Merge remote-tracking branch 'waldi/rsync-cleanup'
[mirror/dsa-puppet.git] / modules / roles / manifests / security_master.pp
1 class roles::security_master {
2         ssl::service { 'security-master.debian.org':
3                 notify   => Exec['service apache2 reload'],
4                 key      => true,
5                 tlsaport => [443, 1873],
6         }
7
8         vsftpd::site { 'security':
9                 banner     => 'security-master.debian.org FTP server (vsftpd)',
10                 logfile    => '/var/log/ftp/vsftpd-security-master.debian.org.log',
11                 writable   => true,
12                 chown_user => dak-unpriv,
13                 root       => '/srv/ftp.root/',
14         }
15
16         rsync::site { 'security_master':
17                 source      => 'puppet:///modules/roles/security_master/rsyncd.conf',
18                 # Needs to be at least twice the number of direct mirrors (currently 15) plus some spare
19                 max_clients => 50,
20                 sslname     => 'security-master.debian.org',
21         }
22 }