restrict security-master's rsync for the archive

diff --git a/modules/roles/files/security_master/rsyncd.conf b/modules/roles/files/security_master/rsyncd.conf
index 34e0028..1049ea6 100644 (file)
--- a/modules/roles/files/security_master/rsyncd.conf
+++ b/modules/roles/files/security_master/rsyncd.conf
@@ -10,6 +10,7 @@ log file = /var/log/rsyncd/rsyncd.log
   path = /srv/security.debian.org/archive/debian-security/
   comment = Debian security archive
   read only = true
+  secrets file = /etc/rsyncd/exports.secrets
   list = no
 
 [exports]