chef-baseline-role-example

base5.rb

name "base5"
description "Contains run list of roles which are safe to run on all RHEL5 and RHEL6 servers."
override_attributes "inittab" => {
  "runlevel" => "3"
},
"chef_client" => {
  "server_url" => "http://chef.example.com:4000",
  "init_style" => "init"
},
"logwatch" => {
  "mailto" => "[email protected]"
},
"snmp" => {
  "community" => "s3cr3tstring",
  "full_systemview" => true,
  "install_utils" => true,
  "trapsinks" => [
    "itassistant.example.com",
    "whatsup.example.com",
    "zen.example.com"
  ],
  "syslocationPhysical" => "Huntington/Machine Room",
  "syslocationVirtual" => "Huntington/Machine Room/ESX",
  "syscontact" => "[email protected]"
},
"repo" => {
  "vmware" => {
    "install_optional" => true
  },
  "dell" => {
    "download_firmware" => false 
  },
  "corp" => {
    "repo_name" => "company-name",
    "base_url" => "http://yum.example.com/yum"
  }
},
"ntp" => {
  "servers" => [
    "192.0.2.247",
    "192.0.2.193",
    "192.0.2.194"
  ]
},
"vim" => {
  "programmer_options" => true
},
"resolver" => {
  "search" => "example.com",
  "nameservers" => [
    "192.0.2.30",
    "192.0.2.36",
    "192.0.2.33"
  ]
},
"openssh" => {
  "permitrootlogin" => "no",
  "enable_banner" => false 
},
"rsync" => {
  "hosts" => "192.0.2.0/24"
},
"iptables" => {
  "lan" => {
    "range" => "192.0.2.0/24"
  }
},
"yum" => {
  "exclude" => [ "kernel*" ],
  "installonlypkgs" => [ "kernel*" ]
}
run_list "recipe[inittab]",
  "recipe[users::sysadmins]",
  "recipe[sudo]",
  "recipe[chef-client::config]",
  "recipe[chef-client::service]",
  "recipe[chef-client::delete_validation]",
  "recipe[logwatch]",
  "recipe[snmp]",
  "recipe[ntp]",
  "recipe[resolver]",
  "recipe[openssh]",
  "recipe[rsync]",
  "recipe[iptables]",
  "recipe[yumrepo]",
  "recipe[rpmaudit]",
  "recipe[vim]",
  "recipe[readline]",
  "recipe[postfix]",
  "recipe[screen]"