--- /dev/null
+---
+nodes:
+ - 'czerny.debian.org'
+ - 'clementi.debian.org'
--- /dev/null
+---
+nodes:
+ - 'ubc-enc2bl01.debian.org'
+ - 'ubc-enc2bl02.debian.org'
+ - 'ubc-enc2bl09.debian.org'
+ - 'ubc-enc2bl10.debian.org'
--- /dev/null
+---
+
+lookup_options:
+ # with merge: unique entries in other hiera sources add to the array
+ resolv::searchpaths:
+ merge: unique
+ apt::sources::debian::location:
+ merge: unique
+
+# class parameters
+resolv::nameservers: []
+resolv::searchpaths: ['debian.org']
+staticsync::user: 'staticsync'
+staticsync::basedir: '/srv/static.debian.org'
+
+roles::dns_primary::allow_access:
+ # easydns
+ - '64.68.200.91'
+ - '205.210.42.80'
+ # rcode0
+ - '83.136.34.0/27'
+ - '2a02:850:8::/47'
+ # netnod
+ - '192.71.80.0/24'
+ - '192.36.144.222'
+ - '192.36.144.218'
+ - '194.146.105.24'
+ - '194.146.105.25'
+ - '2a01:3f0:0:27::24'
+ - '2a01:3f0:0:28::25'
+
+# other variables
+allow_dns_query: []
+role_config__mirrors:
+ mirror_basedir_prefix: '/srv/mirrors/'
+role_config__syncproxy:
+ mirror_basedir_prefix: '/srv/mirrors/'
+samhain_recipients:
+ - 'debian-archive-debian-samhain-reports@master.debian.org'
+ - 'debian-admin@ftbfs.de'
+ - 'weasel@debian.org'
+ - 'zumbi@oron.es'
+root_mail_alias:
+ - 'debian-admin@debian.org'
+paths:
+ letsencrypt_dir: '/srv/puppet.debian.org/from-letsencrypt'
+ auto_certs_dir: '/srv/puppet.debian.org/ca/RESULT/certs'
+ auto_clientcerts_dir: '/srv/puppet.debian.org/ca/RESULT/clientcerts'
+apt::sources::debian::location: 'https://deb.debian.org/debian/'
+
+
+# all of these should be retired in favour of including the class role
+# with the host. weasel, 2019-09
+roles:
+ ftp_master:
+ # XXX - used by ferm templates/defs.conf.erb
+ - fasolo.debian.org
+ mailrelay:
+ # XXX - ONLY used by ferm templates/defs.conf.erb
+ - mailly.debian.org
+ - muffat.debian.org
+ muninmaster:
+ # XXX - used by ferm templates/defs.conf.erb
+ - menotti.debian.org
+ nagiosmaster:
+ # XXX - used by ferm templates/defs.conf.erb
+ - tchaikovsky.debian.org
+ security_master:
+ # XXX - used by ferm templates/defs.conf.erb
+ - seger.debian.org
+ security_mirror:
+ # XXX used also in ferm me.conf.erb
+ mirror-anu.debian.org:
+ fastly-backend: false
+ mirror-csail.debian.org:
+ fastly-backend: false
+ mirror-isc.debian.org:
+ onion_v4_address: 149.20.4.14
+ mirror-umn.debian.org:
+ onion_v4_address: 128.101.240.215
+ mirror-accumu.debian.org:
+ fastly-backend: false
+ mirror-skroutz.debian.org:
+ fastly-backend: false
+ lobos.debian.org:
+ service-hostname: lobos.security.backend.mirrors.debian.org
+ fastly-backend: false
+ onion_v4_address: 212.211.132.250
+ santoro.debian.org:
+ fastly-backend: false
+ schmelzer.debian.org:
+ fastly-backend: false
+ schumann.debian.org:
+ service-hostname: schumann.security.backend.mirrors.debian.org
+ fastly-backend: true
+ setoguchi.debian.org:
+ fastly-backend: false
+ sechter.debian.org:
+ fastly-backend: false
+ villa.debian.org:
+ service-hostname: villa.security.backend.mirrors.debian.org
+ fastly-backend: true
+ onion_v4_address: 212.211.132.32
+ wieck.debian.org:
+ service-hostname: wieck.security.backend.mirrors.debian.org
+ fastly-backend: true
+ postgres_backup_server:
+ # XXX - used by ferm templates/defs.conf.erb
+ - backuphost.debian.org
+ - storace.debian.org
+ debian_mirror:
+ # XXX used also in ferm me.conf.erb
+ klecker.debian.org:
+ listen-addresses:
+ - '130.89.148.12:80'
+ - '[2001:67c:2564:a119::148:12]:80'
+ onion_v4_address: 130.89.148.12
+ new-klecker.debian.org: {}
+ mirror-accumu.debian.org:
+ service-hostname: accumu.debian.backend.mirrors.debian.org
+ fastly-backend: true
+ mirror-skroutz.debian.org:
+ service-hostname: skroutz.debian.backend.mirrors.debian.org
+ fastly-backend: true
+ mirror-isc.debian.org:
+ listen-addresses:
+ - '149.20.4.15:80'
+ - '[2001:4f8:1:c::15]:80'
+ onion_v4_address: 149.20.4.15
+ schmelzer.debian.org:
+ listen-addresses:
+ - '217.196.149.232:80'
+ - '[2a02:16a8:dc41:100::232]:80'
+ fastly-backend: true
+ service-hostname: conova.debian.backend.mirrors.debian.org
+ historical_master:
+ # XXX - used by ferm templates/defs.conf.erb
+ - sibelius.debian.org
+ historical_mirror:
+ # XXX used also in ferm me.conf.erb
+ - gretchaninov.debian.org
+ - klecker.debian.org
+ - schmelzer.debian.org
+ - sibelius.debian.org
+ debug_mirror:
+ # XXX used also in ferm me.conf.erb
+ mirror-accumu.debian.org:
+ onion_v4_address: 130.242.6.199
+ service-hostname: accumu.debug.backend.mirrors.debian.org
+ schmelzer.debian.org:
+ listen-addresses:
+ - '217.196.149.232:80'
+ - '[2a02:16a8:dc41:100::232]:80'
+ onion_v4_address: 217.196.149.232
+ service-hostname: conova.debug.backend.mirrors.debian.org
+ debug_mirror_onion:
+ - mirror-accumu.debian.org
+ - schmelzer.debian.org
+ ports_master:
+ # XXX - used by ferm templates/defs.conf.erb
+ - porta.debian.org
+ bgp:
+ - mirror-accumu.debian.org
+ - mirror-skroutz.debian.org
+ postgresql_server:
+ # postgresql instances not managed by puppet otherwise
+ - bmdb1.debian.org
+ - buxtehude.debian.org
+ - danzi.debian.org
+ - fasolo.debian.org
+ - lw07.debian.org
+ - melartin.debian.org
+ - postgresql-manda-01.debian.org
+ - sallinen.debian.org
+ - seger.debian.org
+ - snapshotdb-manda-01.debian.org
+ - vittoria.debian.org
+
+classes:
+ - base::includes
--- /dev/null
+---
+resolv::searchpaths:
+ - debprivate-oneandone.debian.org
--- /dev/null
+---
+resolv::nameservers:
+ - 130.239.18.251
+ - 2001:6b0:e:2018::251
+ - 130.239.18.252
+ - 2001:6b0:e:2018::252
+ - 130.239.1.90
