X-Git-Url: https://git.adam-barratt.org.uk/?a=blobdiff_plain;f=modules%2Froles%2Fmanifests%2Fdebian_mirror.pp;h=de9e624ff9c29afe42607211c42b857618b80d75;hb=18f26a9ca182f25cbdfc4c1532e2d34898295e92;hp=cde09924018427c7bb524c2779602dc7c6001af2;hpb=876366574d7a80944182ecc5f68f15f63aea59c9;p=mirror%2Fdsa-puppet.git diff --git a/modules/roles/manifests/debian_mirror.pp b/modules/roles/manifests/debian_mirror.pp index cde099240..de9e624ff 100644 --- a/modules/roles/manifests/debian_mirror.pp +++ b/modules/roles/manifests/debian_mirror.pp @@ -1,51 +1,45 @@ class roles::debian_mirror { - include roles::archvsync_base + include roles::archvsync_base - $mirror_basedir_prefix = hiera('role_config__mirrors.mirror_basedir_prefix') - $archive_root = "${mirror_basedir_prefix}debian" + $mirror_basedir_prefix = hiera('role_config__mirrors.mirror_basedir_prefix') + $archive_root = "${mirror_basedir_prefix}debian" + $listen_addresses = hiera('roles.debian_mirror') + .dig($::fqdn, 'listen-addresses') + .then |$a| { $a + [ '127.0.0.1:80', '[::1]:80' ] } + .lest || { ['*:80'] } - $vhost_listen = join([ - hiera("roles.debian_mirror.${::hostname}.listen-addresses", 'missing') ? { - 'missing' => '*:80', - default => join([hiera("roles.debian_mirror.${::hostname}.listen-addresses"), '127.0.0.1:80', '[::1]:80']) - }, - has_role('bgp') ? { - true => '193.31.7.2:80 [2a02:158:ffff:deb::2]:80', - default => '', - }], ' ') - $onion_v4_addr = $::hostname ? { - mirror-bytemark => '5.153.231.45', - klecker => '130.89.148.12', - mirror-isc => '149.20.4.15', - default => undef, - } + $vhost_listen = join([ + *$listen_addresses, + has_role('bgp') ? { + true => '193.31.7.2:80 [2a02:158:ffff:deb::2]:80', + default => '', + }], ' ') - apache2::site { '010-ftp.debian.org': - site => 'ftp.debian.org', - content => template('roles/apache-ftp.debian.org.erb'), - } + apache2::site { '010-ftp.debian.org': + site => 'ftp.debian.org', + content => template('roles/apache-ftp.debian.org.erb'), + } - if has_role('debian_mirror_onion') { - if ! $onion_v4_addr { - fail("Do not have an onion_v4_addr set for $::hostname.") - } + $onion_v4_addr = hiera('roles.debian_mirror', {}) + .dig($::fqdn, 'onion_v4_address') + if $onion_v4_addr { + onion::service { 'ftp.debian.org': + port => 80, + target_port => 80, + target_address => $onion_v4_addr, + } + } - onion::service { 'ftp.debian.org': - port => 80, - target_port => 80, - target_address => $onion_v4_addr, - } - } + $hosts_to_check = hiera('roles.debian_mirror', {}) + .filter |$h| { $h[1]['fastly-backend'] } + .map |$h| { $h[1]['service-hostname'] } -# $mirrors = hiera_hash('roles::debian_mirror',[]) -# $fastly_mirrors = $mirrors.filter |$h| { $h[1]['fastly-backend'] } -# $hosts_to_check = $fastly_mirrors.map | $h| { $h1['service-hostname'] } - $hosts_to_check = ['accumu.debian.backend.mirrors.debian.org', 'bytemark.debian.backend.mirrors.debian.org', 'conova.debian.backend.mirrors.debian.org', 'skroutz.debian.backend.mirrors.debian.org'] + roles::mirror_health { 'ftp': + check_hosts => $hosts_to_check, + check_service => 'ftp', + url => 'http://debian.backend.mirrors.debian.org/debian/dists/sid/Release', + health_url => 'http://debian.backend.mirrors.debian.org/_health', + } - roles::mirror_health { 'ftp': - check_hosts => $hosts_to_check, - check_service => 'ftp', - url => 'http://debian.backend.mirrors.debian.org/debian/dists/sid/Release', - health_url => 'http://debian.backend.mirrors.debian.org/_health', - } + Ferm::Rule::Simple <<| tag == 'ssh::server::from::syncproxy' |>> }