restrict security-master's rsync for the archive, II

[mirror/dsa-puppet.git] / modules / roles / files / security_master / rsyncd.conf

diff --git a/modules/roles/files/security_master/rsyncd.conf b/modules/roles/files/security_master/rsyncd.conf
index a5cea76..8162bbe 100644 (file)
--- a/modules/roles/files/security_master/rsyncd.conf
+++ b/modules/roles/files/security_master/rsyncd.conf
@@ -9,7 +9,10 @@ log file = /var/log/rsyncd/rsyncd.log
 [debian-security]
   path = /srv/security.debian.org/archive/debian-security/
   comment = Debian security archive
+  auth users = *
   read only = true
+  secrets file = /etc/rsyncd/exports.secrets
+  list = no
 
 [exports]
   path = /srv/security.debian.org/rsync/export
@@ -17,6 +20,7 @@ log file = /var/log/rsyncd/rsyncd.log
   auth users = *
   read only = true
   secrets file = /etc/rsyncd/exports.secrets
+  list = no
 
 [buildd-lenny]
   path = /srv/security-master.debian.org/buildd/lenny/
@@ -41,3 +45,11 @@ log file = /var/log/rsyncd/rsyncd.log
   read only = true
   secrets file = /etc/rsyncd/buildd.secrets
   list = no
+
+[debian-security-buildd-dists]
+  path = /srv/security-master.debian.org/buildd/debian-security-buildd/dists
+  comment = buildd archive
+  read only = true
+  list = no
+  auth users = *
+  secrets file = /etc/rsyncd/buildd.secrets