+ - 130.239.4.100
+resolv::searchpaths:
+ - priv.accumu.debian.org
+ - debprivate-accumu.debian.org
--- /dev/null
+---
+apt::sources::debian::location: 'https://mirror.bytemark.co.uk/debian/'
--- /dev/null
+---
+apt::sources::debian::location: 'https://mirror.bytemark.co.uk/debian/'
--- /dev/null
+---
+resolv::nameservers:
+ - 200.236.31.1
+ - 200.17.202.3
+firewall_blocks_dns: true
--- /dev/null
+---
+resolv::searchpaths:
+ - debprivate-brainfood.debian.org
--- /dev/null
+---
+apt::sources::debian::location: 'https://mirrors.wikimedia.org/debian'
--- /dev/null
+---
+resolv::nameservers:
+ - 5.153.231.241
+ - 5.153.231.242
+allow_dns_query:
+ - 5.153.231.0/24
+# currently only used by VMs with systemd-timesync
+local-timeservers:
+ - bm-bl1.debian.org
+ - bm-bl2.debian.org
+
+apt::sources::debian::location: 'https://mirror.bytemark.co.uk/debian/'
--- /dev/null
+---
+
+apt::sources::debian::location: 'https://mirror.netcologne.de/debian/'
--- /dev/null
+---
+resolv::nameservers:
+ - 128.30.2.24
+ - 128.30.2.25
+ - 128.30.0.125
+resolv::searchpaths:
+ - priv.csail.debian.org
+# currently only used by VMs with systemd-timesync
+local-timeservers:
+ - csail-node01.debian.org
+ - csail-node02.debian.org
+
+apt::sources::debian::location: 'https://mirrors.wikimedia.org/debian'
--- /dev/null
+---
+resolv::nameservers:
+ - 143.215.130.231
+ - 143.215.130.232
+
+apt::sources::debian::location: 'https://mirrors.wikimedia.org/debian'
--- /dev/null
+---
+resolv::nameservers:
+ - 62.217.126.164
+ - 194.177.210.210
+resolv::searchpaths:
+ - debprivate-grnet.debian.org
+# currently only used by VMs with systemd-timesync
+local-timeservers:
+ - grnet-node01.debian.org
+ - grnet-node02.debian.org
--- /dev/null
+---
+resolv::nameservers:
+ - 85.17.150.123
+ - 85.17.96.69
+ - 85.17.150.123
+ - 62.212.64.122
--- /dev/null
+---
+resolv::nameservers:
+ - 82.195.75.109
+ - 82.195.75.103
+allow_dns_query:
+ - 82.195.75.64/26
+ - 172.29.180.0/24
+resolv::searchpaths:
+ - manda.debian.org
+ - priv.manda.debian.org
+# currently only used by VMs with systemd-timesync
+local-timeservers:
+ - manda-node03.debian.org
+ - manda-node04.debian.org
+
+apt::sources::debian::location: 'https://mirror.netcologne.de/debian/'
--- /dev/null
+---
+
+apt::sources::debian::location: 'https://mirrors.wikimedia.org/debian'
--- /dev/null
+---
+
+apt::sources::debian::location: 'https://mirrors.wikimedia.org/debian'
--- /dev/null
+---
+resolv::nameservers:
+ - 87.117.198.200
+ - 87.117.237.100
+ - 87.117.196.200
--- /dev/null
+---
+resolv::nameservers:
+ - 193.62.202.28
+ - 193.62.202.29
+resolv::searchpaths:
+ - debprivate-sanger.debian.org
+allow_dns_query:
+ - 193.62.202.24/29
+
+apt::sources::debian::location: 'https://mirror.bytemark.co.uk/debian/'
--- /dev/null
+---
+resolv::searchpaths:
+ - priv.sil.debian.org
--- /dev/null
+---
+resolv::nameservers:
+ # ubc-enc2bl02
+ - 209.87.16.2
+ - 2607:f8f0:614:1::1274:2
+ # ubc-enc2bl09
+ - 209.87.16.9
+ - 2607:f8f0:614:1::1274:9
+ # ubc-enc2bl10
+ - 209.87.16.10
+ - 2607:f8f0:614:1::1274:10
+resolv::searchpaths:
+ - debprivate-ubc.debian.org
+ - priv.ubc.debian.org
+allow_dns_query:
+ - 206.12.19.0/24
+ - 209.87.16.0/24
+ - 2607:f8f0:610:4000::/64
+ - 2607:F8F0:614:1::/64
+# currently only used by VMs with systemd-timesync
+local-timeservers:
+ - ubc-enc2bl01.debian.org
+ - ubc-enc2bl02.debian.org
+
+apt::sources::debian::location: 'https://mirrors.wikimedia.org/debian'
--- /dev/null
+---
+resolv::nameservers:
+ - 157.193.40.42
--- /dev/null
+---
+resolv::nameservers:
+ - 144.32.169.74
+ - 144.32.169.75
+ - 144.32.169.76
+firewall_blocks_dns: true
+
+apt::sources::debian::location: 'https://mirror.bytemark.co.uk/debian/'
--- /dev/null
+---
+resolv::nameservers:
+ - 80.245.147.141
+ - 80.245.147.142
+ - 80.245.147.143
+
+apt::sources::debian::location: 'https://mirror.netcologne.de/debian/'
--- /dev/null
+classes:
+ - roles::broken_rtc
+ - roles::porterbox
--- /dev/null
+---
+classes:
+ - roles::dsa_gitolite
+ - roles::git_master
--- /dev/null
+classes:
+ - roles::porterbox
--- /dev/null
+classes:
+ - roles::broken_rtc
+ - roles::buildd
--- /dev/null
+classes:
+ - roles::buildd
--- /dev/null
+classes:
+ - roles::broken_rtc
+ - roles::buildd
--- /dev/null
+classes:
+ - roles::buildd
--- /dev/null
+classes:
+ - roles::buildd
--- /dev/null
+classes:
+ - roles::buildd
--- /dev/null
+classes:
+ - roles::buildd
--- /dev/null
+classes:
+ - roles::buildd
--- /dev/null
+classes:
+ - roles::buildd
--- /dev/null
+classes:
+ - roles::buildd
--- /dev/null
+classes:
+ - roles::buildd
--- /dev/null
+classes:
+ - roles::buildd
--- /dev/null
+classes:
+ - roles::broken_rtc
+ - roles::buildd
--- /dev/null
+classes:
+ - roles::porterbox
--- /dev/null
+---
+classes:
+ - roles::bugs_mirror
+
+apache2::smaller_number_of_threads: true
+# debbugs cgis like to fork and don't deal well with EAGAIN
+apache2::rlimitnproc: 450
--- /dev/null
+---
+classes:
+ - roles::lists
+
+postfix::manage_maincf: false
--- /dev/null
+classes:
+ - profile::lvm::ganeti_bm
--- /dev/null
+classes:
+ - profile::lvm::ganeti_bm
--- /dev/null
+classes:
+ - profile::lvm::ganeti_bm
--- /dev/null
+classes:
+ - profile::lvm::ganeti_bm
--- /dev/null
+classes:
+ - profile::lvm::ganeti_bm
--- /dev/null
+classes:
+ - profile::lvm::ganeti_bm
--- /dev/null
+classes:
+ - profile::lvm::ganeti_bm
--- /dev/null
+classes:
+ - profile::lvm::ganeti_bm
--- /dev/null
+classes:
+ - profile::lvm::ganeti_bm
--- /dev/null
+classes:
+ - profile::lvm::ganeti_bm
