Use export/collect to get the intra-cluster firewall opened for pubsub

[mirror/dsa-puppet.git] / modules / roles / manifests / rtmaster.pp

diff --git a/modules/roles/manifests/rtmaster.pp b/modules/roles/manifests/rtmaster.pp
index 0546942..131c80c 100644 (file)
--- a/modules/roles/manifests/rtmaster.pp
+++ b/modules/roles/manifests/rtmaster.pp
@@ -1,6 +1,13 @@
 class roles::rtmaster {
-       ssl::service { 'rt.debian.org':
-               notify  => Exec['service apache2 reload'],
-               tlsaport => 0,
-       }
+  include apache2
+  ssl::service { 'rt.debian.org':
+    notify => Exec['service apache2 reload'],
+    key    => true,
+  }
+
+  # Note that there is also role specific config in exim4.conf
+  exim::vdomain { 'rt.debian.org':
+    mail_user  => 'rt',
+    mail_group => 'rt',
+  }
 }