add ftp_upload role

Signed-off-by: Stephen Gran <steve@lobefin.net>

diff --git a/manifests/site.pp b/manifests/site.pp
index 1935926..bb8f2c2 100644 (file)
--- a/manifests/site.pp
+++ b/manifests/site.pp
@@ -98,6 +98,10 @@ node default {
                include roles::ftp
        }
 
+       if getfromhash($site::nodeinfo, 'ftp.upload.d.o') {
+               include roles::ftp_upload
+       }
+
        if $::hostname in [bizet,morricone] {
                include roles::backports_master
        }

diff --git a/modules/debian-org/misc/local.yaml b/modules/debian-org/misc/local.yaml
index a986a46..dcd0a4d 100644 (file)
--- a/modules/debian-org/misc/local.yaml
+++ b/modules/debian-org/misc/local.yaml
@@ -150,6 +150,9 @@ services:
   ftp.d.o:
     - kassia.debian.org
     - klecker.debian.org
+  ftp.upload.d.o:
+    - franck.debian.org
+    - ravel.debian.org
   mailrelay:
     - kokkonen.debian.org
     - merikanto.debian.org

diff --git a/modules/roles/files/ftp_upload/vsftpd.conf b/modules/roles/files/ftp_upload/vsftpd.conf
new file mode 100644 (file)
index 0000000..e55f32e
--- /dev/null
+++ b/modules/roles/files/ftp_upload/vsftpd.conf
@@ -0,0 +1,22 @@
+ftpd_banner=ftp.upload.debian.org FTP server
+
+listen=YES
+max_clients=100
+
+anonymous_enable=YES
+dirmessage_enable=YES
+connect_from_port_20=NO
+setproctitle_enable=YES
+ls_recurse_enable=NO
+xferlog_enable=YES
+
+secure_chroot_dir=/var/run/vsftpd
+pam_service_name=vsftpd
+
+anon_root=/srv/upload.debian.org/ftp
+write_enable=YES
+anon_umask=027
+anon_upload_enable=YES
+chown_uploads=YES
+chown_username=dak
+

diff --git a/modules/roles/ftp_upload.pp b/modules/roles/ftp_upload.pp
new file mode 100644 (file)
index 0000000..3bccb3d
--- /dev/null
+++ b/modules/roles/ftp_upload.pp
@@ -0,0 +1,5 @@
+class roles::ftp_upload {
+       vsftpd::site { 'ftp-upload':
+               source => 'puppet:///modules/roles/ftp_upload/vsftpd.conf'
+       }
+}