---
+
+lookup_options:
+ # with merge: unique entries in other hiera sources add to the array
+ resolv_conf::searchpaths:
+ merge: unique
+ apt::sources::debian::location:
+ merge: unique
+
nameservers: []
-searchpaths: []
-resolvoptions: []
+resolv_conf::searchpaths: ['debian.org']
+resolv_conf::resolvoptions: []
allow_dns_query: []
role_config__mirrors:
mirror_basedir_prefix: '/srv/mirrors/'
role_config__syncproxy:
mirror_basedir_prefix: '/srv/mirrors/'
+samhain_recipients:
+ - 'debian-archive-debian-samhain-reports@master.debian.org'
+ - 'debian-admin@ftbfs.de'
+ - 'weasel@debian.org'
+ - 'zumbi@oron.es'
+root_mail_alias:
+ - 'debian-admin@debian.org'
+paths:
+ letsencrypt_dir: '/srv/puppet.debian.org/from-letsencrypt'
+ auto_certs_dir: '/srv/puppet.debian.org/ca/RESULT/certs'
+ auto_clientcerts_dir: '/srv/puppet.debian.org/ca/RESULT/clientcerts'
+apt::sources::debian::location: 'http://deb.debian.org/debian/'
+
+# all of these should be retired in favour of including the class role
+# with the host. weasel, 2019-09
roles:
bugsmx:
- buxtehude.debian.org
bugs_base:
- buxtehude.debian.org
- beach.debian.org
- buildd_master:
- - wuiet.debian.org
contributors:
- nono.debian.org
dbmaster:
- geo3.debian.org
extranrpeclient:
- denis.debian.org
- ftp.d.o:
- # also see debian_mirror
- - klecker.debian.org
ftp_master:
- fasolo.debian.org
ftp.upload.d.o:
- adayevskaya.debian.org
historicalpackages:
- hier.debian.org
- jenkins:
- - jerea.debian.org
keyring:
- kaufmann.debian.org
lists:
manpages-dyn:
- manziarly.debian.org
- cgi-grnet-01.debian.org
+ mirrormaster:
+ - melartin.debian.org
muninmaster:
- menotti.debian.org
nagiosmaster:
pubsub:
- rainier.debian.org
- rapoport.debian.org
- puppetmaster:
- - handel.debian.org
qamaster:
- quantz.debian.org
rtmaster:
security_master:
- seger.debian.org
security_mirror:
- - mirror-anu.debian.org
- - mirror-bytemark.debian.org
- - mirror-conova.debian.org
- - mirror-csail.debian.org
- - mirror-isc.debian.org
- - mirror-umn.debian.org
- - mirror-accumu.debian.org
- - mirror-skroutz.debian.org
- - lobos.debian.org
- - santoro.debian.org
- - setoguchi.debian.org
- - sechter.debian.org
- - villa.debian.org
- - wieck.debian.org
- security_mirror_onion:
- - mirror-isc.debian.org
- - mirror-umn.debian.org
- - lobos.debian.org
- - villa.debian.org
- security_mirror_no_ftp:
- # hosts that are not part of security.debian.org but
- # only participiate in the anycast do not need ftp
- - mirror-accumu.debian.org
- - mirror-skroutz.debian.org
- - mirror-bytemark.debian.org
+ mirror-anu.debian.org:
+ fastly-backend: false
+ mirror-csail.debian.org:
+ fastly-backend: false
+ mirror-isc.debian.org:
+ onion_v4_address: 149.20.4.14
+ mirror-umn.debian.org:
+ onion_v4_address: 128.101.240.215
+ mirror-accumu.debian.org:
+ fastly-backend: false
+ mirror-skroutz.debian.org:
+ fastly-backend: false
+ lobos.debian.org:
+ service-hostname: lobos.security.backend.mirrors.debian.org
+ fastly-backend: false
+ onion_v4_address: 212.211.132.250
+ santoro.debian.org:
+ fastly-backend: false
+ schmelzer.debian.org:
+ fastly-backend: false
+ schumann.debian.org:
+ service-hostname: schumann.security.backend.mirrors.debian.org
+ fastly-backend: true
+ setoguchi.debian.org:
+ fastly-backend: false
+ sechter.debian.org:
+ fastly-backend: false
+ villa.debian.org:
+ service-hostname: villa.security.backend.mirrors.debian.org
+ fastly-backend: true
+ onion_v4_address: 212.211.132.32
+ wieck.debian.org:
+ service-hostname: wieck.security.backend.mirrors.debian.org
+ fastly-backend: true
security_tracker:
- soriano.debian.org
security_upload:
- diabelli.debian.org
# single sign on relying party (host) - also required apache2 module enabled on that host via other means
sso_rp:
+ - debussy.debian.org
- diabelli.debian.org
- jerea.debian.org
- nono.debian.org
- tate.debian.org
- ticharich.debian.org
- wilder.debian.org
+ - wuiet.debian.org
static_master:
- dillon.debian.org
- fasolo.debian.org
- porta.debian.org
+ - static-master-grnet-01.debian.org
static_mirror:
- klecker.debian.org
- mirror-anu.debian.org
- dummy
static_source:
- boott.debian.org
