+
+ ssh::keygen {'dsa': }
+ ssh::authorized_key_add { 'dbmaster::puppetmaster::nagios-build':
+ target_user => 'puppet',
+ command => '/srv/puppet.debian.org/sync/bin/puppet-ssh-wrap draghi.debian.org nagiosconfig',
+ key => $facts['dsa_key'],
+ collect_tag => 'puppetmaster',
+ }
+
+ exim::vdomain { 'db.debian.org':
+ mail_user => 'mail_db',
+ mail_group => 'nogroup',
+ }
+
+ ferm::rule::simple { 'finger':
+ port => 'finger',
+ }
+ ferm::rule::simple { 'ldap':
+ port => ['ldap', 'ldaps'],
+ }
+
+ concat { '/etc/apache2/conf-available/puppet-restricted-acl.conf':
+ mode => '0444',
+ ensure_newline => true,
+ warn => '# This file is maintained with puppet',
+ }
+ Concat::Fragment <<| tag == 'debian_org::apt_restricted::apache-acl' |>>