ecosse {
120	boklm	49	# Location: IELO datacenter (marseille)
121			#
122	misc	193	include default_mageia_server
123	misc	213	include buildsystem::buildnode
124	misc	44	timezone::timezone { "Europe/Paris": }
125	boklm	3	}
126
127	misc	4	# backup server
128			node fiona {
129	boklm	49	# Location: IELO datacenter (marseille)
130			#
131			# TODO:
132			# - buy the server
133			# - install the server in datacenter
134	misc	193	# - install a backup system
135			include default_mageia_server
136	misc	4	}
137
138			# gandi-vm
139			node krampouezh {
140	boklm	49	# Location: gandi VM
141			#
142			# TODO:
143			# - secondary MX
144			# - LDAP slave (for external traffic maybe)
145			#
146	misc	896	#include default_mageia_server
147			include default_mageia_server_no_smtp
148			include postfix::secondary_smtp
149	dams	1266	include blog::base
150	dams	1262	include mysql::server
151	misc	775	include dns::server
152	misc	44	timezone::timezone { "Europe/Paris": }
153	boklm	49	# Other services running on this server :
154			# - meetbot
155	misc	4	}
156
157			node champagne {
158	boklm	49	# Location: gandi VM
159			#
160			# TODO:
161			# - setup mageia.org web site
162			# - setup blog
163	dams	1260	# - setup planet
164	boklm	49	#
165	misc	193	include default_mageia_server
166	dams	276	timezone::timezone { "Europe/Paris": }
167	dams	1266	include blog::champagne
168	dams	910	include planet
169	boklm	1011	include websites::static
170	misc	4	}
171
172	misc	586	node friteuse {
173	misc	751	# Location: VM hosted by nfrance (toulouse)
174	misc	586	#
175			# TODO:
176			# - setup forum
177	misc	4
178	misc	586	include default_mageia_server
179			timezone::timezone { "Europe/Paris": }
180	misc	1155	include forums
181	misc	586	}
182	misc	751
183			node rabbit {
184			# Location: Server offered by Dedibox (paris)
185			#
186	misc	782	# - used to create isos ( and live, and so on )
187			#
188	misc	751	include default_mageia_server
189			timezone::timezone { "Europe/Paris": }
190	boklm	850	include bcd::base
191	blino	1314	include draklive::base
192	misc	788	include access_classes::iso_makers
193	misc	825	include openssh::ssh_keys_from_ldap
194	boklm	846	include mirror::mirrormageia
195	boklm	1297	include releasekey::base
196	misc	986
197	misc	982	# for testing iso quickly
198	misc	984	include libvirtd::kvm
199	misc	987	libvirtd::group_access { "mga-iso_makers": }
200	misc	751	}