X-Git-Url: https://git.adam-barratt.org.uk/?a=blobdiff_plain;f=modules%2Froles%2Fmanifests%2Fdbmaster.pp;h=a382a261ea1cfa66300df1703ea7f004b075cec7;hb=7c4f42e17dcaae84bf72353069cbdf6f5272bae2;hp=334857fec42fdb5fb12183155caf7fb612fe3081;hpb=1f1aa0ea7fee69c0fa68cd1150e5ccbbe25f1ead;p=mirror%2Fdsa-puppet.git

diff --git a/modules/roles/manifests/dbmaster.pp b/modules/roles/manifests/dbmaster.pp
index 334857fec..a382a261e 100644
--- a/modules/roles/manifests/dbmaster.pp
+++ b/modules/roles/manifests/dbmaster.pp
@@ -8,30 +8,35 @@
 #
 class roles::dbmaster {
 
-	include roles::pubsub::parameters
+  include roles::pubsub::parameters
 
-	$rabbit_password = $roles::pubsub::parameters::rabbit_password
+  $rabbit_password = $roles::pubsub::parameters::rabbit_password
 
-	ssl::service { 'db.debian.org':
-		notify  => Exec['service apache2 reload'],
-		key => true,
-		tlsaport => [443, 389, 636],
-	}
+  ssl::service { 'db.debian.org':
+    notify  => [ Exec['service apache2 reload'],
+                 Service['slapd'] ],
+    key => true,
+    tlsaport => [443, 389, 636],
+  }
 
-	file { "/etc/ldap/db.debian.org.key":
-	       ensure => present,
-	       mode   => '0440',
-	       group  => 'openldap',
-	       source => 'puppet:///modules/ssl/from-letsencrypt/db.debian.org.key',
-	       links  => follow,
-	}
+  file { "/etc/ldap/db.debian.org.key":
+    ensure => present,
+    mode   => '0440',
+    group  => 'openldap',
+    content => inline_template('<%= File.read(scope().call_function("hiera", ["paths.letsencrypt_dir"]) + "/db.debian.org.key") %>'),
+    links  => follow,
+  }
 
-	roles::pubsub::config { 'generate':
-		key      => 'dsa-udgenerate',
-		exchange => dsa,
-		topic    => 'dsa.ud.replicate',
-		vhost    => dsa,
-		username => $::fqdn,
-		password => $rabbit_password
-	}
+  roles::pubsub::config { 'generate':
+    key      => 'dsa-udgenerate',
+    exchange => dsa,
+    topic    => 'dsa.ud.replicate',
+    vhost    => dsa,
+    username => $::fqdn,
+    password => $rabbit_password
+  }
+
+  service { 'slapd':
+    ensure => running,
+  }
 }