Add a apache_not_public role where we do not add ferm allow rules and put casulana...

[mirror/dsa-puppet.git] / hieradata / common.yaml

diff --git a/hieradata/common.yaml b/hieradata/common.yaml
index 29d235d..c946236 100644 (file)
--- a/hieradata/common.yaml
+++ b/hieradata/common.yaml
@@ -352,3 +352,7 @@ roles:
     - storace.debian.org
   debconf_wafer:
     - debussy.debian.org
+  apache_not_public:
+    # Hosts that run apache but where it should not be open to the internet by
+    # default
+    - casulana.debian.org