# update.conf
# LEG24042005
# LEG11042005
# LEG01042005
#
# This script distributes the configuration, a simple file so that,
# if there are syntax errors in the main config, we can still
# distribute a correct configuration to the machines afterwards, even
# though the main config won't parse. It is read and run just before the
# main configuration is parsed.

# Substitutes values in CAPS acording to your situation

control:

    actionsequence  = ( copy tidy )  # Keep this simple and constant

    domain          = ( EXAMPLE.DOMAIN )  # Needed for remote copy

    DefaultCopyType = ( sum )
    ExcludeCopy = ( *~ *% "#*" core )

    #
    # Which host/dir is the master for configuration roll-outs?
    #

    policyhost      = ( POLICYHOST.EXAMPLE.DOMAIN )
    policyfiles     = ( /var/lib/cfengine2/files )

    phost_files	    = ( cfagent.conf:update.conf )

    #
    # Spread the load, make sure the servers get done first though
    #

    SplayTime = ( 1 )


    #
    # Make sure there is a local copy of the configuration
    # e.g. for mobile stations or during DOS attacks
    #

copy:

    !POLICYHOST::
	$(policyfiles)/cfengine
	    server=$(policyhost)
	    dest=/etc/cfengine
            recurse=1
	    exclude=*~
	    purge=true
            mode=640
	    trustkey=true


    POLICYHOST::

	$(policyfiles)/cfengine/$(phost_files)
	    dest=/etc/cfengine/cfagent.conf
	    owner=root
	    group=root
            mode=640
 
	$(policyfiles)/policyhost
	    dest=/etc/cfengine
	    recurse=1
	    exclude=*~
	    owner=root
	    group=root
            mode=640
 

#####################################################################

tidy:

     #
     # Cfexecd stores output in this directory.
     # Make sure we don't build up files and choke on our own words!
     #

     /var/lib/cfengine2/outputs pattern=* age=7



# Emacs:
# Local Variables:
# mode: text
# tab-stop-list: (4 8 12 16 24 32 40 48 56 64 72 80 88 96 104 112 120)
# End: