Deploy gobby cert to gombert

diff --git a/hieradata/common.yaml b/hieradata/common.yaml
index 872ad67..1797b05 100644 (file)
--- a/hieradata/common.yaml
+++ b/hieradata/common.yaml
@@ -115,3 +115,5 @@ roles:
     - wolkenstein.debian.org
   postgres_backup_server:
     - backuphost.debian.org
+  gobby_debian_org:
+    - gombert.debian.org:

diff --git a/modules/roles/manifests/init.pp b/modules/roles/manifests/init.pp
index 249dde6..b79a090 100644 (file)
--- a/modules/roles/manifests/init.pp
+++ b/modules/roles/manifests/init.pp
@@ -190,4 +190,10 @@ class roles {
                        notify => Service['apache2'],
                }
        }
+
+       if has_role('gobby_debian_org') {
+               ssl::service { 'gobby.debian.org':
+                       tlsaport => 0,
+               }
+       }
 }