searchpaths: []
resolvoptions: []
allow_dns_query: []
+role_config__mirrors:
+ mirror_basedir_prefix: '/srv/mirrors/'
+role_config__syncproxy:
+ mirror_basedir_prefix: '/srv/mirrors/'
+samhain_recipients:
+ - 'debian-archive-debian-samhain-reports@master.debian.org'
+ - 'debian-admin@ftbfs.de'
+ - 'weasel@debian.org'
+ - 'steve@lobefin.net'
+ - 'zumbi@oron.es'
+root_mail_alias:
+ - 'debian-admin@debian.org'
+paths:
+ letsencrypt_dir: '/srv/puppet.debian.org/from-letsencrypt'
+ auto_certs_dir: '/srv/puppet.debian.org/ca/RESULT/certs'
+ auto_clientcerts_dir: '/srv/puppet.debian.org/ca/RESULT/clientcerts'
roles:
bugsmx:
- buxtehude.debian.org
- fasolo.debian.org
ftp.upload.d.o:
- coccia.debian.org
- - suchon.debian.org
- usper.debian.org
api.ftp-master:
- coccia.debian.org
manpages-dyn:
- manziarly.debian.org
- cgi-grnet-01.debian.org
+ mirrormaster:
+ - melartin.debian.org
muninmaster:
- menotti.debian.org
nagiosmaster:
- mirror-umn.debian.org
- lobos.debian.org
- villa.debian.org
- security_mirror_no_ftp:
- # hosts that are not part of security.debian.org but
- # only participiate in the anycast do not need ftp
- - mirror-accumu.debian.org
- - mirror-skroutz.debian.org
- - mirror-bytemark.debian.org
security_tracker:
- soriano.debian.org
security_upload:
- diabelli.debian.org
# single sign on relying party (host) - also required apache2 module enabled on that host via other means
sso_rp:
+ - debussy.debian.org
- diabelli.debian.org
- jerea.debian.org
- nono.debian.org
- dillon.debian.org
- fasolo.debian.org
- porta.debian.org
+ - static-master-grnet-01.debian.org
static_mirror:
- klecker.debian.org
- mirror-anu.debian.org
- klecker.debian.org
- milanollo.debian.org
- mirror-anu.debian.org
+ - mirror-conova.debian.org
- mirror-isc.debian.org
- mirror-umn.debian.org
tracker:
debian_mirror:
- klecker.debian.org
- mirror-bytemark.debian.org
- - mirror-accumu.debian.org
+ - service-hostname: bytemark.debian.backend.mirrors.debian.org
+ - fastly-backend: true
+ - mirror-accumu.debian.org:
+ - service-hostname: accumu.debian.backend.mirrors.debian.org
+ - fastly-backend: true
- mirror-skroutz.debian.org
+ - service-hostname: skroutz.debian.backend.mirrors.debian.org
+ - fastly-backend: true
- mirror-conova.debian.org
- mirror-isc.debian.org
debian_mirror_onion:
ports_mirror_onion:
- klecker.debian.org
- mirror-isc.debian.org
+ planet_master:
+ - philp.debian.org
planet_search:
- philp.debian.org
i18n.d.o:
- olin.debian.org
experimental_apache:
- cgi-grnet-01.debian.org
- - coccia.debian.org
- - klecker.debian.org
- - manziarly.debian.org
- - mirror-bytemark.debian.org
- - mirror-csail.debian.org
- - mirror-isc.debian.org
- - mirror-umn.debian.org
- pejacevic.debian.org
- petrova.debian.org
- - philp.debian.org
- - picconi.debian.org
- - pkgmirror-csail.debian.org
- - santoro.debian.org
- - sechter.debian.org
- - setoguchi.debian.org
- - ticharich.debian.org
- - villa.debian.org
bgp:
- mirror-bytemark.debian.org
- mirror-conova.debian.org
- tchaikovsky.debian.org
- wuiet.debian.org
postgresql_server:
+ # postgresql instances not managed by puppet otherwise
- bmdb1.debian.org
- buxtehude.debian.org
- danzi.debian.org
- fasolo.debian.org
- melartin.debian.org
+ - sallinen.debian.org
- seger.debian.org
- sibelius.debian.org
- vittoria.debian.org
salsa.debian.org:
- godard.debian.org
+ insecure_ssl:
+ - debussy.debian.org
+ - godard.debian.org
+ debsources:
+ - sor.debian.org
+ ipsec:
+ - fasolo.debian.org
+ - storace.debian.org
+ debconf_wafer:
+ - debussy.debian.org