one for security master

Signed-off-by: Stephen Gran <steve@lobefin.net>

diff --git a/modules/roles/files/security_master/rsyncd.conf b/modules/roles/files/security_master/rsyncd.conf
new file mode 100644 (file)
index 0000000..a5cea76
--- /dev/null
+++ b/modules/roles/files/security_master/rsyncd.conf
@@ -0,0 +1,43 @@
+uid = nobody
+gid = nogroup
+max connections = 20
+syslog facility = daemon
+socket options = SO_KEEPALIVE
+timeout = 7200
+log file = /var/log/rsyncd/rsyncd.log
+
+[debian-security]
+  path = /srv/security.debian.org/archive/debian-security/
+  comment = Debian security archive
+  read only = true
+
+[exports]
+  path = /srv/security.debian.org/rsync/export
+  comment = Various metadata exports
+  auth users = *
+  read only = true
+  secrets file = /etc/rsyncd/exports.secrets
+
+[buildd-lenny]
+  path = /srv/security-master.debian.org/buildd/lenny/
+  comment = Buildd directory oldstable security
+  auth users = *
+  read only = true
+  secrets file = /etc/rsyncd/buildd.secrets
+  list = no
+
+[buildd-squeeze]
+  path = /srv/security-master.debian.org/buildd/squeeze/
+  comment = Buildd directory stable security
+  auth users = *
+  read only = true
+  secrets file = /etc/rsyncd/buildd.secrets
+  list = no
+
+[buildd-wheezy]
+  path = /srv/security-master.debian.org/buildd/wheezy/
+  comment = Buildd directory testing security
+  auth users = *
+  read only = true
+  secrets file = /etc/rsyncd/buildd.secrets
+  list = no

diff --git a/modules/roles/manifests/security_master.pp b/modules/roles/manifests/security_master.pp
index 3f1b70c..036f059 100644 (file)
--- a/modules/roles/manifests/security_master.pp
+++ b/modules/roles/manifests/security_master.pp
@@ -7,4 +7,9 @@ class roles::security_master {
                chown_user => dak,
                root       => '/srv/ftp.root/',
        }
+
+       rsync::site { 'security_master':
+               source        => 'puppet:///modules/roles/security_master/rsyncd.conf',
+               max_clients => 100,
+       }
 }