Puppet Class: role::bastionhost::general

Defined in:
modules/role/manifests/bastionhost/general.pp

Overview

bastion host for all users



2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
# File 'modules/role/manifests/bastionhost/general.pp', line 2

class role::bastionhost::general {
    system::role { 'bastionhost::general':
        description => 'Bastion host for all shell users',
    }

    include ::bastionhost
    include ::profile::standard
    include ::profile::base::firewall
    include ::profile::backup::host

    # Used by parsoid deployers

    include ::profile::scap::dsh

    backup::set {'home': }

    ferm::service { 'ssh':
        desc  => 'SSH open from everywhere, this is a bastion host',
        prio  => '01',
        proto => 'tcp',
        port  => 'ssh',
    }
}