X-Git-Url: https://git.adam-barratt.org.uk/?a=blobdiff_plain;f=modules%2Froles%2Fmanifests%2Finit.pp;h=2a2bb493271da37523ae5055c3c1f42a963bdfc9;hb=e4a284ec065e8c4d124a2d351f44965974fffb2f;hp=2464807164bd68d66f36f1566697e836a4935346;hpb=fd8ca6e26ac1706c5eccde4789362206daa0ff4a;p=mirror%2Fdsa-puppet.git diff --git a/modules/roles/manifests/init.pp b/modules/roles/manifests/init.pp index 246480716..2a2bb4932 100644 --- a/modules/roles/manifests/init.pp +++ b/modules/roles/manifests/init.pp @@ -71,7 +71,10 @@ class roles { include roles::debian_mirror } if has_role('ftp.d.o') { - include roles::ftp + vsftpd::site { 'ftp': + ensure => absent, + root => '/nonexistent', + } } if has_role('ftp_master') { include roles::ftp_master @@ -246,7 +249,23 @@ class roles { } if has_role('gobby_debian_org') { - ssl::service { 'gobby.debian.org': notify => Exec['service apache2 reload'], key => true, tlsaport => [443, 6523], } + ssl::service { 'gobby.debian.org': + notify => [ Exec['service apache2 reload'], Exec['reload gobby'] ], + key => true, + tlsaport => [443, 6523], + } + file { '/etc/ssl/debian-local/other-keys/gobby.debian.org.key': + ensure => present, + mode => '0440', + group => 'gobby', + content => inline_template('<%= File.read(scope().call_function("hiera", ["paths.letsencrypt_dir"]) + "/gobby.debian.org.key") %>'), + links => follow, + notify => Exec['reload gobby'], + } + exec { 'reload gobby': + command => 'pkill -u gobby -HUP -x infinoted', + refreshonly => true, + } } if has_role('search_backend') { @@ -278,6 +297,9 @@ class roles { include roles::debtags } + if has_role('planet_master') { + include roles::planet_master + } if has_role('planet_search') { ssl::service { 'planet-search.debian.org': notify => Exec['service apache2 reload'], key => true, } } @@ -317,7 +339,7 @@ class roles { } if has_role('postgresql_server') { - include roles::postgresql_server + include postgres::backup_source } if has_role('bacula_director') { @@ -330,7 +352,19 @@ class roles { include bacula::storage } + if has_role('salsa.debian.org') { + include salsa + } + if $::keyring_debian_org_mirror { include roles::keyring_debian_org_mirror } + + if has_role('popcon') { + include roles::popcon + } + + if has_role('debsources') { + include roles::debsources + } }