-class roles::security_mirror {
- $rsync_bind = $::hostname ? {
- mirror-anu => '150.203.164.61',
- mirror-isc => '149.20.4.14',
- mirror-umn => '128.101.240.215',
- default => '',
- }
- $rsync_bind6 = $::hostname ? {
- mirror-anu => '2001:388:1034:2900::3d',
- mirror-isc => '2001:4f8:1:c::14',
- mirror-umn => '2607:ea00:101:3c0b::1deb:215',
- default => '',
- }
- $ftp_bind = $::hostname ? {
- mirror-anu => '150.203.164.61',
- default => '',
- }
- $ftp_bind6 = $::hostname ? {
- mirror-anu => '2001:388:1034:2900::3d',
- default => undef,
- }
+# security mirror
+#
+# @param listen_addr IP addresses to have rsync listen on
+# @param onion_service provide the onion service from this host
+# @param healthcheck_name name to access this node in the health checker
+class roles::security_mirror(
+ Array[Stdlib::IP::Address] $listen_addr = [],
+ Boolean $onion_service = false,
+ Optional[String] $healthcheck_name = undef,
+){
+ include roles::archvsync_base
+ include apache2
+ include apache2::expires
+ include apache2::rewrite