Rietveld Code Review Tool
Help | Bug tracker | Discussion group | Source code

Side by Side Diff: modules/statsclient/manifests/init.pp

Issue 5766400081657856: #760 - Make our ssh configuration used automatically for all servers (Closed)
Patch Set: Created July 15, 2014, 11:03 a.m.
Left:
Right:
Use n/p to move between diff chunks; N/P to move between comments.
Jump to:
View unified diff | Download patch
OLDNEW
1 class statsclient { 1 class statsclient {
2 user {'stats': 2 user {'stats':
3 ensure => present, 3 ensure => present,
4 home => '/home/stats', 4 home => '/home/stats',
5 managehome => true, 5 managehome => true,
6 } 6 }
7 7
8 file {'/home/stats/.ssh': 8 file {'/home/stats/.ssh':
9 ensure => directory, 9 ensure => directory,
10 owner => stats, 10 owner => stats,
11 mode => 0600, 11 mode => 0600,
12 require => User['stats'], 12 require => User['stats'],
13 } 13 }
14 14
15 file {'/home/stats/.ssh/authorized_keys': 15 file {'/home/stats/.ssh/authorized_keys':
16 ensure => present, 16 ensure => present,
17 owner => stats, 17 owner => stats,
18 mode => 0400, 18 mode => 0400,
19 source => 'puppet:///modules/private/stats-authorized_keys', 19 source => 'puppet:///modules/private/stats-authorized_keys',
20 } 20 }
21 21
22 class {'ssh': 22 concat::fragment {'sshd_user_stats':
23 custom_configuration => 'Match User stats 23 target => 'sshd_config',
24 content => '
Wladimir Palant 2014/07/15 11:56:47 order => '99'?
25 Match User stats
24 AllowTcpForwarding no 26 AllowTcpForwarding no
25 X11Forwarding no 27 X11Forwarding no
26 AllowAgentForwarding no 28 AllowAgentForwarding no
27 GatewayPorts no 29 GatewayPorts no
28 ForceCommand (echo $SSH_ORIGINAL_COMMAND | grep -qv /) && cat "/var/log/ nginx/$SSH_ORIGINAL_COMMAND"', 30 ForceCommand (echo $SSH_ORIGINAL_COMMAND | grep -qv /) && cat "/var/log/ nginx/$SSH_ORIGINAL_COMMAND"
31 '
29 } 32 }
30 33
31 cron {'mirrorstats': 34 cron {'mirrorstats':
32 ensure => absent, 35 ensure => absent,
33 user => stats, 36 user => stats,
34 } 37 }
35 } 38 }
OLDNEW
« modules/ssh/templates/sshd_config.erb ('K') | « modules/ssh/templates/sshd_config.erb ('k') | no next file » | no next file with comments »

Powered by Google App Engine
This is Rietveld