From: Peter Palfrader <peter@palfrader.org>
Date: Wed, 19 Dec 2012 08:44:22 +0000 (+0100)
Subject: Ignore staticsync's ssh keys on static* hosts
X-Git-Url: https://git.adam-barratt.org.uk/?a=commitdiff_plain;h=f8bb5413ac50d17073afc557e3e9b00a54135374;p=mirror%2Fdsa-puppet.git

Ignore staticsync's ssh keys on static* hosts
---

diff --git a/modules/samhain/templates/samhainrc.erb b/modules/samhain/templates/samhainrc.erb
index d25138fb6..0f227ed7b 100644
--- a/modules/samhain/templates/samhainrc.erb
+++ b/modules/samhain/templates/samhainrc.erb
@@ -156,6 +156,10 @@ file=/etc/ferm/dsa.d
 file=/etc/rc.local
 file=/etc/unbound
 file=/etc/dsa
+<% if scope.lookupvar('site::nodeinfo')['static_mirror'] or scope.lookupvar('site::nodeinfo')['static_source'] or scope.lookupvar('site::nodeinfo')['static_master'] -%>
+file=/etc/ssh/userkeys
+file=/etc/ssh/userkeys/staticsync
+<% end -%>
 
 [LogFiles]
 ##