--- /dev/null
+classes:
+ - profile::lvm::ganeti_bm
--- /dev/null
+classes:
+ - profile::lvm::ganeti_bm
--- /dev/null
+classes:
+ - profile::lvm::ganeti_bm
--- /dev/null
+classes:
+ - profile::lvm::ganeti_bm
--- /dev/null
+classes:
+ - roles::static_source
--- /dev/null
+---
+classes:
+ - roles::bugs_master
+
+apache2::smaller_number_of_threads: true
+# debbugs cgis like to fork and don't deal well with EAGAIN
+apache2::rlimitnproc: 450
+
+exim::is_bugsmx: true
--- /dev/null
+classes:
+ - roles::static_source
+ - roles::cdbuilder_local_mirror
+
+roles::cdbuilder_local_mirror::listen_address: 172.29.103.1
+apache2::public: false
--- /dev/null
+---
+classes:
+ - roles::anonscm
+ - roles::cdimage_search
+ - roles::dgit_browse
+ - roles::dgit_git
+ - roles::manpages_dyn
+ - roles::search_frontend
+
+# dgit's git sometimes needs a lot of memory. raise the limit to 512 MB
+apache2::rlimitmem: 536870912
--- /dev/null
+---
+classes:
+ - roles::api_ftp_master
+ - roles::ftp_upload
+ - roles::ssh_upload
+ - roles::static_source
--- /dev/null
+classes:
+ - profile::lvm::ganeti_conova
--- /dev/null
+classes:
+ - profile::lvm::ganeti_conova
--- /dev/null
+classes:
+ - profile::lvm::ganeti_csail
--- /dev/null
+classes:
+ - profile::lvm::ganeti_csail
--- /dev/null
+---
+classes:
+ - roles::debconf_wafer
+
+ssl::insecure_ssl: true
--- /dev/null
+---
+classes:
+ - roles::dedup
--- /dev/null
+---
+classes:
+ - roles::dns_primary
--- /dev/null
+---
+classes:
+ - roles::sso
+
+# the sso service sometimes needs a lot of memory. raise the limit to 512 MB
+apache2::rlimitmem: 536870912
--- /dev/null
+classes:
+ - roles::dsa_wiki_buildhost
+ - roles::static_master
+ - roles::static_source
+ - roles::onion_master
--- /dev/null
+---
+classes:
+ - bacula::director
--- /dev/null
+classes:
+ - roles::static_source
--- /dev/null
+---
+classes:
+ - roles::dbmaster
--- /dev/null
+classes:
+ - roles::buildd
--- /dev/null
+classes:
+ - roles::broken_rtc
+ - roles::porterbox
--- /dev/null
+classes:
+ - profile::ipsec::fasolo_storace
+ - roles::static_master
+ - roles::static_source
--- /dev/null
+---
+classes:
+ - roles::dns_geodns
--- /dev/null
+---
+classes:
+ - roles::dns_geodns
--- /dev/null
+---
+classes:
+ - roles::dns_geodns
--- /dev/null
+---
+classes:
+ - roles::dgit
--- /dev/null
+classes:
+ - salsa
+
+ssl::insecure_ssl: true
--- /dev/null
+---
+classes:
+ - roles::gobby
--- /dev/null
+classes:
+ - roles::alioth_archive
--- /dev/null
+---
+classes:
+ - roles::syncproxy
+
+roles::syncproxy::syncproxy_name: syncproxy3.wna.debian.org
+roles::syncproxy::listen_addr: ['209.87.16.40', '2607:f8f0:614:1::1274:40']
--- /dev/null
+classes:
+ - profile::lvm::ganeti_csail
--- /dev/null
+classes:
+ - profile::lvm::ganeti_csail
--- /dev/null
+classes:
+ - roles::puppetmaster
--- /dev/null
+classes:
+ - roles::broken_rtc
+ - roles::porterbox
--- /dev/null
+classes:
+ - roles::buildd
--- /dev/null
+classes:
+ - roles::broken_rtc
+ - roles::buildd
--- /dev/null
+classes:
+ - roles::broken_rtc
+ - roles::buildd
--- /dev/null
+---
+classes:
+ - roles::historicalpackages
--- /dev/null
+classes:
+ - roles::broken_rtc
+ - roles::buildd
--- /dev/null
+classes:
+ - roles::jenkins
--- /dev/null
+classes:
+ - roles::static_source
+ - roles::keyring
--- /dev/null
+classes:
+ - roles::static_source
--- /dev/null
+classes:
+ - roles::loghost
--- /dev/null
+classes:
+ - roles::loghost
--- /dev/null
+classes:
+ - roles::loghost
--- /dev/null
+---
+classes:
+ - roles::snapshot_web
--- /dev/null
+---
+classes:
+ - roles::snapshot_shell
--- /dev/null
+---
+classes:
+ - roles::mailrelay
+
+exim::is_mailrelay: true
--- /dev/null
+classes:
+ - profile::lvm::ganeti_manda
--- /dev/null
+classes:
+ - profile::lvm::ganeti_manda
--- /dev/null
+---
+classes:
+ - roles::manpages_dyn
+ - roles::static_source
--- /dev/null
+classes:
+ - roles::static_source
--- /dev/null
+classes:
+ - roles::static_source
+ - roles::mirrormaster
--- /dev/null
+---
+classes:
+ - roles::syncproxy
+
+roles::syncproxy::syncproxy_name: syncproxy3.eu.debian.org
+roles::syncproxy::listen_addr: ['5.153.231.9', '2001:41c8:1000:21::21:9']
--- /dev/null
+classes:
+ - roles::porterbox
--- /dev/null
+classes:
+ - roles::broken_rtc
+ - roles::buildd
--- /dev/null
+classes:
+ - roles::broken_rtc
+ - roles::buildd
--- /dev/null
+classes:
+ - roles::broken_rtc
+ - roles::buildd
--- /dev/null
+classes:
+ - roles::broken_rtc
+ - roles::buildd
--- /dev/null
+classes:
+ - roles::broken_rtc
+ - roles::buildd
--- /dev/null
+classes:
+ - roles::broken_rtc
+ - roles::buildd
--- /dev/null
+classes:
+ - roles::broken_rtc
+ - roles::buildd
--- /dev/null
+classes:
+ - roles::buildd
--- /dev/null
+classes:
+ - roles::buildd
--- /dev/null
+classes:
+ - roles::broken_rtc
+ - roles::buildd
--- /dev/null
+classes:
+ - roles::buildd
--- /dev/null
+classes:
+ - roles::buildd
--- /dev/null
+classes:
+ - roles::broken_rtc
+ - roles::buildd
--- /dev/null
+classes:
+ - roles::broken_rtc
+ - roles::buildd
--- /dev/null
+classes:
+ - roles::broken_rtc
+ - roles::buildd
--- /dev/null
+classes:
+ - roles::broken_rtc
+ - roles::buildd
--- /dev/null
+classes:
+ - roles::static_mirror_web
+ - roles::syncproxy
+
+roles::static_mirror_web::listen_addr: ['150.203.164.62', '2001:388:1034:2900::3e']
+
+roles::syncproxy::syncproxy_name: syncproxy.au.debian.org
+roles::syncproxy::listen_addr: ['150.203.164.60', '2001:388:1034:2900::3c']
--- /dev/null
+role_config__mirrors:
+ mirror_basedir_prefix: '/srv/mirrors/public-'
--- /dev/null
+classes:
