1 class roles::security_tracker {
3 include apache2::proxy_http
4 include apache2::expires
6 ssl::service { 'security-tracker.debian.org':
7 notify => Exec['service apache2 reload'],
11 apache2::site { 'security-tracker.debian.org':
12 site => 'security-tracker.debian.org',
13 content => template('roles/apache-security-tracker.debian.org.conf.erb')
16 # traffic shaping http traffic
17 @ferm::rule { 'dsa-security-tracker-shape':
20 rule => "proto tcp sport 443 MARK set-mark 20",
23 file { '/usr/local/sbin/traffic-shape':
25 content => template('roles/security-tracker/traffic-shape'),
26 notify => Exec['/usr/local/sbin/traffic-shape'],
28 exec { '/usr/local/sbin/traffic-shape':