roles::nm::db_address: danzi.debian.org
roles::nm::db_port: 5433
-roles::pet::params::db_address: bmdb1.debian.org
-roles::pet::params::db_port: 5435
-
roles::postgresql::ftp_master_dak_replica::db_guest_access::bm::db_address: bmdb1.debian.org
roles::postgresql::ftp_master_dak_replica::db_guest_access::bm::db_port: 5434
+++ /dev/null
----
-classes:
- - roles::pet
olin.debian.org: Elisabeth Olin (December 1740 - March 26th, 1828)
paradis.debian.org: Maria Theresia Paradis (May 15th, 1759 - February 1st, 1824)
pejacevic: Dora Pejačević (September 10th, 1885 - March 5th, 1923)
- petrova.debian.org: Mara Petrova (May 15th, 1921 - June 7th. 1997)
pettersson.debian.org: Gustav Allan Pettersson (September 19th, 1911 - June 20th, 1980)
philp.debian.org: Elizabeth Philp (1827 - November 26th, 1885)
picconi.debian.org: Maria Antonietta Picconi (September 23rd, 1869 - 1926)
+++ /dev/null
-# pet.debian.org role
-#
-# @param db_address hostname of the postgres server for this service
-# @param db_port port of the postgres server for this service
-class roles::pet (
- String $db_address = $roles::pet::params::db_address,
- Integer $db_port = $roles::pet::params::db_port,
-) inherits roles::pet::params {
- include apache2
- ssl::service { 'pet.debian.net': notify => Exec['service apache2 reload'], key => true, }
- ssl::service { 'pet-devel.debian.net': notify => Exec['service apache2 reload'], key => true, }
-
- @@postgres::cluster::hba_entry { "pet-${::fqdn}":
- tag => "postgres::cluster::${db_port}::hba::${db_address}",
- pg_port => $db_port,
- database => ['pet', 'pet-devel'],
- user => 'pet',
- address => $base::public_addresses,
- }
-}
+++ /dev/null
-# pet guest access to DB
-#
-# @param db_address hostname of the postgres server for this service
-# @param db_port port of the postgres server for this service
-# @param database list of databases to give access to
-# @param address hosts to give access
-# @param connection_type connection type
-class roles::pet::db_guest_access (
- String $db_address = $roles::pet::params::db_address,
- Integer $db_port = $roles::pet::params::db_port,
- Array[String] $database = ['pet'],
- Enum['local', 'host', 'hostssl'] $connection_type = 'hostssl',
- Optional[Variant[Stdlib::IP::Address, Array[Stdlib::IP::Address]]] $address = $base::public_addresses,
-) inherits roles::pet::params {
- @@postgres::cluster::hba_entry { "pet-guest-${::fqdn}":
- tag => "postgres::cluster::${db_port}::hba::${db_address}",
- pg_port => $db_port,
- database => $database,
- user => 'guest',
- address => $address,
- connection_type => $connection_type,
- method => 'trust',
- order => '25',
- }
-}
+++ /dev/null
-# pet parameters
-#
-# @param db_address hostname of the postgres server for this service
-# @param db_port port of the postgres server for this service
-class roles::pet::params (
- String $db_address = $roles::pet::db_address,
- Integer $db_port = $roles::pet::db_port,
-) {
-}
$mailadm_password = $roles::pubsub::params::mailadm_password
$mailly_password = $roles::pubsub::params::mailly_password
$muffat_password = $roles::pubsub::params::muffat_password
- $pet_password = $roles::pubsub::params::pet_password
rabbitmq_user { 'admin':
admin => true,
password => $muffat_password,
}
- rabbitmq_user { 'pet-devel':
- admin => false,
- password => $pet_password,
- }
-
$do_hosts = keys($deprecated::localinfo)
pubsub::autouser { $do_hosts: }
ensure => present,
}
- rabbitmq_vhost { 'pet':
- ensure => present,
- }
-
rabbitmq_user_permissions { 'admin@/':
configure_permission => '.*',
read_permission => '.*',
write_permission => '.*',
}
- rabbitmq_user_permissions { 'admin@pet':
- configure_permission => '.*',
- read_permission => '.*',
- write_permission => '.*',
- }
-
rabbitmq_user_permissions { 'ftpteam@packages':
configure_permission => '.*',
read_permission => '.*',
write_permission => '.*',
}
- rabbitmq_user_permissions { 'pet-devel@pet':
- configure_permission => '.*',
- read_permission => '.*',
- write_permission => '.*',
- }
-
rabbitmq_policy { 'mirror-dsa@dsa':
pattern => '.*',
priority => 0,
},
}
- rabbitmq_policy { 'mirror_pet@pet':
- pattern => '.*',
- priority => 0,
- applyto => 'all',
- definition => {
- 'ha-mode' => 'all',
- 'ha-sync-mode' => 'automatic',
- },
- }
-
rabbitmq_plugin { 'rabbitmq_management_agent':
ensure => present,
}
}
include roles::buildd_master::db_guest_access
- include roles::pet::db_guest_access
class { 'roles::udd::db_guest_access':
database => ['udd', 'udd-dev'],
%contributors ALL=(contributors) ALL
%contributors ALL=(contributors-web) ALL
%patch-tracker ALL=(patch-tracker) ALL
-%pet-devel ALL=(pet-devel) ALL
%piuparts ALL=(piupartsm) ALL
%piuparts ALL=(piupartss) ALL
%pkg_maint ALL=(pkg_user) ALL