add dns module + init conf (install ssh keys + journald default)

global/overlay/etc/hiera/data/common.yaml

@@ -0,0 +1,34 @@
+---
+nagios_ip_v6: 2001:948:4:6::111
+nagios_ip_v4: 109.105.111.111
+nrpe_clients:
+   - 127.0.0.1
+   - 127.0.1.1
+   - 109.105.111.111
+   - 2001:948:4:6::111
+   - 89.45.233.107
+
+syslog_servers:
+   - syslog.sunet.se:514
+
+mgmt_addresses:
+    - 109.105.113.42    # statler.nordu.net
+    - 2001:948:4:2::42  # statler.nordu.net
+    - 109.105.113.85    # waldorf.nordu.net
+    - 2001:948:4:3::85  # waldorf.nordu.net
+    - 130.242.125.68    # hoppjerka.sunet.se
+    - 2001:6b0:8:4::68  # hoppjerka.sunet.se
+    - 130.242.121.73    # joppherka.sunet.se
+    - 2001:6b0:7:6::73  # joppherka.sunet.se
+
+# Database of SSH keys. Presence of a key in this database does NOT mean it gets
+# installed anywhere. Real ACLs refer to keys in this database.
+sunet_ssh_keys:
+
+  'pettai+07431497':
+    name   : 'pettai+07431497@sunet.se'
+    key    : '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'
+
+dns_ssh_keys:
+  'root':
+    - 'pettai+07431497'

global/overlay/etc/puppet/modules/dns/manifests/init.pp

@@ -0,0 +1,25 @@
+# Base class for everything dns
+class dns {
+
+  Exec {
+    path => ['/usr/local/sbin', '/usr/local/bin', '/usr/sbin', '/usr/bin', '/sbin', '/bin', ],
+  }
+
+  sunet::ssh_keys {'dns':
+    config => safe_hiera('dns_ssh_keys', {})
+  }
+
+  # Keep journald logs for 90 days, (#or 500 MB)
+  sunet::scriptherder::cronjob { 'clean_logs':
+    cmd           => 'sh -c \'test -x /bin/journalctl && /bin/journalctl --vacuum-time=90d\'',
+    special       => 'daily',
+    ok_criteria   => ['exit_status=0', 'max_age=50h'],
+    warn_criteria => ['exit_status=0', 'max_age=72h'],
+  }
+  #file_line { 'journald_SystemMaxUse':
+  #  path  => '/etc/systemd/journald.conf',
+  #  after => '^#SystemMaxUse',
+  #  match => '^SystemMaxUse=',
+  #  line  => 'SystemMaxUse=500M',
+  #}
+}