profiles

Table of Contents

1. Overview
2. Profiles
   • Linux
   • NMS - Network Management Systems
   • Security
3. Limitations
4. Development
5. Release Notes

1. Overview

Module to manage the puppet 'abstraction layer'. Here you can define profiles for your roles. This class will work better with 'roles' class [business layer]. You can add one or more profile for each 'role'.

2. Profiles

• Linux
• NMS/Zabbix
• Webserver/Nginx [soon]
• Webserver/APACHE [soon]

2.1 Linux

Description

Profile to configure Linux system using module 'mtulio-linux'

Dependencies

Module 'Linux'

Files

See module description

Usage

• Basic security level

include ::profiles
class {'::profiles::linux':
  security_level => 'basic',
}

• Define your own repository of configuration [module]

class {'::profiles' :
  gb_repo_base => '0_REPOSITORY',
  gb_pool      => 'dmz',
}
class {'::profiles::linux' :
  security_level => 'basic',
}

2.2 NMS

2.2.1 Zabbix Agent

Description

Profile to configure zabbix Agent on a Linux server

Dependencies

Module 'Zabbix'

Files

See module description

Usage

• Configure Zabbix Agent with the basic parameters defined on class '::profiles::nms::zabbix_agent'. (check out the class to customize the parameters of your organization)

 include profiles
 class { 'profiles::nms::zabbix_agent' : }

2.3 Security

2.3.1 DNS Sec

Description

Profile to configure DNS server on a Linux System

Dependencies

Module 'DNSsec'

Files

See module description

Usage

• Configure DNS server (BIND9) using DNSsec. Script will sign all zones under directory /var/named/chroot/var/named/master/zones/ with prefix 'db.'. Remember to keep keys on sub directory 'keys/':

include profiles
class {'profiles::security::dns':
  server_type    => 'master',
  dnssec_enabled => 'yes',
}

3. Limitations

OS compatibility:

• Red Hat family 7+

We're working to support more OS.

4. Development

See project page at https://github.com/mtulio/puppet-mod-profiles

5. Release Notes

[1.1.1]

• Fix Warnings

[1.1.0] <--

• Review code layout of Linux profile
• Create a class to manage users [add/remove]
• Add DNS profiles [security/dns]

[1.0.0]

• Add Profile Linux [base and sshd configuration]
• Add Profile Zabbix