Merge branch 'main' of ssh://platform.sunet.se:22022/SUNET/net-ops

global/overlay/etc/puppet/cosmos-rules.yaml

@@ -5,7 +5,6 @@
    sunet::server:
       disable_all_local_users: true
       disable_ipv6_privacy: true
-      fail2ban: true
       install_scriptherder: true
       unattended_upgrades: true
       ntpd_config: false
@@ -21,6 +20,26 @@ metrics-cd-test-1.sunet.se:
          - '130.242.121.23/32' # vpn1.sunet.se
          - '192.36.171.97/32' # graph-internal-1.sunet.se
 
+monitornetops-sto1-prod-1.sunet.se:
+  sunet::dockerhost2:
+  sunet::naemon_monitor:
+    domain: monitornetops.sunet.se
+    naemon_tag: v2024-03-05-01
+    thruk_tag: v2024-02-12-01
+    histou_tag: v2023-10-04-02
+    nagflux_tag: v2023-10-04-01
+    thruk_admins:
+      - mariah@sunet.se
+      - pahol@sunet.se
+      - paulo@sunet.se
+      - jonas@sunet.se
+      - salu@sunet.se
+      - thorslund@sunet.se
+    thruk_users:
+      - '*@sunet.se'
+    default_host_group: sunet::nagios::nrpe
+    nrpe_group: sunet::nagios::nrpe
+
 pahol-test1.sunet.se:
    sunet::baas2:
       version: 8.1.22.0
@@ -39,6 +58,11 @@ pypi-1.sunet.se:
       nodename: A8P9U1IAR58I
       backup_dirs:
         - '/opt/pypi/packages'
+   sunet::server:
+      disable_ipv6_privacy: true
+      unattended_upgrades: true
+      ntpd_config: false
+      sshd_config: false
 
 test-das-federator.lab.sunet.se:
    sunet::certbot::acmed:

global/overlay/etc/puppet/setup_cosmos_modules

@@ -98,6 +98,11 @@ def main():
     modulesfile_tmp: str = modulesfile + ".tmp"
 
     modules: dict = {
+        "nagioscfg": {
+            "repo": "https://github.com/SUNET/puppet-nagioscfg.git",
+            "upgrade": "yes",
+            "tag": "pahol-puppet8-compatibility-2024*",
+        },
         "sunet": {
             "repo": "https://github.com/SUNET/puppet-sunet.git",
             "upgrade": "yes",
@@ -120,8 +125,6 @@ def main():
             modules["sunet"]["tag"] = "pahol-influx*"
         if host_info["fqdn"] == "pahol-test1.sunet.se":
             modules["sunet"]["tag"] = "pahol-baas2-2*"
-        if host_info["fqdn"] == "pypi-1.sunet.se":
-            modules["sunet"]["tag"] = "pahol-pypi-dockerhost2*"
 
     # Build list of expected file content
     file_lines = create_file_content(modules)

monitornetops-sto1-prod-1.sunet.se/README

@@ -0,0 +1,3 @@
+
+The system documentation is in the docs directory of the multiverse repository.
+

monitornetops-sto1-prod-1.sunet.se/overlay/etc/hiera/data/local.eyaml

@@ -0,0 +1,2 @@
+---
+influx_password: ENC[PKCS7,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]

pypi-1.sunet.se/overlay/etc/puppet/cosmos-modules.conf

@@ -1,6 +0,0 @@
-# name source (puppetlabs fq name or git url) upgrade (yes/no)
-#
-
-augeas      https://github.com/SUNET/puppet-augeas.git yes sunet-2*
-sunet       https://github.com/SUNET/puppet-sunet.git yes stable-2023v1-2*
-