propellor/config.hs

84 lines
2.9 KiB
Haskell
Raw Normal View History

2014-03-31 03:59:07 +00:00
{- This is the main configuration file for Propellor, and is used to build
- the propellor program. -}
2014-03-31 03:55:59 +00:00
import Propellor
2014-03-31 03:37:54 +00:00
import Propellor.CmdLine
import qualified Propellor.Property.File as File
import qualified Propellor.Property.Apt as Apt
import qualified Propellor.Property.Network as Network
import qualified Propellor.Property.Ssh as Ssh
import qualified Propellor.Property.Sudo as Sudo
import qualified Propellor.Property.User as User
import qualified Propellor.Property.Hostname as Hostname
import qualified Propellor.Property.Reboot as Reboot
import qualified Propellor.Property.Tor as Tor
import qualified Propellor.Property.Docker as Docker
import qualified Propellor.Property.GitHome as GitHome
import qualified Propellor.Property.JoeySites as JoeySites
2014-03-30 04:08:02 +00:00
main :: IO ()
2014-03-30 23:10:32 +00:00
main = defaultMain getProperties
2014-03-30 04:08:02 +00:00
2014-03-31 03:37:54 +00:00
{- | This is where the system's HostName, either as returned by uname
2014-03-30 06:26:23 +00:00
- or one specified on the command line, is converted into a list of
2014-03-31 03:37:54 +00:00
- Properties for that system.
-
- Edit this to configure propellor!
-}
2014-03-31 03:02:10 +00:00
getProperties :: HostName -> Maybe [Property]
getProperties hostname@"clam.kitenet.net" = Just
2014-03-30 06:26:23 +00:00
[ cleanCloudAtCost hostname
2014-03-30 06:12:48 +00:00
, standardSystem Apt.Unstable
2014-03-31 03:02:10 +00:00
, Network.ipv6to4
2014-03-31 02:14:14 +00:00
-- Clam is a tor bridge, and an olduse.net shellbox.
2014-03-30 20:15:27 +00:00
, Tor.isBridge
2014-03-31 02:14:14 +00:00
, JoeySites.oldUseNetshellBox
2014-03-31 01:01:18 +00:00
-- I play with docker on clam.
, Docker.configured
2014-03-30 06:12:48 +00:00
-- This is not an important system so I don't want to need to
-- manually upgrade it.
, Apt.unattendedUpgrades True
-- Should come last as it reboots.
2014-03-30 17:39:09 +00:00
, Apt.installed ["systemd-sysv"] `onChange` Reboot.now
2014-03-30 06:12:48 +00:00
]
-- add more hosts here...
--getProperties "foo" =
2014-03-31 03:02:10 +00:00
getProperties _ = Nothing
2014-03-30 06:12:48 +00:00
-- This is my standard system setup
2014-03-30 06:26:23 +00:00
standardSystem :: Apt.Suite -> Property
standardSystem suite = propertyList "standard system"
2014-03-30 06:12:48 +00:00
[ Apt.stdSourcesList suite `onChange` Apt.upgrade
2014-03-30 04:28:56 +00:00
, Apt.installed ["etckeeper"]
, Apt.installed ["ssh"]
, GitHome.installedFor "root"
2014-03-31 00:18:45 +00:00
, User.hasSomePassword "root"
2014-03-30 04:28:56 +00:00
-- Harden the system, but only once root's authorized_keys
-- is safely in place.
, check (Ssh.hasAuthorizedKeys "root") $
Ssh.passwordAuthentication False
2014-03-30 19:53:35 +00:00
, User.sshAccountFor "joey"
2014-03-31 00:18:45 +00:00
, User.hasSomePassword "joey"
2014-03-31 00:46:31 +00:00
, Sudo.enabledFor "joey"
, GitHome.installedFor "joey"
2014-03-31 00:18:45 +00:00
, Apt.installed ["vim", "screen"]
2014-03-30 20:15:27 +00:00
-- I use postfix, or no MTA.
, Apt.removed ["exim4"] `onChange` Apt.autoRemove
]
2014-03-30 06:26:23 +00:00
-- Clean up a system as installed by cloudatcost.com
cleanCloudAtCost :: HostName -> Property
cleanCloudAtCost hostname = propertyList "cloudatcost cleanup"
2014-03-30 20:53:31 +00:00
[ Hostname.set hostname
2014-03-30 06:26:23 +00:00
, Ssh.uniqueHostKeys
2014-03-30 20:49:59 +00:00
, "worked around grub/lvm boot bug #743126" ==>
"/etc/default/grub" `File.containsLine` "GRUB_DISABLE_LINUX_UUID=true"
2014-03-30 17:39:09 +00:00
`onChange` cmdProperty "update-grub" []
2014-03-31 03:55:59 +00:00
`onChange` cmdProperty "update-initramfs" ["-u"]
2014-03-30 20:53:31 +00:00
, "nuked cloudatcost cruft" ==> combineProperties
[ File.notPresent "/etc/rc.local"
, File.notPresent "/etc/init.d/S97-setup.sh"
, User.nuked "user" User.YesReallyDeleteHome
]
2014-03-30 06:26:23 +00:00
]