+ - roles::static_mirror_web
--- /dev/null
+---
+classes:
+ - roles::ports_mirror
+ - roles::static_mirror_web
+ - roles::syncproxy
+
+roles::ports_mirror::listen_addr: ['149.20.4.15', '2001:4f8:1:c::15']
+roles::ports_mirror::onion_service: true
+
+roles::static_mirror_web::listen_addr: ['149.20.4.15', '2001:4f8:1:c::15']
+roles::static_mirror_web::onion_service: true
+
+roles::syncproxy::syncproxy_name: syncproxy2.wna.debian.org
+roles::syncproxy::listen_addr: ['149.20.4.16', '2001:4f8:1:c::16']
--- /dev/null
+---
+classes:
+ - roles::syncproxy
+
+roles::syncproxy::syncproxy_name: syncproxy.cna.debian.org
+roles::syncproxy::listen_addr: ['128.101.240.216', '2607:ea00:101:3c0b::1deb:216']
--- /dev/null
+---
+classes:
+ - roles::mailrelay
+
+exim::is_mailrelay: true
--- /dev/null
+---
+classes:
+ - roles::static_mirror_web
+ - roles::ports_mirror
+
+roles::ports_mirror::onion_service: true
+roles::static_mirror_web::onion_service: true
--- /dev/null
+---
+classes:
+ - roles::contributors
+ - roles::nm
--- /dev/null
+---
+classes:
+ - onion::balance
--- /dev/null
+---
+classes:
+ - roles::people
--- /dev/null
+---
+classes:
+ - roles::piuparts
--- /dev/null
+---
+classes:
+ - roles::pet
--- /dev/null
+---
+classes:
+ - roles::planet_master
+ - roles::planet_search
+ - roles::static_source
--- /dev/null
+---
+classes:
+ - roles::packages
+
+exim::is_packagesmaster: true
--- /dev/null
+classes:
+ - profile::lvm::ganeti2_osuosl
--- /dev/null
+classes:
+ - profile::lvm::ganeti2_osuosl
--- /dev/null
+---
+apache2::smaller_number_of_threads: true
+classes:
+ - roles::popcon
--- /dev/null
+---
+classes:
+ - roles::piuparts_slave
--- /dev/null
+---
+classes:
+ - roles::piuparts_slave
--- /dev/null
+---
+classes:
+ - roles::packages
--- /dev/null
+classes:
+ - roles::porterbox
--- /dev/null
+classes:
+ - roles::static_master
+ - roles::static_source
--- /dev/null
+classes:
+ - roles::buildd
--- /dev/null
+classes:
+ - roles::buildd
--- /dev/null
+classes:
+ - lvm
+
+lvm::global_filter: '[ "a|^/dev/sd[ab][0-9]*$|", "r/.*/" ]'
--- /dev/null
+---
+classes:
+ - roles::qamaster
+
+apache2::mpm: prefork
+# qa scripts sometimes needs a lot of memory. raise the limit to 300 MB
+apache2::rlimitmem: 314572800
+
+exim::is_packagesqamaster: true
--- /dev/null
+---
+classes:
+ - roles::pubsub
--- /dev/null
+---
+classes:
+ - roles::pubsub
--- /dev/null
+---
+classes:
+ - roles::rtmaster
+exim::is_rtmaster: true
--- /dev/null
+classes:
+ - roles::static_source
--- /dev/null
+---
+classes:
+ - roles::snapshot_web
--- /dev/null
+classes:
+ - roles::static_mirror_web
--- /dev/null
+---
+classes:
+ - roles::syncproxy
+
+roles::syncproxy::syncproxy_name: syncproxy4.eu.debian.org
+roles::syncproxy::listen_addr: ['217.196.149.237', '2a02:16a8:dc41:100::237']
+
+role_config__mirrors:
+ mirror_basedir_prefix: '/srv/mirrors/public-'
--- /dev/null
+classes:
+ - roles::static_mirror_web
+
+roles::static_mirror_web::onion_service: true
--- /dev/null
+---
+classes:
+ - roles::historical_master
--- /dev/null
+---
+classes:
+ - roles::syncproxy
+
+roles::syncproxy::syncproxy_name: syncproxy2.eu.debian.org
+# roles::syncproxy::listen_addr:
--- /dev/null
+classes:
+ - roles::snapshot_db
+
+roles::snapshot_db::ignore_old_postgres: true
--- /dev/null
+---
+classes:
+ - roles::debsources
--- /dev/null
+---
+classes:
+ - roles::security_tracker
--- /dev/null
+classes:
+ - roles::static_master
--- /dev/null
+classes:
+ - roles::static_master
--- /dev/null
+---
+classes:
+ - bacula::storage
+ - profile::ipsec::fasolo_storace
--- /dev/null
+---
+classes:
+ - roles::security_upload
+ - roles::ssh_upload
--- /dev/null
+---
+classes:
+ - roles::debtags
--- /dev/null
+---
+apache2::mpm: prefork
--- /dev/null
+---
+classes:
+ - roles::tracker
--- /dev/null
+---
+classes:
+ - roles::i18n
+ - roles::l10n
--- /dev/null
+classes:
+ - profile::lvm::ganeti2_ubc
--- /dev/null
+classes:
+ - profile::lvm::ganeti2_ubc
--- /dev/null
+classes:
+ - profile::lvm::ganeti2_ubc
--- /dev/null
+classes:
+ - profile::lvm::ganeti2_ubc
--- /dev/null
+classes:
+ - profile::lvm::ganeti3_ubc
--- /dev/null
+classes:
+ - profile::lvm::ganeti3_ubc
--- /dev/null
+classes:
+ - profile::lvm::ganeti3_ubc
--- /dev/null
+---
+classes:
+ - roles::udd
--- /dev/null
+---
+classes:
+ - roles::ftp_upload
+ - roles::ssh_upload
--- /dev/null
+---
+classes:
+ - roles::vote
--- /dev/null
+classes:
+ - roles::sreview
+ - roles::veyepar
--- /dev/null
+classes:
+ - roles::rtc
--- /dev/null
+---
+classes:
+ - roles::wiki
--- /dev/null
+---
+classes:
+ - roles::search_backend
+ - roles::static_source
+ - roles::weblog_destination
+ - roles::www_cgi
+ - roles::www_master
--- /dev/null
+---
+classes:
+ - roles::buildd_master
+
+apache2::mpm: prefork
--- /dev/null
+classes:
+ - roles::buildd
--- /dev/null
+classes:
+ - roles::buildd
--- /dev/null
+classes:
+ - roles::buildd
--- /dev/null
+classes:
+ - roles::buildd
--- /dev/null
+classes:
+ - roles::buildd
--- /dev/null
+classes:
+ - roles::buildd
--- /dev/null
+classes:
+ - roles::buildd
--- /dev/null
+classes:
+ - roles::buildd
--- /dev/null
+classes:
+ - roles::porterbox
---
-:hierarchy:
- - 'nodes/%{trusted.certname}'
- - 'hosters/%{hoster}'
- - 'clusters/%{cluster}'
- - 'common'
-:backends:
- - yaml
-:yaml:
- :datadir: '/etc/puppet/hieradata'
+version: 5
+defaults:
+ datadir: data
+ data_hash: yaml_data
+hierarchy:
+ - name: 'YAML hierarchy levels'
+ paths:
+ - 'nodes/%{trusted.certname}.yaml'
+ - 'hosters/%{hoster}.yaml'
+ # is this sitll used?
