LEFT | RIGHT |
1 class statsclient { | 1 class statsclient { |
2 user {'stats': | 2 user {'stats': |
3 ensure => present, | 3 ensure => present, |
4 home => '/home/stats', | 4 home => '/home/stats', |
5 managehome => true, | 5 managehome => true, |
6 } | 6 } |
7 | 7 |
8 file {'/home/stats/.ssh': | 8 file {'/home/stats/.ssh': |
9 ensure => directory, | 9 ensure => directory, |
10 owner => stats, | 10 owner => stats, |
11 mode => 0600, | 11 mode => 0600, |
12 require => User['stats'], | 12 require => User['stats'], |
13 } | 13 } |
14 | 14 |
15 file {'/home/stats/.ssh/authorized_keys': | 15 file {'/home/stats/.ssh/authorized_keys': |
16 ensure => present, | 16 ensure => present, |
17 owner => stats, | 17 owner => stats, |
18 mode => 0400, | 18 mode => 0400, |
19 source => 'puppet:///modules/private/stats-authorized_keys', | 19 source => 'puppet:///modules/private/stats-authorized_keys', |
20 } | 20 } |
21 | 21 |
22 concat::fragment {'sshd_user_stats': | 22 concat::fragment {'sshd_user_stats': |
23 target => 'sshd_config', | 23 target => 'sshd_config', |
| 24 order => '99', |
24 content => ' | 25 content => ' |
25 Match User stats | 26 Match User stats |
26 AllowTcpForwarding no | 27 AllowTcpForwarding no |
27 X11Forwarding no | 28 X11Forwarding no |
28 AllowAgentForwarding no | 29 AllowAgentForwarding no |
29 GatewayPorts no | 30 GatewayPorts no |
30 ForceCommand (echo $SSH_ORIGINAL_COMMAND | grep -qv /) && cat "/var/log/
nginx/$SSH_ORIGINAL_COMMAND" | 31 ForceCommand (echo $SSH_ORIGINAL_COMMAND | grep -qv /) && cat "/var/log/
nginx/$SSH_ORIGINAL_COMMAND" |
31 ' | 32 ' |
32 } | 33 } |
33 | 34 |
34 cron {'mirrorstats': | 35 cron {'mirrorstats': |
35 ensure => absent, | 36 ensure => absent, |
36 user => stats, | 37 user => stats, |
37 } | 38 } |
38 } | 39 } |
LEFT | RIGHT |