handle sync ssh keys for dgit
[mirror/dsa-puppet.git] / modules / roles / manifests / dgit.pp
1 # the dgit role
2 #
3 # stores the sync command to be collected by sync clients (browse and public git)
4 class roles::dgit() {
5   ssh::authorized_key_add { 'dgit-sync':
6     target_user => 'dgit-unpriv',
7     key         => dig($facts, 'ssh_keys_users', 'dgit', 'id_rsa.pub', 'line'),
8     command     => '/srv/dgit.debian.org/dgit-live/infra/dgit-mirror-ssh-wrap /srv/dgit.debian.org/unpriv/repos/ .git --',
9     from        => $base::public_addresses,
10     collect_tag => 'roles::dgit::sync',
11   }
12 }