propellor

propellor config for hosts.
git clone git://git.ricketyspace.net/propellor.git
Log | Files | Refs | LICENSE

commit 4df25c9226f4560fbe85b473ba1a219a37e7dc77
parent a511d816f0a147b06ea0483b38702ac4033fd122
Author: rsiddharth <s@ricketyspace.net>
Date:   Tue,  2 Jan 2018 23:31:23 +0000

propellor spin

Diffstat:
config.hs | 12++++++++----
1 file changed, 8 insertions(+), 4 deletions(-)

diff --git a/config.hs b/config.hs @@ -44,6 +44,7 @@ import Propellor import qualified Propellor.Property.Apt as Apt import qualified Propellor.Property.Cron as Cron import qualified Propellor.Property.Docker as Docker +import qualified Propellor.Property.Fail2Ban as Fail2Ban import qualified Propellor.Property.File as File import qualified Propellor.Property.Nginx as Nginx import qualified Propellor.Property.Ssh as Ssh @@ -122,7 +123,7 @@ cygnus = host "cygnus.ricketyspace.net" $ props & updateGitAnnex & morningNoise & eighthirtyNoise - & twentyTwoNoise + & twentyNoise & getCruxEtc & autoCommitCygnusRepos & removeEmptyHomeDirs @@ -256,8 +257,8 @@ eighthirtyNoise = Cron.job "eigthirty-noise" (Cron.Times "30 08 * * *") where noiseCmd = "mpc play" -twentyTwoNoise :: Property DebianLike -twentyTwoNoise = Cron.job "twentytwo-noise" (Cron.Times "00 22 * * *") +twentyNoise :: Property DebianLike +twentyNoise = Cron.job "twentytwo-noise" (Cron.Times "00 20 * * *") (User "s") "/home/s" noiseCmd where noiseCmd = "mpc play" @@ -573,9 +574,10 @@ crux = host "crux.ricketyspace.net" $props & User.accountFor (User "s") & User.hasLoginShell (User "s") "/usr/bin/zsh" & User.hasSomePassword (User "s") - -- root config. + -- system config. & Cron.job "etc-push" (Cron.Times "15 00 * * *") (User "root") "/etc" "git push" + & Fail2Ban.installed -- configure ara ara :: Host @@ -599,6 +601,8 @@ ara = host "ara.ricketyspace.net" $props & File.dirExists "/home/w/pub" & File.hasContent "/home/w/pub/robots.txt" araWebRobotsTxt & File.hasContent "/home/w/pub/index.html" araWebIndex + -- system + & Fail2Ban.installed -- root config & Ssh.authorizedKey (User "root") sCanonicalSshPubKey -- w config