Put cert for signup.salsa.debian.org on the salsa host (re: RT#7008)

[mirror/dsa-puppet.git] / modules / salsa / manifests / init.pp

diff --git a/modules/salsa/manifests/init.pp b/modules/salsa/manifests/init.pp
index 7a992ea..5b4934c 100644 (file)
--- a/modules/salsa/manifests/init.pp
+++ b/modules/salsa/manifests/init.pp
@@ -7,6 +7,7 @@ class salsa inherits salsa::params {
        class { '::salsa::redis': } ->
        class { '::salsa::packages': } ->
        class { '::salsa::database': } ->
+       class { '::salsa::web': } ->
        anchor { 'salsa::end': }
 
        # userdir-ldap users get their home in /home
@@ -54,9 +55,22 @@ class salsa inherits salsa::params {
        file { "/var/lib/systemd/linger/git":
                ensure => present,
        }
-
-       ssl::service { $servicename:
-               # notify  => Exec['service apache2 reload'],
-               key => true,
+       file { "/etc/ssh/userkeys/git":
+               ensure => link,
+               target => "${salsa::home}/.ssh/authorized_keys",
+       }
+       # pages
+       file { "/etc/network/interfaces.d/pages.debian.net.conf":
+               content  => @("EOF"),
+                               iface eth0 inet static
+                                   address 209.87.16.45/24
+                               iface eth0 inet6 static
+                                   address 2607:f8f0:614:1::1274:45/64
+                                   preferred-lifetime 0
+                               | EOF
+               notify => Exec['service networking reload'],
+       }
+       exec { 'service networking reload':
+               refreshonly => true,
        }
 }