disallow puppet access from clients for now

[mirror/dsa-puppet.git] / modules / roles / manifests / weblog_provider.pp

diff --git a/modules/roles/manifests/weblog_provider.pp b/modules/roles/manifests/weblog_provider.pp
index b7ea0bb..0c8b048 100644 (file)
--- a/modules/roles/manifests/weblog_provider.pp
+++ b/modules/roles/manifests/weblog_provider.pp
@@ -1,5 +1,12 @@
+# a provider of webserver logs
 class roles::weblog_provider {
   ssh::keygen {'weblogsync': }
+  ssh::authorized_key_add { 'weblongsync-provider::destination':
+    target_user => 'weblogsync',
+    command     => "/srv/weblogs.debian.org/bin/ssh-wrap ${::fqdn}",
+    key         => $facts['weblogsync_key'],
+    collect_tag => 'weblogsync',
+  }
 
   file { '/etc/cron.d/puppet-weblog-provider': ensure => absent, }
   concat::fragment { 'dsa-puppet-stuff--weblog-provider':