X-Git-Url: https://git.adam-barratt.org.uk/?a=blobdiff_plain;f=hieradata%2Fcommon.yaml;h=b4a64d0bb2224d9b4b4c2a664b38369d7ffa934b;hb=8793e006b4a2d3e0c24a5315b6cd3615dd57a3bb;hp=174a7ddb7da06e4ecdbbb274619d402a558d94d8;hpb=64faca1f5600e8c93f05406912055cc49780c9f2;p=mirror%2Fdsa-puppet.git diff --git a/hieradata/common.yaml b/hieradata/common.yaml index 174a7ddb7..b4a64d0bb 100644 --- a/hieradata/common.yaml +++ b/hieradata/common.yaml @@ -1,7 +1,14 @@ --- -nameservers: [] -searchpaths: [] -resolvoptions: [] + +lookup_options: + # with merge: unique entries in other hiera sources add to the array + resolv::searchpaths: + merge: unique + apt::sources::debian::location: + merge: unique + +resolv::nameservers: [] +resolv::searchpaths: ['debian.org'] allow_dns_query: [] role_config__mirrors: mirror_basedir_prefix: '/srv/mirrors/' @@ -18,6 +25,10 @@ paths: letsencrypt_dir: '/srv/puppet.debian.org/from-letsencrypt' auto_certs_dir: '/srv/puppet.debian.org/ca/RESULT/certs' auto_clientcerts_dir: '/srv/puppet.debian.org/ca/RESULT/clientcerts' +apt::sources::debian::location: 'https://deb.debian.org/debian/' + +staticsync::user: 'staticsync' +staticsync::basedir: '/srv/static.debian.org' # all of these should be retired in favour of including the class role # with the host. weasel, 2019-09 @@ -107,9 +118,6 @@ roles: - wolkenstein.debian.org search_frontend: - cgi-grnet-01.debian.org - archvsync_base_additional: - # this is usually pulled in by *-mirror or syncproxy roles - - dummy security_master: - seger.debian.org security_mirror: @@ -168,42 +176,10 @@ roles: - ticharich.debian.org - wilder.debian.org - wuiet.debian.org - static_master: - - dillon.debian.org - - fasolo.debian.org - - porta.debian.org - - static-master-grnet-01.debian.org - static_mirror: - - klecker.debian.org - - mirror-anu.debian.org - - mirror-csail.debian.org - - mirror-isc.debian.org - - senfter.debian.org - - santoro.debian.org static_mirror_onion: - klecker.debian.org - mirror-isc.debian.org - senfter.debian.org - # when adding a new static mirror, allow it to sync etc, but do not push to it and wait for it. For this, also add it to static_mirror_nopush. - static_mirror_nopush: - - dummy - static_source: - - boott.debian.org - - casulana.debian.org - - coccia.debian.org - - dillon.debian.org - - donizetti.debian.org - - fasolo.debian.org - - kaufmann.debian.org - - lindsay.debian.org - - manziarly.debian.org - - mekeel.debian.org - - melartin.debian.org - - porta.debian.org - - philp.debian.org - - respighi.debian.org - - wolkenstein.debian.org - - wuiet.debian.org syncproxy: - gretchaninov.debian.org - klecker.debian.org @@ -219,16 +195,6 @@ roles: - ullmann.debian.org vote: - vento.debian.org - weblog_destination: - - wolkenstein.debian.org - weblog_provider: - - klecker.debian.org - - mirror-anu.debian.org - - mirror-csail.debian.org - - mirror-isc.debian.org - - mirror-umn.debian.org - - santoro.debian.org - - senfter.debian.org wiki: - wilder.debian.org www_master: @@ -246,10 +212,6 @@ roles: - lw03.debian.org gobby_debian_org: - gombert.debian.org - veyepar.debian.org: - - vittoria.debian.org - sreview.debian.org: - - vittoria.debian.org debian_mirror: klecker.debian.org: listen-addresses: @@ -337,16 +299,8 @@ roles: - seger.debian.org - snapshotdb-manda-01.debian.org - vittoria.debian.org - salsa.debian.org: - - godard.debian.org - insecure_ssl: - - debussy.debian.org - - godard.debian.org debsources: - sor.debian.org - ipsec: - - fasolo.debian.org - - storace.debian.org debconf_wafer: - debussy.debian.org apache_not_public: @@ -362,15 +316,11 @@ roles: - sallinen.debian.org cdbuilder_local_mirror: - casulana.debian.org - alioth_archive: - - grabbe.debian.org snapshot_web: - lw07.debian.org - sallinen.debian.org snapshot_shell: - lw08.debian.org - anonscm: - - cgi-grnet-01.debian.org classes: - base::includes