+ - 'clusters/%{cluster}.yaml'
+ - 'common.yaml'
+++ /dev/null
----
-nodes:
- - 'czerny.debian.org'
- - 'clementi.debian.org'
+++ /dev/null
----
-nodes:
- - 'ubc-enc2bl01.debian.org'
- - 'ubc-enc2bl02.debian.org'
- - 'ubc-enc2bl09.debian.org'
- - 'ubc-enc2bl10.debian.org'
+++ /dev/null
----
-
-lookup_options:
- # with merge: unique entries in other hiera sources add to the array
- resolv::searchpaths:
- merge: unique
- apt::sources::debian::location:
- merge: unique
-
-# class parameters
-resolv::nameservers: []
-resolv::searchpaths: ['debian.org']
-staticsync::user: 'staticsync'
-staticsync::basedir: '/srv/static.debian.org'
-
-roles::dns_primary::allow_access:
- # easydns
- - '64.68.200.91'
- - '205.210.42.80'
- # rcode0
- - '83.136.34.0/27'
- - '2a02:850:8::/47'
- # netnod
- - '192.71.80.0/24'
- - '192.36.144.222'
- - '192.36.144.218'
- - '194.146.105.24'
- - '194.146.105.25'
- - '2a01:3f0:0:27::24'
- - '2a01:3f0:0:28::25'
-
-# other variables
-allow_dns_query: []
-role_config__mirrors:
- mirror_basedir_prefix: '/srv/mirrors/'
-role_config__syncproxy:
- mirror_basedir_prefix: '/srv/mirrors/'
-samhain_recipients:
- - 'debian-archive-debian-samhain-reports@master.debian.org'
- - 'debian-admin@ftbfs.de'
- - 'weasel@debian.org'
- - 'zumbi@oron.es'
-root_mail_alias:
- - 'debian-admin@debian.org'
-paths:
- letsencrypt_dir: '/srv/puppet.debian.org/from-letsencrypt'
- auto_certs_dir: '/srv/puppet.debian.org/ca/RESULT/certs'
- auto_clientcerts_dir: '/srv/puppet.debian.org/ca/RESULT/clientcerts'
-apt::sources::debian::location: 'https://deb.debian.org/debian/'
-
-
-# all of these should be retired in favour of including the class role
-# with the host. weasel, 2019-09
-roles:
- ftp_master:
- # XXX - used by ferm templates/defs.conf.erb
- - fasolo.debian.org
- mailrelay:
- # XXX - ONLY used by ferm templates/defs.conf.erb
- - mailly.debian.org
- - muffat.debian.org
- muninmaster:
- # XXX - used by ferm templates/defs.conf.erb
- - menotti.debian.org
- nagiosmaster:
- # XXX - used by ferm templates/defs.conf.erb
- - tchaikovsky.debian.org
- security_master:
- # XXX - used by ferm templates/defs.conf.erb
- - seger.debian.org
- security_mirror:
- # XXX used also in ferm me.conf.erb
- mirror-anu.debian.org:
- fastly-backend: false
- mirror-csail.debian.org:
- fastly-backend: false
- mirror-isc.debian.org:
- onion_v4_address: 149.20.4.14
- mirror-umn.debian.org:
- onion_v4_address: 128.101.240.215
- mirror-accumu.debian.org:
- fastly-backend: false
- mirror-skroutz.debian.org:
- fastly-backend: false
- lobos.debian.org:
- service-hostname: lobos.security.backend.mirrors.debian.org
- fastly-backend: false
- onion_v4_address: 212.211.132.250
- santoro.debian.org:
- fastly-backend: false
- schmelzer.debian.org:
- fastly-backend: false
- schumann.debian.org:
- service-hostname: schumann.security.backend.mirrors.debian.org
- fastly-backend: true
- setoguchi.debian.org:
- fastly-backend: false
- sechter.debian.org:
- fastly-backend: false
- villa.debian.org:
- service-hostname: villa.security.backend.mirrors.debian.org
- fastly-backend: true
- onion_v4_address: 212.211.132.32
- wieck.debian.org:
- service-hostname: wieck.security.backend.mirrors.debian.org
- fastly-backend: true
- postgres_backup_server:
- # XXX - used by ferm templates/defs.conf.erb
- - backuphost.debian.org
- - storace.debian.org
- debian_mirror:
- # XXX used also in ferm me.conf.erb
- klecker.debian.org:
- listen-addresses:
- - '130.89.148.12:80'
- - '[2001:67c:2564:a119::148:12]:80'
- onion_v4_address: 130.89.148.12
- new-klecker.debian.org: {}
- mirror-accumu.debian.org:
- service-hostname: accumu.debian.backend.mirrors.debian.org
- fastly-backend: true
- mirror-skroutz.debian.org:
- service-hostname: skroutz.debian.backend.mirrors.debian.org
- fastly-backend: true
- mirror-isc.debian.org:
- listen-addresses:
- - '149.20.4.15:80'
- - '[2001:4f8:1:c::15]:80'
- onion_v4_address: 149.20.4.15
- schmelzer.debian.org:
- listen-addresses:
- - '217.196.149.232:80'
- - '[2a02:16a8:dc41:100::232]:80'
- fastly-backend: true
- service-hostname: conova.debian.backend.mirrors.debian.org
- historical_master:
- # XXX - used by ferm templates/defs.conf.erb
- - sibelius.debian.org
- historical_mirror:
- # XXX used also in ferm me.conf.erb
- - gretchaninov.debian.org
- - klecker.debian.org
- - schmelzer.debian.org
- - sibelius.debian.org
- debug_mirror:
- # XXX used also in ferm me.conf.erb
- mirror-accumu.debian.org:
- onion_v4_address: 130.242.6.199
- service-hostname: accumu.debug.backend.mirrors.debian.org
- schmelzer.debian.org:
- listen-addresses:
- - '217.196.149.232:80'
- - '[2a02:16a8:dc41:100::232]:80'
- onion_v4_address: 217.196.149.232
- service-hostname: conova.debug.backend.mirrors.debian.org
- debug_mirror_onion:
- - mirror-accumu.debian.org
- - schmelzer.debian.org
- ports_master:
- # XXX - used by ferm templates/defs.conf.erb
- - porta.debian.org
- bgp:
- - mirror-accumu.debian.org
- - mirror-skroutz.debian.org
- postgresql_server:
- # postgresql instances not managed by puppet otherwise
- - bmdb1.debian.org
- - buxtehude.debian.org
- - danzi.debian.org
- - fasolo.debian.org
- - lw07.debian.org
- - melartin.debian.org
- - postgresql-manda-01.debian.org
- - sallinen.debian.org
- - seger.debian.org
- - snapshotdb-manda-01.debian.org
- - vittoria.debian.org
-
-classes:
- - base::includes
+++ /dev/null
----
-resolv::searchpaths:
- - debprivate-oneandone.debian.org
