+ notify => Exec['service apache2 reload'],
+ key => true,
+ }
+
+ apache2::site { 'security-tracker.debian.org':
+ site => 'security-tracker.debian.org',
+ content => template('roles/apache-security-tracker.debian.org.conf.erb')
+ }
+
+ # traffic shaping http traffic
+ #ferm::rule { 'dsa-security-tracker-shape':
+ # table => 'mangle',
+ # chain => 'OUTPUT',
+ # rule => "proto tcp sport 443 MARK set-mark 20",
+ #}
+
+ file { '/usr/local/sbin/traffic-shape':
+ mode => '0755',
+ content => template('roles/security-tracker/traffic-shape'),
+ notify => Exec['/usr/local/sbin/traffic-shape'],
+ }
+ exec { '/usr/local/sbin/traffic-shape':
+ refreshonly => true