prosody: posix_acl is fighting with the prosody module about proper modes; remove...

[mirror/dsa-puppet.git] / modules / roles / manifests / dsa_gitolite.pp

diff --git a/modules/roles/manifests/dsa_gitolite.pp b/modules/roles/manifests/dsa_gitolite.pp
index 32c5d15..129b8b7 100644 (file)
--- a/modules/roles/manifests/dsa_gitolite.pp
+++ b/modules/roles/manifests/dsa_gitolite.pp
@@ -1,7 +1,6 @@
 # dsa's gitolite host
 class roles::dsa_gitolite {
-  # we push the dsa-wiki build host
-  #
+  # we push various things
   $key = $facts['git_key']
 
   if ($key) {
@@ -11,5 +10,27 @@ class roles::dsa_gitolite {
       key         => $facts['git_key'],
       collect_tag => 'dsa_wiki_buildhost',
     }
+
+    ssh::authorized_key_add { 'dsa_gitolite::puppetmaster':
+      target_user => 'dsa',
+      command     => '/srv/puppet.debian.org/bin/update-git',
+      key         => $facts['git_key'],
+      collect_tag => 'puppetmaster',
+    }
+
+
+    ssh::authorized_key_add { 'dsa_gitolite::dns_primary_dnsadm':
+      target_user => 'dnsadm',
+      command     => '/srv/dns.debian.org/bin/from-adayevskaya',
+      key         => $facts['git_key'],
+      collect_tag => 'dns_primary',
+    }
+
+    ssh::authorized_key_add { 'dsa_gitolite::dns_primary_letsencrypt':
+      target_user => 'letsencrypt',
+      command     => '/srv/letsencrypt.debian.org/bin/from-adayevskaya',
+      key         => $facts['git_key'],
+      collect_tag => 'dns_primary',
+    }
   }
 }