puppet/manifests/nodes.pp

# to not repeat the setting everywhere
Exec { path => "/usr/bin:/bin:/usr/sbin:/sbin:/usr/local/bin:/usr/local/sbin/" }

# svn, big important server
node valstar {
# Location: IELO datacenter (marseille)
#
# TODO:
# - GIT server
# - setup maintainers database (with web interface)
#
    include common::default_mageia_server
    timezone::timezone { "Europe/Paris": }
    include main_mirror
    include openldap::master 
    include subversion::client
    include subversion::server
    include puppet::master
    include ssh::auth
    include ssh::auth::keymaster
    include buildsystem::mainnode
    include buildsystem::mgacreatehome
    include buildsystem::sync20101
    include buildsystem::release
    include buildsystem::maintdb
    include buildsystem::binrepo
    include softwarekey::base

    include access_classes::committers
    include restrictshell::allow_git
    include restrictshell::allow_svn
    include restrictshell::allow_pkgsubmit
    include restrictshell::allow_maintdb
    # disabled the ldap key here instead of disabling for the
    # whole module ( see r698 )
    class { "openssh::ssh_keys_from_ldap":
        symlink_users => ['schedbot', 'iurt']
    }

    include mirror::mdv2010spring

    include repositories::subversion
    include repositories::git

    include websites::svn

    subversion::snapshot { "/etc/puppet":
        source => "svn://svn.mageia.org/svn/adm/puppet/"
    }

    mirror_cleaner::orphans {  "cauldron":
        base => "/distrib/bootstrap/distrib/",
    }

}

# web apps
node alamut {
# Location: IELO datacenter (marseille)
#
# TODO:
# - Review board
# - api
# - wiki
# - pastebin
# - LDAP slave
# 
    include common::default_mageia_server_no_smtp
    include postgresql::server
    postgresql::tagged { "default": }

    timezone::timezone { "Europe/Paris": }

    include catdap
    include mga-mirrors
    include epoll
    include transifex
    include bugzilla
    include sympa::server
    include postfix::primary_smtp

    # temporary, just the time the vm is running there
    host { 'friteuse':
        ip => '192.168.122.131',
        host_aliases => [ "friteuse.$domain", "forums.$domain" ],
        ensure => 'present',
    }

    # to create all phpbb database on alamut
    phpbb::databases { $fqdn: }

    apache::vhost_redirect_ssl { "forums.$domain": }
    apache::vhost_redirect { "forum.$domain":
        url => "https://forums.$domain/",
    }
    apache::vhost_redirect { "ssl_forum.$domain":
        url => "https://forums.$domain/",
        vhost => "forum.$domain",
        use_ssl => true,
    }

    # connect to ssl so the proxy do not shoke if trying to 
    # enforce ssl ( note that this has not been tested, maybe this
    # is uneeded )
    apache::vhost_reverse_proxy { "ssl_forums.$domain":
        url => "https://forums.$domain/",
        vhost => "forums.$domain",
        use_ssl => true,
    }

    include tld_redirections

    include libvirtd::kvm
    include lists
    include dns::server 
    include repositories::svn_mirror
    include viewvc

    # disabled until fixed
    #include repositories::git_mirror
    include gitweb

    include xymon::server
    apache::vhost_simple { "xymon.$domain":
        location => "/var/lib/xymon/www",
    }
    include youri-check::report
}

# buildnode
node jonund {
# Location: IELO datacenter (marseille)
#
    include common::default_mageia_server
    include buildsystem::buildnode
    include buildsystem::iurt20101
    timezone::timezone { "Europe/Paris": }
    include shorewall
    include shorewall::default_firewall
    include testvm
}

node ecosse {
# Location: IELO datacenter (marseille)
#
    include common::default_mageia_server
    include buildsystem::buildnode
    timezone::timezone { "Europe/Paris": }
}

# backup server
node fiona {
# Location: IELO datacenter (marseille)
#
# TODO:
# - buy the server
# - install the server in datacenter
# - install a backup system
    include common::default_mageia_server
    timezone::timezone { "Europe/Paris": }
} 

