debian_org::apt: remove jessie support
[mirror/dsa-puppet.git] / hieradata / common.yaml
1 ---
2 nameservers: []
3 searchpaths: []
4 resolvoptions: []
5 allow_dns_query: []
6 role_config__mirrors:
7   mirror_basedir_prefix: '/srv/mirrors/'
8 role_config__syncproxy:
9   mirror_basedir_prefix: '/srv/mirrors/'
10 samhain_recipients:
11   - 'debian-archive-debian-samhain-reports@master.debian.org'
12   - 'debian-admin@ftbfs.de'
13   - 'weasel@debian.org'
14   - 'zumbi@oron.es'
15 root_mail_alias:
16   - 'debian-admin@debian.org'
17 paths:
18   letsencrypt_dir: '/srv/puppet.debian.org/from-letsencrypt'
19   auto_certs_dir: '/srv/puppet.debian.org/ca/RESULT/certs'
20   auto_clientcerts_dir: '/srv/puppet.debian.org/ca/RESULT/clientcerts'
21
22 lookup_options:
23   # entries in other hiera sources add to the array
24   apt::sources::debian::location:
25     merge: unique
26 apt::sources::debian::location: 'http://deb.debian.org/debian/'
27
28 # all of these should be retired in favour of including the class role
29 # with the host. weasel, 2019-09
30 roles:
31   bugsmx:
32     - buxtehude.debian.org
33   bugs_master:
34     - buxtehude.debian.org
35   bugs_mirror:
36     - beach.debian.org
37   bugs_base:
38     - buxtehude.debian.org
39     - beach.debian.org
40   contributors:
41     - nono.debian.org
42   dbmaster:
43     - draghi.debian.org
44   debtags:
45     - tate.debian.org
46   dns_primary:
47     - denis.debian.org
48   dns_geo:
49     - geo1.debian.org
50     - geo2.debian.org
51     - geo3.debian.org
52   extranrpeclient:
53     - denis.debian.org
54   ftp_master:
55     - fasolo.debian.org
56   ftp.upload.d.o:
57     - coccia.debian.org
58     - usper.debian.org
59   api.ftp-master:
60     - coccia.debian.org
61   dgit_browse:
62     - cgi-grnet-01.debian.org
63   dgit_git:
64     - cgi-grnet-01.debian.org
65   git_master:
66     - adayevskaya.debian.org
67   historicalpackages:
68     - hier.debian.org
69   keyring:
70     - kaufmann.debian.org
71   lists:
72     - bendel.debian.org
73   mailrelay:
74     - mailly.debian.org
75     - muffat.debian.org
76   manpages-dyn:
77     - manziarly.debian.org
78     - cgi-grnet-01.debian.org
79   mirrormaster:
80     - melartin.debian.org
81   muninmaster:
82     - menotti.debian.org
83   nagiosmaster:
84     - tchaikovsky.debian.org
85   nm:
86     - nono.debian.org
87   packages:
88     - picconi.debian.org
89     - pkgmirror-csail.debian.org
90   packagesmaster:
91     - picconi.debian.org
92   packagesqamaster:
93     - quantz.debian.org
94   people:
95     - paradis.debian.org
96   piuparts:
97     - pejacevic.debian.org
98   piuparts_slave:
99     - piu-slave-bm-a.debian.org
100     - piu-slave-ubc-01.debian.org
101   popcon:
102     - pinel.debian.org
103   pubsub:
104     - rainier.debian.org
105     - rapoport.debian.org
106   qamaster:
107     - quantz.debian.org
108   rtmaster:
109     - reger.debian.org
110   rtc:
111     - vogler.debian.org
112   search_backend:
113     - wolkenstein.debian.org
114   search_frontend:
115     - cgi-grnet-01.debian.org
116   archvsync_base_additional:
117   # this is usually pulled in by *-mirror or syncproxy roles
118     - dummy
119   security_master:
120     - seger.debian.org
121   security_mirror:
122     mirror-anu.debian.org:
123       fastly-backend: false
124     mirror-csail.debian.org:
125       fastly-backend: false
126     mirror-isc.debian.org:
127       onion_v4_address: 149.20.4.14
128     mirror-umn.debian.org:
129       onion_v4_address: 128.101.240.215
130     mirror-accumu.debian.org:
131       fastly-backend: false
132     mirror-skroutz.debian.org:
133       fastly-backend: false
134     lobos.debian.org:
135       service-hostname: lobos.security.backend.mirrors.debian.org
