+
+sshallowed = []
+
+should_restrict = restrict_ssh.include?(@hostname)
+
+if should_restrict then
+ # draghi makes for a nice jumphost
+ sshallowed << %w{$DSA_IPS 82.195.75.106 2001:41b8:202:deb:1a1a:0:52c3:4b6a}
+
+ if %w{draghi}.include?(@hostname) then
+ sshallowed << '$HOST_DEBIAN'
+ end
+
+ if %w{adayevskaya}.include?(@hostname) then
+ out << '@def $MFL_LOCAL = ( 130.83.226.60 );' # Michael Fladerer
+ sshallowed << '$MFL_LOCAL'
+ sshallowed << %w{$HOST_DEBIAN}
+ end
+end
+if sshallowed.length == 0 then
+ sshallowed << '0.0.0.0/0'
+ sshallowed << '::/0'
+end
+
+out << "@def $SSH_SOURCES = ( $SSH_SOURCES #{sshallowed.join(' ')});"
+
+
+out.join("\n")