- if has_role('security_mirror_no_ftp') {
- vsftpd::site { [ 'security', 'security6' ]:
- ensure => absent,
- }
- } else {
- include ferm::ftp_conntrack
- vsftpd::site { 'security':
- banner => 'security.debian.org FTP server (vsftpd)',
- logfile => '/var/log/ftp/vsftpd-security.debian.org.log',
- max_clients => 200,
- root => '/srv/ftp.root/',
- bind => $ftp_bind,
- }
- if ($ftp_bind6 != '') {
- vsftpd::site { 'security6':
- banner => 'security.debian.org FTP server (vsftpd)',
- logfile => '/var/log/ftp/vsftpd-security6.debian.org.log',
- max_clients => 200,
- root => '/srv/ftp.root/',
- bind => $ftp_bind6,
- }
- }
- }
+ $mirrors = hiera('roles.security_mirror', {})
+ $fastly_mirrors = $mirrors.filter |$h| { $h[1]['fastly-backend'] }
+ $hosts_to_check = $fastly_mirrors.map |$h| { $h[1]['service-hostname'] }
+
+ roles::mirror_health { 'security':
+ check_hosts => $hosts_to_check,
+ check_service => 'security',
+ url => 'http://security.backend.mirrors.debian.org/debian-security/dists/stable/updates/Release',
+ health_url => 'http://security.backend.mirrors.debian.org/_health',
+ }