136       fastly-backend: false
137       onion_v4_address: 212.211.132.250
138     santoro.debian.org:
139       fastly-backend: false
140     schmelzer.debian.org:
141       fastly-backend: false
142     schumann.debian.org:
143       service-hostname: schumann.security.backend.mirrors.debian.org
144       fastly-backend: true
145     setoguchi.debian.org:
146       fastly-backend: false
147     sechter.debian.org:
148       fastly-backend: false
149     villa.debian.org:
150       service-hostname: villa.security.backend.mirrors.debian.org
151       fastly-backend: true
152       onion_v4_address: 212.211.132.32
153     wieck.debian.org:
154       service-hostname: wieck.security.backend.mirrors.debian.org
155       fastly-backend: true
156   security_tracker:
157     - soriano.debian.org
158   security_upload:
159     - suchon.debian.org
160   ssh.upload.d.o:
161     - coccia.debian.org
162     - suchon.debian.org
163     - usper.debian.org
164   sso:
165     - diabelli.debian.org
166   # single sign on relying party (host) - also required apache2 module enabled on that host via other means
167   sso_rp:
168     - debussy.debian.org
169     - diabelli.debian.org
170     - jerea.debian.org
171     - nono.debian.org
172     - quantz.debian.org
173     - tate.debian.org
174     - ticharich.debian.org
175     - wilder.debian.org
176     - wuiet.debian.org
177   static_master:
178     - dillon.debian.org
179     - fasolo.debian.org
180     - porta.debian.org
181     - static-master-grnet-01.debian.org
182   static_mirror:
183     - klecker.debian.org
184     - mirror-anu.debian.org
185     - mirror-csail.debian.org
186     - mirror-isc.debian.org
187     - senfter.debian.org
188     - santoro.debian.org
189   static_mirror_onion:
190     - klecker.debian.org
191     - mirror-isc.debian.org
192     - senfter.debian.org
193   # when adding a new static mirror, allow it to sync etc, but do not push to it and wait for it.  For this, also add it to static_mirror_nopush.
194   static_mirror_nopush:
195     - dummy
196   static_source:
197     - boott.debian.org
198     - casulana.debian.org
199     - coccia.debian.org
200     - dillon.debian.org
201     - donizetti.debian.org
202     - fasolo.debian.org
203     - kaufmann.debian.org
204     - lindsay.debian.org
205     - manziarly.debian.org
206     - mekeel.debian.org
207     - melartin.debian.org
208     - porta.debian.org
209     - philp.debian.org
210     - respighi.debian.org
211     - wolkenstein.debian.org
212     - wuiet.debian.org
213   syncproxy:
214     - gretchaninov.debian.org
215     - klecker.debian.org
216     - milanollo.debian.org
217     - mirror-anu.debian.org
218     - mirror-isc.debian.org
219     - mirror-umn.debian.org
220     - schmelzer.debian.org
221     - smit.debian.org
222   tracker:
223     - ticharich.debian.org
224   udd:
225     - ullmann.debian.org
226   vote:
227     - vento.debian.org
228   weblog_destination:
229     - wolkenstein.debian.org
230   weblog_provider:
231     - klecker.debian.org
232     - mirror-anu.debian.org
233     - mirror-csail.debian.org
234     - mirror-isc.debian.org
235     - mirror-umn.debian.org
236     - santoro.debian.org
237     - senfter.debian.org
238   wiki:
239     - wilder.debian.org
240   www_master:
241     - wolkenstein.debian.org
242   cgi.d.o:
243     - wolkenstein.debian.org
244   postgres_backup_server:
245     - backuphost.debian.org
246     - storace.debian.org
247   bacula_director:
248     - dinis.debian.org
249   bacula_storage:
250     - storace.debian.org
251   dabackup_client:
252     - lw03.debian.org
253   gobby_debian_org:
254     - gombert.debian.org
255   veyepar.debian.org:
256     - vittoria.debian.org
257   sreview.debian.org:
258     - vittoria.debian.org
