update sudoers on draghi for dns stuff

[mirror/dsa-puppet.git] / manifests / site.pp

diff --git a/manifests/site.pp b/manifests/site.pp
index 49fc853..d14d3ff 100644 (file)
--- a/manifests/site.pp
+++ b/manifests/site.pp
@@ -182,9 +182,14 @@ node default {
        kaufmann: {
            @ferm::rule { "dsa-hkp":
                    domain          => "(ip ip6)",
-                   description     => "Allow ftp access",
+                   description     => "Allow hkp access",
                    rule            => "&SERVICE(tcp, 11371)"
            }
+          @ferm::rule { "dsa-rsync":
+                   domain          => "(ip ip6)",
+                   description     => "Allow rsync access",
+                   rule            => "&SERVICE(tcp, 873)"
+          }
        }
     }
     case $brokenhosts {