set TLSA port to 0 in preparation of cert roll for buildd, contributors, ftp-master...

diff --git a/modules/munin/manifests/master.pp b/modules/munin/manifests/master.pp
index 5dc0bbc..734c4c4 100644 (file)
--- a/modules/munin/manifests/master.pp
+++ b/modules/munin/manifests/master.pp
@@ -11,6 +11,7 @@ class munin::master {
 
        ssl::service { 'munin.debian.org':
                notify  => Exec['service apache2 reload'],
+               tlsaport => 0,
        }
        file { '/etc/munin/munin-conf.d':
                ensure  => directory,

diff --git a/modules/roles/manifests/buildd_master.pp b/modules/roles/manifests/buildd_master.pp
index 63570ef..90e3810 100644 (file)
--- a/modules/roles/manifests/buildd_master.pp
+++ b/modules/roles/manifests/buildd_master.pp
@@ -1,6 +1,7 @@
 class roles::buildd_master {
        ssl::service { 'buildd.debian.org':
                notify  => Exec['service apache2 reload'],
+               tlsaport => 0,
        }
 
        file { '/etc/ssh/userkeys/wb-buildd.more':

diff --git a/modules/roles/manifests/contributors.pp b/modules/roles/manifests/contributors.pp
index d0ed1fb..200a6a0 100644 (file)
--- a/modules/roles/manifests/contributors.pp
+++ b/modules/roles/manifests/contributors.pp
@@ -1,5 +1,6 @@
 class roles::contributors {
        ssl::service { 'contributors.debian.org':
                notify  => Exec['service apache2 reload'],
+               tlsaport => 0,
        }
 }

diff --git a/modules/roles/manifests/ftp_master.pp b/modules/roles/manifests/ftp_master.pp
index a76e068..70c0dfc 100644 (file)
--- a/modules/roles/manifests/ftp_master.pp
+++ b/modules/roles/manifests/ftp_master.pp
@@ -7,5 +7,6 @@ class roles::ftp_master {
 
        ssl::service { 'ftp-master.debian.org':
                notify  => Exec['service apache2 reload'],
+               tlsaport => 0,
        }
 }

diff --git a/modules/roles/manifests/init.pp b/modules/roles/manifests/init.pp
index b034ce3..badf9a4 100644 (file)
--- a/modules/roles/manifests/init.pp
+++ b/modules/roles/manifests/init.pp
@@ -20,6 +20,7 @@ class roles {
        #       include nagios::server
                ssl::service { 'nagios.debian.org':
                        notify  => Exec['service apache2 reload'],
+                       tlsaport => 0,
                }
        }
 

diff --git a/modules/roles/manifests/nm.pp b/modules/roles/manifests/nm.pp
index f792de4..c42810d 100644 (file)
--- a/modules/roles/manifests/nm.pp
+++ b/modules/roles/manifests/nm.pp
@@ -1,5 +1,6 @@
 class roles::nm {
        ssl::service { 'nm.debian.org':
                notify  => Exec['service apache2 reload'],
+               tlsaport => 0,
        }
 }

diff --git a/modules/roles/manifests/rtmaster.pp b/modules/roles/manifests/rtmaster.pp
index c6dfbbe..0546942 100644 (file)
--- a/modules/roles/manifests/rtmaster.pp
+++ b/modules/roles/manifests/rtmaster.pp
@@ -1,5 +1,6 @@
 class roles::rtmaster {
        ssl::service { 'rt.debian.org':
                notify  => Exec['service apache2 reload'],
+               tlsaport => 0,
        }
 }

diff --git a/modules/roles/manifests/security_tracker.pp b/modules/roles/manifests/security_tracker.pp
index abc0960..d074110 100644 (file)
--- a/modules/roles/manifests/security_tracker.pp
+++ b/modules/roles/manifests/security_tracker.pp
@@ -1,5 +1,6 @@
 class roles::security_tracker {
        ssl::service { 'security-tracker.debian.org':
                notify  => Exec['service apache2 reload'],
+               tlsaport => 0,
        }
 }

diff --git a/modules/roles/manifests/sso.pp b/modules/roles/manifests/sso.pp
index 4075993..a755ab6 100644 (file)
--- a/modules/roles/manifests/sso.pp
+++ b/modules/roles/manifests/sso.pp
@@ -1,5 +1,6 @@
 class roles::sso {
        ssl::service { 'sso.debian.org':
                notify  => Exec['service apache2 reload'],
+               tlsaport => 0,
        }
 }

diff --git a/modules/roles/manifests/vote.pp b/modules/roles/manifests/vote.pp
index 88e3920..eedb470 100644 (file)
--- a/modules/roles/manifests/vote.pp
+++ b/modules/roles/manifests/vote.pp
@@ -1,5 +1,6 @@
 class roles::vote {
        ssl::service { 'vote.debian.org':
                notify  => Exec['service apache2 reload'],
+               tlsaport => 0,
        }
 }