259   debian_mirror:
260     klecker.debian.org:
261       listen-addresses:
262         - '130.89.148.12:80'
263         - '[2001:67c:2564:a119::148:12]:80'
264       onion_v4_address: 130.89.148.12
265     mirror-accumu.debian.org:
266       service-hostname: accumu.debian.backend.mirrors.debian.org
267       fastly-backend: true
268     mirror-skroutz.debian.org:
269       service-hostname: skroutz.debian.backend.mirrors.debian.org
270       fastly-backend: true
271     mirror-isc.debian.org:
272       listen-addresses:
273         - '149.20.4.15:80'
274         - '[2001:4f8:1:c::15]:80'
275       onion_v4_address: 149.20.4.15
276     schmelzer.debian.org:
277       listen-addresses:
278         - '217.196.149.232:80'
279         - '[2a02:16a8:dc41:100::232]:80'
280       fastly-backend: true
281       service-hostname: conova.debian.backend.mirrors.debian.org
282   historical_master:
283     - sibelius.debian.org
284   historical_mirror:
285     - gretchaninov.debian.org
286     - klecker.debian.org
287     - schmelzer.debian.org
288     - sibelius.debian.org
289   debug_mirror:
290     mirror-accumu.debian.org:
291       onion_v4_address: 130.242.6.199
292       service-hostname: accumu.debug.backend.mirrors.debian.org
293     schmelzer.debian.org:
294       listen-addresses:
295         - '217.196.149.232:80'
296         - '[2a02:16a8:dc41:100::232]:80'
297       onion_v4_address: 217.196.149.232
298       service-hostname: conova.debug.backend.mirrors.debian.org
299   debug_mirror_onion:
300     - mirror-accumu.debian.org
301     - schmelzer.debian.org
302   ports_mirror:
303     - klecker.debian.org
304     - mirror-isc.debian.org
305   ports_mirror_onion:
306     - klecker.debian.org
307     - mirror-isc.debian.org
308   planet_master:
309     - philp.debian.org
310   planet_search:
311     - philp.debian.org
312   i18n.d.o:
313     - tye.debian.org
314   l10n.d.o:
315     - tye.debian.org
316   dedup.d.n:
317     - delfin.debian.org
318   pet.d.n:
319     - petrova.debian.org
320   ports_master:
321     - porta.debian.org
322   onionbalance:
323     - olin.debian.org
324   bgp:
325     - mirror-accumu.debian.org
326     - mirror-skroutz.debian.org
327   cdimage-search:
328     - cgi-grnet-01.debian.org
329   apache_prefork:
330     # php needs this
331     - quantz.debian.org
332     - tchaikovsky.debian.org
333     - wuiet.debian.org
334   postgresql_server:
335     # postgresql instances not managed by puppet otherwise
336     - bmdb1.debian.org
337     - buxtehude.debian.org
338     - danzi.debian.org
339     - fasolo.debian.org
340     - lw07.debian.org
341     - melartin.debian.org
342     - sallinen.debian.org
343     - seger.debian.org
344     - snapshotdb-manda-01.debian.org
345     - vittoria.debian.org
346   salsa.debian.org:
347     - godard.debian.org
348   insecure_ssl:
349     - debussy.debian.org
350     - godard.debian.org
351   debsources:
352     - sor.debian.org
353   ipsec:
354     - fasolo.debian.org
355     - storace.debian.org
356   debconf_wafer:
357     - debussy.debian.org
358   apache_not_public:
359     # Hosts that run apache but where it should not be open to the internet by
360     # default
361     - casulana.debian.org
362   apache_ratelimited:
363     - beach.debian.org
364     - buxtehude.debian.org
365     - lw07.debian.org
366     - picconi.debian.org
367     - pkgmirror-csail.debian.org
368     - sallinen.debian.org
369   cdbuilder_local_mirror:
370     - casulana.debian.org
371   alioth_archive:
372     - grabbe.debian.org
373   snapshot_web:
374     - lw07.debian.org
375     - sallinen.debian.org
376   snapshot_shell:
377     - lw08.debian.org
378   anonscm:
379     - cgi-grnet-01.debian.org
380
381 classes:
382   - base::includes