+++ /dev/null
----
-resolv::nameservers:
- - 130.239.18.251
- - 2001:6b0:e:2018::251
- - 130.239.18.252
- - 2001:6b0:e:2018::252
- - 130.239.1.90
- - 130.239.4.100
-resolv::searchpaths:
- - priv.accumu.debian.org
- - debprivate-accumu.debian.org
+++ /dev/null
----
-apt::sources::debian::location: 'https://mirror.bytemark.co.uk/debian/'
+++ /dev/null
----
-apt::sources::debian::location: 'https://mirror.bytemark.co.uk/debian/'
+++ /dev/null
----
-resolv::nameservers:
- - 200.236.31.1
- - 200.17.202.3
-firewall_blocks_dns: true
+++ /dev/null
----
-resolv::searchpaths:
- - debprivate-brainfood.debian.org
+++ /dev/null
----
-apt::sources::debian::location: 'https://mirrors.wikimedia.org/debian'
+++ /dev/null
----
-resolv::nameservers:
- - 5.153.231.241
- - 5.153.231.242
-allow_dns_query:
- - 5.153.231.0/24
-# currently only used by VMs with systemd-timesync
-local-timeservers:
- - bm-bl1.debian.org
- - bm-bl2.debian.org
-
-apt::sources::debian::location: 'https://mirror.bytemark.co.uk/debian/'
+++ /dev/null
----
-
-apt::sources::debian::location: 'https://mirror.netcologne.de/debian/'
+++ /dev/null
----
-resolv::nameservers:
- - 128.30.2.24
- - 128.30.2.25
- - 128.30.0.125
-resolv::searchpaths:
- - priv.csail.debian.org
-# currently only used by VMs with systemd-timesync
-local-timeservers:
- - csail-node01.debian.org
- - csail-node02.debian.org
-
-apt::sources::debian::location: 'https://mirrors.wikimedia.org/debian'
+++ /dev/null
----
-resolv::nameservers:
- - 143.215.130.231
- - 143.215.130.232
-
-apt::sources::debian::location: 'https://mirrors.wikimedia.org/debian'
+++ /dev/null
----
-resolv::nameservers:
- - 62.217.126.164
- - 194.177.210.210
-resolv::searchpaths:
- - debprivate-grnet.debian.org
-# currently only used by VMs with systemd-timesync
-local-timeservers:
- - grnet-node01.debian.org
- - grnet-node02.debian.org
+++ /dev/null
----
-resolv::nameservers:
- - 85.17.150.123
- - 85.17.96.69
- - 85.17.150.123
- - 62.212.64.122
+++ /dev/null
----
-resolv::nameservers:
- - 82.195.75.109
- - 82.195.75.103
-allow_dns_query:
- - 82.195.75.64/26
- - 172.29.180.0/24
-resolv::searchpaths:
- - manda.debian.org
- - priv.manda.debian.org
-# currently only used by VMs with systemd-timesync
-local-timeservers:
- - manda-node03.debian.org
- - manda-node04.debian.org
-
-apt::sources::debian::location: 'https://mirror.netcologne.de/debian/'
+++ /dev/null
----
-
-apt::sources::debian::location: 'https://mirrors.wikimedia.org/debian'
+++ /dev/null
----
-
-apt::sources::debian::location: 'https://mirrors.wikimedia.org/debian'
+++ /dev/null
----
-resolv::nameservers:
- - 87.117.198.200
- - 87.117.237.100
- - 87.117.196.200
+++ /dev/null
----
-resolv::nameservers:
- - 193.62.202.28
- - 193.62.202.29
-resolv::searchpaths:
- - debprivate-sanger.debian.org
-allow_dns_query:
- - 193.62.202.24/29
-
-apt::sources::debian::location: 'https://mirror.bytemark.co.uk/debian/'
+++ /dev/null
----
-resolv::searchpaths:
- - priv.sil.debian.org
+++ /dev/null
----
-resolv::nameservers:
- # ubc-enc2bl02
- - 209.87.16.2
- - 2607:f8f0:614:1::1274:2
- # ubc-enc2bl09
- - 209.87.16.9
- - 2607:f8f0:614:1::1274:9
- # ubc-enc2bl10
- - 209.87.16.10
- - 2607:f8f0:614:1::1274:10
-resolv::searchpaths:
- - debprivate-ubc.debian.org
- - priv.ubc.debian.org
-allow_dns_query:
- - 206.12.19.0/24
- - 209.87.16.0/24
- - 2607:f8f0:610:4000::/64
- - 2607:F8F0:614:1::/64
-# currently only used by VMs with systemd-timesync
-local-timeservers:
- - ubc-enc2bl01.debian.org
- - ubc-enc2bl02.debian.org
-
-apt::sources::debian::location: 'https://mirrors.wikimedia.org/debian'
+++ /dev/null
----
-resolv::nameservers:
- - 157.193.40.42
+++ /dev/null
----
-resolv::nameservers:
- - 144.32.169.74
- - 144.32.169.75
- - 144.32.169.76
-firewall_blocks_dns: true
-
-apt::sources::debian::location: 'https://mirror.bytemark.co.uk/debian/'
+++ /dev/null
----
-resolv::nameservers:
- - 80.245.147.141
- - 80.245.147.142
- - 80.245.147.143
-
-apt::sources::debian::location: 'https://mirror.netcologne.de/debian/'
+++ /dev/null
-classes:
- - roles::broken_rtc
- - roles::porterbox
+++ /dev/null
----
-classes:
- - roles::dsa_gitolite
- - roles::git_master
+++ /dev/null
-classes:
- - roles::porterbox
+++ /dev/null
-classes:
- - roles::broken_rtc
- - roles::buildd
+++ /dev/null
-classes:
- - roles::buildd
+++ /dev/null
-classes:
- - roles::broken_rtc
- - roles::buildd
+++ /dev/null
-classes:
- - roles::buildd
+++ /dev/null
-classes:
- - roles::buildd
+++ /dev/null
-classes:
- - roles::buildd
+++ /dev/null
-classes:
- - roles::buildd
+++ /dev/null
-classes:
- - roles::buildd
+++ /dev/null
-classes:
- - roles::buildd
+++ /dev/null
-classes:
- - roles::buildd
+++ /dev/null
-classes:
- - roles::buildd
+++ /dev/null
-classes:
- - roles::buildd
+++ /dev/null
-classes:
- - roles::broken_rtc
- - roles::buildd
+++ /dev/null
-classes:
- - roles::porterbox
+++ /dev/null
----
-classes:
- - roles::bugs_mirror
-
-apache2::smaller_number_of_threads: true
-# debbugs cgis like to fork and don't deal well with EAGAIN
-apache2::rlimitnproc: 450
+++ /dev/null
----
-classes:
- - roles::lists
-
-postfix::manage_maincf: false
+++ /dev/null
-classes:
- - profile::lvm::ganeti_bm
+++ /dev/null
-classes:
- - profile::lvm::ganeti_bm
+++ /dev/null
-classes:
- - profile::lvm::ganeti_bm
+++ /dev/null
-classes:
- - profile::lvm::ganeti_bm
+++ /dev/null
-classes:
- - profile::lvm::ganeti_bm
+++ /dev/null
-classes:
- - profile::lvm::ganeti_bm