# gandi-vm
node krampouezh {
# Location: gandi VM
#
#
    #include common::default_mageia_server
    include common::default_mageia_server_no_smtp
    include postfix::secondary_smtp
    include blog::base
    include blog::db_backup
    include mysql::server
    include dns::server 
    timezone::timezone { "Europe/Paris": }

    openldap::slave_instance { "1":
        rid => 1,
    }

# Other services running on this server :
# - meetbot
}

node champagne {
# Location: gandi VM
#
# TODO:
# - setup mageia.org web site
#
    include common::default_mageia_server
    timezone::timezone { "Europe/Paris": }
    include blog::files-bots
    include blog::files_backup
    include planet
    include websites::static
    include websites::hugs
    include websites::releases
    include dashboard::base
    include access_classes::web
    include openssh::ssh_keys_from_ldap
}

node friteuse {
# Location: VM hosted by nfrance (toulouse)
# 

    include common::default_mageia_server
    timezone::timezone { "Europe/Paris": }
    include forums
}

node rabbit {
# Location: Server offered by Dedibox (paris)
# 
# - used to create isos ( and live, and so on )
# 
    include common::default_mageia_server
    timezone::timezone { "Europe/Paris": }
    include bcd::base
    include bcd::web
    include bcd::rsync
    include draklive::base
    include access_classes::iso_makers
    include openssh::ssh_keys_from_ldap
    include mirror::mageia
    include mirror::newrelease
    include releasekey::base
    include youri-check::check

    # for testing iso quickly
    include libvirtd::kvm
    libvirtd::group_access { "mga-iso_makers": }

    # to ease the creation of test iso 
    $netinst_iso_path = "/var/lib/libvirt/netboot"

    file { $netinst_iso_path:
        ensure => directory,
    }

    libvirtd::storage { "netinst_iso":
        path => $netinst_iso_path,
        require => File[$netinst_iso_path],
    }

    include auto_installation::download
    auto_installation::download::netboot_images { "mandriva":
        path => $netinst_iso_path,
        versions => ["2010.0","2010.1"],
        archs => ['i586','x86_64'],
        mirror_path => "ftp://ftp.free.fr/pub/Distributions_Linux/MandrivaLinux/official/%{version}/%{arch}/install/images/",
        files => ['boot.iso'],
        require => File[$netinst_iso_path],
    }

    # for testing pxe support of libvirt
    libvirtd::network {"pxe_network":
        network => "192.168.123.0/24",
        tftp_root => $auto_installation::variables::pxe_dir,
        bridge_name => "virbr1",
    }

