From b32d101a4e473d86a7cdba1f0bcf06188e37d4d5 Mon Sep 17 00:00:00 2001
From: Peter Palfrader <peter@palfrader.org>
Date: Sat, 6 Feb 2016 21:11:04 +0100
Subject: [PATCH] Ship ssl certs for i18n and l10n.d.o

---
 hieradata/common.yaml           |  4 ++++
 modules/roles/manifests/init.pp | 14 ++++++++++++++
 2 files changed, 18 insertions(+)

diff --git a/hieradata/common.yaml b/hieradata/common.yaml
index 84d5d5229..3ab5c9e91 100644
--- a/hieradata/common.yaml
+++ b/hieradata/common.yaml
@@ -184,3 +184,7 @@ roles:
     - mirror-isc.debian.org
   planet_search:
     - philp.debian.org
+  i18n.d.o:
+    - tye.debian.org
+  l10n.d.o:
+    - tye.debian.org
diff --git a/modules/roles/manifests/init.pp b/modules/roles/manifests/init.pp
index c436bacd7..c36e2d27d 100644
--- a/modules/roles/manifests/init.pp
+++ b/modules/roles/manifests/init.pp
@@ -298,4 +298,18 @@ class roles {
 			key => true,
 		}
 	}
+
+	if has_role('i18n.d.o') {
+		ssl::service { 'i18n.debian.org':
+			notify => Service['apache2'],
+			key => true,
+		}
+	}
+
+	if has_role('l10n.d.o') {
+		ssl::service { 'l10n.debian.org':
+			notify => Service['apache2'],
+			key => true,
+		}
+	}
 }
-- 
2.20.1