From 5a0da8586fc1784f755f36ab557d038fb922d2bb Mon Sep 17 00:00:00 2001
From: Bastian Blank <waldi@debian.org>
Date: Fri, 31 Mar 2017 11:27:09 +0200
Subject: [PATCH] Disable ftp in security_mirror role

Signed-off-by: Martin Zobel-Helas <zobel@debian.org>
---
 modules/roles/manifests/security_mirror.pp | 4 +++-
 1 file changed, 3 insertions(+), 1 deletion(-)

diff --git a/modules/roles/manifests/security_mirror.pp b/modules/roles/manifests/security_mirror.pp
index d135ffe41..c6019a868 100644
--- a/modules/roles/manifests/security_mirror.pp
+++ b/modules/roles/manifests/security_mirror.pp
@@ -38,7 +38,9 @@ class roles::security_mirror {
 	}
 
 	if has_role('security_mirror_no_ftp') {
-	 # nop
+		vsftpd::site { [ 'security', 'security6' ]:
+			ensure => absent,
+		}
 	} else {
 		include ferm::ftp_conntrack
 		vsftpd::site { 'security':
-- 
2.20.1