X-Git-Url: https://git.adam-barratt.org.uk/?a=blobdiff_plain;f=modules%2Froles%2Fmanifests%2Fkeyring.pp;h=cbdee86402400713a55887da8e4e82db7b22533a;hb=368e147f10b8e748f7e171a15568a94d79599039;hp=903064d5ccbd4c89f9ac20287eda01b1e6642332;hpb=d8b2fd955e29599ba70aca31c6fe725240242e8a;p=mirror%2Fdsa-puppet.git

diff --git a/modules/roles/manifests/keyring.pp b/modules/roles/manifests/keyring.pp
index 903064d5c..cbdee8640 100644
--- a/modules/roles/manifests/keyring.pp
+++ b/modules/roles/manifests/keyring.pp
@@ -1,42 +1,40 @@
 class roles::keyring {
-	rsync::site { 'keyring':
-		source  => 'puppet:///modules/roles/keyring/rsyncd.conf',
-		sslname => 'keyring.debian.org',
-	}
+  include apache2
 
-	ssl::service { 'keyring.debian.org':
-		notify   => Exec['service apache2 reload'],
-		key      => true,
-		tlsaport => [443, 1873],
-	}
+  rsync::site { 'keyring':
+    source  => 'puppet:///modules/roles/keyring/rsyncd.conf',
+    sslname => 'keyring.debian.org',
+  }
 
-	include named::authoritative
+  ssl::service { 'keyring.debian.org':
+    notify   => Exec['service apache2 reload'],
+    key      => true,
+    tlsaport => [443, 1873],
+  }
 
-	$notify_address_bind = join(getfromhash($site::allnodeinfo, 'denis.debian.org', 'ipHostNumber'), "; ")
+  include named::authoritative
 
-	@ferm::rule { '01-dsa-bind':
-		domain      => '(ip ip6)',
-		description => 'Allow nameserver access',
-		rule        => '&TCP_UDP_SERVICE_RANGE(53, ( $HOST_NAGIOS $HOST_DNSPRIMARY ) )',
-	}
+  $notify_address_bind = join(getfromhash($deprecated::allnodeinfo, 'denis.debian.org', 'ipHostNumber'), '; ')
 
-	concat::fragment { 'dsa-named-conf-puppet-misc---openpgpkey-zone':
-		target => '/etc/bind/named.conf.puppet-misc',
-		order  => '020',
-		content  => @("EOF"),
-			zone "_openpgpkey.debian.org" {
-				type master;
-				file "/srv/keyring.debian.org/_openpgpkey.debian.org.zone";
-				allow-query { any; };
-				allow-transfer {
-					key tsig-denis.debian.org-kaufmann.debian.org ;
-					127.0.0.1;
-				};
-				also-notify {
-					$notify_address_bind;
-				};
-			};
-			| EOF
-	}
+  Ferm::Rule::Simple <<| tag == 'named::keyring::ferm' |>>
+
+  concat::fragment { 'dsa-named-conf-puppet-misc---openpgpkey-zone':
+    target  => '/etc/bind/named.conf.puppet-misc',
+    order   => '020',
+    content => @("EOF"),
+      zone "_openpgpkey.debian.org" {
+        type master;
+        file "/srv/keyring.debian.org/_openpgpkey.debian.org.zone";
+        allow-query { any; };
+        allow-transfer {
+          key tsig-denis.debian.org-kaufmann.debian.org ;
+          127.0.0.1;
+        };
+        also-notify {
+          ${notify_address_bind};
+        };
+      };
+      | EOF
+  }
 
 }