+ - casulana.debian.org
- coccia.debian.org
- dillon.debian.org
- donizetti.debian.org
- fasolo.debian.org
+ - kaufmann.debian.org
- lindsay.debian.org
- manziarly.debian.org
- mekeel.debian.org
- klecker.debian.org
- milanollo.debian.org
- mirror-anu.debian.org
- - mirror-conova.debian.org
- mirror-isc.debian.org
- mirror-umn.debian.org
+ - schmelzer.debian.org
+ - smit.debian.org
tracker:
- ticharich.debian.org
udd:
bacula_storage:
- storace.debian.org
dabackup_client:
- - moszumanska.debian.org
- lw03.debian.org
gobby_debian_org:
- gombert.debian.org
sreview.debian.org:
- vittoria.debian.org
debian_mirror:
- - klecker.debian.org
- - mirror-bytemark.debian.org
- - mirror-accumu.debian.org
- - mirror-skroutz.debian.org
- - mirror-conova.debian.org
- - mirror-isc.debian.org
- debian_mirror_onion:
- - klecker.debian.org
- - mirror-bytemark.debian.org
- - mirror-isc.debian.org
+ klecker.debian.org:
+ listen-addresses:
+ - '130.89.148.12:80'
+ - '[2001:67c:2564:a119::148:12]:80'
+ onion_v4_address: 130.89.148.12
+ mirror-accumu.debian.org:
+ service-hostname: accumu.debian.backend.mirrors.debian.org
+ fastly-backend: true
+ mirror-skroutz.debian.org:
+ service-hostname: skroutz.debian.backend.mirrors.debian.org
+ fastly-backend: true
+ mirror-isc.debian.org:
+ listen-addresses:
+ - '149.20.4.15:80'
+ - '[2001:4f8:1:c::15]:80'
+ onion_v4_address: 149.20.4.15
+ schmelzer.debian.org:
+ listen-addresses:
+ - '217.196.149.232:80'
+ - '[2a02:16a8:dc41:100::232]:80'
+ fastly-backend: true
+ service-hostname: conova.debian.backend.mirrors.debian.org
historical_master:
- sibelius.debian.org
historical_mirror:
- gretchaninov.debian.org
- klecker.debian.org
- - mirror-conova.debian.org
+ - schmelzer.debian.org
- sibelius.debian.org
debug_mirror:
- - klecker.debian.org
- - mirror-conova.debian.org
- - mirror-isc.debian.org
+ mirror-accumu.debian.org:
+ onion_v4_address: 130.242.6.199
+ service-hostname: accumu.debug.backend.mirrors.debian.org
+ schmelzer.debian.org:
+ listen-addresses:
+ - '217.196.149.232:80'
+ - '[2a02:16a8:dc41:100::232]:80'
+ onion_v4_address: 217.196.149.232
+ service-hostname: conova.debug.backend.mirrors.debian.org
debug_mirror_onion:
- - klecker.debian.org
- - mirror-isc.debian.org
+ - mirror-accumu.debian.org
+ - schmelzer.debian.org
ports_mirror:
- klecker.debian.org
- mirror-isc.debian.org
ports_mirror_onion:
- klecker.debian.org
- mirror-isc.debian.org
+ planet_master:
+ - philp.debian.org
planet_search:
- philp.debian.org
i18n.d.o:
- porta.debian.org
onionbalance:
- olin.debian.org
- experimental_apache:
- - cgi-grnet-01.debian.org
- - coccia.debian.org
- - klecker.debian.org
- - manziarly.debian.org
- - mirror-bytemark.debian.org
- - mirror-csail.debian.org
- - mirror-isc.debian.org
- - mirror-umn.debian.org
- - pejacevic.debian.org
- - petrova.debian.org
- - philp.debian.org
- - picconi.debian.org
- - pkgmirror-csail.debian.org
- - santoro.debian.org
- - sechter.debian.org
- - setoguchi.debian.org
- - ticharich.debian.org
bgp:
- - mirror-bytemark.debian.org
- - mirror-conova.debian.org
- mirror-accumu.debian.org
- mirror-skroutz.debian.org
cdimage-search:
- buxtehude.debian.org
- danzi.debian.org
- fasolo.debian.org
+ - lw07.debian.org
- melartin.debian.org
+ - sallinen.debian.org
- seger.debian.org
- - sibelius.debian.org
+ - snapshotdb-manda-01.debian.org
- vittoria.debian.org
salsa.debian.org:
- godard.debian.org
insecure_ssl:
+ - debussy.debian.org
- godard.debian.org
+ debsources:
+ - sor.debian.org
+ ipsec:
+ - fasolo.debian.org
+ - storace.debian.org
+ debconf_wafer:
+ - debussy.debian.org
+ apache_not_public:
+ # Hosts that run apache but where it should not be open to the internet by
+ # default
+ - casulana.debian.org
+ apache_ratelimited:
+ - beach.debian.org
+ - buxtehude.debian.org
+ - lw07.debian.org
+ - picconi.debian.org
+ - pkgmirror-csail.debian.org
+ - sallinen.debian.org
+ cdbuilder_local_mirror:
+ - casulana.debian.org
+ alioth_archive:
+ - grabbe.debian.org
+ snapshot_web:
+ - lw07.debian.org
+ - sallinen.debian.org
+ snapshot_shell:
+ - lw08.debian.org
+ anonscm:
+ - cgi-grnet-01.debian.org
+
+classes:
+ - base::includes