From: Stephen Gran <steve@lobefin.net>
Date: Thu, 17 May 2012 06:55:10 +0000 (+0100)
Subject: one for security master
X-Git-Url: https://git.adam-barratt.org.uk/?a=commitdiff_plain;h=2f1cdab0126ff5f0dfc6b88ba715e303da47c20c;p=mirror%2Fdsa-puppet.git

one for security master

Signed-off-by: Stephen Gran <steve@lobefin.net>
---

diff --git a/modules/roles/files/security_master/rsyncd.conf b/modules/roles/files/security_master/rsyncd.conf
new file mode 100644
index 000000000..a5cea7691
--- /dev/null
+++ b/modules/roles/files/security_master/rsyncd.conf
@@ -0,0 +1,43 @@
+uid = nobody
+gid = nogroup
+max connections = 20
+syslog facility = daemon
+socket options = SO_KEEPALIVE
+timeout = 7200
+log file = /var/log/rsyncd/rsyncd.log
+
+[debian-security]
+  path = /srv/security.debian.org/archive/debian-security/
+  comment = Debian security archive
+  read only = true
+
+[exports]
+  path = /srv/security.debian.org/rsync/export
+  comment = Various metadata exports
+  auth users = *
+  read only = true
+  secrets file = /etc/rsyncd/exports.secrets
+
+[buildd-lenny]
+  path = /srv/security-master.debian.org/buildd/lenny/
+  comment = Buildd directory oldstable security
+  auth users = *
+  read only = true
+  secrets file = /etc/rsyncd/buildd.secrets
+  list = no
+
+[buildd-squeeze]
+  path = /srv/security-master.debian.org/buildd/squeeze/
+  comment = Buildd directory stable security
+  auth users = *
+  read only = true
+  secrets file = /etc/rsyncd/buildd.secrets
+  list = no
+
+[buildd-wheezy]
+  path = /srv/security-master.debian.org/buildd/wheezy/
+  comment = Buildd directory testing security
+  auth users = *
+  read only = true
+  secrets file = /etc/rsyncd/buildd.secrets
+  list = no
diff --git a/modules/roles/manifests/security_master.pp b/modules/roles/manifests/security_master.pp
index 3f1b70ceb..036f05990 100644
--- a/modules/roles/manifests/security_master.pp
+++ b/modules/roles/manifests/security_master.pp
@@ -7,4 +7,9 @@ class roles::security_master {
 		chown_user => dak,
 		root       => '/srv/ftp.root/',
 	}
+
+	rsync::site { 'security_master':
+		source        => 'puppet:///modules/roles/security_master/rsyncd.conf',
+		max_clients => 100,
+	}
 }