example.yaml

system::augeas:
  'ntp':
    context: '/files/etc/ntp.conf'
    changes:
      - 'set server[1] 0.uk.pool.ntp.org'
      - 'set server[2] 1.uk.pool.ntp.org'
      - 'set server[3] 2.uk.pool.ntp.org'
  'postfix':
    context: '/files/etc/postfix/main.cf'
    changes:
      - 'set relayhost 10.182.4.3'

system::crontabs:
  'logrotate':
    command: '/usr/sbin/logrotate'
    user:    'root'
    hour:    '2'
    minute:  '0'

system::execs:
  "/usr/bin/perl -pi -e 's: grep 1.6: egrep \"1.6/1.7\":' /apps/wso2esb1/product/wso2esb/bin/wso2server.sh":
    onlyif: '/bin/grep -w "grep 1.6" /apps/wso2esb1/product/wso2esb/bin/wso2server.sh'

system::facts:
  location:
    value: 'London'
  ntpq:
    type:  'script'
    value: "#!/bin/bash\nprintf ntpq=\n/usr/sbin/ntpq -p | /usr/bin/tail -1\n"

system::files:
  /apps:
    ensure:  'directory'
    owner:   'root'
    group:   'root'
    mode:    '0755'
  /etc/motd:
    ensure:  'present'
    owner:   'root'
    group:   'root'
    mode:    '0644'
    content: "Authorised access only\nIf unauthorised log off now or face prosecution\n"
  /etc/sudoers:
    ensure:  'present'
    owner:   'root'
    group:   'root'
    mode:    '0440'
    source:  'puppet:///files/default-sudoers' 

system::groups:
  'sysadmins':
    ensure: 'present'
    gid:    '1500'
  'ops':
    gid:    '1503'

system::groups::realize:
  - 'sysadmins'

system::hosts:
  puppet:
    ensure:       'present'
    ip:           '10.5.11.19'
    host_aliases: [ 'puppet.local' ]

system::limits:
  '*':
    nofile:
      soft: 1024
      hard: 2048
  '@weblogic':
    nofile:
      soft: 16384
      hard: 16384
    nproc:
      soft: 2048
      hard: 2048

system::mail:
  aliases:
    postmaster:
      recipient: 'root'
    webmaster:
      recipient: 'fred@domain.com'
  relayhost:     'mail.domain.com'
  type:          'postfix'

system::mounts:
  '/home':
    ensure:  'mounted'
    device:  '/dev/mapper/vg_x120-lv_home'
    atboot:  'true'
    fstype:  'ext4'
    options: 'defaults'
  '/apps/shared':
    device:  'nfs.domain.com:/mnt/vg04/vg04v01/app/shared'
    fstype:  'nfs'
    options: 'rw,bg,hard,nointr,rsize=32768,wsize=32768,tcp,vers=3,timeo=600'

system::ntp::iburst:  'true'
system::ntp::country: 'uk'

system::network::hostname: 'puppet.domain.com'
system::network::gateway:  '10.7.0.1'
system::network::ipv6:     'false'
system::network::zeroconf: 'false'
system::network::dns:
  nameservers: [ '10.7.96.2', '10.7.96.3' ]
  domains:     [ 'domain.com', 'sub.domain.com' ]
system::network::interfaces:
  eth0:
    ipaddress: '10.7.0.21'
    netmask:   '255.255.240.0'
    routes:
      '10.0.0.0/8':
        via: '10.16.0.250'
 
system::packages:
  AdobeReader_enu:
    ensure: '9.5.1-1'
  ConsoleKit:
    ensure: '0.4.5-2.fc17'

system::schedules:
  'always':
    range:  '0 - 23'
  'maintenance':
    range:  '0 - 4'
  'half-hourly':
    period: 'hourly'
    repeat: 2

system::selbooleans:
  'httpd_can_network_connect':
    value: 'on'
    persistent: 'true'

system::services:
  cups:
    ensure: 'stopped'
    enable: 'false'
  sshd:
    ensure: 'running'
    enable: 'true'

system::sshd:
  PasswordAuthentication:
    value:     'no'
  Protocol:
    value:     '2'
  PermitRootLogin:
    value:     'without-password'
    condition: 'Host supersecure.example.net'

system::sshd::sync_host_keys: true

system::sshd::subsystem:
  sftp:
    command:   '/usr/libexec/openssh/sftp-server -u 0002'

system::sysctl:
  kernel.msgmnb:
    value: '131072'
    comment: 'Controls the default maxmimum size of a message queue'
  kernel.msgmax:
    value: '131072'
    comment: ' Controls the maximum size of a message, in bytes'

system::templates:
  /etc/motd:
    owner:    'root'
    group:    'root'
    mode:     '0644'
    template: "/var/lib/puppet/templates/motd-%{osfamily}.erb"
  /etc/environment:
    owner:    'root'
    group:    'root'
    mode:     '0644'
    template: "environment.erb"

system::users:
  'keith':
    ensure:    'present'
    comment:   'Keith Burdis'
    gid:       '500'
    groups:    ['wheel']
    home:      '/home/keith'
    password:  '$6$...'
    shell:     '/bin/bash'
    uid:       '500'
  'fred':
    comment:   'Fred Bloggs'
    uid:       '503'
    gid:       '503'
    home:      '/home/fred'
    managehome: true

system::users::realize:
  - 'keith'
  - 'fred'

system::yumgroups:
  'Base':
    ensure: 'present'
  'Console internet tools':
    ensure: 'present'

system::yumrepos:
  'puppetlabs-deps':
    baseurl:  'http://yum.puppetlabs.com/fedora/f17/dependencies/$basearch'
    descr:    'Puppet Labs Dependencies Fedora 17 - $basearch'
    enabled:  '1'
    gpgcheck: '1'
    gpgkey:   'file:///etc/pki/rpm-gpg/RPM-GPG-KEY-puppetlabs'
  'puppetlabs-products':
    baseurl:  'http://yum.puppetlabs.com/fedora/f17/products/$basearch'
    descr:    'Puppet Labs Products Fedora 17 - $basearch'
    enabled:  '1'
    gpgcheck: '1'
    gpgkey:   'file:///etc/pki/rpm-gpg/RPM-GPG-KEY-puppetlabs'


system::providers:
  host: 'augeas'
  mailalias: 'augeas'
  mounttab: 'augeas'