X-Git-Url: https://git.adam-barratt.org.uk/?a=blobdiff_plain;f=modules%2Fdebian_org%2Fmanifests%2Fapt_restricted.pp;h=1bfe0e47623d9332b7196aa53e9ce94427016471;hb=267a7cce45366203fdb3848782812cf5ba44b709;hp=9b1126e14a807798b53b7dd3809d4c370c4a8e2d;hpb=3eac226bace499efae51bfc30c7bddb4972d35cc;p=mirror%2Fdsa-puppet.git

diff --git a/modules/debian_org/manifests/apt_restricted.pp b/modules/debian_org/manifests/apt_restricted.pp
index 9b1126e14..1bfe0e476 100644
--- a/modules/debian_org/manifests/apt_restricted.pp
+++ b/modules/debian_org/manifests/apt_restricted.pp
@@ -1,7 +1,16 @@
 class debian_org::apt_restricted {
-	site::aptrepo { 'db.debian.org.restricted':
+	base::aptrepo { 'db.debian.org.restricted':
 		url        => 'https://db.debian.org/debian-admin',
 		suite      => "${::lsbdistcodename}-restricted",
 		components => 'non-free',
 	}
+
+	@@concat::fragment { "debian_org::apt_restricted::apache-acl::host::${::fqdn}":
+		tag        => 'debian_org::apt_restricted::apache-acl',
+		target     => '/etc/apache2/conf-available/puppet-restricted-acl.conf',
+		content    => @("EOF"),
+			# ${::fqdn}
+			Require ip ${ $base::public_addresses.join(' ') }
+			| EOF
+	}
 }