puppet/manifests/nodes.pp

# to not repeat the setting everywhere
Exec { path => "/usr/bin:/bin:/usr/sbin:/sbin:/usr/local/bin:/usr/local/sbin/" }

# svn, big important server
node valstar {
# Location: IELO datacenter (marseille)
#
# TODO:
# - GIT server
# - setup youri
# - setup maintainers database (with web interface)
# - mirroring (Nanar)
#
    include common::default_mageia_server
    timezone::timezone { "Europe/Paris": }
    include main_mirror
    include openldap::master 
    include subversion::client
    include subversion::server
    include puppet::master
    include ssh::auth
    include ssh::auth::keymaster
    include buildsystem::mainnode
    include buildsystem::mgacreatehome
    include buildsystem::sync20101
    include buildsystem::release
    include buildsystem::maintdb
    include softwarekey::base

    include access_classes::committers
    include restrictshell::allow_git
    include restrictshell::allow_svn
    include restrictshell::allow_pkgsubmit
    include restrictshell::allow_maintdb
    # disabled the ldap key here instead of disabling for the
    # whole module ( see r698 )
    class { "openssh::ssh_keys_from_ldap":
        symlink_users => ['schedbot', 'iurt']
    }

    include mirror::mdv2010spring

    include repositories::subversion
    include repositories::git

    include websites::svn

    subversion::snapshot { "/etc/puppet":
        source => "svn://svn.mageia.org/svn/adm/puppet/"
    }
}

# web apps
node alamut {
# Location: IELO datacenter (marseille)
#
# TODO:
# - Review board
# - nagios
# - api
# - mail server
# - mailing list server
# - wiki
# - pastebin
# - LDAP slave
# 
    include common::default_mageia_server_no_smtp
    include postgresql::server
    postgresql::tagged { "default": }

    timezone::timezone { "Europe/Paris": }

    include catdap
    include mga-mirrors
    include epoll
    include transifex
    include bugzilla
    include sympa::server
    include postfix::primary_smtp

    # temporary, just the time the vm is running there
    host { 'friteuse':
        ip => '192.168.122.131',
        host_aliases => [ "friteuse.$domain", "forums.$domain" ],
        ensure => 'present',
    }

    # to create all phpbb database on alamut
    phpbb::databases { $fqdn: }

    apache::vhost_redirect_ssl { "forums.$domain": }
    apache::vhost_redirect { "forum.$domain":
        url => "https://forums.$domain/",
    }
    apache::vhost_redirect { "ssl_forum.$domain":
        url => "https://forums.$domain/",
        vhost => "forum.$domain",
        use_ssl => true,
    }

    # connect to ssl so the proxy do not shoke if trying to 
    # enforce ssl ( note that this has not been tested, maybe this
    # is uneeded )
    apache::vhost_reverse_proxy { "ssl_forums.$domain":
        url => "https://forums.$domain/",
        vhost => "forums.$domain",
        use_ssl => true,
    }

    include tld_redirections

    include libvirtd::kvm
    include lists
    include dns::server 
    include repositories::svn_mirror
    include viewvc

    include repositories::git_mirror
    include gitweb

    include xymon::server
    apache::vhost_simple { "xymon.$domain":
        location => "/var/lib/xymon/www",
    }
    include youri-check::report
}

# buildnode
node jonund {
# Location: IELO datacenter (marseille)
#
    include common::default_mageia_server
    include buildsystem::buildnode
    include buildsystem::iurt20101
    timezone::timezone { "Europe/Paris": }
    include shorewall
    include shorewall::default_firewall
    include testvm
}

node ecosse {
# Location: IELO datacenter (marseille)
#
    include common::default_mageia_server
    include buildsystem::buildnode
    timezone::timezone { "Europe/Paris": }
}

# backup server
node fiona {
# Location: IELO datacenter (marseille)
#
# TODO:
# - buy the server
# - install the server in datacenter
# - install a backup system
    include common::default_mageia_server
} 

