# Common settings for all CentOS/RHEL 7.x Hosts

classes:
  - site_firewalld

##################################################
# Firewall Configuration.
#
# EL7 firewall type is 'firewalld_rich_rule'.
firewall_provider: 'firewalld_rich_rule'

# Default firewall rules.
site_profile::base::firewall_rules:
  'Accept SSH from any':
    ensure: 'present'
    zone: 'public'
    service: 'ssh'
    action: 'accept'


#############################################
# MySQL Settings.
# MySQL client packages. CentOS 7 uses mariadb from base CentOS.
site_profile::dbclient::mysql_client_packages:
  - mariadb
  - mariadb-libs

# Default to mariadb server in base.
mysql::server::package_name: mariadb-server

# mysql55 replacement not needed under C7.
site_profile::dbclient::replace_mysql_with_mysql55: FALSE

# Disable Percona-Server and Percona-XtraDB packages which conflict with mariadb packages.
yumrepos::percona::percona_exclude: 'Percona-Server* Percona-XtraDB*'

#############################################
# C7-specific packages to install by default.
site_profile::base::base_packages:
  - man-db

#############################################
## Denyhosts Configuration.
# No denyhosts on C7.
enable_denyhosts: FALSE

# Common settings for all CentOS/RHEL 7.x Hosts

classes:
  - site_firewalld

##################################################
# Firewall Configuration.
#
# EL7 firewall type is 'firewalld_rich_rule'.
firewall_provider: 'firewalld_rich_rule'

# Default firewall rules.
site_profile::base::firewall_rules:
  'Accept SSH from any':
    ensure: 'present'
    zone: 'public'
    service: 'ssh'
    action: 'accept'

# Web firewall rules.
site_profile::web::firewall_rules:
  'Allow http from all':
    ensure: 'present'
    zone: 'public'
    service: 'http'
    action: 'accept'
  'Allow https from all':
    ensure: 'present'
    zone: 'public'
    service: 'https'
    action: 'accept'


#############################################
# MySQL Settings.
# MySQL client packages. CentOS 7 uses mariadb from base CentOS.
site_profile::dbclient::mysql_client_packages:
  - mariadb
  - mariadb-libs

# Default to mariadb server in base.
mysql::server::package_name: mariadb-server

# mysql55 replacement not needed under C7.
site_profile::dbclient::replace_mysql_with_mysql55: FALSE

# Disable Percona-Server and Percona-XtraDB packages which conflict with mariadb packages.
yumrepos::percona::percona_exclude: 'Percona-Server* Percona-XtraDB*'

#############################################
# C7-specific packages to install by default.
site_profile::base::base_packages:
  - man-db

#############################################
## Denyhosts Configuration.
# No denyhosts on C7.
enable_denyhosts: FALSE

Add default web firewall rules for EL7
Add default web firewall rules for EL7
