Disable ftp in security_mirror role

[mirror/dsa-puppet.git] / modules / roles / manifests / security_mirror.pp

diff --git a/modules/roles/manifests/security_mirror.pp b/modules/roles/manifests/security_mirror.pp
index d135ffe..c6019a8 100644 (file)
--- a/modules/roles/manifests/security_mirror.pp
+++ b/modules/roles/manifests/security_mirror.pp
@@ -38,7 +38,9 @@ class roles::security_mirror {
        }
 
        if has_role('security_mirror_no_ftp') {
-        # nop
+               vsftpd::site { [ 'security', 'security6' ]:
+                       ensure => absent,
+               }
        } else {
                include ferm::ftp_conntrack
                vsftpd::site { 'security':