Puppet Class: role::bastionhost

Defined in:
modules/role/manifests/bastionhost.pp

Overview

bastion host for all users



2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
 
# File 'modules/role/manifests/bastionhost.pp', line 2

class role::bastionhost{
    include profile::base::production
    include profile::firewall
    include profile::backup::host

    ensure_packages(['traceroute', 'mosh'])

    backup::set {'home': }

    firewall::service { 'ssh':
        desc  => 'SSH open from everywhere, this is a bastion host',
        prio  => 3,
        proto => 'tcp',
        port  => 22,
    }
}