# gandi-vm
node krampouezh {
# Location: gandi VM
#
# TODO:
# - secondary MX
# - LDAP slave (for external traffic maybe)
#
    #include common::default_mageia_server
    include common::default_mageia_server_no_smtp
    include postfix::secondary_smtp
    include blog::base
    include blog::db_backup
    include mysql::server
    include dns::server 
    timezone::timezone { "Europe/Paris": }

    openldap::slave_instance { "1":
        rid => 1,
    }

# Other services running on this server :
# - meetbot
}

node champagne {
# Location: gandi VM
#
# TODO:
# - setup mageia.org web site
# - setup blog
# - setup planet
#
    include common::default_mageia_server
    timezone::timezone { "Europe/Paris": }
    include blog::files-bots
    include blog::files_backup
    include planet
    include websites::static
    include websites::hugs
    include websites::releases
    include dashboard::base
    include access_classes::web
    include openssh::ssh_keys_from_ldap
}

node friteuse {
# Location: VM hosted by nfrance (toulouse)
# 
# TODO:
# - setup forum

    include common::default_mageia_server
    timezone::timezone { "Europe/Paris": }
    include forums
}

node rabbit {
# Location: Server offered by Dedibox (paris)
# 
# - used to create isos ( and live, and so on )
# 
    include common::default_mageia_server
    timezone::timezone { "Europe/Paris": }
    include bcd::base
    include bcd::web
    include bcd::rsync
    include draklive::base
    include access_classes::iso_makers
    include openssh::ssh_keys_from_ldap
    include mirror::mageia
    include mirror::newrelease
    include releasekey::base
    include youri-check::check

    # for testing iso quickly
    include libvirtd::kvm
    libvirtd::group_access { "mga-iso_makers": }

    # to ease the creation of test iso 
    $netinst_iso_path = "/var/lib/libvirt/netboot"

    file { $netinst_iso_path:
        ensure => directory,
    }

    libvirtd::storage { "netinst_iso":
        path => $netinst_iso_path,
        require => File[$netinst_iso_path],
    }

    include auto_installation::download
    auto_installation::download::netboot_images { "mandriva":
        path => $netinst_iso_path,
        versions => ["2010.0","2010.1"],
        archs => ['i586','x86_64'],
        mirror_path => "ftp://ftp.free.fr/pub/Distributions_Linux/MandrivaLinux/official/%{version}/%{arch}/install/images/",
        files => ['boot.iso'],
        require => File[$netinst_iso_path],
    }

    # for testing pxe support of libvirt
    libvirtd::network {"pxe_network":
        network => "192.168.123.0/24",
        tftp_root => $auto_installation::variables::pxe_dir,
        bridge_name => "virbr1",
    }

