root/limitar-https/trunk/limitar_https.class @ 522
6 | antoniojas | class limitar_https {
|
|
file { "/etc/network/iptables":
|
|||
13 | antoniojas | owner => root, group=>root, mode=>644,
|
|
source => "puppet:///puppet.educarex.es/files/iptables",
|
|||
8 | antoniojas | notify => Exec["configurar-https"]
|
|
6 | antoniojas | }
|
|
514 | antoniojas | file { "/etc/squid/acl/deny_https":
|
|
13 | antoniojas | owner => root, group=>root, mode=>644,
|
|
ensure => exists,
|
|||
notify => Exec["configurar-https"],
|
|||
}
|
|||
514 | antoniojas | file { "/etc/init.d/deny-https":
|
|
13 | antoniojas | owner => root, group=>root, mode=>755,
|
|
514 | antoniojas | source => "puppet:///puppet.educarex.es/files/deny-https",
|
|
6 | antoniojas | notify => Exec["configurar-https"],
|
|
}
|
|||
exec { "configurar-https":
|
|||
514 | antoniojas | command => "/usr/sbin/update-rc.d deny-https start 31 2 3 4 5 . stop 01 0 1 6 . ; /etc/init.d/deny-https start",
|
|
require => File["/etc/init.d/deny-https"],
|
|||
unless => "/bin/ls /etc/rc2.d/S31deny-https",
|
|||
6 | antoniojas | refreshonly => true,
|
|
}
|
|||
}
|