target_user => 'dgit-unpriv',
key => dig($facts, 'ssh_keys_users', 'dgit', 'id_rsa.pub', 'line'),
command => '/srv/dgit.debian.org/dgit-live/infra/dgit-mirror-ssh-wrap /srv/dgit.debian.org/unpriv/repos/ .git --',
- from => $base::public_addresses,
collect_tag => 'roles::dgit::sync',
}
}