    include auto_installation::pxe_menu
    auto_installation::mandriva_installation_entry { "pxe_test":
        version => "2010.1",
        arch => "i586",
    }
}
1	misc	1433	# to not repeat the setting everywhere
2			Exec { path => "/usr/bin:/bin:/usr/sbin:/sbin:/usr/local/bin:/usr/local/sbin/" }
3
4	misc	4	# svn, big important server
5			node valstar {
6	boklm	49	# Location: IELO datacenter (marseille)
7			#
8			# TODO:
9			# - GIT server
10			# - setup maintainers database (with web interface)
11			#
12	misc	1437	include common::default_mageia_server
13	misc	44	timezone::timezone { "Europe/Paris": }
14	misc	875	include main_mirror
15	misc	53	include openldap::master
16	misc	101	include subversion::client
17	dmorgan	131	include subversion::server
18	misc	155	include puppet::master
19	blino	370	include ssh::auth
20			include ssh::auth::keymaster
21	blino	371	include buildsystem::mainnode
22	boklm	696	include buildsystem::mgacreatehome
23	boklm	1568	include buildsystem::sync20101
24	boklm	1646	include buildsystem::release
25	boklm	1830	include buildsystem::maintdb
26	boklm	1928	include buildsystem::binrepo
27	boklm	1525	include softwarekey::base
28	misc	13
29	misc	788	include access_classes::committers
30	misc	900	include restrictshell::allow_git
31	misc	440	include restrictshell::allow_svn
32	blino	499	include restrictshell::allow_pkgsubmit
33	boklm	1845	include restrictshell::allow_maintdb
34	misc	801	# disabled the ldap key here instead of disabling for the
35			# whole module ( see r698 )
36	boklm	1720	class { "openssh::ssh_keys_from_ldap":
37	boklm	1718	symlink_users => ['schedbot', 'iurt']
38			}
39	misc	440
40	misc	1705	include mirror::mdv2010spring
41	boklm	1341
42	misc	753	include repositories::subversion
43	misc	900	include repositories::git
44	misc	676
45	misc	956	include websites::svn
46
47	misc	101	subversion::snapshot { "/etc/puppet":
48	misc	456	source => "svn://svn.mageia.org/svn/adm/puppet/"
49	misc	6	}
50	misc	1899
51			mirror_cleaner::orphans { "cauldron":
52			base => "/distrib/bootstrap/distrib/",
53			}
54
55	misc	4	}
56	boklm	3
57	misc	4	# web apps
58			node alamut {
59	boklm	49	# Location: IELO datacenter (marseille)
60			#
61			# TODO:
62	dmorgan	186	# - Review board
63	boklm	49	# - api
64			# - wiki
65	misc	193	# - pastebin
66	boklm	49	# - LDAP slave
67			#
68	misc	1437	include common::default_mageia_server_no_smtp
69	misc	526	include postgresql::server
70	misc	1756	postgresql::tagged { "default": }
71
72	misc	44	timezone::timezone { "Europe/Paris": }
73	misc	92
74			include catdap
75	nanardon	102	include mga-mirrors
76	nanardon	119	include epoll
77	dmorgan	178	include transifex
78	dmorgan	289	include bugzilla
79	misc	558	include sympa::server
80			include postfix::primary_smtp
81	misc	882
82			# temporary, just the time the vm is running there
83			host { 'friteuse':
84			ip => '192.168.122.131',
85	misc	1163	host_aliases => [ "friteuse.$domain", "forums.$domain" ],
86	misc	882	ensure => 'present',
87			}
88	misc	1163
89	misc	1538	# to create all phpbb database on alamut
90			phpbb::databases { $fqdn: }
91
92	boklm	1318	apache::vhost_redirect_ssl { "forums.$domain": }
93	boklm	1322	apache::vhost_redirect { "forum.$domain":
94	boklm	1320	url => "https://forums.$domain/",
95			}
96	boklm	1322	apache::vhost_redirect { "ssl_forum.$domain":
97	boklm	1320	url => "https://forums.$domain/",
98			vhost => "forum.$domain",
99			use_ssl => true,
100			}
101	misc	1163
102	misc	1171	# connect to ssl so the proxy do not shoke if trying to
103			# enforce ssl ( note that this has not been tested, maybe this
104			# is uneeded )
105	misc	1163	apache::vhost_reverse_proxy { "ssl_forums.$domain":
106	misc	1171	url => "https://forums.$domain/",
107	misc	1163	vhost => "forums.$domain",
108			use_ssl => true,
109			}
110
111	misc	1803	include tld_redirections
112	misc	1163
113	misc	984	include libvirtd::kvm
114	misc	743	include lists
115	misc	775	include dns::server
116	misc	1861	include repositories::svn_mirror
117	misc	892	include viewvc
118	misc	1863
119	misc	1876	# disabled until fixed
120			#include repositories::git_mirror
121	misc	1864	include gitweb
122	misc	1863
123	buchan	1251	include xymon::server
124	buchan	1252	apache::vhost_simple { "xymon.$domain":
125			location => "/var/lib/xymon/www",
126			}
127	pterjan	1447	include youri-check::report
128	boklm	3	}
129
130	misc	4	# buildnode
131			node jonund {
132	boklm	49	# Location: IELO datacenter (marseille)