+++ /dev/null
-classes:
- - profile::lvm::ganeti_bm
+++ /dev/null
-classes:
- - profile::lvm::ganeti_bm
+++ /dev/null
-classes:
- - profile::lvm::ganeti_bm
+++ /dev/null
-classes:
- - profile::lvm::ganeti_bm
+++ /dev/null
-classes:
- - profile::lvm::ganeti_bm
+++ /dev/null
-classes:
- - profile::lvm::ganeti_bm
+++ /dev/null
-classes:
- - profile::lvm::ganeti_bm
+++ /dev/null
-classes:
- - profile::lvm::ganeti_bm
+++ /dev/null
-classes:
- - roles::static_source
+++ /dev/null
----
-classes:
- - roles::bugs_master
-
-apache2::smaller_number_of_threads: true
-# debbugs cgis like to fork and don't deal well with EAGAIN
-apache2::rlimitnproc: 450
-
-exim::is_bugsmx: true
+++ /dev/null
-classes:
- - roles::static_source
- - roles::cdbuilder_local_mirror
-
-roles::cdbuilder_local_mirror::listen_address: 172.29.103.1
-apache2::public: false
+++ /dev/null
----
-classes:
- - roles::anonscm
- - roles::cdimage_search
- - roles::dgit_browse
- - roles::dgit_git
- - roles::manpages_dyn
- - roles::search_frontend
-
-# dgit's git sometimes needs a lot of memory. raise the limit to 512 MB
-apache2::rlimitmem: 536870912
+++ /dev/null
----
-classes:
- - roles::api_ftp_master
- - roles::ftp_upload
- - roles::ssh_upload
- - roles::static_source
+++ /dev/null
-classes:
- - profile::lvm::ganeti_conova
+++ /dev/null
-classes:
- - profile::lvm::ganeti_conova
+++ /dev/null
-classes:
- - profile::lvm::ganeti_csail
+++ /dev/null
-classes:
- - profile::lvm::ganeti_csail
+++ /dev/null
----
-classes:
- - roles::debconf_wafer
-
-ssl::insecure_ssl: true
+++ /dev/null
----
-classes:
- - roles::dedup
+++ /dev/null
----
-classes:
- - roles::dns_primary
+++ /dev/null
----
-classes:
- - roles::sso
-
-# the sso service sometimes needs a lot of memory. raise the limit to 512 MB
-apache2::rlimitmem: 536870912
+++ /dev/null
-classes:
- - roles::dsa_wiki_buildhost
- - roles::static_master
- - roles::static_source
- - roles::onion_master
+++ /dev/null
----
-classes:
- - bacula::director
+++ /dev/null
-classes:
- - roles::static_source
+++ /dev/null
----
-classes:
- - roles::dbmaster
+++ /dev/null
-classes:
- - roles::buildd
+++ /dev/null
-classes:
- - roles::broken_rtc
- - roles::porterbox
+++ /dev/null
-classes:
- - profile::ipsec::fasolo_storace
- - roles::static_master
- - roles::static_source
+++ /dev/null
----
-classes:
- - roles::dns_geodns
+++ /dev/null
----
-classes:
- - roles::dns_geodns
+++ /dev/null
----
-classes:
- - roles::dns_geodns
+++ /dev/null
----
-classes:
- - roles::dgit
+++ /dev/null
-classes:
- - salsa
-
-ssl::insecure_ssl: true
+++ /dev/null
----
-classes:
- - roles::gobby
+++ /dev/null
-classes:
- - roles::alioth_archive
+++ /dev/null
----
-classes:
- - roles::syncproxy
-
-roles::syncproxy::syncproxy_name: syncproxy3.wna.debian.org
-roles::syncproxy::listen_addr: ['209.87.16.40', '2607:f8f0:614:1::1274:40']
+++ /dev/null
-classes:
- - profile::lvm::ganeti_csail
+++ /dev/null
-classes:
- - profile::lvm::ganeti_csail
+++ /dev/null
-classes:
- - roles::puppetmaster
+++ /dev/null
-classes:
- - roles::broken_rtc
- - roles::porterbox
+++ /dev/null
-classes:
- - roles::buildd
+++ /dev/null
-classes:
- - roles::broken_rtc
- - roles::buildd
+++ /dev/null
-classes:
- - roles::broken_rtc
- - roles::buildd
+++ /dev/null
----
-classes:
- - roles::historicalpackages
+++ /dev/null
-classes:
- - roles::broken_rtc
- - roles::buildd
+++ /dev/null
-classes:
- - roles::jenkins
+++ /dev/null
-classes:
- - roles::static_source
- - roles::keyring
+++ /dev/null
-classes:
- - roles::static_source
+++ /dev/null
-classes:
- - roles::loghost
+++ /dev/null
-classes:
- - roles::loghost
+++ /dev/null
-classes:
- - roles::loghost
+++ /dev/null
----
-classes:
- - roles::snapshot_web
+++ /dev/null
----
-classes:
- - roles::snapshot_shell
+++ /dev/null
----
-classes:
- - roles::mailrelay
-
-exim::is_mailrelay: true
+++ /dev/null
-classes:
- - profile::lvm::ganeti_manda
+++ /dev/null
-classes:
- - profile::lvm::ganeti_manda
+++ /dev/null
----
-classes:
- - roles::manpages_dyn
- - roles::static_source
+++ /dev/null
-classes:
- - roles::static_source
+++ /dev/null
-classes:
- - roles::static_source
- - roles::mirrormaster
+++ /dev/null
----
-classes:
- - roles::syncproxy
-
-roles::syncproxy::syncproxy_name: syncproxy3.eu.debian.org
-roles::syncproxy::listen_addr: ['5.153.231.9', '2001:41c8:1000:21::21:9']
+++ /dev/null
-classes:
- - roles::porterbox
+++ /dev/null
-classes:
- - roles::broken_rtc
- - roles::buildd
+++ /dev/null
-classes:
- - roles::broken_rtc
- - roles::buildd
+++ /dev/null
-classes:
- - roles::broken_rtc
- - roles::buildd
+++ /dev/null
-classes:
- - roles::broken_rtc
- - roles::buildd
+++ /dev/null
-classes:
- - roles::broken_rtc
- - roles::buildd
+++ /dev/null
-classes:
- - roles::broken_rtc
- - roles::buildd
+++ /dev/null
-classes:
- - roles::broken_rtc
- - roles::buildd
+++ /dev/null
-classes:
- - roles::buildd
+++ /dev/null
-classes:
- - roles::buildd
+++ /dev/null
-classes:
- - roles::broken_rtc
- - roles::buildd
+++ /dev/null
-classes:
- - roles::buildd
+++ /dev/null
-classes:
- - roles::buildd
+++ /dev/null
-classes:
- - roles::broken_rtc
- - roles::buildd
+++ /dev/null
-classes:
- - roles::broken_rtc
- - roles::buildd
+++ /dev/null
-classes:
- - roles::broken_rtc
- - roles::buildd
+++ /dev/null
-classes:
- - roles::broken_rtc
- - roles::buildd
+++ /dev/null
-classes:
- - roles::static_mirror_web
- - roles::syncproxy
-
