common.yaml

# common.yaml
---

access_and_sudoers::allow:
  myadmingroup:
    entity_type: group
  myaverageuser:
    entity_type: user
    sudoer: false

ssh::storeconfigs_enabled: true
# server
ssh::server_options::acceptenv: LANG LC_*
ssh::server_options::banner: /etc/issue.net
ssh::server_options::challengeresponseauthentication: no
ssh::server_options::ciphers: aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc,aes192-cbc,aes256-cbc
ssh::server_options::clientalivecountmax: 0
ssh::server_options::clientaliveinterval: 900
ssh::server_options::gssapiauthentication: yes
ssh::server_options::permitrootlogin: no
ssh::server_options::printlastlog: yes
ssh::server_options::protocol: 2
ssh::server_options::subsystem: sftp /usr/libexec/openssh/sftp-server
ssh::server_options::syslogfacility: AUTHPRIV
ssh::server_options::usepam: yes
ssh::server_options::x11forwarding: no
ssh::server_options::printmotd: yes
# client
ssh::client_options::sendenv: LANG LC_*
ssh::client_options::forwardx11trusted: yes
ssh::client_options::serveraliveinterval: 10

firewall::trusted_networks::admin: #This will become tcp/3389 for Windows, or tcp/22 for anything else
 - 10.0.0.0/8
firewall::trusted_networks::web:
 - 10.0.0.0/8
firewall::trusted_networks::puppetmaster:
 - 10.0.0.0/8
firewall::trusted_networks::nrpe:
 - 10.0.0.0/8

nrpe::allowed_hosts: [ 'nagios.home', '10.0.2.10' ]

ntp::servers: 
  - 0.us.pool.ntp.org iburst
  - 1.us.pool.ntp.org iburst
  - 2.us.pool.ntp.org iburst
  - 3.us.pool.ntp.org iburst

# agent
puppet::server: puppet
puppet::environment: production
# master
puppet::master::r10k_remote: https://github.com/seanscottking/puppet-controlrepo.git
puppet::master::hiera_eyaml: true
puppet::master::hiera_hierarchy:
 - vagrant/%%{}{::vagrant}
 - app_tier/%%{}{::app_tier}-%%{}{::app_role}
 - app_role/%%{}{::app_role}
 - aws/%%{}{::ec2_services_domain}
 - datacenter/%%{}{::network_eth0}
 - common
puppet::master::hiera_master_service: httpd
puppet::master::hiera_datadir: /etc/puppet/environments/%%{}{::environment}/hieradata
puppet::master::environments: directory

resolv_conf::searchpath: home
resolv_conf::nameservers: [ 8.8.8.8, 8.8.4.4 ]

selinux::mode: enforcing

supplementary_packages::Debian: [ apt-transport-https, autofs, bc, boxes,
                                  command-not-found, command-not-found-data,
                                  dnsutils, file, manpages, mailutils, mlocate,
                                  netcat, rsync, screen, sysstat, telnet, vim,
                                  wget, unzip
                                  ]
supplementary_packages::RedHat: [ autofs, boxes, mlocate, openldap-clients,
                                  rsync, rsyslog, screen, sysstat, tcpdump,
                                  telnet, unzip, vim-enhanced
                                  ]

timezone::timezone: Etc/UTC