4 # with merge: unique entries in other hiera sources add to the array
5 resolv_conf::searchpaths:
7 apt::sources::debian::location:
11 resolv_conf::searchpaths: ['debian.org']
12 resolv_conf::resolvoptions: []
15 mirror_basedir_prefix: '/srv/mirrors/'
16 role_config__syncproxy:
17 mirror_basedir_prefix: '/srv/mirrors/'
19 - 'debian-archive-debian-samhain-reports@master.debian.org'
20 - 'debian-admin@ftbfs.de'
24 - 'debian-admin@debian.org'
26 letsencrypt_dir: '/srv/puppet.debian.org/from-letsencrypt'
27 auto_certs_dir: '/srv/puppet.debian.org/ca/RESULT/certs'
28 auto_clientcerts_dir: '/srv/puppet.debian.org/ca/RESULT/clientcerts'
29 apt::sources::debian::location: 'https://deb.debian.org/debian/'
31 # all of these should be retired in favour of including the class role
32 # with the host. weasel, 2019-09
35 - buxtehude.debian.org
37 - buxtehude.debian.org
41 - buxtehude.debian.org
65 - cgi-grnet-01.debian.org
67 - cgi-grnet-01.debian.org
69 - adayevskaya.debian.org
80 - manziarly.debian.org
81 - cgi-grnet-01.debian.org
87 - tchaikovsky.debian.org
92 - pkgmirror-csail.debian.org
100 - pejacevic.debian.org
102 - piu-slave-bm-a.debian.org
103 - piu-slave-ubc-01.debian.org
108 - rapoport.debian.org
116 - wolkenstein.debian.org
118 - cgi-grnet-01.debian.org
119 archvsync_base_additional:
120 # this is usually pulled in by *-mirror or syncproxy roles
125 mirror-anu.debian.org:
126 fastly-backend: false
127 mirror-csail.debian.org:
128 fastly-backend: false
129 mirror-isc.debian.org:
130 onion_v4_address: 149.20.4.14
131 mirror-umn.debian.org:
132 onion_v4_address: 128.101.240.215
133 mirror-accumu.debian.org:
134 fastly-backend: false
135 mirror-skroutz.debian.org:
136 fastly-backend: false
138 service-hostname: lobos.security.backend.mirrors.debian.org
139 fastly-backend: false
140 onion_v4_address: 212.211.132.250
142 fastly-backend: false
143 schmelzer.debian.org:
144 fastly-backend: false
146 service-hostname: schumann.security.backend.mirrors.debian.org
148 setoguchi.debian.org:
149 fastly-backend: false
151 fastly-backend: false
153 service-hostname: villa.security.backend.mirrors.debian.org
155 onion_v4_address: 212.211.132.32
157 service-hostname: wieck.security.backend.mirrors.debian.org
168 - diabelli.debian.org
169 # single sign on relying party (host) - also required apache2 module enabled on that host via other means
172 - diabelli.debian.org
177 - ticharich.debian.org
184 - static-master-grnet-01.debian.org
187 - mirror-anu.debian.org
188 - mirror-csail.debian.org
189 - mirror-isc.debian.org
194 - mirror-isc.debian.org
196 # when adding a new static mirror, allow it to sync etc, but do not push to it and wait for it. For this, also add it to static_mirror_nopush.
197 static_mirror_nopush:
201 - casulana.debian.org
204 - donizetti.debian.org
206 - kaufmann.debian.org
208 - manziarly.debian.org
210 - melartin.debian.org
213 - respighi.debian.org
214 - wolkenstein.debian.org
217 - gretchaninov.debian.org
219 - milanollo.debian.org
220 - mirror-anu.debian.org
221 - mirror-isc.debian.org
222 - mirror-umn.debian.org
223 - schmelzer.debian.org
226 - ticharich.debian.org
232 - wolkenstein.debian.org
235 - mirror-anu.debian.org
236 - mirror-csail.debian.org
237 - mirror-isc.debian.org
238 - mirror-umn.debian.org
244 - wolkenstein.debian.org
246 - wolkenstein.debian.org
247 postgres_backup_server:
248 - backuphost.debian.org
259 - vittoria.debian.org
261 - vittoria.debian.org
266 - '[2001:67c:2564:a119::148:12]:80'
267 onion_v4_address: 130.89.148.12
268 mirror-accumu.debian.org:
269 service-hostname: accumu.debian.backend.mirrors.debian.org
271 mirror-skroutz.debian.org:
272 service-hostname: skroutz.debian.backend.mirrors.debian.org
274 mirror-isc.debian.org:
277 - '[2001:4f8:1:c::15]:80'
278 onion_v4_address: 149.20.4.15
279 schmelzer.debian.org:
281 - '217.196.149.232:80'
282 - '[2a02:16a8:dc41:100::232]:80'
284 service-hostname: conova.debian.backend.mirrors.debian.org
286 - sibelius.debian.org
288 - gretchaninov.debian.org
290 - schmelzer.debian.org
291 - sibelius.debian.org
293 mirror-accumu.debian.org:
294 onion_v4_address: 130.242.6.199
295 service-hostname: accumu.debug.backend.mirrors.debian.org
296 schmelzer.debian.org:
298 - '217.196.149.232:80'
299 - '[2a02:16a8:dc41:100::232]:80'
300 onion_v4_address: 217.196.149.232
301 service-hostname: conova.debug.backend.mirrors.debian.org
303 - mirror-accumu.debian.org
304 - schmelzer.debian.org
307 - mirror-isc.debian.org
310 - mirror-isc.debian.org
328 - mirror-accumu.debian.org
329 - mirror-skroutz.debian.org
331 - cgi-grnet-01.debian.org
335 - tchaikovsky.debian.org
338 # postgresql instances not managed by puppet otherwise
340 - buxtehude.debian.org
344 - melartin.debian.org
345 - sallinen.debian.org
347 - snapshotdb-manda-01.debian.org
348 - vittoria.debian.org
362 # Hosts that run apache but where it should not be open to the internet by
364 - casulana.debian.org
367 - buxtehude.debian.org
370 - pkgmirror-csail.debian.org
371 - sallinen.debian.org
372 cdbuilder_local_mirror:
373 - casulana.debian.org
378 - sallinen.debian.org
382 - cgi-grnet-01.debian.org