133			#
134	misc	1437	include common::default_mageia_server
135	blino	346	include buildsystem::buildnode
136	boklm	1489	include buildsystem::iurt20101
137	misc	44	timezone::timezone { "Europe/Paris": }
138	boklm	250	include shorewall
139	boklm	244	include shorewall::default_firewall
140	boklm	358	include testvm
141	misc	4	}
142	boklm	3
143	misc	4	node ecosse {
144	boklm	49	# Location: IELO datacenter (marseille)
145			#
146	misc	1437	include common::default_mageia_server
147	misc	213	include buildsystem::buildnode
148	misc	44	timezone::timezone { "Europe/Paris": }
149	boklm	3	}
150
151	misc	4	# backup server
152			node fiona {
153	boklm	49	# Location: IELO datacenter (marseille)
154			#
155			# TODO:
156			# - buy the server
157			# - install the server in datacenter
158	misc	193	# - install a backup system
159	misc	1437	include common::default_mageia_server
160	misc	1888	timezone::timezone { "Europe/Paris": }
161	misc	4	}
162
163			# gandi-vm
164			node krampouezh {
165	boklm	49	# Location: gandi VM
166			#
167			#
168	misc	1437	#include common::default_mageia_server
169			include common::default_mageia_server_no_smtp
170	misc	896	include postfix::secondary_smtp
171	dams	1266	include blog::base
172	dams	1329	include blog::db_backup
173	dams	1262	include mysql::server
174	misc	775	include dns::server
175	misc	44	timezone::timezone { "Europe/Paris": }
176	misc	1665
177			openldap::slave_instance { "1":
178			rid => 1,
179			}
180
181	boklm	49	# Other services running on this server :
182			# - meetbot
183	misc	4	}
184
185			node champagne {
186	boklm	49	# Location: gandi VM
187			#
188			# TODO:
189			# - setup mageia.org web site
190			#
191	misc	1437	include common::default_mageia_server
192	dams	276	timezone::timezone { "Europe/Paris": }
193	dams	1329	include blog::files-bots
194	dams	1427	include blog::files_backup
195	dams	910	include planet
196	boklm	1011	include websites::static
197	boklm	1584	include websites::hugs
198	boklm	1593	include websites::releases
199	boklm	1778	include dashboard::base
200	boklm	1637	include access_classes::web
201			include openssh::ssh_keys_from_ldap
202	misc	4	}
203
204	misc	586	node friteuse {
205	misc	751	# Location: VM hosted by nfrance (toulouse)
206	misc	586	#
207	misc	4
208	misc	1437	include common::default_mageia_server
209	misc	586	timezone::timezone { "Europe/Paris": }
210	misc	1155	include forums
211	misc	586	}
212	misc	751
213			node rabbit {
214			# Location: Server offered by Dedibox (paris)
215			#
216	misc	782	# - used to create isos ( and live, and so on )
217			#
218	misc	1437	include common::default_mageia_server
219	misc	751	timezone::timezone { "Europe/Paris": }
220	boklm	850	include bcd::base
221	boklm	1463	include bcd::web
222	boklm	1548	include bcd::rsync
223	blino	1314	include draklive::base
224	misc	788	include access_classes::iso_makers
225	misc	825	include openssh::ssh_keys_from_ldap
226	misc	1705	include mirror::mageia
227			include mirror::newrelease
228	boklm	1297	include releasekey::base
229	pterjan	1368	include youri-check::check
230	misc	986
231	misc	982	# for testing iso quickly
232	misc	984	include libvirtd::kvm
233	misc	987	libvirtd::group_access { "mga-iso_makers": }
234	misc	1423
235			# to ease the creation of test iso
236			$netinst_iso_path = "/var/lib/libvirt/netboot"
237
238	misc	1424	file { $netinst_iso_path:
239			ensure => directory,
240			}
241
242	misc	1423	libvirtd::storage { "netinst_iso":
243			path => $netinst_iso_path,
244	misc	1424	require => File[$netinst_iso_path],
245	misc	1423	}
246
247	misc	1472	include auto_installation::download
248			auto_installation::download::netboot_images { "mandriva":
249	misc	1423	path => $netinst_iso_path,
250			versions => ["2010.0","2010.1"],
251			archs => ['i586','x86_64'],
252			mirror_path => "ftp://ftp.free.fr/pub/Distributions_Linux/MandrivaLinux/official/%{version}/%{arch}/install/images/",
253			files => ['boot.iso'],
254	misc	1424	require => File[$netinst_iso_path],
255	misc	1423	}
256
257	misc	1476	# for testing pxe support of libvirt
258			libvirtd::network {"pxe_network":
259			network => "192.168.123.0/24",
260	misc	1478	tftp_root => $auto_installation::variables::pxe_dir,
261	misc	1477	bridge_name => "virbr1",
262	misc	1476	}
263
264			include auto_installation::pxe_menu
265			auto_installation::mandriva_installation_entry { "pxe_test":
266			version => "2010.1",
267			arch => "i586",
268			}
269	misc	751	}