Proyecto

General

Perfil

6 antoniojas
class limitar_https {

file { "/etc/network/iptables":
13 antoniojas
owner => root, group=>root, mode=>644,
source => "puppet:///puppet.educarex.es/files/iptables",
8 antoniojas
notify => Exec["configurar-https"]
6 antoniojas
}

514 antoniojas
file { "/etc/squid/acl/deny_https":
13 antoniojas
owner => root, group=>root, mode=>644,
ensure => exists,
notify => Exec["configurar-https"],
}

514 antoniojas
file { "/etc/init.d/deny-https":
13 antoniojas
owner => root, group=>root, mode=>755,
514 antoniojas
source => "puppet:///puppet.educarex.es/files/deny-https",
6 antoniojas
notify => Exec["configurar-https"],
}

exec { "configurar-https":
514 antoniojas
command => "/usr/sbin/update-rc.d deny-https start 31 2 3 4 5 . stop 01 0 1 6 . ; /etc/init.d/deny-https start",
require => File["/etc/init.d/deny-https"],
unless => "/bin/ls /etc/rc2.d/S31deny-https",
6 antoniojas
refreshonly => true,
}

}