    include auto_installation::pxe_menu
    auto_installation::mandriva_installation_entry { "pxe_test":
        version => "2010.1",
        arch => "i586",
    }
}
1	misc	1433	# to not repeat the setting everywhere
2			Exec { path => "/usr/bin:/bin:/usr/sbin:/sbin:/usr/local/bin:/usr/local/sbin/" }
3
4	misc	4	# svn, big important server
5			node valstar {
6	boklm	49	# Location: IELO datacenter (marseille)
7			#
8			# TODO:
9			# - GIT server
10			# - setup youri
11			# - setup maintainers database (with web interface)
12			# - mirroring (Nanar)
13			#
14	misc	1437	include common::default_mageia_server
15	misc	44	timezone::timezone { "Europe/Paris": }
16	misc	875	include main_mirror
17	misc	53	include openldap::master
18	misc	101	include subversion::client
19	dmorgan	131	include subversion::server
20	misc	155	include puppet::master
21	blino	370	include ssh::auth
22			include ssh::auth::keymaster
23	blino	371	include buildsystem::mainnode
24	boklm	696	include buildsystem::mgacreatehome
25	boklm	1568	include buildsystem::sync20101
26	boklm	1646	include buildsystem::release
27	boklm	1830	include buildsystem::maintdb
28	boklm	1525	include softwarekey::base
29	misc	13
30	misc	788	include access_classes::committers
31	misc	900	include restrictshell::allow_git
32	misc	440	include restrictshell::allow_svn
33	blino	499	include restrictshell::allow_pkgsubmit
34	boklm	1845	include restrictshell::allow_maintdb
35	misc	801	# disabled the ldap key here instead of disabling for the
36			# whole module ( see r698 )
37	boklm	1720	class { "openssh::ssh_keys_from_ldap":
38	boklm	1718	symlink_users => ['schedbot', 'iurt']
39			}
40	misc	440
41	misc	1705	include mirror::mdv2010spring
42	boklm	1341
43	misc	753	include repositories::subversion
44	misc	900	include repositories::git
45	misc	676
46	misc	956	include websites::svn
47
48	misc	101	subversion::snapshot { "/etc/puppet":
49	misc	456	source => "svn://svn.mageia.org/svn/adm/puppet/"
50	misc	6	}
51	misc	4	}
52	boklm	3
53	misc	4	# web apps
54			node alamut {
55	boklm	49	# Location: IELO datacenter (marseille)
56			#
57			# TODO:
58	dmorgan	186	# - Review board
59	boklm	49	# - nagios
60			# - api
61			# - mail server
62			# - mailing list server
63			# - wiki
64	misc	193	# - pastebin
65	boklm	49	# - LDAP slave
66			#
67	misc	1437	include common::default_mageia_server_no_smtp
68	misc	526	include postgresql::server
69	misc	1756	postgresql::tagged { "default": }
70
71	misc	44	timezone::timezone { "Europe/Paris": }
72	misc	92
73			include catdap
74	nanardon	102	include mga-mirrors
75	nanardon	119	include epoll
76	dmorgan	178	include transifex
77	dmorgan	289	include bugzilla
78	misc	558	include sympa::server
79			include postfix::primary_smtp
80	misc	882
81			# temporary, just the time the vm is running there
82			host { 'friteuse':
83			ip => '192.168.122.131',
84	misc	1163	host_aliases => [ "friteuse.$domain", "forums.$domain" ],
85	misc	882	ensure => 'present',
86			}
87	misc	1163
88	misc	1538	# to create all phpbb database on alamut
89			phpbb::databases { $fqdn: }
90
91	boklm	1318	apache::vhost_redirect_ssl { "forums.$domain": }
92	boklm	1322	apache::vhost_redirect { "forum.$domain":
93	boklm	1320	url => "https://forums.$domain/",
94			}
95	boklm	1322	apache::vhost_redirect { "ssl_forum.$domain":
96	boklm	1320	url => "https://forums.$domain/",
97			vhost => "forum.$domain",
98			use_ssl => true,
99			}
100	misc	1163
101	misc	1171	# connect to ssl so the proxy do not shoke if trying to
102			# enforce ssl ( note that this has not been tested, maybe this
103			# is uneeded )
104	misc	1163	apache::vhost_reverse_proxy { "ssl_forums.$domain":
105	misc	1171	url => "https://forums.$domain/",
106	misc	1163	vhost => "forums.$domain",
107			use_ssl => true,
108			}
109
110	misc	1803	include tld_redirections
111	misc	1163
112	misc	984	include libvirtd::kvm
113	misc	743	include lists
114	misc	775	include dns::server
115	misc	1861	include repositories::svn_mirror
116	misc	892	include viewvc
117	misc	1863
118			include repositories::git_mirror
119	misc	1864	include gitweb
120	misc	1863
121	buchan	1251	include xymon::server
122	buchan	1252	apache::vhost_simple { "xymon.$domain":
123			location => "/var/lib/xymon/www",
124			}
125	pterjan	1447	include youri-check::report
126	boklm	3	}
127
128	misc	4	# buildnode
129			node jonund {
130	boklm	49	# Location: IELO datacenter (marseille)
131			#
132	misc	1437	include common::default_mageia_server
133	blino	346	include buildsystem::buildnode
134	boklm	1489	include buildsystem::iurt20101
135	misc	44	timezone::timezone { "Europe/Paris": }
136	boklm	250	include shorewall
137	boklm	244	include shorewall::default_firewall
138	boklm	358	include testvm
139	misc	4	}
140	boklm	3
141	misc	4	node ecosse {
142	boklm	49	# Location: IELO datacenter (marseille)
143			#
144	misc	1437	include common::default_mageia_server
145	misc	213	include buildsystem::buildnode
146	misc	44	timezone::timezone { "Europe/Paris": }
147	boklm	3	}
148
149	misc	4	# backup server
150			node fiona {
151	boklm	49	# Location: IELO datacenter (marseille)
152			#
153			# TODO:
154			# - buy the server
155			# - install the server in datacenter
156	misc	193	# - install a backup system
157	misc	1437	include common::default_mageia_server
158	misc	4	}
159
160			# gandi-vm
161			node krampouezh {
162	boklm	49	# Location: gandi VM
163			#
164			# TODO:
165			# - secondary MX
166			# - LDAP slave (for external traffic maybe)
167			#
168	misc	1437	#include common::default_mageia_server
169			include common::default_mageia_server_no_smtp
170	misc	896	include postfix::secondary_smtp
171	dams	1266	include blog::base
172	dams	1329	include blog::db_backup
173	dams	1262	include mysql::server
174	misc	775	include dns::server
175	misc	44	timezone::timezone { "Europe/Paris": }
176	misc	1665
177			openldap::slave_instance { "1":
178			rid => 1,
179			}
180
181	boklm	49	# Other services running on this server :
182			# - meetbot
183	misc	4	}
184
185			node champagne {
186	boklm	49	# Location: gandi VM
187			#
188			# TODO:
189			# - setup mageia.org web site
190			# - setup blog
191	dams	1260	# - setup planet
192	boklm	49	#
193	misc	1437	include common::default_mageia_server
194	dams	276	timezone::timezone { "Europe/Paris": }
195	dams	1329	include blog::files-bots
196	dams	1427	include blog::files_backup
197	dams	910	include planet
198	boklm	1011	include websites::static
199	boklm	1584	include websites::hugs
200	boklm	1593	include websites::releases
201	boklm	1778	include dashboard::base
202	boklm	1637	include access_classes::web
203			include openssh::ssh_keys_from_ldap
204	misc	4	}
205
206	misc	586	node friteuse {
207	misc	751	# Location: VM hosted by nfrance (toulouse)
208	misc	586	#
209			# TODO:
210			# - setup forum
211	misc	4
212	misc	1437	include common::default_mageia_server
213	misc	586	timezone::timezone { "Europe/Paris": }
214	misc	1155	include forums
215	misc	586	}
216	misc	751
217			node rabbit {
218			# Location: Server offered by Dedibox (paris)
219			#
220	misc	782	# - used to create isos ( and live, and so on )
221			#
222	misc	1437	include common::default_mageia_server
223	misc	751	timezone::timezone { "Europe/Paris": }
224	boklm	850	include bcd::base
225	boklm	1463	include bcd::web
226	boklm	1548	include bcd::rsync
227	blino	1314	include draklive::base
228	misc	788	include access_classes::iso_makers
229	misc	825	include openssh::ssh_keys_from_ldap
230	misc	1705	include mirror::mageia
231			include mirror::newrelease
232	boklm	1297	include releasekey::base
233	pterjan	1368	include youri-check::check
234	misc	986
235	misc	982	# for testing iso quickly
236	misc	984	include libvirtd::kvm
237	misc	987	libvirtd::group_access { "mga-iso_makers": }
238	misc	1423
239			# to ease the creation of test iso
240			$netinst_iso_path = "/var/lib/libvirt/netboot"
241
242	misc	1424	file { $netinst_iso_path:
243			ensure => directory,
244			}
245
246	misc	1423	libvirtd::storage { "netinst_iso":
247			path => $netinst_iso_path,
248	misc	1424	require => File[$netinst_iso_path],
249	misc	1423	}
250
251	misc	1472	include auto_installation::download
252			auto_installation::download::netboot_images { "mandriva":
253	misc	1423	path => $netinst_iso_path,
254			versions => ["2010.0","2010.1"],
255			archs => ['i586','x86_64'],
256			mirror_path => "ftp://ftp.free.fr/pub/Distributions_Linux/MandrivaLinux/official/%{version}/%{arch}/install/images/",
257			files => ['boot.iso'],
258	misc	1424	require => File[$netinst_iso_path],
259	misc	1423	}
260
261	misc	1476	# for testing pxe support of libvirt
262			libvirtd::network {"pxe_network":
263			network => "192.168.123.0/24",
264	misc	1478	tftp_root => $auto_installation::variables::pxe_dir,
265	misc	1477	bridge_name => "virbr1",
266	misc	1476	}
267
268			include auto_installation::pxe_menu
269			auto_installation::mandriva_installation_entry { "pxe_test":
270			version => "2010.1",
271			arch => "i586",
272			}
273	misc	751	}