Renamed and updated nitelite.io zone file

- Renamed internal.nitelite.io zone to nitelite.io to account for external nodes
  as well
- Added feedburner CNAME
- Reorganized records

Signed-off-by: Byron Sanchez <byron@hackbytes.com>
Added zone files

Added zone files for:

  - hackbytes.com
  - chompix.com
  - tehpotatoking.com
  - byronsanchez.net

hackbytes define mx records used for my email. All the zone files define
standard subdomains for staging and production deployments.

These zone files mirror (mostly) those on cloudflare so that I can tweak them
locally prior to publishing any changes. It also allows me to access localnet
stages of projects using urls like "stage.hackbytes.com."

Signed-off-by: Byron Sanchez <byron@hackbytes.com>
Added generic "staff" user to be added on all nodes

Signed-off-by: Byron Sanchez <byron@hackbytes.com>
Updated global network variables

Updated:

  - ldap server address
  - internal and external domain names

Signed-off-by: Byron Sanchez <byron@hackbytes.com>
Updated users

- Started managing home directories
- Deployer's group is now nginx

Signed-off-by: Byron Sanchez <byron@hackbytes.com>
Updated nginx so it runs as user deployer and group nginx

Signed-off-by: Byron Sanchez <byron@hackbytes.com>
Changed ownership of /srv/www dir to deployer:nginx

This ensures that the directory permissions matches the nginx service and the
deployer user (both are also deployer:nginx).

Signed-off-by: Byron Sanchez <byron@hackbytes.com>
Fixed ignore rule

The intention was to ignore every module except those prefixed with "nl_".
However, the modules/ rule made it so that the exception (!modules/nl_*) did not
work. This is because the modules directory was being ignored at the top level.
By bringing the ignore rule down a level (to ignoring everything INSIDE the
modules directory as opposed to the modules directory itself), the exception
rule works. Now nl_ modules are tracked.

The short of it is, you don't want to ignore the directory because you want to
recurse INTO them. That way, the exception will work.

Signed-off-by: Byron Sanchez <byron@hackbytes.com>
Abstracted nginx website configurations into a module

nl_nginx is now responsible of generating website configurations. By using a
template, redundancy is eliminated!

The nitelite pattern has been updated to reflect the change.

Signed-off-by: Byron Sanchez <byron@hackbytes.com>
Updated nas pattern and added nasclient pattern

- Removed unused mount from nas pattern
- Added all NFS client mounts to nasclient, so that whenever a node boots, the
  shares are automatically mounted.

Signed-off-by: Byron Sanchez <byron@hackbytes.com>
Added ssh module and pattern

The user module assists by providing user home directory facts. The SSH module
can then use this information to ensure the proper files exist in each user's
ssh directory.

Public data is distributed using hiera configuration files. Private data is
distributed manually.

Signed-off-by: Byron Sanchez <byron@hackbytes.com>
Updated DNS pattern to include new zone files

Signed-off-by: Byron Sanchez <byron@hackbytes.com>
Updated gentoo pattern to include nitelite overlay keywords

Signed-off-by: Byron Sanchez <byron@hackbytes.com>
Fixed media pattern file path

Signed-off-by: Byron Sanchez <byron@hackbytes.com>
Enabled ipv4 forwarding for all nodes

This change was made because iptables uses forwarding on all nodes.

Signed-off-by: Byron Sanchez <byron@hackbytes.com>