-roles::static_mirror_web::listen_addr: ['150.203.164.62', '2001:388:1034:2900::3e']
-
-roles::syncproxy::syncproxy_name: syncproxy.au.debian.org
-roles::syncproxy::listen_addr: ['150.203.164.60', '2001:388:1034:2900::3c']
+++ /dev/null
-role_config__mirrors:
- mirror_basedir_prefix: '/srv/mirrors/public-'
+++ /dev/null
-classes:
- - roles::static_mirror_web
+++ /dev/null
----
-classes:
- - roles::ports_mirror
- - roles::static_mirror_web
- - roles::syncproxy
-
-roles::ports_mirror::listen_addr: ['149.20.4.15', '2001:4f8:1:c::15']
-roles::ports_mirror::onion_service: true
-
-roles::static_mirror_web::listen_addr: ['149.20.4.15', '2001:4f8:1:c::15']
-roles::static_mirror_web::onion_service: true
-
-roles::syncproxy::syncproxy_name: syncproxy2.wna.debian.org
-roles::syncproxy::listen_addr: ['149.20.4.16', '2001:4f8:1:c::16']
+++ /dev/null
----
-classes:
- - roles::syncproxy
-
-roles::syncproxy::syncproxy_name: syncproxy.cna.debian.org
-roles::syncproxy::listen_addr: ['128.101.240.216', '2607:ea00:101:3c0b::1deb:216']
+++ /dev/null
----
-classes:
- - roles::mailrelay
-
-exim::is_mailrelay: true
+++ /dev/null
----
-classes:
- - roles::static_mirror_web
- - roles::ports_mirror
-
-roles::ports_mirror::onion_service: true
-roles::static_mirror_web::onion_service: true
+++ /dev/null
----
-classes:
- - roles::contributors
- - roles::nm
+++ /dev/null
----
-classes:
- - onion::balance
+++ /dev/null
----
-classes:
- - roles::people
+++ /dev/null
----
-classes:
- - roles::piuparts
+++ /dev/null
----
-classes:
- - roles::pet
+++ /dev/null
----
-classes:
- - roles::planet_master
- - roles::planet_search
- - roles::static_source
+++ /dev/null
----
-classes:
- - roles::packages
-
-exim::is_packagesmaster: true
+++ /dev/null
-classes:
- - profile::lvm::ganeti2_osuosl
+++ /dev/null
-classes:
- - profile::lvm::ganeti2_osuosl
+++ /dev/null
----
-apache2::smaller_number_of_threads: true
-classes:
- - roles::popcon
+++ /dev/null
----
-classes:
- - roles::piuparts_slave
+++ /dev/null
----
-classes:
- - roles::piuparts_slave
+++ /dev/null
----
-classes:
- - roles::packages
+++ /dev/null
-classes:
- - roles::porterbox
+++ /dev/null
-classes:
- - roles::static_master
- - roles::static_source
+++ /dev/null
-classes:
- - roles::buildd
+++ /dev/null
-classes:
- - roles::buildd
+++ /dev/null
-classes:
- - lvm
-
-lvm::global_filter: '[ "a|^/dev/sd[ab][0-9]*$|", "r/.*/" ]'
+++ /dev/null
----
-classes:
- - roles::qamaster
-
-apache2::mpm: prefork
-# qa scripts sometimes needs a lot of memory. raise the limit to 300 MB
-apache2::rlimitmem: 314572800
-
-exim::is_packagesqamaster: true
+++ /dev/null
----
-classes:
- - roles::pubsub
+++ /dev/null
----
-classes:
- - roles::pubsub
+++ /dev/null
----
-classes:
- - roles::rtmaster
-exim::is_rtmaster: true
+++ /dev/null
-classes:
- - roles::static_source
+++ /dev/null
----
-classes:
- - roles::snapshot_web
+++ /dev/null
-classes:
- - roles::static_mirror_web
+++ /dev/null
----
-classes:
- - roles::syncproxy
-
-roles::syncproxy::syncproxy_name: syncproxy4.eu.debian.org
-roles::syncproxy::listen_addr: ['217.196.149.237', '2a02:16a8:dc41:100::237']
-
-role_config__mirrors:
- mirror_basedir_prefix: '/srv/mirrors/public-'
+++ /dev/null
-classes:
- - roles::static_mirror_web
-
-roles::static_mirror_web::onion_service: true
+++ /dev/null
----
-classes:
- - roles::historical_master
+++ /dev/null
----
-classes:
- - roles::syncproxy
-
-roles::syncproxy::syncproxy_name: syncproxy2.eu.debian.org
-# roles::syncproxy::listen_addr:
+++ /dev/null
-classes:
- - roles::snapshot_db
-
-roles::snapshot_db::ignore_old_postgres: true
+++ /dev/null
----
-classes:
- - roles::debsources
+++ /dev/null
----
-classes:
- - roles::security_tracker
+++ /dev/null
-classes:
- - roles::static_master
+++ /dev/null
-classes:
- - roles::static_master
+++ /dev/null
----
-classes:
- - bacula::storage
- - profile::ipsec::fasolo_storace
+++ /dev/null
----
-classes:
- - roles::security_upload
- - roles::ssh_upload
+++ /dev/null
----
-classes:
- - roles::debtags
+++ /dev/null
----
-apache2::mpm: prefork
+++ /dev/null
----
-classes:
- - roles::tracker
+++ /dev/null
----
-classes:
- - roles::i18n
- - roles::l10n
+++ /dev/null
-classes:
- - profile::lvm::ganeti2_ubc
+++ /dev/null
-classes:
- - profile::lvm::ganeti2_ubc
+++ /dev/null
-classes:
- - profile::lvm::ganeti2_ubc
+++ /dev/null
-classes:
- - profile::lvm::ganeti2_ubc
+++ /dev/null
-classes:
- - profile::lvm::ganeti3_ubc
+++ /dev/null
-classes:
- - profile::lvm::ganeti3_ubc
+++ /dev/null
-classes:
- - profile::lvm::ganeti3_ubc
+++ /dev/null
----
-classes:
- - roles::udd
+++ /dev/null
----
-classes:
- - roles::ftp_upload
- - roles::ssh_upload
+++ /dev/null
----
-classes:
- - roles::vote
+++ /dev/null
-classes:
- - roles::sreview
- - roles::veyepar
+++ /dev/null
-classes:
- - roles::rtc
+++ /dev/null
----
-classes:
- - roles::wiki
+++ /dev/null
----
-classes:
- - roles::search_backend
- - roles::static_source
- - roles::weblog_destination
- - roles::www_cgi
- - roles::www_master
+++ /dev/null
----
-classes:
- - roles::buildd_master
-
-apache2::mpm: prefork
+++ /dev/null
-classes:
- - roles::buildd
+++ /dev/null
-classes:
- - roles::buildd
+++ /dev/null
-classes:
- - roles::buildd
+++ /dev/null
-classes:
- - roles::buildd
+++ /dev/null
-classes:
- - roles::buildd
+++ /dev/null
-classes:
- - roles::buildd
+++ /dev/null
-classes:
- - roles::buildd
+++ /dev/null
-classes:
- - roles::buildd
+++ /dev/null
-classes:
- - roles::porterbox