4 rsync::site { 'keyring':
5 source => 'puppet:///modules/roles/keyring/rsyncd.conf',
6 sslname => 'keyring.debian.org',
9 ssl::service { 'keyring.debian.org':
10 notify => Exec['service apache2 reload'],
12 tlsaport => [443, 1873],
15 include named::authoritative
17 $notify_address_bind = join(getfromhash($deprecated::allnodeinfo, 'denis.debian.org', 'ipHostNumber'), '; ')
19 ferm::rule::simple { 'keyserver':
23 Ferm::Rule::Simple <<| tag == 'named::keyring::ferm' |>>
25 concat::fragment { 'dsa-named-conf-puppet-misc---openpgpkey-zone':
26 target => '/etc/bind/named.conf.puppet-misc',
29 zone "_openpgpkey.debian.org" {
31 file "/srv/keyring.debian.org/_openpgpkey.debian.org.zone";
34 key tsig-denis.debian.org-kaufmann.debian.org ;
38 ${notify_address_bind};