OLD | NEW |
1 class statsclient { | 1 class statsclient { |
2 user {'stats': | 2 user {'stats': |
3 ensure => present, | 3 ensure => present, |
4 home => '/home/stats', | 4 home => '/home/stats', |
5 managehome => true, | 5 managehome => true, |
6 } | 6 } |
7 | 7 |
8 file {'/home/stats/.ssh': | 8 file {'/home/stats/.ssh': |
9 ensure => directory, | 9 ensure => directory, |
10 owner => stats, | 10 owner => stats, |
11 mode => 0600, | 11 mode => 0600, |
12 require => User['stats'], | 12 require => User['stats'], |
13 } | 13 } |
14 | 14 |
15 file {'/home/stats/.ssh/authorized_keys': | 15 file {'/home/stats/.ssh/authorized_keys': |
16 ensure => present, | 16 ensure => present, |
17 owner => stats, | 17 owner => stats, |
18 mode => 0400, | 18 mode => 0400, |
19 source => 'puppet:///modules/private/stats-authorized_keys', | 19 source => 'puppet:///modules/private/stats-authorized_keys', |
20 } | 20 } |
21 | 21 |
22 class {'ssh': | 22 concat::fragment {'sshd_user_stats': |
23 custom_configuration => 'Match User stats | 23 target => 'sshd_config', |
| 24 content => ' |
| 25 Match User stats |
24 AllowTcpForwarding no | 26 AllowTcpForwarding no |
25 X11Forwarding no | 27 X11Forwarding no |
26 AllowAgentForwarding no | 28 AllowAgentForwarding no |
27 GatewayPorts no | 29 GatewayPorts no |
28 ForceCommand (echo $SSH_ORIGINAL_COMMAND | grep -qv /) && cat "/var/log/
nginx/$SSH_ORIGINAL_COMMAND"', | 30 ForceCommand (echo $SSH_ORIGINAL_COMMAND | grep -qv /) && cat "/var/log/
nginx/$SSH_ORIGINAL_COMMAND" |
| 31 ' |
29 } | 32 } |
30 | 33 |
31 cron {'mirrorstats': | 34 cron {'mirrorstats': |
32 ensure => absent, | 35 ensure => absent, |
33 user => stats, | 36 user => stats, |
34 } | 37 } |
35 } | 38 } |
OLD | NEW |