+ content => template('roles/security_mirror/security.debian.org.erb')
+ }
+
+ if has_role('security_mirror_no_ftp') {
+ # nop
+ } else {
+ include ferm::ftp_conntrack
+ vsftpd::site { 'security':
+ banner => 'security.debian.org FTP server (vsftpd)',
+ logfile => '/var/log/ftp/vsftpd-security.debian.org.log',
+ max_clients => 200,
+ root => '/srv/ftp.root/',
+ bind => $ftp_bind,
+ }
+ if ($ftp_bind6 != '') {
+ vsftpd::site { 'security6':
+ banner => 'security.debian.org FTP server (vsftpd)',
+ logfile => '/var/log/ftp/vsftpd-security6.debian.org.log',
+ max_clients => 200,
+ root => '/srv/ftp.root/',
+ bind => $ftp_bind6,
+ }
+ }
+ }
+
+ rsync::site { 'security':
+ source => 'puppet:///modules/roles/security_mirror/rsyncd.conf',
+ max_clients => 100,
+ bind => $rsync_bind,
+ bind6 => $rsync_bind6,
+ }
+
+ $onion_v4_addr = $::hostname ? {
+ mirror-anu => '150.203.164.61',
+ mirror-isc => '149.20.4.14',
+ mirror-umn => '128.101.240.215',
+ villa => '212.211.132.32',
+ lobos => '212.211.132.250',
+ default => undef,