X-Git-Url: https://git.adam-barratt.org.uk/?a=blobdiff_plain;f=modules%2Froles%2Fmanifests%2Fdbmaster.pp;h=1a0fa9edc8c7175d504af21cffd78e102d1917bd;hb=1dee729d00307f93d600b5bb6902494bd30a4484;hp=f7b5a2645a59189e7b7fb8b1aa113292a1662556;hpb=e71099e47c57303bb7090e404db84ad3e8d3b75b;p=mirror%2Fdsa-puppet.git diff --git a/modules/roles/manifests/dbmaster.pp b/modules/roles/manifests/dbmaster.pp index f7b5a2645..1a0fa9edc 100644 --- a/modules/roles/manifests/dbmaster.pp +++ b/modules/roles/manifests/dbmaster.pp @@ -14,18 +14,18 @@ class roles::dbmaster { $rabbit_password = $roles::pubsub::parameters::rabbit_password ssl::service { 'db.debian.org': - notify => [ Exec['service apache2 reload'], - Service['slapd'] ], - key => true, + notify => [ Exec['service apache2 reload'], + Service['slapd'] ], + key => true, tlsaport => [443, 389, 636], } - file { "/etc/ldap/db.debian.org.key": - ensure => present, - mode => '0440', - group => 'openldap', + file { '/etc/ldap/db.debian.org.key': + ensure => present, + mode => '0440', + group => 'openldap', content => inline_template('<%= File.read(scope().call_function("hiera", ["paths.letsencrypt_dir"]) + "/db.debian.org.key") %>'), - links => follow, + links => follow, } roles::pubsub::config { 'generate': @@ -48,4 +48,9 @@ class roles::dbmaster { key => $facts['dsa_key'], collect_tag => 'puppetmaster', } + + exim::vdomain { 'db.debian.org': + mail_user => 'mail_db', + mail_group => 'nogroup', + } }